Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/11b094-dd92-4b85-b8f1-2bcad2abc0af/1/VPC1im5vAF5dXX9HjwPESABEcQk.mft
File:                     VPC1im5vAF5dXX9HjwPESABEcQk.mft (raw, json)
Hash identifier:          VKdNQYfIErxDgG4xQjS/QIgRn44tBYBsqy56RDbn43c=
Subject key identifier:   6F:C1:41:FA:CA:98:B9:4B:F5:7B:DD:23:21:4B:87:4D:EA:4B:28:96
Authority key identifier: 54:F0:B5:8A:6E:6F:00:5E:5D:5D:7F:47:8F:03:C4:48:00:44:71:09
Certificate issuer:       /CN=54f0b58a6e6f005e5d5d7f478f03c44800447109
Certificate serial:       018BD80108A7C7263AB1B941526073FAF2D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VPC1im5vAF5dXX9HjwPESABEcQk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/11b094-dd92-4b85-b8f1-2bcad2abc0af/1/VPC1im5vAF5dXX9HjwPESABEcQk.mft
Manifest number:          8F
Signing time:             Thu 16 Nov 2023 12:00:28 +0000
Manifest this update:     Thu 16 Nov 2023 12:00:28 +0000
Manifest next update:     Fri 17 Nov 2023 12:00:28 +0000
Files and hashes:         1: FL8wQCmuHoQmNxe8Q6cjxUmr-AI.roa (hash: 4fKfsXZpAEgPcOwFUtNrLMAUX5XdoVg/rAT+OLbjHLY=)
                          2: IfNs4HF7V0mOm7lX28soYOXKMdw.roa (hash: e32TLy62q4VKV81mh0ne+zz4JElbQNMB30l9kHEiIdo=)
                          3: VPC1im5vAF5dXX9HjwPESABEcQk.crl (hash: QJZ5Gujkcjz7/ivOnYeMvQPZt1LffXCcbnDB/f4OSx4=)
                          4: b4Nfj9uiiIiRQoVH6691l7D60Lo.roa (hash: uBJ07kzeOG4RUQWfrOekL8xRCGPkKS3swFZ0Bk+J5pg=)
                          5: qMcanFB6uhpgmB6PdXHLrnRi0hg.roa (hash: /K4xuLyiLVIU7Db2lCneAMd4x7bkCCMvtWQVwJZdtYU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:d8:01:08:a7:c7:26:3a:b1:b9:41:52:60:73:fa:f2:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54f0b58a6e6f005e5d5d7f478f03c44800447109
        Validity
            Not Before: Nov 16 12:00:28 2023 GMT
            Not After : Nov 17 12:00:28 2023 GMT
        Subject: CN=6fc141faca98b94bf57bdd23214b874dea4b2896
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:16:87:d5:64:65:6b:a8:9d:6f:56:95:c7:27:
                    32:72:d7:61:65:44:ca:4b:55:6d:88:39:5d:7b:81:
                    3e:3a:c3:73:94:74:84:4b:89:73:40:ab:e3:00:b2:
                    63:73:13:e6:2f:29:78:26:1a:f8:4a:26:80:ce:94:
                    21:24:f5:db:8d:b0:37:42:31:64:59:36:ff:6c:dd:
                    32:7f:56:af:d9:e0:c4:7d:70:c6:bc:f1:71:64:df:
                    a6:4c:aa:cc:f3:9c:18:ea:ba:68:b0:4d:b7:5c:e5:
                    01:6b:35:60:43:c2:4f:52:e8:f2:8b:d5:3d:09:12:
                    e2:27:48:93:28:99:25:cc:94:69:d4:9e:53:34:cd:
                    00:cb:0b:01:90:4a:47:10:60:fd:6c:46:2f:b6:c7:
                    00:a3:e3:fc:e8:fe:c7:d9:c3:b4:9d:74:08:3b:9d:
                    eb:c8:9a:92:85:9d:9a:a0:e4:09:76:75:1a:cb:22:
                    26:89:47:12:2f:90:fc:17:0b:35:06:c6:59:a1:65:
                    f5:ce:99:d8:64:f6:e2:98:73:87:6f:20:42:9f:ae:
                    dc:b8:3a:7a:d9:fe:85:5d:86:1a:ae:e4:85:5f:87:
                    ef:39:25:38:84:4a:b6:5e:dd:ea:15:96:a9:da:00:
                    f3:59:40:f6:41:35:46:b3:03:ec:53:72:f0:b7:05:
                    05:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:C1:41:FA:CA:98:B9:4B:F5:7B:DD:23:21:4B:87:4D:EA:4B:28:96
            X509v3 Authority Key Identifier:
                keyid:54:F0:B5:8A:6E:6F:00:5E:5D:5D:7F:47:8F:03:C4:48:00:44:71:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VPC1im5vAF5dXX9HjwPESABEcQk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/11b094-dd92-4b85-b8f1-2bcad2abc0af/1/VPC1im5vAF5dXX9HjwPESABEcQk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/11b094-dd92-4b85-b8f1-2bcad2abc0af/1/VPC1im5vAF5dXX9HjwPESABEcQk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:62:40:e0:0e:b7:f9:c1:9e:b9:8a:1a:d5:27:75:00:94:45:
         3c:22:09:a0:93:cc:b8:f4:e8:08:33:03:62:f8:ff:70:00:e2:
         24:ee:c3:79:5d:ca:db:32:97:2d:80:5f:af:4c:99:bf:34:4f:
         16:b4:95:90:b1:9c:bf:56:cc:2f:44:95:92:57:fc:6c:d4:af:
         81:e1:5f:b2:66:60:34:f7:7d:aa:46:24:c2:89:b3:c3:66:ed:
         2b:48:00:4a:d6:cf:99:e1:a0:71:eb:a6:3c:ba:00:24:49:e3:
         4b:c0:c2:44:db:06:07:88:62:5c:10:f9:9b:1b:33:ff:87:88:
         91:db:78:c2:56:7c:fc:1c:4c:aa:b7:0a:f2:bb:06:0a:11:f5:
         d7:f2:b1:cf:8c:ff:47:52:26:2f:38:cb:ad:32:53:02:6f:d2:
         b5:7d:dd:f0:a6:98:68:4e:1a:92:06:cc:14:88:6b:c9:4a:77:
         b1:cc:e1:75:64:89:94:32:55:9d:be:d6:0d:d7:34:0d:e0:86:
         66:56:8b:a2:bf:95:13:05:9e:1b:fb:0a:d6:34:6d:26:ef:20:
         89:97:87:34:47:a7:dd:5a:49:8f:14:53:91:5c:3c:76:1d:a6:
         cd:35:9d:2d:13:73:4e:e8:e7:68:78:92:06:67:d7:aa:02:1d:
         2e:06:82:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----