Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/f2cde0-d435-4f41-921d-af898c15ceda/1/yeZiA3A3N68SVeSsbWgvL6jGawk.mft
File:                     yeZiA3A3N68SVeSsbWgvL6jGawk.mft (raw, json)
Hash identifier:          mKrXR9cjtA2bqxf0hZlIABI6R/NqrsdtL69tYQ+pWkc=
Subject key identifier:   C2:3B:87:5C:ED:05:B8:52:4C:1C:51:33:97:80:FE:23:4E:14:D1:1D
Authority key identifier: C9:E6:62:03:70:37:37:AF:12:55:E4:AC:6D:68:2F:2F:A8:C6:6B:09
Certificate issuer:       /CN=c9e66203703737af1255e4ac6d682f2fa8c66b09
Certificate serial:       018C396D1FDF8E51D96B04E32404A06F888E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yeZiA3A3N68SVeSsbWgvL6jGawk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/f2cde0-d435-4f41-921d-af898c15ceda/1/yeZiA3A3N68SVeSsbWgvL6jGawk.mft
Manifest number:          0723
Signing time:             Tue 05 Dec 2023 10:01:41 +0000
Manifest this update:     Tue 05 Dec 2023 10:01:41 +0000
Manifest next update:     Wed 06 Dec 2023 10:01:41 +0000
Files and hashes:         1: H2wcvx5CD5Za7QiRnfin2eCXwds.roa (hash: w1wthEmMj/1nYYLdTUqPJe+QuqkZki/2ih2qc9oYIzM=)
                          2: yeZiA3A3N68SVeSsbWgvL6jGawk.crl (hash: fWRkv284C8eT+fTopYKmVHmWD8XiEp32s/8Z5TAr9Js=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:39:6d:1f:df:8e:51:d9:6b:04:e3:24:04:a0:6f:88:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9e66203703737af1255e4ac6d682f2fa8c66b09
        Validity
            Not Before: Dec  5 10:01:41 2023 GMT
            Not After : Dec  6 10:01:41 2023 GMT
        Subject: CN=c23b875ced05b8524c1c51339780fe234e14d11d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:cf:e7:6e:33:e7:48:dd:77:03:b4:7a:b1:7a:
                    12:1d:09:4a:1d:de:67:fd:87:5a:ae:97:d1:a9:0a:
                    08:54:eb:a5:dc:13:a6:4b:37:54:1d:05:1f:ca:f5:
                    68:94:2e:ea:02:22:97:bb:cc:d7:14:9f:db:dc:d2:
                    25:1f:07:b6:c2:e5:69:d8:55:69:fd:7f:55:d4:95:
                    ce:e3:bf:49:d9:a3:00:0e:d6:08:38:55:a2:b6:bf:
                    61:b7:25:f6:c3:76:5f:c1:9e:19:10:54:be:c7:d5:
                    d0:83:22:61:6b:22:01:78:33:40:be:da:57:a5:3f:
                    a5:da:71:69:78:4c:78:a9:a6:ac:23:93:da:94:a5:
                    84:ce:9b:b3:f1:83:79:6b:4e:01:a2:c2:5a:50:52:
                    8a:0a:1b:cb:2b:8e:15:9b:91:83:55:8a:64:7d:b2:
                    7b:0e:9b:be:e2:0d:f7:b9:8a:c0:34:b7:28:ee:11:
                    20:50:b0:3c:fe:a8:68:8e:b6:24:e8:4e:19:bd:6f:
                    a1:48:16:a4:50:77:ab:74:ee:ef:7f:b1:b8:6a:38:
                    1d:f9:0d:d6:93:c3:76:1e:66:56:22:4d:10:64:9a:
                    63:fc:0c:ec:37:45:03:8b:24:a5:2a:ff:8f:53:f0:
                    10:20:b3:bc:a6:a6:7d:d5:1a:89:f9:58:e6:54:d0:
                    37:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:3B:87:5C:ED:05:B8:52:4C:1C:51:33:97:80:FE:23:4E:14:D1:1D
            X509v3 Authority Key Identifier:
                keyid:C9:E6:62:03:70:37:37:AF:12:55:E4:AC:6D:68:2F:2F:A8:C6:6B:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yeZiA3A3N68SVeSsbWgvL6jGawk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f2cde0-d435-4f41-921d-af898c15ceda/1/yeZiA3A3N68SVeSsbWgvL6jGawk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f2cde0-d435-4f41-921d-af898c15ceda/1/yeZiA3A3N68SVeSsbWgvL6jGawk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:ab:e6:5f:f6:78:b3:f7:b5:9a:93:05:a6:c6:9c:7a:a6:31:
         ca:2d:5b:5b:74:7e:23:bd:77:35:20:33:fe:3e:41:ef:75:d8:
         e2:7f:74:55:bb:f2:2a:42:f6:81:6e:a6:3f:01:be:1a:94:47:
         d2:51:3d:6b:f9:b1:29:2e:6b:21:8f:ee:9a:ec:a0:5d:5a:b0:
         f2:3c:39:8d:2b:76:c8:d2:23:fd:bb:da:9d:4e:cd:c5:47:2d:
         da:f2:6e:10:fe:7a:39:d4:fb:5b:05:b8:3b:29:45:b5:f6:79:
         cb:b6:7b:cf:bf:57:03:97:15:36:04:bd:79:27:fa:32:3a:4b:
         e7:c5:ee:03:2b:e7:49:9c:09:8a:4c:52:61:89:33:5c:0e:03:
         58:1f:60:cd:10:d7:55:6a:c5:b8:bf:cf:ea:14:20:8e:dc:3e:
         e5:38:b4:e4:d1:00:15:c2:66:b6:1e:48:63:94:53:25:48:b8:
         d0:cf:ed:89:24:4c:dc:ba:4b:23:ad:ce:ba:58:63:ba:9a:93:
         82:b3:94:a8:ec:85:3d:7d:3c:64:2d:8a:91:31:00:89:7a:9d:
         1d:8e:16:a3:f0:14:a6:0e:40:16:14:0a:25:39:7c:06:a3:b8:
         a9:bc:35:44:b0:e9:f9:7b:6e:20:91:16:84:30:fe:55:d0:71:
         c2:b4:3b:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----