Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/8fe9b0-2da8-4ae6-b539-dabc9b5f9e3c/1/92QJ6LyF1_JZMmU3qfEMOxdXOH8.mft
File:                     92QJ6LyF1_JZMmU3qfEMOxdXOH8.mft (raw, json)
Hash identifier:          s5MRwZZQMoXKRa0eBmdX2X+QVilgVxDwNeu60VUtQQ0=
Subject key identifier:   25:C2:F1:08:F4:E3:A4:CD:23:B0:93:8E:A4:95:80:62:50:D5:77:3D
Authority key identifier: F7:64:09:E8:BC:85:D7:F2:59:32:65:37:A9:F1:0C:3B:17:57:38:7F
Certificate issuer:       /CN=f76409e8bc85d7f259326537a9f10c3b1757387f
Certificate serial:       018832B15B20F500E485C43D248CD2278EB3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/92QJ6LyF1_JZMmU3qfEMOxdXOH8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/8fe9b0-2da8-4ae6-b539-dabc9b5f9e3c/1/92QJ6LyF1_JZMmU3qfEMOxdXOH8.mft
Manifest number:          0947
Signing time:             Fri 19 May 2023 06:27:43 +0000
Manifest this update:     Fri 19 May 2023 06:27:43 +0000
Manifest next update:     Sat 20 May 2023 06:27:43 +0000
Files and hashes:         1: 92QJ6LyF1_JZMmU3qfEMOxdXOH8.crl (hash: 7muBiMJOeDcCUYmkSp4p8wVoTivzEiXdiBlRdnCZqE0=)
                          2: OHGdWjBPZ-ATP6Lm7_xfircNhs4.roa (hash: IioE4LIuhS+NtyAVLWqS9cye0/uM+SJGinBpBy9aA84=)
                          3: cTdBZB2TrDW01JQUe7tVO-k8Aj8.roa (hash: GQQNguDB4ga0CWmotZ99YBk/ptXDpGBJKVtlpA8Is9k=)
                          4: sOtm_3DG7ISffowTyYm45uoQH7k.roa (hash: 7U/HjzB1H7B1fUkaWPGVU2NIesrxUiGj8FgvksJlyeE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:32:b1:5b:20:f5:00:e4:85:c4:3d:24:8c:d2:27:8e:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f76409e8bc85d7f259326537a9f10c3b1757387f
        Validity
            Not Before: May 19 06:27:43 2023 GMT
            Not After : May 20 06:27:43 2023 GMT
        Subject: CN=25c2f108f4e3a4cd23b0938ea495806250d5773d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:7a:ab:42:2e:ad:cb:8e:53:46:4c:76:97:a6:
                    64:6d:d0:96:0d:96:77:53:1b:22:f0:92:51:2c:87:
                    d9:15:71:c1:fe:9a:86:f5:6a:2a:89:f1:84:94:18:
                    b5:35:fa:fa:9d:d9:5d:fe:c5:f5:11:07:9f:34:c2:
                    16:27:bd:64:7d:b1:87:13:1e:08:2f:5c:e7:9a:95:
                    42:4d:6c:8f:26:af:09:d7:51:7d:ed:15:88:3d:92:
                    d6:dc:75:d8:f7:23:7e:05:69:e3:16:0a:35:03:aa:
                    ba:f3:6a:90:23:15:77:97:d4:8c:31:7a:a7:2e:b0:
                    4e:c6:64:2c:10:8e:f4:52:32:93:00:a2:17:e5:fb:
                    9a:3e:15:8c:88:68:aa:f5:f3:c1:49:cf:47:b5:98:
                    59:6e:a3:a7:e0:c9:0e:6b:d7:98:d4:f7:47:a4:50:
                    4d:9b:e7:ad:cd:48:b6:a8:1a:d0:ad:31:1e:d1:48:
                    a3:e5:df:17:0d:94:b8:25:6a:89:7a:79:7e:75:da:
                    54:dd:20:cd:69:b9:b7:d3:61:c6:98:7c:c7:b4:61:
                    4e:0d:15:2f:44:d0:d2:45:69:35:02:88:55:aa:26:
                    e5:3e:b9:ab:09:3f:3b:cb:ad:8d:12:3b:8b:bc:3a:
                    58:04:3e:fa:20:35:bd:c4:47:05:ae:d8:dc:a9:7f:
                    70:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:C2:F1:08:F4:E3:A4:CD:23:B0:93:8E:A4:95:80:62:50:D5:77:3D
            X509v3 Authority Key Identifier:
                keyid:F7:64:09:E8:BC:85:D7:F2:59:32:65:37:A9:F1:0C:3B:17:57:38:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92QJ6LyF1_JZMmU3qfEMOxdXOH8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8fe9b0-2da8-4ae6-b539-dabc9b5f9e3c/1/92QJ6LyF1_JZMmU3qfEMOxdXOH8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8fe9b0-2da8-4ae6-b539-dabc9b5f9e3c/1/92QJ6LyF1_JZMmU3qfEMOxdXOH8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:ce:27:85:d6:cd:02:c5:fd:40:a5:f9:5f:91:e6:35:f6:b0:
         b8:48:c3:e2:f0:72:9b:21:ed:19:07:fe:c2:cd:70:d7:1e:20:
         6d:da:29:6a:a1:ca:31:f7:ca:b9:be:6e:58:2c:cc:d7:47:ca:
         9c:5c:80:37:02:35:40:ce:85:bd:91:04:8d:1c:8d:91:c9:0c:
         cf:14:da:09:df:b8:ea:d2:61:b1:c8:04:09:65:3e:15:5a:a3:
         49:45:8a:6e:c9:0a:d9:cd:6e:25:c1:0b:e7:6f:73:97:54:8e:
         d6:be:7d:1b:c8:61:77:d6:01:a3:bf:22:b3:65:ab:ff:b1:95:
         99:69:9f:f6:ab:fd:bf:48:2b:e3:b4:9b:5a:e9:af:64:4a:d0:
         3b:e3:37:ab:a0:55:ad:0b:0a:3b:5f:3e:3b:8a:a8:1f:e3:6f:
         30:45:aa:85:88:9c:19:b3:98:10:db:43:d2:52:e4:e5:b2:6e:
         ea:07:aa:82:6b:fd:e7:75:13:e0:7a:06:72:25:5d:6a:36:1a:
         21:fe:af:8b:0a:a7:9a:fb:51:b9:a5:30:d6:50:f6:06:e7:64:
         59:70:30:d0:82:7f:e6:c9:07:77:35:87:b6:87:80:bc:13:43:
         ed:fe:4a:f6:cd:1b:b6:f0:24:34:c8:b9:6a:ed:43:0c:28:b0:
         09:16:7f:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----