Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/bbdd98-a3e5-4e72-9623-17c195067e29/1/3GOQEBlxVTMycuMNMehX5YQPfwc.mft
File:                     3GOQEBlxVTMycuMNMehX5YQPfwc.mft (raw, json)
Hash identifier:          I12M/FgdH5V/9JHjbI8kmml3iH5waBhgSOLqIhIAnpA=
Subject key identifier:   94:E9:0C:B3:44:88:3D:54:35:7C:C3:DB:1F:A5:D9:CD:82:78:DC:B4
Authority key identifier: DC:63:90:10:19:71:55:33:32:72:E3:0D:31:E8:57:E5:84:0F:7F:07
Certificate issuer:       /CN=dc639010197155333272e30d31e857e5840f7f07
Certificate serial:       018C7B4BB73EFEE9D59D09045B6DDB1DC194
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3GOQEBlxVTMycuMNMehX5YQPfwc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/bbdd98-a3e5-4e72-9623-17c195067e29/1/3GOQEBlxVTMycuMNMehX5YQPfwc.mft
Manifest number:          0245
Signing time:             Mon 18 Dec 2023 05:00:08 +0000
Manifest this update:     Mon 18 Dec 2023 05:00:08 +0000
Manifest next update:     Tue 19 Dec 2023 05:00:08 +0000
Files and hashes:         1: 3GOQEBlxVTMycuMNMehX5YQPfwc.crl (hash: TH1vxsiePqig09XV9L56tGdSTgmEHjADWkvhUcLFO/o=)
                          2: UldmCz27cYerIApemk88ePpUE3c.roa (hash: T2M8v+69rTsh+wLs/ADWtV0SAe4PIt9HUOJj2qt85Ws=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:7b:4b:b7:3e:fe:e9:d5:9d:09:04:5b:6d:db:1d:c1:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc639010197155333272e30d31e857e5840f7f07
        Validity
            Not Before: Dec 18 05:00:08 2023 GMT
            Not After : Dec 19 05:00:08 2023 GMT
        Subject: CN=94e90cb344883d54357cc3db1fa5d9cd8278dcb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:09:4c:ca:02:dd:ba:1c:9c:39:8e:d8:b8:38:
                    7a:9e:64:f2:ad:82:5b:ac:35:3e:a8:a7:1c:72:73:
                    e4:8b:d8:a4:1c:65:9d:4b:79:38:32:f6:a5:0e:f8:
                    2a:dc:b8:31:1a:8d:14:bc:f7:4c:47:06:47:fc:69:
                    d2:8b:e8:7e:a4:49:4d:1f:55:63:74:8c:29:5c:a8:
                    24:10:e9:90:68:0f:8b:7b:fb:e7:dd:83:58:c2:ab:
                    42:47:48:0b:92:d8:c6:27:44:56:1b:2f:80:ae:16:
                    e2:06:16:e7:8a:04:5e:ed:07:74:f7:e6:f6:88:29:
                    76:16:f4:54:8c:c0:32:f3:b1:71:1f:02:e6:f6:7e:
                    8f:bc:0f:6f:53:12:d1:6c:57:cc:14:d4:f7:2b:6c:
                    cd:cd:8e:f0:ee:32:1e:8d:5c:ac:5c:27:0e:d2:ad:
                    2c:4d:51:af:e4:05:83:b5:a3:82:96:17:28:b6:85:
                    30:d3:15:63:38:a0:5c:1a:36:cb:bc:cb:3a:4c:80:
                    1f:eb:cb:47:60:3c:92:1d:40:14:a6:de:73:b9:9f:
                    4e:2d:ba:43:a6:05:09:0a:26:50:35:0b:dd:a7:22:
                    ed:0f:f9:f3:3b:84:92:ae:b6:99:a6:2b:a3:14:bc:
                    74:f7:58:64:7e:3a:01:0b:ea:6c:33:44:b2:01:cd:
                    b8:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:E9:0C:B3:44:88:3D:54:35:7C:C3:DB:1F:A5:D9:CD:82:78:DC:B4
            X509v3 Authority Key Identifier:
                keyid:DC:63:90:10:19:71:55:33:32:72:E3:0D:31:E8:57:E5:84:0F:7F:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GOQEBlxVTMycuMNMehX5YQPfwc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/bbdd98-a3e5-4e72-9623-17c195067e29/1/3GOQEBlxVTMycuMNMehX5YQPfwc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/bbdd98-a3e5-4e72-9623-17c195067e29/1/3GOQEBlxVTMycuMNMehX5YQPfwc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:5a:7f:6a:84:e3:ad:4c:f2:09:5b:af:ac:4a:d3:a3:79:c0:
         75:85:8e:bb:e3:f7:58:90:2d:5a:fa:9a:4c:92:4c:58:53:8b:
         e5:39:d4:6f:8a:3d:52:54:5d:47:0d:b2:90:7a:e1:d2:d7:9d:
         e4:9d:9d:fe:2f:46:35:a7:4f:e2:75:60:e5:92:29:b0:57:98:
         f3:19:14:86:dc:99:7d:66:3d:d8:ba:aa:76:b8:4d:42:79:3c:
         7a:e8:bf:e4:0a:83:12:ec:f2:5d:5c:13:c0:49:82:c6:85:80:
         f1:45:2b:8a:24:11:db:77:39:2d:80:48:4b:48:27:82:63:01:
         5e:89:21:67:26:46:d4:34:90:6c:d3:df:26:98:8c:ec:20:d7:
         51:96:8e:eb:7d:71:64:15:6b:da:9a:c7:7c:f6:ae:ba:2d:7f:
         c3:54:17:72:88:9e:c9:bc:0e:79:bd:a2:70:8c:64:85:df:01:
         90:5a:ee:c2:d3:45:45:b5:e2:c8:c8:3e:9c:9e:c9:2e:37:ea:
         1e:6f:cc:43:67:58:31:bb:5f:3a:62:fc:c8:8d:09:1f:a6:2e:
         7a:2a:42:01:7d:12:b6:7f:57:43:a9:54:d7:d1:7e:e7:2b:84:
         23:d5:28:e3:fe:bb:27:9c:57:8b:59:0b:3a:82:50:45:6e:84:
         04:ce:67:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----