Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/e6a524-0674-4426-8211-0db2eff369cd/1/G4EruP9r0FaJ36e9UyK7mpjO5xU.mft
File:                     G4EruP9r0FaJ36e9UyK7mpjO5xU.mft (raw, json)
Hash identifier:          asVSYht2glOeHLA2IvxJY0jSnuo8hIfHbhHhKvy4y1I=
Subject key identifier:   3F:FA:33:DA:BD:02:EC:A4:86:1B:0A:88:09:51:25:7C:75:D8:B6:E1
Authority key identifier: 1B:81:2B:B8:FF:6B:D0:56:89:DF:A7:BD:53:22:BB:9A:98:CE:E7:15
Certificate issuer:       /CN=1b812bb8ff6bd05689dfa7bd5322bb9a98cee715
Certificate serial:       018B859BD9F6C328A6F7BF1A99294F8ED51A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G4EruP9r0FaJ36e9UyK7mpjO5xU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/e6a524-0674-4426-8211-0db2eff369cd/1/G4EruP9r0FaJ36e9UyK7mpjO5xU.mft
Manifest number:          0887
Signing time:             Tue 31 Oct 2023 12:01:05 +0000
Manifest this update:     Tue 31 Oct 2023 12:01:05 +0000
Manifest next update:     Wed 01 Nov 2023 12:01:05 +0000
Files and hashes:         1: BSRk-jBGhWAFuXU35eC1FTyJsc4.roa (hash: DzUmZVO/eXbuURuWhdF4QKFhD8Z6K+NHjd6hmx4mKhU=)
                          2: G4EruP9r0FaJ36e9UyK7mpjO5xU.crl (hash: +CZHRbSCl5Vr95+jqu/nZuZJajca4+2ZbGEhIQVR5ls=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:85:9b:d9:f6:c3:28:a6:f7:bf:1a:99:29:4f:8e:d5:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b812bb8ff6bd05689dfa7bd5322bb9a98cee715
        Validity
            Not Before: Oct 31 12:01:05 2023 GMT
            Not After : Nov  1 12:01:05 2023 GMT
        Subject: CN=3ffa33dabd02eca4861b0a880951257c75d8b6e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:54:cf:4f:73:9b:7e:63:25:ef:c0:b5:1c:ea:
                    0f:1d:50:ea:84:3c:09:ce:5b:19:9c:24:6b:91:ef:
                    9e:97:45:a8:7d:3c:14:d2:25:76:20:b6:76:f6:02:
                    e7:7d:64:b0:67:17:5d:25:40:1c:4f:ec:7e:0b:00:
                    51:d5:fd:15:ea:72:05:4a:17:de:3b:3f:63:74:5b:
                    ba:cf:79:75:87:36:4d:66:c6:18:fd:6d:30:71:f2:
                    6c:94:ea:2a:7a:8f:ac:95:82:a0:6e:34:22:a5:70:
                    72:02:a0:df:d1:e6:71:49:24:fa:d7:7e:55:55:02:
                    f2:4f:5c:4d:5c:aa:24:c1:9b:cb:c2:81:65:f8:6f:
                    d0:1a:4c:df:fc:80:11:07:ed:67:a8:15:9f:5c:27:
                    43:f3:5e:37:60:ed:11:65:e8:15:28:18:50:fb:61:
                    cc:d5:e0:d1:06:0a:c8:7f:70:9a:82:7c:4a:ea:b2:
                    1a:f0:5e:b9:17:af:1f:5e:15:10:29:8b:a9:93:dc:
                    ff:ad:05:4b:ed:87:aa:1b:63:0b:f0:f6:4c:9c:07:
                    c6:eb:e0:bc:a9:b0:ad:13:68:1a:f1:c9:68:57:b2:
                    a3:d1:bf:af:8b:23:50:86:8d:f5:e3:3b:3b:1d:5a:
                    c1:30:fa:ed:07:e4:cc:95:4e:75:dd:be:cf:5d:0f:
                    f3:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:FA:33:DA:BD:02:EC:A4:86:1B:0A:88:09:51:25:7C:75:D8:B6:E1
            X509v3 Authority Key Identifier:
                keyid:1B:81:2B:B8:FF:6B:D0:56:89:DF:A7:BD:53:22:BB:9A:98:CE:E7:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G4EruP9r0FaJ36e9UyK7mpjO5xU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e6a524-0674-4426-8211-0db2eff369cd/1/G4EruP9r0FaJ36e9UyK7mpjO5xU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e6a524-0674-4426-8211-0db2eff369cd/1/G4EruP9r0FaJ36e9UyK7mpjO5xU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:48:e3:d8:ce:f2:89:2e:56:db:19:ec:de:74:0f:fe:10:98:
         c6:7c:11:22:aa:8c:cc:83:26:cf:26:bc:96:6b:a7:f6:85:07:
         60:f6:fb:b1:9b:c5:cd:24:68:f8:cb:9a:dd:5b:a8:e3:4f:66:
         78:87:e1:46:28:ae:d9:1a:b3:39:dd:73:7c:d5:60:17:a8:86:
         16:7c:a0:74:0a:4d:ef:81:b6:47:90:9f:7b:72:0b:2a:d3:cf:
         50:c5:09:27:fb:37:2a:c3:a1:2a:ec:32:7b:a4:71:e9:95:3c:
         eb:4e:f5:2f:14:d5:ea:c6:c5:34:72:3e:ce:97:0d:e6:58:92:
         41:1a:07:8a:8c:9c:c9:66:27:b2:08:6e:65:c1:48:15:53:73:
         29:e5:4c:24:6f:10:5a:b7:46:3d:ce:21:99:17:f6:cc:1c:f6:
         8a:98:7b:cf:59:ff:6b:52:96:25:40:a1:92:a5:f5:c1:d7:8f:
         fd:69:92:cf:d0:43:76:b8:89:79:f1:de:d0:29:42:01:b3:5a:
         80:6e:d9:a6:d3:e2:1d:c2:64:cc:63:53:c8:8d:39:bf:02:fa:
         c0:1f:f8:37:fa:82:f1:73:87:b3:ee:78:a4:f7:9f:24:c2:8a:
         26:71:6e:27:81:06:95:1d:ce:aa:49:2f:59:95:09:b7:ab:f6:
         d2:07:9f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----