Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/697564-0025-4f92-8dfd-ce1c03400d4d/1/hICLgjQYH_SNMhDd_IcJDtZ9Ar8.mft
File:                     hICLgjQYH_SNMhDd_IcJDtZ9Ar8.mft (raw, json)
Hash identifier:          BNFBMcxEb2jBpR9XwYWCpASV9NZzvi2PVxsppSmTo4c=
Subject key identifier:   C6:12:24:E3:B3:2B:ED:E9:E9:43:8C:97:6D:21:1E:F0:A3:72:ED:6B
Authority key identifier: 84:80:8B:82:34:18:1F:F4:8D:32:10:DD:FC:87:09:0E:D6:7D:02:BF
Certificate issuer:       /CN=84808b8234181ff48d3210ddfc87090ed67d02bf
Certificate serial:       01860246B9F1A5521A411C85E8138EDCA844
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hICLgjQYH_SNMhDd_IcJDtZ9Ar8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/697564-0025-4f92-8dfd-ce1c03400d4d/1/hICLgjQYH_SNMhDd_IcJDtZ9Ar8.mft
Manifest number:          0C4E
Signing time:             Mon 30 Jan 2023 10:43:54 +0000
Manifest this update:     Mon 30 Jan 2023 10:43:54 +0000
Manifest next update:     Tue 31 Jan 2023 10:43:54 +0000
Files and hashes:         1: 2gHBgQ5q4tsvm3z68Dm072ST_zQ.roa (hash: 9l1f7HIjoJtkBnL1h4Hj0kakdu/w/kC1KmpF3pDdqL8=)
                          2: hICLgjQYH_SNMhDd_IcJDtZ9Ar8.crl (hash: WI6xOQSjicrWw7P9ULrB16FnspBlmbnWDFAKg3hMK5c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:02:46:b9:f1:a5:52:1a:41:1c:85:e8:13:8e:dc:a8:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84808b8234181ff48d3210ddfc87090ed67d02bf
        Validity
            Not Before: Jan 30 10:43:54 2023 GMT
            Not After : Jan 31 10:43:54 2023 GMT
        Subject: CN=c61224e3b32bede9e9438c976d211ef0a372ed6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:19:c7:63:3c:39:05:97:e8:10:79:2e:a5:12:
                    a7:3f:98:7a:8c:55:6b:24:9a:43:94:a7:2f:77:2b:
                    c4:0c:b5:ac:65:9e:61:62:c7:4f:c1:b5:03:d4:3c:
                    a8:cf:2e:2e:dc:31:14:10:3b:09:42:0d:79:d2:3e:
                    32:10:61:29:4c:e6:4e:d2:50:07:79:ef:d2:aa:f0:
                    d5:34:0b:bb:0c:b6:58:d3:05:8d:05:7a:42:2b:fa:
                    23:dc:18:3e:0c:53:1d:69:79:e4:1a:34:27:23:4b:
                    1c:75:e1:fb:8e:b1:32:80:b2:bb:49:c4:ce:1a:3d:
                    1b:8f:e7:7c:95:54:7f:8f:29:bf:e1:91:e2:6e:b1:
                    67:4d:d4:1a:73:30:d3:c6:5f:25:21:ab:ff:d1:e3:
                    6a:b4:d9:65:61:69:eb:e8:91:f5:e2:8c:1b:76:c9:
                    06:9b:2e:41:e7:69:fe:ae:bb:4d:01:ed:ca:62:ed:
                    75:b5:2c:86:50:60:be:9c:18:9f:5d:1c:76:cc:98:
                    8c:85:1c:51:e2:75:a0:21:e5:d7:71:75:56:9e:84:
                    b7:66:2e:2a:df:bf:77:8e:a3:0c:23:ac:cf:da:be:
                    cb:79:cf:34:8a:99:06:97:95:78:5f:bb:12:ea:fa:
                    b7:63:7c:4f:bc:eb:bf:dd:c7:16:9b:1e:f5:5e:f2:
                    27:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:12:24:E3:B3:2B:ED:E9:E9:43:8C:97:6D:21:1E:F0:A3:72:ED:6B
            X509v3 Authority Key Identifier:
                keyid:84:80:8B:82:34:18:1F:F4:8D:32:10:DD:FC:87:09:0E:D6:7D:02:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hICLgjQYH_SNMhDd_IcJDtZ9Ar8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/697564-0025-4f92-8dfd-ce1c03400d4d/1/hICLgjQYH_SNMhDd_IcJDtZ9Ar8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/697564-0025-4f92-8dfd-ce1c03400d4d/1/hICLgjQYH_SNMhDd_IcJDtZ9Ar8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:47:e0:58:70:ad:f7:8c:ee:e6:fb:b6:e0:46:47:5e:98:5a:
         04:ae:8b:b4:3d:cd:83:e2:67:0f:62:cd:ae:b6:01:0b:87:c7:
         b2:e2:9a:6c:69:19:b3:89:ab:39:f9:3d:82:01:2a:9b:91:3b:
         e0:62:26:35:41:0b:d1:7a:20:41:22:1f:2f:9f:8f:38:5f:bf:
         34:60:f5:fe:88:db:62:94:fb:0f:23:17:9e:15:45:ac:fd:3a:
         61:09:ba:05:7a:2f:50:36:b3:ac:3a:c1:db:7c:63:ec:6a:f7:
         00:13:f5:b5:f8:41:97:b3:9a:3a:44:bd:13:40:a1:e7:de:a8:
         90:9b:54:fa:16:17:d7:e5:00:72:9d:11:4e:59:c0:1e:97:a4:
         3f:cf:c8:8a:1f:33:a1:0f:30:73:de:57:78:fe:c0:00:fb:0f:
         97:3a:5d:78:79:3f:dc:1e:b7:6c:6f:b4:2c:e2:75:cc:f6:b7:
         2b:3a:12:49:1f:3e:99:71:5d:fa:25:c6:2d:15:71:c4:43:0a:
         c8:d0:05:a8:39:4d:50:93:04:b1:50:0d:ba:48:14:41:4f:87:
         8d:96:4d:2f:bf:f2:42:b2:b8:44:e0:0b:40:f6:74:96:1d:39:
         47:82:c4:4b:cd:0a:15:0d:6f:2e:ef:76:65:8c:92:d8:b0:95:
         b8:6f:28:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----