Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/de9c4e-bb97-47ca-a449-513d846cf7ac/1/yXxrGDkX8miA3HkjgCodDkTXuCI.mft
File:                     yXxrGDkX8miA3HkjgCodDkTXuCI.mft (raw, json)
Hash identifier:          KyGx/59oDEUiqDYJHXxmmilHdh3h5yVUy2YKZXMQOus=
Subject key identifier:   09:36:7C:10:98:F9:C6:63:E5:19:32:AF:7C:F7:47:0B:7A:C9:A7:CA
Authority key identifier: C9:7C:6B:18:39:17:F2:68:80:DC:79:23:80:2A:1D:0E:44:D7:B8:22
Certificate issuer:       /CN=c97c6b183917f26880dc7923802a1d0e44d7b822
Certificate serial:       018AF86E75AEA18B1EF3A812B5AB08A26548
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yXxrGDkX8miA3HkjgCodDkTXuCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/de9c4e-bb97-47ca-a449-513d846cf7ac/1/yXxrGDkX8miA3HkjgCodDkTXuCI.mft
Manifest number:          08A8
Signing time:             Wed 04 Oct 2023 02:05:03 +0000
Manifest this update:     Wed 04 Oct 2023 02:05:03 +0000
Manifest next update:     Thu 05 Oct 2023 02:05:03 +0000
Files and hashes:         1: qaDrjS03heRfBF6-MwzcycLtO7w.roa (hash: 5tTtQjXXtZKjVUHbEuN21TLmLRMFbEet/9vWYCqGGJQ=)
                          2: yXxrGDkX8miA3HkjgCodDkTXuCI.crl (hash: WISjjqdY+lNtGLxD5805vgc3UGJt6YjQKUDC9tSSwuU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:f8:6e:75:ae:a1:8b:1e:f3:a8:12:b5:ab:08:a2:65:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c97c6b183917f26880dc7923802a1d0e44d7b822
        Validity
            Not Before: Oct  4 02:05:03 2023 GMT
            Not After : Oct  5 02:05:03 2023 GMT
        Subject: CN=09367c1098f9c663e51932af7cf7470b7ac9a7ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2d:a3:db:ea:43:03:34:8b:fa:2e:d3:58:43:
                    20:c6:a9:4f:57:c1:a5:8a:08:84:ed:d5:b0:d8:d2:
                    6c:18:62:d8:97:c5:d7:7c:66:2c:cf:54:dc:9e:c7:
                    6e:5d:b5:1b:85:cc:a5:fa:4b:c1:f5:ed:f6:49:a1:
                    b6:6f:2c:f5:63:49:d5:5e:e6:92:a0:30:9a:70:f5:
                    02:24:e2:c8:a2:3a:be:3e:4f:a4:22:0a:40:cd:0b:
                    1e:6e:27:29:d1:7d:a9:df:72:7e:f4:f1:c4:57:7f:
                    7b:dd:72:9f:2c:c6:03:a9:d0:ed:a6:6b:d8:c3:58:
                    2a:c8:aa:73:52:a0:9b:eb:58:bb:3b:99:78:36:61:
                    d8:cf:78:24:7e:76:12:2d:eb:31:b8:bd:a3:5f:b3:
                    f6:71:35:d4:20:b5:63:9b:8c:5d:3e:dd:b7:32:83:
                    95:c9:5d:97:93:fd:7c:de:3b:8b:97:82:06:11:cd:
                    61:b3:37:6a:56:f6:88:8b:6c:66:ea:99:51:65:df:
                    66:6e:a1:31:6c:2d:73:63:9f:e0:70:8f:65:92:2c:
                    bd:18:82:38:ee:ad:60:23:81:f7:fe:9f:71:9f:e8:
                    28:c1:0f:d8:be:75:0c:12:f7:92:38:2c:4e:f7:8b:
                    03:35:4d:93:cb:79:16:d0:a8:b7:80:35:b8:e5:64:
                    89:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:36:7C:10:98:F9:C6:63:E5:19:32:AF:7C:F7:47:0B:7A:C9:A7:CA
            X509v3 Authority Key Identifier:
                keyid:C9:7C:6B:18:39:17:F2:68:80:DC:79:23:80:2A:1D:0E:44:D7:B8:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yXxrGDkX8miA3HkjgCodDkTXuCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/de9c4e-bb97-47ca-a449-513d846cf7ac/1/yXxrGDkX8miA3HkjgCodDkTXuCI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/de9c4e-bb97-47ca-a449-513d846cf7ac/1/yXxrGDkX8miA3HkjgCodDkTXuCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:79:48:1d:37:aa:1a:05:74:a1:50:e2:2d:45:11:76:d9:38:
         8f:45:d0:10:52:d1:4d:44:50:1e:19:27:c5:4c:90:51:cb:4b:
         81:5a:d1:3b:8c:d1:29:80:93:85:d2:8f:00:ba:36:b4:18:b1:
         f3:1f:a8:a0:fc:98:b7:e8:56:e1:9e:f1:be:b3:4c:4c:ae:d9:
         a3:d3:12:9f:79:47:44:74:a0:da:54:f8:4e:67:0d:9f:05:6b:
         d5:7c:dc:b7:4b:1f:a8:1b:bb:4c:f9:c1:66:7d:7d:e3:a2:eb:
         9d:54:26:e0:24:61:6a:57:3e:f8:a0:59:c1:d6:04:ef:4d:69:
         7c:4c:b6:56:a6:93:ed:f8:d1:72:bb:80:a8:05:bf:11:2f:2f:
         8c:d7:62:a3:ce:60:fd:c1:3d:2d:a6:84:ed:61:94:a3:cd:d9:
         22:46:79:92:9d:80:78:ea:04:76:e7:c1:db:3b:a8:43:ad:39:
         b0:0e:60:a2:13:7e:a5:0c:10:9d:5d:8f:15:b4:66:27:22:19:
         b3:0e:45:1d:63:a9:d9:fd:f3:87:3f:25:ed:eb:96:10:ae:ad:
         31:1f:86:9a:dc:15:68:58:a7:70:ca:79:b6:ed:0a:89:77:f0:
         f1:76:b3:2d:bf:4b:8f:04:95:37:68:84:59:3e:0f:81:f4:a3:
         cc:27:d8:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 4 08:18:27 2023 by rpki-client on console-ams.rpki-client.org