Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/6b7daf-f02c-46d4-aae7-e4f2c0498f84/1/JmrhVmiLh-JuD0DxJhAsvIfn_H0.mft
File:                     JmrhVmiLh-JuD0DxJhAsvIfn_H0.mft (raw, json)
Hash identifier:          WYmCsA2y3gsZtFUcig2mK6eD+IsbUODbc0uthD93Sk4=
Subject key identifier:   DC:12:A2:8F:C0:A2:2F:65:7D:FE:61:0E:BD:FC:E0:45:80:B8:28:AB
Authority key identifier: 26:6A:E1:56:68:8B:87:E2:6E:0F:40:F1:26:10:2C:BC:87:E7:FC:7D
Certificate issuer:       /CN=266ae156688b87e26e0f40f126102cbc87e7fc7d
Certificate serial:       018C66B2A645185165F0206E6E66FCC1017F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JmrhVmiLh-JuD0DxJhAsvIfn_H0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/6b7daf-f02c-46d4-aae7-e4f2c0498f84/1/JmrhVmiLh-JuD0DxJhAsvIfn_H0.mft
Manifest number:          A7
Signing time:             Thu 14 Dec 2023 05:00:33 +0000
Manifest this update:     Thu 14 Dec 2023 05:00:33 +0000
Manifest next update:     Fri 15 Dec 2023 05:00:33 +0000
Files and hashes:         1: JmrhVmiLh-JuD0DxJhAsvIfn_H0.crl (hash: cuudQDquusMv4qtUFdIMVnePAelbp46Lw0Gfwo5OOjg=)
                          2: NzHjuAKnR5fbP1GzXFgTb4ShehU.roa (hash: X5DbOUM9Yx1qkYjDsNohloa3jZjB65m1cj9mp9ppG5k=)
                          3: ldYE3EguKruOiIvRl0sprFGvtkA.roa (hash: 81OZ2wDCrw4omvCKYhaQPS2wJH1k/0kcR3o6xf9ceYY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:66:b2:a6:45:18:51:65:f0:20:6e:6e:66:fc:c1:01:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=266ae156688b87e26e0f40f126102cbc87e7fc7d
        Validity
            Not Before: Dec 14 05:00:33 2023 GMT
            Not After : Dec 15 05:00:33 2023 GMT
        Subject: CN=dc12a28fc0a22f657dfe610ebdfce04580b828ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:2e:57:93:21:a2:86:40:73:1f:8c:55:93:81:
                    3d:cc:8c:24:1a:75:f5:5f:59:4f:dd:16:3b:2c:55:
                    9b:10:58:81:6b:18:f9:ae:21:92:74:9a:06:a9:03:
                    4c:e1:eb:f7:48:98:af:dc:84:2e:77:f4:85:22:23:
                    72:ed:36:b1:01:9a:56:48:29:bd:37:1e:64:09:40:
                    62:82:14:a8:a7:62:f8:99:d1:a7:61:8a:fc:94:21:
                    69:59:48:93:44:3a:8d:2f:10:fd:95:4f:7b:f4:c1:
                    b8:c9:cd:e7:86:5e:02:c6:bb:fe:73:b4:79:74:49:
                    98:4e:76:c4:1a:0a:69:37:f4:a8:25:a1:72:aa:fd:
                    80:0f:49:3b:9e:15:73:04:c7:89:19:58:7f:73:b7:
                    90:12:c3:86:30:e9:e8:65:af:e7:30:00:74:e6:e6:
                    44:d7:3a:87:10:06:ca:b7:4a:e5:f2:70:44:a3:7e:
                    81:bf:4a:3f:aa:a0:1b:ad:86:5a:ec:f1:eb:ad:d8:
                    0e:ca:30:64:01:10:d4:ab:eb:22:52:74:b0:58:0d:
                    45:14:25:b0:5e:6c:9b:6b:fc:ac:98:36:c2:07:00:
                    36:06:3b:ad:d1:5c:71:7d:52:b6:bf:fd:f7:cf:d1:
                    c3:7e:4b:43:97:f2:71:a2:d3:9a:57:c9:5d:09:2f:
                    c4:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:12:A2:8F:C0:A2:2F:65:7D:FE:61:0E:BD:FC:E0:45:80:B8:28:AB
            X509v3 Authority Key Identifier:
                keyid:26:6A:E1:56:68:8B:87:E2:6E:0F:40:F1:26:10:2C:BC:87:E7:FC:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmrhVmiLh-JuD0DxJhAsvIfn_H0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/6b7daf-f02c-46d4-aae7-e4f2c0498f84/1/JmrhVmiLh-JuD0DxJhAsvIfn_H0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/6b7daf-f02c-46d4-aae7-e4f2c0498f84/1/JmrhVmiLh-JuD0DxJhAsvIfn_H0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e8:de:2b:a8:50:cc:51:ed:a0:b5:7b:8e:30:8f:9c:34:5e:08:
         23:a3:34:da:d9:48:2d:76:14:4a:6c:c3:d0:e0:7e:bb:af:a7:
         81:70:34:c4:2d:82:9f:9c:68:7a:ab:76:bf:ec:48:ab:4b:08:
         87:d5:77:a5:3c:99:a3:f8:ba:30:6d:f0:cb:02:a2:f5:a9:59:
         9a:81:23:69:cd:87:8b:40:a6:3a:a0:62:b7:d7:4a:d0:d9:36:
         0e:f9:0f:54:01:3e:af:8a:b9:13:7d:e6:10:ea:20:59:35:63:
         87:be:68:1c:60:35:28:c7:1e:63:b1:2f:f3:a0:ed:d8:c4:35:
         95:d7:6e:22:29:6b:a4:ae:43:a1:51:1b:1f:31:41:aa:d2:69:
         b6:ed:c5:22:a6:fa:e4:e3:b7:3c:97:c7:b5:55:8b:21:86:85:
         f6:61:e3:a0:a6:8e:8f:55:72:54:b9:c0:2b:0d:ba:24:b7:39:
         25:51:3b:4d:55:93:d4:46:a5:bd:44:73:f2:db:39:9f:2b:f7:
         26:f9:95:9d:46:a8:70:ed:e0:b3:be:e5:8d:65:31:68:3b:b2:
         db:5f:19:34:8e:97:60:91:b4:60:79:f5:90:d2:a0:88:75:1d:
         8f:88:e4:a7:aa:67:2e:85:ef:f0:f1:37:dd:ac:2a:a7:75:50:
         cc:a0:fa:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----