Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/cd820e-a988-48e3-b944-9fe327dabe64/1/F4AhM9mLZVqfVBG3AOx5NH4etJA.mft
File:                     F4AhM9mLZVqfVBG3AOx5NH4etJA.mft (raw, json)
Hash identifier:          Zd0zZ/9QPo2G7H0Xwrp4zLCGbfYRRd3x+KwepzdWuhA=
Subject key identifier:   03:D9:B5:A4:9A:9C:1F:57:88:96:9C:82:29:BB:91:08:36:CB:58:65
Authority key identifier: 17:80:21:33:D9:8B:65:5A:9F:54:11:B7:00:EC:79:34:7E:1E:B4:90
Certificate issuer:       /CN=17802133d98b655a9f5411b700ec79347e1eb490
Certificate serial:       018CA9A60C0EAF15C37D921F1770815F6D9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F4AhM9mLZVqfVBG3AOx5NH4etJA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/cd820e-a988-48e3-b944-9fe327dabe64/1/F4AhM9mLZVqfVBG3AOx5NH4etJA.mft
Manifest number:          0673
Signing time:             Wed 27 Dec 2023 05:01:20 +0000
Manifest this update:     Wed 27 Dec 2023 05:01:20 +0000
Manifest next update:     Thu 28 Dec 2023 05:01:20 +0000
Files and hashes:         1: F4AhM9mLZVqfVBG3AOx5NH4etJA.crl (hash: rU6ph13NCu/HNxQuG3t5279jsC00hGUtiOj4S1/j7Xo=)
                          2: mgQp5EwxLJBwfya1V771e05w744.roa (hash: naybJErYGo6/J5660Mojp0ubSB6ajSsxsVgArm1DXMA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:a9:a6:0c:0e:af:15:c3:7d:92:1f:17:70:81:5f:6d:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17802133d98b655a9f5411b700ec79347e1eb490
        Validity
            Not Before: Dec 27 05:01:20 2023 GMT
            Not After : Dec 28 05:01:20 2023 GMT
        Subject: CN=03d9b5a49a9c1f5788969c8229bb910836cb5865
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:63:4f:95:f8:28:0f:68:0b:1d:d0:e1:16:d6:
                    01:74:3e:d8:90:69:f7:71:31:43:01:62:1b:d4:65:
                    f8:96:a5:4b:06:5d:f3:a7:c3:62:d4:63:65:6a:94:
                    de:d6:88:74:58:52:a7:ef:dd:53:02:dc:34:da:6a:
                    b1:3a:ce:74:20:5b:50:e7:2c:c2:21:88:e7:63:8d:
                    3d:5c:47:2f:f6:3f:d2:d1:fc:fe:13:b8:ac:d9:cb:
                    81:a6:f1:5a:b0:45:f4:e5:85:df:d3:c9:b7:af:01:
                    f2:0a:4c:c5:a7:a9:e5:22:28:d5:7c:85:d7:18:f2:
                    77:aa:bb:80:bd:4e:ce:1b:f0:b1:bf:77:99:f2:6a:
                    e8:57:88:de:15:51:49:a7:6f:03:ee:b9:b7:22:06:
                    fd:79:70:68:3d:76:12:9e:17:16:ea:70:ea:70:f5:
                    7f:b7:1c:df:a7:95:20:0c:e2:ec:06:7f:de:f1:32:
                    fb:f2:57:9a:95:ec:d4:11:ed:37:d1:6c:6f:8f:14:
                    0c:f8:3b:e2:28:8d:75:84:cf:88:38:12:2c:59:1a:
                    0f:3e:e1:88:a0:66:52:f0:9a:77:b8:37:58:04:2e:
                    68:13:f8:99:fd:ff:f9:53:13:e3:0f:58:a1:33:89:
                    37:04:c0:b2:e9:4f:6c:08:de:1a:9f:a8:f9:a1:38:
                    e9:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:D9:B5:A4:9A:9C:1F:57:88:96:9C:82:29:BB:91:08:36:CB:58:65
            X509v3 Authority Key Identifier:
                keyid:17:80:21:33:D9:8B:65:5A:9F:54:11:B7:00:EC:79:34:7E:1E:B4:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F4AhM9mLZVqfVBG3AOx5NH4etJA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/cd820e-a988-48e3-b944-9fe327dabe64/1/F4AhM9mLZVqfVBG3AOx5NH4etJA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/cd820e-a988-48e3-b944-9fe327dabe64/1/F4AhM9mLZVqfVBG3AOx5NH4etJA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:b6:c8:8e:cc:bd:ed:44:fd:e8:1b:09:de:a6:85:e5:1e:ca:
         75:9e:87:4a:eb:9e:e0:9c:5d:e3:1d:de:01:06:2d:bd:9b:6c:
         93:b2:ce:6a:1a:cc:ac:14:45:95:86:34:ce:59:d2:40:d5:c4:
         5a:f4:47:7d:5c:61:69:62:22:81:be:41:02:e1:0f:13:53:b9:
         fb:18:1d:dd:b3:32:74:f2:68:ba:84:f6:a1:cd:72:59:34:fb:
         90:12:b3:aa:7d:de:60:53:5a:bb:37:20:eb:b4:51:15:98:66:
         d4:c0:52:49:02:62:86:04:27:64:39:ea:c0:bd:d4:c9:19:e9:
         61:79:44:3b:19:85:a4:20:ce:45:0a:ae:94:50:15:4d:a8:a6:
         55:75:f6:71:22:36:86:99:c5:1d:fd:5e:5d:f7:08:b6:4d:24:
         eb:f0:94:b5:2f:d2:8f:80:5c:2f:83:86:46:6b:7c:24:ec:e0:
         40:55:a6:45:2b:d6:66:85:8e:b2:21:5d:57:66:ef:e9:f4:3a:
         e1:82:2e:6c:8f:e2:5f:02:b1:42:21:4e:d0:6f:a3:b0:61:58:
         b1:ae:49:18:47:ed:c0:d3:15:6d:a8:81:50:3b:f1:40:89:c0:
         a6:69:86:f4:40:75:52:26:95:ea:1b:c9:39:90:9c:a1:f9:d5:
         ee:e8:2c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----