Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/ff1697-8993-45fb-95cf-b99e22cd1338/1/rucOcr3_ATAbw7_79SE0PRAUzQY.mft
File:                     rucOcr3_ATAbw7_79SE0PRAUzQY.mft (raw, json)
Hash identifier:          bzHSGAvjVPspkppFUkRJ2nlnAj3vRmspG6ox+JtMRGA=
Subject key identifier:   16:A1:6B:1C:16:69:D4:2C:49:10:86:D8:0E:7E:2B:89:64:8F:BF:E6
Authority key identifier: AE:E7:0E:72:BD:FF:01:30:1B:C3:BF:FB:F5:21:34:3D:10:14:CD:06
Certificate issuer:       /CN=aee70e72bdff01301bc3bffbf521343d1014cd06
Certificate serial:       018BB2749B8DC5D8FEC590923CB0BA7CDE0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rucOcr3_ATAbw7_79SE0PRAUzQY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/ff1697-8993-45fb-95cf-b99e22cd1338/1/rucOcr3_ATAbw7_79SE0PRAUzQY.mft
Manifest number:          0F79
Signing time:             Thu 09 Nov 2023 05:01:08 +0000
Manifest this update:     Thu 09 Nov 2023 05:01:08 +0000
Manifest next update:     Fri 10 Nov 2023 05:01:08 +0000
Files and hashes:         1: m517QZoanxL9xKjuvN0CgXuBhEA.roa (hash: 5kR4xbFweKc+FbJqQOEQsd8WC+VNmQEKvsyPkQwRhSs=)
                          2: rucOcr3_ATAbw7_79SE0PRAUzQY.crl (hash: kEEWrPOLZL3Uh5dijSV4NPA9LoUumqCVhdfwOrf2K14=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:b2:74:9b:8d:c5:d8:fe:c5:90:92:3c:b0:ba:7c:de:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aee70e72bdff01301bc3bffbf521343d1014cd06
        Validity
            Not Before: Nov  9 05:01:08 2023 GMT
            Not After : Nov 10 05:01:08 2023 GMT
        Subject: CN=16a16b1c1669d42c491086d80e7e2b89648fbfe6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e5:9a:6a:21:9a:ba:38:fa:9b:6f:74:0d:1f:
                    c5:90:61:9a:9c:6b:31:f4:d0:93:f7:e3:d6:17:15:
                    c4:f7:b5:7d:83:49:54:62:ad:30:d0:19:7f:1e:ce:
                    96:da:ce:9b:c8:18:c3:85:d9:18:4d:5f:9b:1f:65:
                    a8:d4:4c:3d:bb:b6:b7:89:9d:14:cd:28:94:bb:a0:
                    58:6f:41:73:71:7f:00:7c:b0:4f:38:70:e0:39:e5:
                    86:ac:6f:86:db:7c:0a:ab:a6:21:97:d5:34:79:37:
                    99:63:82:a9:07:14:0f:6d:02:87:39:02:49:40:db:
                    f6:57:22:f2:9a:79:e9:03:6d:b2:6f:02:4c:fe:1e:
                    90:d1:02:f3:b9:bc:c2:d7:fc:b5:74:de:ea:d5:08:
                    e8:6a:81:7c:0a:c5:b3:21:9d:59:29:f1:1e:65:75:
                    55:4d:1f:02:50:e2:79:97:13:8e:24:2f:76:59:da:
                    fe:f4:67:e9:67:56:d9:c6:42:20:66:0b:81:79:09:
                    b0:9d:8e:d4:77:d9:7b:63:e3:01:15:56:4e:2c:18:
                    50:83:25:08:a4:93:a3:40:39:de:c1:b1:a4:9c:6f:
                    19:df:1a:64:7a:50:13:4c:dd:92:ac:d4:eb:b1:5e:
                    22:34:d6:e4:31:89:41:77:5b:df:d7:b8:10:8e:05:
                    b7:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:A1:6B:1C:16:69:D4:2C:49:10:86:D8:0E:7E:2B:89:64:8F:BF:E6
            X509v3 Authority Key Identifier:
                keyid:AE:E7:0E:72:BD:FF:01:30:1B:C3:BF:FB:F5:21:34:3D:10:14:CD:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rucOcr3_ATAbw7_79SE0PRAUzQY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/ff1697-8993-45fb-95cf-b99e22cd1338/1/rucOcr3_ATAbw7_79SE0PRAUzQY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/ff1697-8993-45fb-95cf-b99e22cd1338/1/rucOcr3_ATAbw7_79SE0PRAUzQY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:1b:ab:ad:d1:4d:ef:2f:2b:62:9e:26:81:99:28:f9:ec:ca:
         58:ac:b3:5e:6a:1c:81:41:68:49:1d:d9:03:0d:7c:22:2f:30:
         9d:6d:78:43:d6:fb:79:2a:82:6f:42:11:91:dc:e9:df:4a:df:
         3c:e5:e1:16:70:3b:49:74:15:bc:0f:13:19:e7:36:81:86:29:
         af:5f:47:2c:45:66:8d:48:7e:45:a7:4f:47:91:21:4e:b1:10:
         d5:bc:a9:25:50:ac:02:46:3b:77:91:9c:61:47:fc:b3:b5:27:
         ee:5c:49:62:35:37:31:46:41:f5:89:41:8b:71:64:d0:87:8a:
         f8:91:02:8b:d5:e8:31:34:43:56:f0:f1:2d:37:ef:ba:cb:a4:
         d7:11:85:56:43:9c:6c:5e:dd:6a:2c:7c:eb:ea:29:cb:e3:d7:
         3d:69:67:be:b2:94:51:07:44:b9:85:b8:ed:ba:89:11:8e:1e:
         7d:1e:08:55:ad:a1:47:78:64:4e:91:16:1a:88:5e:2f:3e:37:
         c9:ef:a6:55:c1:41:1d:0f:72:25:60:7f:b0:57:7a:10:f0:0e:
         b4:37:f8:45:6d:c2:b7:af:aa:03:4e:e4:60:ee:a2:76:9b:3a:
         f5:f1:c5:31:56:56:10:9f:e2:cf:48:ab:ed:3f:32:c3:f3:84:
         6c:26:db:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----