Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/4598a4-059c-465e-ab8d-5d25cab9868b/1/xlsmuwB8wd2WiA1MhU2020AEXYs.mft
File:                     xlsmuwB8wd2WiA1MhU2020AEXYs.mft (raw, json)
Hash identifier:          GZi/D/jTtKGkLt0EGGZyhltX12TO6PZXfF3X5sLW+AI=
Subject key identifier:   A1:BC:51:10:13:EA:30:0A:09:3A:E3:2A:45:03:5D:FE:9C:84:A4:2A
Authority key identifier: C6:5B:26:BB:00:7C:C1:DD:96:88:0D:4C:85:4D:B4:DB:40:04:5D:8B
Certificate issuer:       /CN=c65b26bb007cc1dd96880d4c854db4db40045d8b
Certificate serial:       018B8DFA333FA38749747CC023F4AF7F0AF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xlsmuwB8wd2WiA1MhU2020AEXYs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/4598a4-059c-465e-ab8d-5d25cab9868b/1/xlsmuwB8wd2WiA1MhU2020AEXYs.mft
Manifest number:          0832
Signing time:             Thu 02 Nov 2023 03:01:06 +0000
Manifest this update:     Thu 02 Nov 2023 03:01:06 +0000
Manifest next update:     Fri 03 Nov 2023 03:01:06 +0000
Files and hashes:         1: Mu1y5RISCQMRMyReOCo6umDlNFw.roa (hash: SfYKrqvyDwl81Y8/u3H310X35edDE7Zh7IvYoz3asfE=)
                          2: xlsmuwB8wd2WiA1MhU2020AEXYs.crl (hash: BWSvmQQHiLd+p6td8QMW08JjFwxIRRhS8NOG8HN44IM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:8d:fa:33:3f:a3:87:49:74:7c:c0:23:f4:af:7f:0a:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c65b26bb007cc1dd96880d4c854db4db40045d8b
        Validity
            Not Before: Nov  2 03:01:06 2023 GMT
            Not After : Nov  3 03:01:06 2023 GMT
        Subject: CN=a1bc511013ea300a093ae32a45035dfe9c84a42a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:06:25:7d:aa:f0:b0:3d:ee:bf:c9:d0:ff:cb:
                    b4:dd:7d:9c:76:60:91:4a:41:8a:3e:14:28:a0:4c:
                    67:3c:eb:b7:15:8b:9c:29:b0:48:68:ff:76:fa:76:
                    d6:10:a5:dd:b6:84:5f:79:d9:0d:16:6b:ea:e6:ed:
                    73:6c:0d:d8:86:85:74:7b:dd:26:c6:2b:d9:82:5f:
                    b4:60:6f:b5:f4:2c:7e:5e:f8:ef:d8:b1:00:ce:9b:
                    5f:23:d4:a4:5f:5a:c0:ae:8b:5b:cd:2c:5f:e7:4d:
                    43:2a:09:1a:86:b9:58:a5:f8:57:54:9c:c2:f0:41:
                    c5:4f:91:08:d7:bd:12:89:33:a2:c2:3d:3a:93:83:
                    5a:d9:eb:5c:07:87:05:7f:71:c4:58:c0:29:29:1d:
                    7b:90:8a:35:69:90:86:bd:c5:c3:5e:c1:4d:52:b3:
                    46:41:50:f5:81:ba:01:68:9d:42:92:fa:ec:97:0c:
                    ab:96:be:82:29:74:dd:7c:bc:68:33:44:8c:6e:d5:
                    97:79:37:2e:63:02:d6:e3:dd:c1:ec:59:3c:a0:2c:
                    33:60:7e:12:9d:69:94:99:d4:4c:16:54:07:fc:ba:
                    4f:1e:63:c0:26:83:57:6e:64:18:b5:f8:26:2a:3f:
                    21:d3:57:ec:37:92:75:9c:1e:e1:4b:ae:43:0c:55:
                    a3:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:BC:51:10:13:EA:30:0A:09:3A:E3:2A:45:03:5D:FE:9C:84:A4:2A
            X509v3 Authority Key Identifier:
                keyid:C6:5B:26:BB:00:7C:C1:DD:96:88:0D:4C:85:4D:B4:DB:40:04:5D:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlsmuwB8wd2WiA1MhU2020AEXYs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4598a4-059c-465e-ab8d-5d25cab9868b/1/xlsmuwB8wd2WiA1MhU2020AEXYs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4598a4-059c-465e-ab8d-5d25cab9868b/1/xlsmuwB8wd2WiA1MhU2020AEXYs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:57:b4:cb:c9:af:18:3b:b5:89:ad:c9:f3:b7:4d:d6:78:1e:
         7b:04:6c:0c:27:fa:31:b6:48:3e:6c:05:7b:17:29:8c:f3:c6:
         70:45:5c:8e:bc:f1:24:13:48:19:58:3c:eb:5a:6b:2c:f4:7f:
         28:18:bf:47:34:d1:96:e6:bc:d8:20:39:dc:45:b0:06:48:90:
         81:43:0a:78:b2:00:d9:6b:40:00:e4:31:21:a2:3c:7d:d1:f1:
         f8:ca:02:0c:fc:0e:f3:9e:ea:1c:ca:a8:7c:20:0d:be:d0:f3:
         c2:44:36:7f:fd:6e:6f:4c:80:cc:d4:18:35:c2:83:1a:94:0d:
         9d:14:10:09:bd:9b:ac:ec:ca:18:2b:df:e7:1b:8f:b5:4d:55:
         51:cf:45:18:fe:1e:b6:7d:2f:63:d7:da:0e:52:c4:7c:38:5b:
         dc:7f:b1:b3:16:04:2e:54:1f:62:e5:bf:cb:b7:e9:18:1a:e6:
         98:c4:d6:33:a6:bc:96:0d:3b:07:bb:b5:43:ba:11:0c:0d:60:
         60:69:d6:68:04:42:ec:60:f0:75:61:f4:53:aa:cf:60:96:58:
         6a:d6:c2:e6:96:ff:e2:52:a4:d8:01:64:f7:90:e5:47:84:b1:
         6f:61:53:95:81:99:aa:f4:b7:e3:af:4b:06:85:99:54:da:82:
         d5:62:4f:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 2 09:27:35 2023 by rpki-client on console-fra.rpki-client.org