Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/1c9743-546b-4c6d-807d-e3ea6998d42a/1/96D92FKSruT45BrpWnAnpAwPVEo.mft
File:                     96D92FKSruT45BrpWnAnpAwPVEo.mft (raw, json)
Hash identifier:          tu+9JPshz0fU0m8/j8xBE8s4EAdBp873rrzoylTkmbw=
Subject key identifier:   ED:06:B1:41:19:16:74:19:E4:E5:79:F8:11:8C:43:FD:0F:73:F5:C4
Authority key identifier: F7:A0:FD:D8:52:92:AE:E4:F8:E4:1A:E9:5A:70:27:A4:0C:0F:54:4A
Certificate issuer:       /CN=f7a0fdd85292aee4f8e41ae95a7027a40c0f544a
Certificate serial:       018C6D59ACF0FC3DDAB74427390E2AAFDDF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/96D92FKSruT45BrpWnAnpAwPVEo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/1c9743-546b-4c6d-807d-e3ea6998d42a/1/96D92FKSruT45BrpWnAnpAwPVEo.mft
Manifest number:          0561
Signing time:             Fri 15 Dec 2023 12:00:42 +0000
Manifest this update:     Fri 15 Dec 2023 12:00:42 +0000
Manifest next update:     Sat 16 Dec 2023 12:00:42 +0000
Files and hashes:         1: 2MWypcHzupdDRbNDT5fczr8X4fE.roa (hash: MOq+o+h30UhFUD9gH9FZr/Y82Aa0grl+ODowKbPdlpo=)
                          2: 96D92FKSruT45BrpWnAnpAwPVEo.crl (hash: tgyP1I81cDZhB3IDb5RAQERz2STHFEl5db57xC5EY+4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:6d:59:ac:f0:fc:3d:da:b7:44:27:39:0e:2a:af:dd:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7a0fdd85292aee4f8e41ae95a7027a40c0f544a
        Validity
            Not Before: Dec 15 12:00:42 2023 GMT
            Not After : Dec 16 12:00:42 2023 GMT
        Subject: CN=ed06b14119167419e4e579f8118c43fd0f73f5c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:0a:b7:fe:14:68:df:12:8c:7f:13:de:4f:21:
                    3c:1a:25:6e:66:84:a7:fb:44:e1:14:35:73:0d:2c:
                    39:59:c9:95:e4:2c:60:61:4b:76:34:fe:39:52:32:
                    4b:3d:e8:f7:41:6d:47:61:89:9e:bb:88:a4:31:be:
                    a7:bd:23:68:6c:00:de:96:2c:6c:32:9f:ce:90:a1:
                    a1:e7:74:30:f6:e0:66:08:ab:08:7d:cb:db:13:59:
                    e7:b7:09:8a:59:5b:50:6d:3d:ed:4c:96:20:89:c3:
                    ec:f8:93:14:ac:28:fd:c3:22:b9:95:c2:f9:a9:15:
                    b3:4a:f2:8c:e2:ef:95:f2:0f:fc:a5:a3:df:6b:8c:
                    15:cc:2b:b7:09:81:3f:ec:86:bd:69:3d:3b:6a:86:
                    d3:11:68:89:0b:eb:71:d7:8c:65:d5:0f:da:0e:95:
                    b6:17:91:3d:b8:ff:dc:5d:e4:f7:84:aa:d0:f5:30:
                    24:f3:ae:93:f7:15:df:88:ef:0a:5e:a6:4b:98:79:
                    27:ed:7f:6a:a6:c5:d4:a2:6b:6a:e8:a5:83:9b:09:
                    26:82:d3:dd:5e:e1:48:73:ab:3c:08:22:0e:df:db:
                    96:b1:4e:d3:58:54:1d:bd:a0:63:df:5f:ef:0b:2b:
                    4a:b2:01:c1:52:25:7b:0e:1e:56:45:7f:d0:45:3f:
                    e8:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:06:B1:41:19:16:74:19:E4:E5:79:F8:11:8C:43:FD:0F:73:F5:C4
            X509v3 Authority Key Identifier:
                keyid:F7:A0:FD:D8:52:92:AE:E4:F8:E4:1A:E9:5A:70:27:A4:0C:0F:54:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/96D92FKSruT45BrpWnAnpAwPVEo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/1c9743-546b-4c6d-807d-e3ea6998d42a/1/96D92FKSruT45BrpWnAnpAwPVEo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/1c9743-546b-4c6d-807d-e3ea6998d42a/1/96D92FKSruT45BrpWnAnpAwPVEo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:1f:cd:85:d7:04:a3:76:a0:e2:19:9a:90:3a:f3:50:4b:63:
         c5:04:60:4d:9d:bb:fb:2c:c8:b6:9b:2e:a6:82:fb:37:d3:bb:
         04:97:fd:69:94:9c:86:7e:e8:c6:b8:32:7a:63:26:85:dc:7c:
         80:12:9b:33:ad:04:76:fc:fa:f7:60:5a:32:f6:b8:dc:e9:94:
         27:c9:9a:0a:aa:e8:13:b2:9d:8d:95:78:98:3e:d2:93:4c:2d:
         50:50:1e:fb:33:54:1c:10:37:57:ff:82:40:1e:b0:ec:ac:85:
         95:40:5d:2d:ab:67:81:82:ea:52:05:a7:52:a8:be:e9:11:08:
         c9:37:77:51:67:43:f6:90:2a:5e:90:b6:c0:c4:f8:fa:e7:02:
         9e:69:1b:3c:0b:bf:ca:76:fc:8d:83:4b:74:0e:c9:95:04:a7:
         c9:42:9e:b5:e1:80:c9:48:28:aa:71:35:de:ea:fa:38:d6:92:
         9a:22:11:a4:9f:09:03:67:2b:f4:62:d9:d5:9a:15:ad:8d:01:
         28:f8:c6:1b:2c:f6:c8:46:89:45:42:77:7a:4c:6b:96:af:3f:
         8a:da:55:7c:e6:55:65:bf:19:dc:3e:4c:39:b9:82:8c:83:a0:
         9f:84:16:81:f2:84:44:dd:a7:9e:00:24:de:c9:10:26:3c:7d:
         ee:d2:80:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----