Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/3a1873-c313-4457-80aa-d1937684f456/1/_J08IP1879EATZ5q_3Mj2sweqI8.mft
File:                     _J08IP1879EATZ5q_3Mj2sweqI8.mft (raw, json)
Hash identifier:          vW+suDVtCZBlh/Md4tc8ITJ0zXVk+dnXSATo5sgleSw=
Subject key identifier:   2D:5E:D2:E7:41:4E:2E:2E:C4:85:75:A7:28:EC:B6:39:34:94:E3:B2
Authority key identifier: FC:9D:3C:20:FD:7C:EF:D1:00:4D:9E:6A:FF:73:23:DA:CC:1E:A8:8F
Certificate issuer:       /CN=fc9d3c20fd7cefd1004d9e6aff7323dacc1ea88f
Certificate serial:       018C396C8DE580026533BA7A3C3463BAFBF9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_J08IP1879EATZ5q_3Mj2sweqI8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/3a1873-c313-4457-80aa-d1937684f456/1/_J08IP1879EATZ5q_3Mj2sweqI8.mft
Manifest number:          0881
Signing time:             Tue 05 Dec 2023 10:01:04 +0000
Manifest this update:     Tue 05 Dec 2023 10:01:04 +0000
Manifest next update:     Wed 06 Dec 2023 10:01:04 +0000
Files and hashes:         1: _J08IP1879EATZ5q_3Mj2sweqI8.crl (hash: Z3NzYSACTEr2KB1GYizs4B8gvLoCIbw9pI4N7wx+y8U=)
                          2: oDHFiNbbSKo36awhVUGthQw_heU.roa (hash: rzxiPokIEM5BLXJlbuH3onXG75I5IRPb0eX+cDEVdoE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:39:6c:8d:e5:80:02:65:33:ba:7a:3c:34:63:ba:fb:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc9d3c20fd7cefd1004d9e6aff7323dacc1ea88f
        Validity
            Not Before: Dec  5 10:01:04 2023 GMT
            Not After : Dec  6 10:01:04 2023 GMT
        Subject: CN=2d5ed2e7414e2e2ec48575a728ecb6393494e3b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:cb:18:c2:16:3e:c6:ec:e3:82:60:a5:52:6c:
                    81:58:5c:53:ff:8a:0c:ba:b3:22:f0:35:29:42:59:
                    32:89:c0:8d:f9:53:e3:95:66:4b:92:dd:44:0d:68:
                    fe:a2:0f:18:be:a5:2a:1f:cd:e9:39:16:f1:27:04:
                    1a:67:2e:13:a8:15:be:c6:43:27:90:aa:7d:eb:0e:
                    5a:55:40:5b:8e:30:77:4d:e3:d5:6f:09:af:d4:b2:
                    94:93:6b:36:af:d4:d3:44:12:9e:00:86:9f:8a:1b:
                    f8:83:50:7e:ed:b5:6b:f3:1d:2a:5a:22:de:91:9a:
                    80:bf:d8:d8:2e:53:52:ab:c4:19:04:ac:3f:00:d3:
                    fa:81:3c:2b:0b:19:66:ba:f1:94:29:aa:86:f2:f3:
                    0d:50:2a:36:73:3e:69:52:ed:a9:aa:13:73:5f:d1:
                    17:44:f1:93:ca:a7:7d:56:5e:3f:24:99:9e:10:02:
                    d8:08:3f:19:f0:9a:21:4f:ad:80:a1:f9:f4:0d:8d:
                    24:b2:32:b4:5a:ca:e1:a7:28:e1:9c:01:0e:6f:d5:
                    8e:7a:55:2f:0b:fe:27:f6:08:f5:6b:b9:ee:9c:e9:
                    fb:61:ed:d1:ea:24:55:25:14:61:27:1a:89:86:1f:
                    11:c1:71:3b:a5:fe:85:55:71:a8:97:03:af:32:a8:
                    64:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:5E:D2:E7:41:4E:2E:2E:C4:85:75:A7:28:EC:B6:39:34:94:E3:B2
            X509v3 Authority Key Identifier:
                keyid:FC:9D:3C:20:FD:7C:EF:D1:00:4D:9E:6A:FF:73:23:DA:CC:1E:A8:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_J08IP1879EATZ5q_3Mj2sweqI8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/3a1873-c313-4457-80aa-d1937684f456/1/_J08IP1879EATZ5q_3Mj2sweqI8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/3a1873-c313-4457-80aa-d1937684f456/1/_J08IP1879EATZ5q_3Mj2sweqI8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:6f:41:53:df:3e:86:cc:bd:6b:2c:88:6a:2b:29:bc:9c:e0:
         dd:13:d8:d6:12:03:a0:9d:38:54:c7:d9:4d:1a:3c:01:c7:a3:
         ba:61:37:cb:f9:5e:3b:b2:7c:b2:6e:f0:33:6b:cc:44:d2:90:
         f9:00:4e:b2:1d:9c:88:f1:90:ab:bf:8f:ea:de:24:d3:79:69:
         6c:d7:e7:5a:50:72:d8:f9:34:49:8e:06:5f:e4:42:70:05:9a:
         b7:26:e3:b6:96:23:dc:6e:8a:4d:65:11:22:92:4b:66:24:a3:
         72:6d:89:8c:1b:bf:d3:91:5a:86:dc:22:d7:07:28:e2:8f:e2:
         14:9e:af:1b:d7:f1:c2:2b:f0:29:bf:a5:f7:a2:66:2a:d9:6b:
         24:53:6a:4f:ef:50:3b:89:1e:6c:82:a5:0d:02:2a:5c:c0:c9:
         fb:87:82:65:22:0f:23:15:32:b4:2b:ec:84:23:8d:8e:63:4c:
         6d:3d:a7:7c:4f:4d:5d:d5:09:5c:ec:b2:43:1e:35:5c:b8:39:
         5e:4d:d4:1d:30:81:2f:5b:60:bd:42:d9:95:d3:94:ca:1b:9e:
         39:d9:ca:9b:4e:34:f0:49:c9:bd:e9:61:eb:21:e7:fb:d2:f0:
         18:58:c8:a3:15:4b:62:80:d2:82:c1:d6:28:0c:31:2c:1a:eb:
         09:8c:f4:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----