Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/86e60f-b5fa-4389-94dd-9e39e719666a/1/jMoVfE7xVVRt3X68j6eL-uRTdZE.mft
File:                     jMoVfE7xVVRt3X68j6eL-uRTdZE.mft (raw, json)
Hash identifier:          9oGIdcMM9lRBkgI1n6nyVSYX7UKWXU131FiePieobCI=
Subject key identifier:   56:F7:8B:96:D8:CB:DF:B4:C8:04:71:E0:FA:F7:F4:21:5F:21:AE:02
Authority key identifier: 8C:CA:15:7C:4E:F1:55:54:6D:DD:7E:BC:8F:A7:8B:FA:E4:53:75:91
Certificate issuer:       /CN=8cca157c4ef155546ddd7ebc8fa78bfae4537591
Certificate serial:       018A5E22F39BE9CE8520E5D16050B3261731
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jMoVfE7xVVRt3X68j6eL-uRTdZE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/86e60f-b5fa-4389-94dd-9e39e719666a/1/jMoVfE7xVVRt3X68j6eL-uRTdZE.mft
Manifest number:          8E
Signing time:             Mon 04 Sep 2023 03:01:03 +0000
Manifest this update:     Mon 04 Sep 2023 03:01:03 +0000
Manifest next update:     Tue 05 Sep 2023 03:01:03 +0000
Files and hashes:         1: jMoVfE7xVVRt3X68j6eL-uRTdZE.crl (hash: nKqT0ImkTigFezmkXQ6YCa1FdMoNKpjAY3b2MskbI4A=)
                          2: tsVKA0S--uoKLyQStmhEUTv3MUo.roa (hash: rd036jnNgIw1diGye/V172ABuJ+hByTMdshKNByuOjs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:5e:22:f3:9b:e9:ce:85:20:e5:d1:60:50:b3:26:17:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cca157c4ef155546ddd7ebc8fa78bfae4537591
        Validity
            Not Before: Sep  4 03:01:03 2023 GMT
            Not After : Sep  5 03:01:03 2023 GMT
        Subject: CN=56f78b96d8cbdfb4c80471e0faf7f4215f21ae02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:8d:89:c8:35:b1:3e:dd:ef:cc:50:59:91:1b:
                    9d:a9:61:d9:9c:93:4b:91:57:94:3f:e3:68:ef:76:
                    76:2f:99:e3:32:a2:0e:86:15:d1:ed:09:54:f8:ba:
                    a7:a3:92:a6:6d:53:1f:56:44:49:2f:c4:09:7e:4d:
                    6e:85:b1:65:f8:a0:66:fd:a9:64:01:f9:15:81:eb:
                    17:df:f7:6f:d0:18:3a:b6:06:c8:59:f6:6f:6d:ec:
                    00:5c:81:fb:82:f5:03:ae:04:4b:93:79:40:c7:50:
                    93:65:cc:21:d2:a3:40:de:36:be:5e:b0:eb:d5:ae:
                    3c:f0:8f:ac:b4:4d:2c:9a:a5:4f:1d:f0:ee:b8:b4:
                    c3:d5:0b:d5:5f:a2:ec:41:c4:56:6e:c6:0e:d8:78:
                    aa:f7:69:be:8f:90:99:11:b5:9a:3f:f4:c7:8b:bf:
                    77:ca:24:75:ea:e7:65:57:4c:ed:89:10:69:59:0e:
                    87:fa:1e:54:dd:2c:9b:07:2f:5e:5d:c4:2c:13:d3:
                    b4:c0:e1:8c:20:e5:22:01:8e:43:4a:61:df:08:46:
                    5f:09:b9:0f:08:a4:15:e2:24:3a:31:05:18:c6:23:
                    49:0d:69:86:d7:59:ba:59:b1:f0:5a:7a:17:88:45:
                    fa:d8:02:9b:fe:7f:87:59:8a:ad:d0:f3:55:6a:c7:
                    32:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:F7:8B:96:D8:CB:DF:B4:C8:04:71:E0:FA:F7:F4:21:5F:21:AE:02
            X509v3 Authority Key Identifier:
                keyid:8C:CA:15:7C:4E:F1:55:54:6D:DD:7E:BC:8F:A7:8B:FA:E4:53:75:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jMoVfE7xVVRt3X68j6eL-uRTdZE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/86e60f-b5fa-4389-94dd-9e39e719666a/1/jMoVfE7xVVRt3X68j6eL-uRTdZE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/86e60f-b5fa-4389-94dd-9e39e719666a/1/jMoVfE7xVVRt3X68j6eL-uRTdZE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:4a:f3:8d:9c:c3:86:83:22:aa:d8:d9:b1:d4:5b:d4:14:9a:
         71:6f:74:d2:b9:34:2e:3e:21:57:38:7a:ff:b5:16:84:a4:c6:
         ea:6a:d7:ca:ed:86:9f:4e:80:5f:fa:ca:ad:89:2a:c3:1b:60:
         b3:81:5c:6f:ae:23:28:11:52:8c:51:2c:3f:81:c5:a9:06:25:
         c3:03:1d:c9:95:97:21:fc:cc:da:f1:2c:6a:56:f5:1d:d4:5a:
         fd:26:67:b3:a2:ae:b4:49:65:34:84:f8:0d:42:a8:4a:3b:fe:
         e4:17:23:1e:93:b8:3c:e2:df:18:31:47:cb:2f:d3:76:c5:20:
         76:5a:36:fd:3e:48:f1:a1:3b:14:c4:2d:a1:aa:61:5c:d0:2b:
         0d:36:93:cf:83:18:9d:e2:fe:65:02:df:1f:8f:75:54:1d:32:
         e9:d6:32:ea:aa:c8:53:c7:87:d5:44:5a:b7:69:64:50:d7:3e:
         a7:77:4b:98:29:aa:91:23:be:f7:45:8a:27:1d:81:a2:05:af:
         09:1d:bd:c0:d6:c5:87:ae:be:e8:1e:19:f3:2f:60:d3:29:0a:
         45:d4:0a:70:cc:24:ef:bd:16:cb:d3:b7:2b:7e:2e:8c:7e:bd:
         0f:f2:2b:f0:9d:36:a7:53:9f:34:c5:e3:7f:b3:d7:ff:66:f2:
         80:a9:e0:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----