Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d11fff-d357-45c4-b806-6e907c378e47/1/tK2fSmY146BHW4G0wGbjUgiSR4A.mft
File:                     tK2fSmY146BHW4G0wGbjUgiSR4A.mft (raw, json)
Hash identifier:          mNwtHBrGpeIpYLjKnXCVQZMqqN2thMyxlekGeh0ncd8=
Subject key identifier:   DC:59:39:8B:13:21:5A:B6:34:7C:2E:2E:33:F6:FA:CE:AD:3C:45:35
Authority key identifier: B4:AD:9F:4A:66:35:E3:A0:47:5B:81:B4:C0:66:E3:52:08:92:47:80
Certificate issuer:       /CN=b4ad9f4a6635e3a0475b81b4c066e35208924780
Certificate serial:       018C6C7D6B0325186B8EEE3185C6CBE7D06A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tK2fSmY146BHW4G0wGbjUgiSR4A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/d11fff-d357-45c4-b806-6e907c378e47/1/tK2fSmY146BHW4G0wGbjUgiSR4A.mft
Manifest number:          038C
Signing time:             Fri 15 Dec 2023 08:00:07 +0000
Manifest this update:     Fri 15 Dec 2023 08:00:07 +0000
Manifest next update:     Sat 16 Dec 2023 08:00:07 +0000
Files and hashes:         1: LbyNR9ON60ad3JaPIleW4rD4ZDo.roa (hash: YHRwTlWZ967moi2yO4991QBMk8ktf8V+FLFw7yKMH0U=)
                          2: TmqWgHpeeJj183iBMyeSugRXppo.roa (hash: QRX0o0RXuVe9MyVAJUT6rRf9R3GgJMpGwqTXc4H60JU=)
                          3: tK2fSmY146BHW4G0wGbjUgiSR4A.crl (hash: 6eB2CLfnv9YDyGL/3ccZ2VjOrEGGqH/gkNfll9rLuTw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:6c:7d:6b:03:25:18:6b:8e:ee:31:85:c6:cb:e7:d0:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4ad9f4a6635e3a0475b81b4c066e35208924780
        Validity
            Not Before: Dec 15 08:00:07 2023 GMT
            Not After : Dec 16 08:00:07 2023 GMT
        Subject: CN=dc59398b13215ab6347c2e2e33f6facead3c4535
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:51:ad:e2:60:33:ce:49:77:6c:ee:a9:b0:cd:
                    d2:18:83:77:27:c8:aa:e8:2b:5a:d3:c0:dd:cc:bc:
                    4a:79:2c:11:68:e9:87:71:d0:d3:d2:51:3f:62:a1:
                    68:52:28:ab:62:87:98:08:4d:3b:bf:20:70:87:0d:
                    73:51:8b:1c:c5:88:05:5f:23:aa:31:d0:5e:2d:49:
                    56:b2:8a:62:d4:83:1d:8d:7b:d7:c7:00:24:ce:58:
                    3a:7a:41:6d:d9:b6:b7:a2:4e:56:36:7e:c8:a7:f2:
                    f9:d1:2f:d4:2b:60:95:93:e7:47:2d:b1:ef:ed:66:
                    5e:84:7e:71:4e:44:64:1c:50:6e:c8:7f:b9:b6:83:
                    d4:3f:bf:94:ae:74:01:4b:ee:2d:53:ad:b2:6d:f0:
                    82:4e:b5:b0:c3:19:cd:ee:08:d0:05:04:c7:27:4c:
                    ce:f5:11:b3:84:98:6c:0c:f9:5d:26:1c:02:40:03:
                    48:bc:fc:4a:c3:66:6a:db:88:e8:07:d5:30:63:c8:
                    65:90:fa:3f:10:92:a8:ab:c5:50:cc:37:c8:f5:1f:
                    fe:57:1d:7f:d0:ad:27:02:27:64:82:a8:3a:bc:aa:
                    ae:6c:49:4a:35:1a:c1:1d:d9:e9:39:af:8a:43:67:
                    de:26:95:98:d4:02:9c:9b:02:e5:5e:bb:92:f5:24:
                    e5:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:59:39:8B:13:21:5A:B6:34:7C:2E:2E:33:F6:FA:CE:AD:3C:45:35
            X509v3 Authority Key Identifier:
                keyid:B4:AD:9F:4A:66:35:E3:A0:47:5B:81:B4:C0:66:E3:52:08:92:47:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tK2fSmY146BHW4G0wGbjUgiSR4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d11fff-d357-45c4-b806-6e907c378e47/1/tK2fSmY146BHW4G0wGbjUgiSR4A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d11fff-d357-45c4-b806-6e907c378e47/1/tK2fSmY146BHW4G0wGbjUgiSR4A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:ef:c1:88:85:a8:00:b0:27:f2:16:c1:e6:60:a5:13:17:90:
         52:74:81:b4:93:8a:38:7b:43:cd:0a:9f:74:d6:c7:60:80:5e:
         57:57:8e:1d:70:a6:cb:f7:53:19:3a:fa:e4:6a:ba:c3:25:ca:
         51:43:a2:45:f6:ba:c2:0a:ce:2d:ec:e8:14:b4:a0:a8:d0:02:
         17:38:cc:6a:83:04:7f:6d:bd:5c:86:c1:25:e7:1f:5e:40:da:
         94:ec:ea:b0:85:02:b6:3a:ba:a1:d1:3c:01:02:87:b8:eb:6b:
         5c:3f:43:d4:2a:b5:5c:72:60:06:ae:d9:ce:88:5d:87:a4:0f:
         b8:d7:68:0d:54:f4:f8:95:29:0f:d9:04:12:c4:17:72:7d:cf:
         66:83:07:cb:a0:e3:a6:0c:57:90:a8:a9:c5:b4:35:ca:61:23:
         79:0b:d8:a5:49:9b:a8:cc:7e:35:30:a7:ba:5d:df:23:5d:93:
         26:7d:45:50:e1:c8:d6:6d:e1:a2:10:8a:98:e5:d7:a5:d6:96:
         fc:14:36:90:fa:63:8b:63:09:21:34:da:a2:d0:22:1b:d7:a2:
         e9:42:49:1b:9d:31:cf:a5:df:24:33:9c:fa:0d:8c:05:08:39:
         d7:a7:7a:8a:7c:fb:bd:cc:04:1e:4a:26:c6:fe:e4:b7:5a:4b:
         5d:65:91:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----