Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/5f5767-7af5-4c66-9692-5d4b0b78e4eb/1/h8Iy0_AFynRdgYzWQ56Ah5BQEOQ.mft
File:                     h8Iy0_AFynRdgYzWQ56Ah5BQEOQ.mft (raw, json)
Hash identifier:          k3vV/lxbMJ0vG8QMdeFNiUxR21EKh10NPNycKo1h6aE=
Subject key identifier:   F9:D6:FE:D9:92:87:07:89:9A:76:52:7E:19:86:11:C3:5A:CF:6B:C5
Authority key identifier: 87:C2:32:D3:F0:05:CA:74:5D:81:8C:D6:43:9E:80:87:90:50:10:E4
Certificate issuer:       /CN=87c232d3f005ca745d818cd6439e8087905010e4
Certificate serial:       018BD2A4D287CB3E3684C78D3D47180B74B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h8Iy0_AFynRdgYzWQ56Ah5BQEOQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/5f5767-7af5-4c66-9692-5d4b0b78e4eb/1/h8Iy0_AFynRdgYzWQ56Ah5BQEOQ.mft
Manifest number:          0866
Signing time:             Wed 15 Nov 2023 11:01:38 +0000
Manifest this update:     Wed 15 Nov 2023 11:01:38 +0000
Manifest next update:     Thu 16 Nov 2023 11:01:38 +0000
Files and hashes:         1: 6lNMGxfeW8xxJnjNwJLMV4dEEKw.roa (hash: fFpmjxzdAbkKHPUjkamzxSP93ipoyJEVQfO/gxSssh8=)
                          2: h8Iy0_AFynRdgYzWQ56Ah5BQEOQ.crl (hash: D/xyRLOz/AtQs+bqTuVZJhW/SO4dT4Y0zYNTDB2tx38=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:d2:a4:d2:87:cb:3e:36:84:c7:8d:3d:47:18:0b:74:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87c232d3f005ca745d818cd6439e8087905010e4
        Validity
            Not Before: Nov 15 11:01:38 2023 GMT
            Not After : Nov 16 11:01:38 2023 GMT
        Subject: CN=f9d6fed9928707899a76527e198611c35acf6bc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:83:23:4e:98:b5:70:1f:cd:fa:05:61:f8:a9:
                    f6:9c:5f:b6:65:9d:b1:eb:17:46:27:23:34:93:01:
                    12:00:03:d3:e2:fd:d9:6e:09:d8:80:9c:92:d5:25:
                    de:a8:e2:d2:61:a1:4d:8c:fc:a2:1b:a7:4c:a8:88:
                    ef:19:23:bc:69:97:56:46:2a:f6:57:bf:57:db:3e:
                    a7:27:ba:47:28:55:6a:6a:90:80:3f:ba:56:ab:9f:
                    ea:71:c9:b5:05:5b:59:eb:9c:2a:86:bb:d4:9f:09:
                    06:38:72:7f:13:e0:67:f2:0c:81:3f:9b:93:19:aa:
                    3b:dd:99:3f:7d:64:b5:e8:a5:03:89:4e:40:c6:9b:
                    37:2c:55:5b:99:5e:9b:a3:5b:90:f5:99:ae:9c:6e:
                    ee:1d:02:6a:09:79:cc:0d:ba:17:64:0c:d9:e7:93:
                    7c:67:8c:9c:de:a2:33:c1:56:d3:55:f5:05:d3:89:
                    32:79:31:43:7e:03:ee:e1:81:8c:da:2e:6b:8a:1e:
                    ab:8b:56:e2:fe:7c:79:59:bd:8b:00:23:f9:66:ba:
                    05:59:fe:48:c4:69:9b:dd:e5:8d:ef:72:27:16:98:
                    7c:f1:88:ae:e1:f6:86:ff:0f:5a:3f:52:2e:f9:c4:
                    e1:20:29:20:e0:45:18:f8:74:1e:1d:87:06:62:b0:
                    b0:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:D6:FE:D9:92:87:07:89:9A:76:52:7E:19:86:11:C3:5A:CF:6B:C5
            X509v3 Authority Key Identifier:
                keyid:87:C2:32:D3:F0:05:CA:74:5D:81:8C:D6:43:9E:80:87:90:50:10:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h8Iy0_AFynRdgYzWQ56Ah5BQEOQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/5f5767-7af5-4c66-9692-5d4b0b78e4eb/1/h8Iy0_AFynRdgYzWQ56Ah5BQEOQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/5f5767-7af5-4c66-9692-5d4b0b78e4eb/1/h8Iy0_AFynRdgYzWQ56Ah5BQEOQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:1c:71:98:7a:b5:94:a2:a3:13:7c:b1:2b:ca:07:12:43:3c:
         46:8c:ac:eb:73:0a:88:c0:27:19:e2:b7:e7:7f:56:c9:b7:08:
         aa:ac:c1:c4:c7:ed:2f:f2:c5:ff:0a:59:85:f0:99:ac:e6:fe:
         89:8b:cb:e7:e4:b9:ee:8e:77:0d:c1:9b:f5:60:47:7e:a4:12:
         1c:7e:a4:31:54:6e:ab:aa:2f:5f:d4:49:1f:5e:06:5c:96:60:
         59:2e:d7:ff:c5:de:e5:1f:f8:38:9d:9d:63:5b:6d:cd:10:95:
         b2:f5:5c:e8:09:f3:22:b0:60:05:89:54:6c:d7:9c:ed:a3:58:
         03:e9:aa:e4:34:08:f9:ab:e8:57:dd:5f:d4:f2:f4:e6:a1:98:
         69:1e:5d:cb:b5:89:c3:61:8b:a4:cb:1d:39:62:05:68:81:5c:
         45:ad:60:1f:2c:7d:93:20:ee:18:db:6b:16:c5:fb:e8:0b:32:
         40:0d:12:b4:b0:81:7c:5a:12:48:bc:23:7c:93:34:cf:56:56:
         0c:00:7a:46:19:43:f7:08:f2:5c:f0:75:0b:5a:a1:e6:20:b5:
         e3:92:3e:eb:85:1a:4b:8f:71:96:1e:f7:0f:d7:61:7e:c6:9c:
         ea:dc:31:7b:b3:bc:26:b3:dd:7e:0c:89:f0:66:6b:02:3c:82:
         8f:e2:82:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----