Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/ee1f8e-2f5c-4d7c-a7d1-1d8ead6e1073/1/473J_X9S4edet-3m4lrQePuQv7Q.mft
File:                     473J_X9S4edet-3m4lrQePuQv7Q.mft (raw, json)
Hash identifier:          7zUZYcpOy7Lkd6/jxKB+Ki3/vkJ2dbxx/jB+pOc/NEs=
Subject key identifier:   52:59:D7:B4:6C:AF:A5:75:09:16:A8:9B:19:75:10:63:6F:37:2B:81
Authority key identifier: E3:BD:C9:FD:7F:52:E1:E7:5E:B7:ED:E6:E2:5A:D0:78:FB:90:BF:B4
Certificate issuer:       /CN=e3bdc9fd7f52e1e75eb7ede6e25ad078fb90bfb4
Certificate serial:       018B901F028D9EC6E96BE50DBB11BEB1F949
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/473J_X9S4edet-3m4lrQePuQv7Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/ee1f8e-2f5c-4d7c-a7d1-1d8ead6e1073/1/473J_X9S4edet-3m4lrQePuQv7Q.mft
Manifest number:          06B3
Signing time:             Thu 02 Nov 2023 13:00:32 +0000
Manifest this update:     Thu 02 Nov 2023 13:00:32 +0000
Manifest next update:     Fri 03 Nov 2023 13:00:32 +0000
Files and hashes:         1: 473J_X9S4edet-3m4lrQePuQv7Q.crl (hash: eC4yfFJG3TeEnhUvgL6radCIFXrZIjeWJKecFlPkQ/4=)
                          2: 5cvIDTHUZJJ3mWaCXN_Xoyn4t4o.roa (hash: Gapu3m6zcPB3PmLN2g9zivg1MQtXMm4JYuboQYIFUt0=)
                          3: aHKCuHQhZPOtNG533EWm6RDoHms.roa (hash: 4cNOV1gqVEvdzW3bA6UCzaZxh6lStQ8Gsb6DxITEzkY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:90:1f:02:8d:9e:c6:e9:6b:e5:0d:bb:11:be:b1:f9:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3bdc9fd7f52e1e75eb7ede6e25ad078fb90bfb4
        Validity
            Not Before: Nov  2 13:00:32 2023 GMT
            Not After : Nov  3 13:00:32 2023 GMT
        Subject: CN=5259d7b46cafa5750916a89b197510636f372b81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d0:f7:31:73:e9:39:47:92:e1:c2:90:4f:cd:
                    20:a4:97:2e:15:91:aa:92:56:56:77:7e:b6:da:af:
                    e3:25:6e:e9:80:2b:0e:2e:a2:a6:1e:15:e0:cb:52:
                    ca:2e:a2:20:21:fa:f6:2f:74:a5:ee:79:06:86:2b:
                    58:f0:dd:37:ef:0d:9c:42:fc:5e:52:bc:a4:73:bc:
                    ee:12:73:46:13:3f:01:4c:aa:1e:a6:fe:6d:25:b3:
                    fd:82:f9:f8:b9:f6:e6:ed:58:76:f7:04:fb:ab:00:
                    f1:62:d4:cd:2e:5c:34:0c:28:90:b9:e7:8b:a7:91:
                    f4:49:bb:a8:8a:db:96:c2:5f:07:27:d3:3c:f6:cf:
                    db:2e:68:1a:21:37:f4:ce:9f:90:0d:d3:6f:68:58:
                    39:d2:ad:54:dd:e1:c0:b4:3d:d2:3e:d4:a9:df:10:
                    60:74:58:1a:6c:fc:6c:39:4a:b3:4d:dc:c8:16:5b:
                    a7:61:26:f5:55:3d:b0:91:e3:61:7d:71:07:29:4a:
                    45:a8:c2:3f:12:61:56:1a:29:24:a5:f7:86:5b:39:
                    d2:0b:7b:87:7d:94:f2:fb:ac:0d:e5:e5:32:f9:9e:
                    04:62:5b:23:ab:34:ed:66:ce:bf:8a:13:56:cb:68:
                    52:de:66:ca:9a:41:5f:dd:b2:bd:3e:d3:0a:1d:be:
                    0a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:59:D7:B4:6C:AF:A5:75:09:16:A8:9B:19:75:10:63:6F:37:2B:81
            X509v3 Authority Key Identifier:
                keyid:E3:BD:C9:FD:7F:52:E1:E7:5E:B7:ED:E6:E2:5A:D0:78:FB:90:BF:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/473J_X9S4edet-3m4lrQePuQv7Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ee1f8e-2f5c-4d7c-a7d1-1d8ead6e1073/1/473J_X9S4edet-3m4lrQePuQv7Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ee1f8e-2f5c-4d7c-a7d1-1d8ead6e1073/1/473J_X9S4edet-3m4lrQePuQv7Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:c0:ca:97:4a:d9:14:c6:70:70:9a:17:74:3d:e2:09:a0:de:
         8e:45:5d:4a:07:1a:14:24:f9:a7:ef:72:0c:eb:2b:80:10:9d:
         57:42:76:d9:03:1c:23:a3:f4:27:6b:43:e6:85:2d:ed:ff:82:
         22:23:0c:4a:aa:64:b6:0b:4f:4b:17:13:a6:61:4b:16:c8:b0:
         25:bc:8f:2b:9e:72:15:9f:c0:96:4a:20:55:66:0c:24:91:22:
         0e:7e:dc:b3:a9:12:47:d7:bb:d2:91:aa:ed:c6:fe:50:f0:90:
         63:f5:f8:79:10:59:60:0c:3e:e8:16:fb:65:3f:09:48:c7:5d:
         32:ca:ac:0a:74:72:f3:0b:5f:ea:a6:ed:cc:3b:ad:a6:39:4d:
         7d:1a:ac:cb:d1:34:56:d0:5c:90:39:eb:0d:9a:38:64:34:e2:
         02:73:81:6c:15:be:8e:c2:da:78:91:dd:93:84:be:27:44:c3:
         e9:40:43:e1:ed:eb:51:cc:69:4a:83:b5:98:be:c0:d9:42:4f:
         22:21:4c:ce:98:8b:19:b3:31:e6:ef:a4:3c:21:5a:b4:df:4d:
         03:b2:b0:b1:c4:9a:d4:b2:8a:2b:19:64:ad:19:1d:8b:4e:46:
         1e:b9:ed:aa:81:6b:dc:bb:f1:ef:60:73:0d:c1:52:5c:dd:09:
         3a:3e:f9:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----