Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/766970-1ba3-490b-a6c9-51083d8630b2/1/M6357vHe3Hs14NpGS_13pJpWke4.mft
File:                     M6357vHe3Hs14NpGS_13pJpWke4.mft (raw, json)
Hash identifier:          cuwc6afTrm+pUMHHkFvMYvBfwuC4Tk7lf3YFzdxxFZE=
Subject key identifier:   0A:80:49:56:3C:A4:7E:27:DA:3C:9D:AF:7E:DE:6D:B0:83:2F:4B:CB
Authority key identifier: 33:AD:F9:EE:F1:DE:DC:7B:35:E0:DA:46:4B:FD:77:A4:9A:56:91:EE
Certificate issuer:       /CN=33adf9eef1dedc7b35e0da464bfd77a49a5691ee
Certificate serial:       018B8F0CC5AF01D383C01F1A2F3F86A01DEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M6357vHe3Hs14NpGS_13pJpWke4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/766970-1ba3-490b-a6c9-51083d8630b2/1/M6357vHe3Hs14NpGS_13pJpWke4.mft
Manifest number:          0864
Signing time:             Thu 02 Nov 2023 08:01:00 +0000
Manifest this update:     Thu 02 Nov 2023 08:01:00 +0000
Manifest next update:     Fri 03 Nov 2023 08:01:00 +0000
Files and hashes:         1: 051n_b-x3VyO9hk4slEo6AOAIc8.roa (hash: nzV8h4zp+fFaB2yXbuiAnNbYZVu9coJhMHbzghSTwWU=)
                          2: M6357vHe3Hs14NpGS_13pJpWke4.crl (hash: UJ5eR78HmdjJs6eN7eHafToQVsTSrC2TC2DfN8FhIVs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:8f:0c:c5:af:01:d3:83:c0:1f:1a:2f:3f:86:a0:1d:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33adf9eef1dedc7b35e0da464bfd77a49a5691ee
        Validity
            Not Before: Nov  2 08:01:00 2023 GMT
            Not After : Nov  3 08:01:00 2023 GMT
        Subject: CN=0a8049563ca47e27da3c9daf7ede6db0832f4bcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:62:3e:c4:93:89:bb:04:71:83:6d:41:36:5f:
                    02:ba:3b:94:1f:80:16:ee:96:ac:a4:58:4e:fc:fc:
                    9d:c9:af:70:3b:55:95:53:ef:15:00:d3:e3:ff:43:
                    6e:c8:e1:d9:7a:ca:f1:32:e3:4b:15:2a:c0:86:00:
                    4c:d6:7b:95:16:f4:96:8e:ee:3c:b4:3a:6c:b9:bc:
                    1e:69:8c:5b:1b:fe:32:3a:57:83:32:09:be:2c:8a:
                    49:36:75:6f:27:1e:35:37:ce:31:68:ac:4f:84:44:
                    76:b0:f6:34:e4:9b:93:85:2b:6f:7a:2b:0a:f2:cb:
                    90:d8:0d:71:5c:50:a7:89:29:65:eb:ce:5a:2e:7f:
                    16:e1:9b:db:91:78:21:a6:fb:e5:3a:7c:48:70:29:
                    53:ca:23:d0:ef:eb:54:42:2e:25:42:4c:42:a0:14:
                    b7:a3:63:51:0f:7a:4e:25:a8:b5:ef:76:e1:6a:cd:
                    de:d3:a5:18:33:51:12:b5:63:1e:a4:a2:9c:c4:fa:
                    8c:3f:64:d9:6a:e3:40:53:58:ca:4d:28:52:51:1a:
                    16:bd:c3:fb:65:f4:ff:18:16:ac:1c:cb:23:55:64:
                    ad:85:4b:00:be:7a:e7:1c:9d:96:b4:21:5c:34:14:
                    e2:64:c3:9d:5e:ac:8d:85:bc:6f:c1:f0:2b:de:6b:
                    f4:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:80:49:56:3C:A4:7E:27:DA:3C:9D:AF:7E:DE:6D:B0:83:2F:4B:CB
            X509v3 Authority Key Identifier:
                keyid:33:AD:F9:EE:F1:DE:DC:7B:35:E0:DA:46:4B:FD:77:A4:9A:56:91:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M6357vHe3Hs14NpGS_13pJpWke4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/766970-1ba3-490b-a6c9-51083d8630b2/1/M6357vHe3Hs14NpGS_13pJpWke4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/766970-1ba3-490b-a6c9-51083d8630b2/1/M6357vHe3Hs14NpGS_13pJpWke4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:e2:8b:df:72:e8:0a:e5:36:8b:57:42:3a:b5:e5:4d:01:88:
         15:da:37:9f:0d:57:1d:74:ac:6d:9b:b9:56:85:42:61:ae:bb:
         fe:42:89:4d:96:d1:56:4c:30:b5:52:75:65:05:45:66:1f:34:
         d6:ea:b0:ce:6a:32:e8:54:76:73:02:04:56:e9:e2:e4:fc:70:
         2b:9e:eb:d2:e3:e7:a4:8f:4c:21:ae:66:77:c6:45:eb:aa:79:
         9a:98:d9:0d:44:cc:bc:3a:a5:e3:b8:80:3a:bf:e6:d8:f8:91:
         b4:24:63:8b:c8:36:4c:08:da:b0:bc:0a:ac:c9:d2:7d:dd:e4:
         ba:6b:64:41:70:2b:e1:45:09:10:41:52:57:ed:75:df:e6:11:
         8f:13:a6:82:aa:6b:b3:69:c4:20:08:58:5b:18:bd:1b:88:83:
         6d:71:b2:fc:8a:ec:8e:e7:84:a7:c4:e5:e9:ae:48:5e:77:e3:
         4a:2d:e7:cc:42:f7:7e:bf:b1:9b:a6:34:5a:d9:23:23:72:a0:
         db:57:dc:fa:89:80:56:bf:54:eb:5b:f0:ed:de:70:7e:3a:72:
         1d:de:66:5b:6f:34:eb:03:06:d5:2e:69:39:56:cb:17:b5:55:
         61:c8:c4:93:fb:62:06:d6:a7:e4:83:c7:21:64:c4:be:d5:8d:
         b8:7f:22:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 2 10:55:09 2023 by rpki-client on console-fra.rpki-client.org