Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/c85fc8-7dcd-4a65-a121-b66497bb47f0/1/k-CKDctyZqsJdwpE_eYjPw4QyVA.mft
File:                     k-CKDctyZqsJdwpE_eYjPw4QyVA.mft (raw, json)
Hash identifier:          /KwWLYnCafYzCQz2z50uT17F9qBjP00U/roymRH4UuM=
Subject key identifier:   06:05:E2:DA:11:52:A3:92:F9:36:78:DB:01:8F:DD:A6:6C:39:6C:1D
Authority key identifier: 93:E0:8A:0D:CB:72:66:AB:09:77:0A:44:FD:E6:23:3F:0E:10:C9:50
Certificate issuer:       /CN=93e08a0dcb7266ab09770a44fde6233f0e10c950
Certificate serial:       018D86E043C4A0D6984D40D8288E6A7423A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k-CKDctyZqsJdwpE_eYjPw4QyVA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/c85fc8-7dcd-4a65-a121-b66497bb47f0/1/k-CKDctyZqsJdwpE_eYjPw4QyVA.mft
Manifest number:          0861
Signing time:             Thu 08 Feb 2024 04:01:00 +0000
Manifest this update:     Thu 08 Feb 2024 04:01:00 +0000
Manifest next update:     Fri 09 Feb 2024 04:01:00 +0000
Files and hashes:         1: P43mlnwctNM-Rqvj-71GjUqJqC0.roa (hash: ppDmCTWyP7k5/2wnc/Nw6q+XQp/RA/5NgRU1Zm2zX9M=)
                          2: k-CKDctyZqsJdwpE_eYjPw4QyVA.crl (hash: LYiIdFVPoB6Io0ErmDcgIdHNrTdohuh7Xm56oMDCGCU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:86:e0:43:c4:a0:d6:98:4d:40:d8:28:8e:6a:74:23:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93e08a0dcb7266ab09770a44fde6233f0e10c950
        Validity
            Not Before: Feb  8 04:01:00 2024 GMT
            Not After : Feb  9 04:01:00 2024 GMT
        Subject: CN=0605e2da1152a392f93678db018fdda66c396c1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ca:4a:6c:42:d2:65:fa:16:eb:0f:f6:58:89:
                    a5:ca:a4:ba:48:ce:be:58:e8:b9:e3:ca:9c:b3:af:
                    51:16:0e:93:cf:12:9e:b5:84:6f:bc:4e:30:f5:58:
                    4e:4f:fb:ef:0a:47:77:9f:77:f7:6a:9e:6c:a9:eb:
                    4c:c3:fb:be:53:7f:fc:1c:7d:21:cf:24:a2:05:8a:
                    52:e8:f5:c3:96:67:93:a2:43:c3:2c:64:c9:b0:79:
                    5b:5d:2f:09:3f:d2:ad:6c:b3:0b:be:b3:b0:f5:28:
                    30:3d:ea:3c:3f:1d:92:e0:1c:5a:77:6b:af:f0:56:
                    0d:57:5d:9d:be:f9:c8:4f:0e:34:c5:90:b0:f4:52:
                    3b:05:25:dd:da:94:dc:8c:52:95:c5:5a:61:a9:58:
                    2c:b9:2f:11:8d:12:18:38:19:e2:74:34:71:c3:63:
                    9f:8d:d6:b8:b1:e6:60:fd:ae:8e:ec:21:88:fd:99:
                    4a:b5:cd:98:04:03:3c:d2:9e:42:87:52:4f:4a:36:
                    11:f3:dd:46:6e:86:dd:2a:72:a9:42:ea:ab:2e:07:
                    5c:98:94:c6:85:4b:e7:b2:4f:0d:16:bf:3b:28:bc:
                    2a:40:16:4e:51:63:34:0c:49:d6:74:d7:fb:c0:5b:
                    fd:0f:ed:b4:a9:e6:0e:62:39:e1:b4:5e:30:fa:33:
                    96:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:05:E2:DA:11:52:A3:92:F9:36:78:DB:01:8F:DD:A6:6C:39:6C:1D
            X509v3 Authority Key Identifier:
                keyid:93:E0:8A:0D:CB:72:66:AB:09:77:0A:44:FD:E6:23:3F:0E:10:C9:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-CKDctyZqsJdwpE_eYjPw4QyVA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c85fc8-7dcd-4a65-a121-b66497bb47f0/1/k-CKDctyZqsJdwpE_eYjPw4QyVA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c85fc8-7dcd-4a65-a121-b66497bb47f0/1/k-CKDctyZqsJdwpE_eYjPw4QyVA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:46:be:66:37:08:57:fc:37:83:92:5a:db:1f:0f:3f:22:3f:
         bf:6a:83:5f:ab:a1:03:06:02:bf:8c:aa:a9:59:5b:69:b4:52:
         9c:06:91:cc:98:3e:5c:34:18:7b:e8:29:50:89:ee:aa:dd:81:
         aa:e7:f2:02:5d:d9:fc:2e:bd:7e:28:95:0b:c4:f2:e5:63:57:
         68:42:20:25:bc:bc:f8:fb:86:31:29:64:ea:99:99:df:21:d0:
         04:69:75:1b:8a:ed:c7:5f:aa:6c:94:76:23:24:c0:71:58:5a:
         bc:08:ec:c0:15:fc:41:f8:8a:d6:79:a0:20:f4:3f:e3:38:48:
         97:33:b5:87:f4:98:89:9d:f1:a1:50:9e:6c:c6:71:78:bf:e6:
         01:c9:f7:e6:eb:8d:6d:6f:87:54:ec:f1:59:f5:39:54:29:7e:
         a9:3a:14:45:e1:8b:62:ef:a0:cf:75:4d:14:4f:cd:0c:f0:5a:
         70:50:90:73:00:39:e9:46:a9:a1:a4:42:eb:28:7b:cb:04:72:
         c1:4c:47:0d:a5:0b:92:8d:6d:47:75:7d:62:e1:f8:49:77:be:
         fe:0c:3d:f2:2c:48:07:bf:55:7e:21:6f:c8:9f:78:b5:6d:a6:
         ea:bb:a2:f4:08:4f:b7:a3:25:fb:66:31:d3:2e:2a:d8:6b:cc:
         11:41:d1:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----