Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/661070-b3a9-4e56-850d-659a1c282ebe/1/RZI62UargKlHQA4U2y5sSWIMPY8.mft
File:                     RZI62UargKlHQA4U2y5sSWIMPY8.mft (raw, json)
Hash identifier:          mu5Dh0oyWLlDoRFTR5PWclpY9IADTjYZvBsVwI2qBYI=
Subject key identifier:   B7:5A:DD:C4:45:E2:A0:F2:4A:B4:62:C3:17:D7:3C:29:69:EC:6A:41
Authority key identifier: 45:92:3A:D9:46:AB:80:A9:47:40:0E:14:DB:2E:6C:49:62:0C:3D:8F
Certificate issuer:       /CN=45923ad946ab80a947400e14db2e6c49620c3d8f
Certificate serial:       018B366E065BD45CEC0FC78CEC7D77869844
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RZI62UargKlHQA4U2y5sSWIMPY8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/661070-b3a9-4e56-850d-659a1c282ebe/1/RZI62UargKlHQA4U2y5sSWIMPY8.mft
Manifest number:          0868
Signing time:             Mon 16 Oct 2023 03:01:02 +0000
Manifest this update:     Mon 16 Oct 2023 03:01:02 +0000
Manifest next update:     Tue 17 Oct 2023 03:01:02 +0000
Files and hashes:         1: 6Zc3SGCeJwFG8PKiGp13qucEqa0.roa (hash: jps0PUFjHPzQOQAvg2bS6Bb7rOiNKVKJxIou0Kfmga8=)
                          2: RZI62UargKlHQA4U2y5sSWIMPY8.crl (hash: J08eGnYLpZs7fp74gP9GgKM7X3a48LGMvShVdYFd4/I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:36:6e:06:5b:d4:5c:ec:0f:c7:8c:ec:7d:77:86:98:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45923ad946ab80a947400e14db2e6c49620c3d8f
        Validity
            Not Before: Oct 16 03:01:02 2023 GMT
            Not After : Oct 17 03:01:02 2023 GMT
        Subject: CN=b75addc445e2a0f24ab462c317d73c2969ec6a41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:51:94:aa:e7:9b:eb:32:bc:ea:b5:6e:4e:35:
                    3c:71:5a:d1:c2:d7:81:f6:90:18:31:b8:cf:86:20:
                    ed:1e:c5:2d:14:24:94:44:b9:c0:f2:5d:94:ea:8d:
                    8a:0a:7c:09:15:60:b3:e3:1a:75:69:20:6a:60:a2:
                    78:d6:87:4b:df:00:43:64:e7:c1:bc:34:2b:56:9c:
                    99:c2:c3:3e:67:0c:44:ef:db:4d:f2:25:c0:25:69:
                    e9:65:71:ec:7a:fd:03:17:f2:78:44:16:1d:44:f6:
                    a5:4f:29:75:6b:62:d0:99:fe:38:7b:79:94:f2:99:
                    38:f8:eb:e2:f0:23:85:02:17:0f:ba:a9:a8:e6:71:
                    1e:95:94:48:67:78:07:4d:bf:97:c9:81:7c:c6:1b:
                    1b:d4:72:cc:6a:15:e9:5a:fd:4a:70:af:2f:04:f4:
                    10:d6:c4:35:5e:d8:ea:b7:f8:02:cb:1d:06:3b:6c:
                    c8:db:33:4b:a1:87:1a:c1:3f:e4:9d:aa:71:c4:25:
                    45:81:1c:71:f4:e0:ff:f7:be:2e:c0:c1:be:cb:54:
                    52:54:c4:5e:34:1e:dd:da:9b:9e:46:9b:e1:7f:8e:
                    45:f4:01:41:ec:41:e0:78:3a:54:8b:9b:c7:43:99:
                    94:14:2b:2f:4f:d9:2d:d4:67:d6:2b:f0:ce:0f:2d:
                    4e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:5A:DD:C4:45:E2:A0:F2:4A:B4:62:C3:17:D7:3C:29:69:EC:6A:41
            X509v3 Authority Key Identifier:
                keyid:45:92:3A:D9:46:AB:80:A9:47:40:0E:14:DB:2E:6C:49:62:0C:3D:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZI62UargKlHQA4U2y5sSWIMPY8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/661070-b3a9-4e56-850d-659a1c282ebe/1/RZI62UargKlHQA4U2y5sSWIMPY8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/661070-b3a9-4e56-850d-659a1c282ebe/1/RZI62UargKlHQA4U2y5sSWIMPY8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:8f:f2:a6:6b:e3:ea:bd:1c:df:33:62:ec:92:67:6f:7f:89:
         30:a1:29:f9:46:05:c6:ea:a5:d0:27:d2:a9:22:9c:ba:90:9a:
         06:d6:15:a8:ae:b9:ea:db:b0:97:3a:35:b3:12:71:37:c3:b3:
         70:ba:b0:4b:97:08:4c:16:72:5f:cb:b3:94:30:01:72:75:24:
         04:73:3e:2d:93:76:a0:85:38:6b:f2:c5:e3:78:a9:23:5b:69:
         b7:ed:71:8a:18:e1:28:40:62:71:f7:49:20:c7:9f:8f:e1:62:
         6e:55:eb:e6:d7:c0:0c:93:57:c0:b3:ca:01:53:af:e2:1a:4b:
         94:05:bc:fb:6d:64:51:3e:d1:cd:bf:0e:8a:9f:c2:75:9e:ae:
         92:0a:74:86:aa:51:e7:9e:9c:c3:52:72:11:b7:f3:60:09:bc:
         31:73:eb:4a:7d:58:83:6d:79:b4:fa:38:f2:15:2a:38:f4:66:
         39:b3:94:5c:6d:0a:de:8c:7d:95:26:14:62:13:06:20:c5:ee:
         51:71:bc:53:d8:db:44:70:5a:75:e9:fb:d1:05:a0:2a:7b:71:
         14:c3:15:e9:2d:ff:53:6d:37:15:94:bc:c0:4d:0f:97:5c:7a:
         5d:4b:37:9a:43:86:a0:2e:dc:b3:08:9e:3d:44:7c:ae:c5:87:
         06:fa:c7:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----