Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/7cef9c-7aff-4727-afa7-c48ea85a75bc/1/dmmUMWXVnyUmX7l8t3psfL-LUHc.mft
File:                     dmmUMWXVnyUmX7l8t3psfL-LUHc.mft (raw, json)
Hash identifier:          5J5P1inNsT9lvi24Menq/F3NIU3ZYasNEHFa9yJvmTA=
Subject key identifier:   0B:4C:AC:03:58:3B:B0:30:20:EE:DB:CD:40:5E:AC:11:27:EE:4E:86
Authority key identifier: 76:69:94:31:65:D5:9F:25:26:5F:B9:7C:B7:7A:6C:7C:BF:8B:50:77
Certificate issuer:       /CN=7669943165d59f25265fb97cb77a6c7cbf8b5077
Certificate serial:       018AEE8C56D48F16D157E0F0B1AC150E542F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dmmUMWXVnyUmX7l8t3psfL-LUHc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/7cef9c-7aff-4727-afa7-c48ea85a75bc/1/dmmUMWXVnyUmX7l8t3psfL-LUHc.mft
Manifest number:          0880
Signing time:             Mon 02 Oct 2023 04:01:29 +0000
Manifest this update:     Mon 02 Oct 2023 04:01:29 +0000
Manifest next update:     Tue 03 Oct 2023 04:01:29 +0000
Files and hashes:         1: 4IFB1GDR6Jq5tchZkNUvBd6IdIY.roa (hash: 5WKgYVQCtIy+OQZMwdelqPn0b4Vk+buGbKuTTvThPMQ=)
                          2: dmmUMWXVnyUmX7l8t3psfL-LUHc.crl (hash: Pf0Jg6BxqAI41i1NkMi34s1JU6xWaQhdHFg7HfF+JpY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:ee:8c:56:d4:8f:16:d1:57:e0:f0:b1:ac:15:0e:54:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7669943165d59f25265fb97cb77a6c7cbf8b5077
        Validity
            Not Before: Oct  2 04:01:29 2023 GMT
            Not After : Oct  3 04:01:29 2023 GMT
        Subject: CN=0b4cac03583bb03020eedbcd405eac1127ee4e86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:b5:cf:2e:ae:38:3f:53:01:63:10:0a:44:45:
                    7f:b0:7d:01:a0:d9:2d:f7:c4:18:d7:8d:09:8a:65:
                    fe:a2:3d:98:af:be:58:a4:5d:23:28:d1:f4:44:5c:
                    87:2f:92:4a:f1:40:b6:ee:26:65:05:a9:6e:db:62:
                    9f:f4:1e:12:c8:c2:ae:b7:21:6f:4d:56:b5:6f:88:
                    04:9e:f2:79:95:40:07:46:b7:49:21:af:d3:7b:fd:
                    45:e7:e6:dc:b4:c5:e4:49:12:94:ab:e6:e8:ef:5a:
                    22:cc:45:4f:2c:ec:e7:37:24:8d:c4:6e:a4:c3:03:
                    a7:29:45:d2:a6:49:02:32:2e:1c:62:20:97:70:4d:
                    73:ba:22:c3:31:6f:22:74:ff:d8:83:ec:c4:0d:86:
                    9d:9b:20:f4:70:89:6e:2b:34:ac:ff:93:32:6a:ee:
                    3f:12:c1:23:25:3c:40:46:96:d6:b4:88:29:bd:0d:
                    f5:eb:51:94:12:bc:40:21:f5:1f:62:c6:aa:7a:6d:
                    12:2c:8b:4e:71:88:b9:31:2e:96:fb:4a:0d:6b:29:
                    cb:d9:81:60:a7:c2:bb:06:e2:da:85:ee:b2:af:34:
                    19:b8:5b:0a:f4:8c:58:5c:a5:9e:a5:3a:7c:11:1d:
                    a2:34:e9:17:05:ad:ec:49:e7:b5:e7:b4:a7:ab:25:
                    01:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:4C:AC:03:58:3B:B0:30:20:EE:DB:CD:40:5E:AC:11:27:EE:4E:86
            X509v3 Authority Key Identifier:
                keyid:76:69:94:31:65:D5:9F:25:26:5F:B9:7C:B7:7A:6C:7C:BF:8B:50:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dmmUMWXVnyUmX7l8t3psfL-LUHc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/7cef9c-7aff-4727-afa7-c48ea85a75bc/1/dmmUMWXVnyUmX7l8t3psfL-LUHc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/7cef9c-7aff-4727-afa7-c48ea85a75bc/1/dmmUMWXVnyUmX7l8t3psfL-LUHc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         dc:ad:43:98:46:92:1d:a5:39:82:1d:57:3c:8f:0c:7e:30:b7:
         f9:1b:2e:94:c8:45:b8:27:a5:f2:28:74:6b:12:7b:cc:8f:b9:
         90:09:a4:13:ca:fa:9c:c3:99:be:a4:77:50:5e:1a:d9:bb:18:
         ad:76:ef:9c:04:e8:58:a8:af:e4:0d:13:28:69:a8:54:d3:8d:
         01:25:a2:70:d9:93:30:3c:34:96:cb:95:b4:3e:5f:91:34:5b:
         63:56:10:59:e9:73:25:f4:d8:9e:3a:97:dc:4a:46:76:e4:3d:
         e9:5a:11:22:da:15:6d:ed:1d:28:2d:a4:9e:2c:da:71:6e:5e:
         14:c1:7f:71:d6:9e:49:45:93:ce:10:0c:91:2b:f1:45:e6:ba:
         8d:a0:50:6f:7d:1e:0f:f8:d5:7b:2a:ac:07:92:ec:aa:60:13:
         c6:5c:19:c0:bf:2d:36:e2:1c:d6:81:47:e4:4e:01:87:19:19:
         cc:50:32:0a:47:18:fe:6b:8f:11:f8:ee:c0:67:6f:9f:cf:06:
         8e:2f:ad:c3:ca:71:44:50:64:dc:46:93:d8:5d:13:bc:2b:00:
         c4:92:15:cb:47:a7:7f:61:ab:39:7d:64:99:0b:e7:fb:3d:c7:
         89:02:70:67:9f:9a:80:da:e2:4f:9b:d2:75:50:3b:25:94:07:
         a8:6d:a2:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----