Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/ebe6e8-1a23-47c5-ab1f-acb1bf6b3521/1/11g0yZD-0rM_JaAsA1kXWOzrVBE.mft
File:                     11g0yZD-0rM_JaAsA1kXWOzrVBE.mft (raw, json)
Hash identifier:          wBJ4UWlfA5m0SdUy+Lsn3ZOpf9mkY/CmTlBS3PaFe7M=
Subject key identifier:   35:BF:11:F3:1A:94:31:09:7A:B1:95:6F:0C:D3:B2:7D:21:EF:A8:AB
Authority key identifier: D7:58:34:C9:90:FE:D2:B3:3F:25:A0:2C:03:59:17:58:EC:EB:54:11
Certificate issuer:       /CN=d75834c990fed2b33f25a02c03591758eceb5411
Certificate serial:       018C3EC9E95536596391274ADE8F27B80C83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/11g0yZD-0rM_JaAsA1kXWOzrVBE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/ebe6e8-1a23-47c5-ab1f-acb1bf6b3521/1/11g0yZD-0rM_JaAsA1kXWOzrVBE.mft
Manifest number:          0C78
Signing time:             Wed 06 Dec 2023 11:01:08 +0000
Manifest this update:     Wed 06 Dec 2023 11:01:08 +0000
Manifest next update:     Thu 07 Dec 2023 11:01:08 +0000
Files and hashes:         1: 11g0yZD-0rM_JaAsA1kXWOzrVBE.crl (hash: RFA0N2wp3mzd1zB767EmZ3izCVLtgtnbY8ad2vC6PtU=)
                          2: 7Kgzx3SrerMgGv5Zody0CcX7d1w.roa (hash: RpiFDGwPH96ubgDRr61RGv5cI7p98XCPbVAmQ+ts1E4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:3e:c9:e9:55:36:59:63:91:27:4a:de:8f:27:b8:0c:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d75834c990fed2b33f25a02c03591758eceb5411
        Validity
            Not Before: Dec  6 11:01:08 2023 GMT
            Not After : Dec  7 11:01:08 2023 GMT
        Subject: CN=35bf11f31a9431097ab1956f0cd3b27d21efa8ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:62:aa:2b:9e:a3:34:05:a0:06:b4:8b:08:bd:
                    e4:58:d5:30:d4:59:60:c2:28:c5:1f:62:9d:50:c1:
                    72:7a:67:7a:1b:90:54:fd:27:1f:fe:aa:e0:75:f6:
                    40:44:db:e8:2d:66:a0:ac:e2:8b:c2:b6:fe:16:f3:
                    1e:29:ab:4d:a1:30:35:d3:a1:fc:13:f1:e2:d8:d9:
                    bc:2e:ee:89:8b:bf:ab:42:9c:48:97:cd:45:f0:fb:
                    fd:26:a3:30:a3:78:ac:1d:01:60:1c:92:88:37:41:
                    36:f6:56:24:96:aa:60:b0:92:60:a3:5a:d4:a4:50:
                    7b:ef:9c:17:3d:08:e4:81:8f:98:6a:04:8c:c6:d4:
                    c4:4f:a5:22:f3:50:da:17:0e:a7:bf:7b:ef:65:ab:
                    bc:3b:0e:2d:0c:1a:99:9e:cd:c1:6f:7f:e4:ad:69:
                    41:fa:5e:7e:1a:37:74:7b:d7:a7:18:53:05:99:a1:
                    89:74:1b:ee:6e:f4:9b:55:07:b8:38:5a:b7:cc:5d:
                    95:3f:4f:69:eb:c8:0e:40:6a:cd:ad:3a:b0:23:93:
                    7f:5b:16:21:94:28:50:33:19:77:e6:5c:a5:a8:63:
                    2a:d5:1f:92:98:79:1c:c2:8c:16:91:5d:77:e3:13:
                    12:55:12:c2:c3:99:fa:81:d5:28:58:21:c9:51:58:
                    ef:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:BF:11:F3:1A:94:31:09:7A:B1:95:6F:0C:D3:B2:7D:21:EF:A8:AB
            X509v3 Authority Key Identifier:
                keyid:D7:58:34:C9:90:FE:D2:B3:3F:25:A0:2C:03:59:17:58:EC:EB:54:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/11g0yZD-0rM_JaAsA1kXWOzrVBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ebe6e8-1a23-47c5-ab1f-acb1bf6b3521/1/11g0yZD-0rM_JaAsA1kXWOzrVBE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ebe6e8-1a23-47c5-ab1f-acb1bf6b3521/1/11g0yZD-0rM_JaAsA1kXWOzrVBE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:37:67:18:d6:f0:52:28:b6:55:e8:97:f3:bd:9b:b0:69:b2:
         93:6c:5a:a0:d9:65:f8:26:b3:62:f0:63:0d:cf:fb:3f:74:ea:
         62:92:56:9c:d0:0f:59:33:0f:8f:dc:f0:99:24:7a:cc:db:11:
         92:66:c1:2c:5a:a8:e1:c7:43:f0:47:1c:e4:8e:2b:dd:ac:2a:
         d7:70:48:45:46:dd:69:2e:ac:2e:f0:96:7e:64:f1:a0:85:99:
         7a:b6:28:92:70:1a:5f:38:7e:a9:b4:26:bc:96:1d:18:95:35:
         ae:ce:b5:04:5f:87:81:54:52:88:03:fe:68:fe:f7:11:d1:6e:
         81:a7:d7:2e:52:f2:fc:75:d0:9d:ed:9f:19:59:fa:ea:51:d2:
         d5:36:96:e2:06:6b:fa:f5:16:52:6e:ac:ce:95:1c:10:a7:33:
         40:d0:23:90:e7:b0:0d:a6:75:55:f0:42:d7:65:25:1b:f2:1d:
         f6:da:27:b4:d7:8c:ee:dc:81:64:c3:d8:5c:d1:f7:2b:6a:e9:
         44:6b:aa:18:0e:e5:42:10:0f:ab:07:21:cc:58:f7:79:b0:70:
         14:21:25:d4:62:4b:5c:73:8c:f9:63:25:9f:fe:7a:1c:64:44:
         48:fa:de:d0:a9:22:1a:ca:64:23:16:3d:c2:f8:a8:a6:a1:59:
         d7:1c:14:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----