Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/58ce8a-8a04-4db2-ad05-08a6e1fd8b01/1/_CMvDobCkeum1j6GYe8_CbwnpX4.mft
File:                     _CMvDobCkeum1j6GYe8_CbwnpX4.mft (raw, json)
Hash identifier:          9m5v6qx/eZmsMwyMukzftoeRkHVyGuVkh0/GzJFRCls=
Subject key identifier:   AD:B3:1C:08:86:9A:B5:64:0C:7D:C3:D5:1E:09:07:78:4A:16:FF:F2
Authority key identifier: FC:23:2F:0E:86:C2:91:EB:A6:D6:3E:86:61:EF:3F:09:BC:27:A5:7E
Certificate issuer:       /CN=fc232f0e86c291eba6d63e8661ef3f09bc27a57e
Certificate serial:       018B36DCA3F6C905CEEDD0B939A15CB91A7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_CMvDobCkeum1j6GYe8_CbwnpX4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/58ce8a-8a04-4db2-ad05-08a6e1fd8b01/1/_CMvDobCkeum1j6GYe8_CbwnpX4.mft
Manifest number:          0517
Signing time:             Mon 16 Oct 2023 05:01:51 +0000
Manifest this update:     Mon 16 Oct 2023 05:01:51 +0000
Manifest next update:     Tue 17 Oct 2023 05:01:51 +0000
Files and hashes:         1: DOtsqXkjg2BZBFCWd4o1UNAAOJU.roa (hash: bH9aKXQNsI0RHqc3huJ3lKvcjkvZBj4/usRQ4grBMOA=)
                          2: _CMvDobCkeum1j6GYe8_CbwnpX4.crl (hash: N2dbZBW6IBtJhVXHTigNNx4+MZYUvyBVcgImrmkA0Cg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:36:dc:a3:f6:c9:05:ce:ed:d0:b9:39:a1:5c:b9:1a:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc232f0e86c291eba6d63e8661ef3f09bc27a57e
        Validity
            Not Before: Oct 16 05:01:51 2023 GMT
            Not After : Oct 17 05:01:51 2023 GMT
        Subject: CN=adb31c08869ab5640c7dc3d51e0907784a16fff2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:47:67:02:78:38:79:c5:5a:55:cf:f8:6b:6d:
                    4d:ee:d0:42:aa:37:2d:62:a9:4e:b4:03:37:0c:a5:
                    8d:84:2f:30:23:0a:6d:42:0e:43:6a:ac:4a:fe:d5:
                    34:92:5b:e6:de:34:55:fa:96:f5:cd:ae:9e:36:3b:
                    01:0c:46:fb:47:77:bf:53:11:85:37:1f:e2:38:76:
                    a5:5f:73:ed:91:41:10:45:39:34:55:eb:a8:a6:9c:
                    7b:43:95:d8:0b:e6:af:08:e2:c8:b7:cf:e0:23:5e:
                    41:9a:09:08:68:8d:6c:ad:74:e7:c2:ab:15:51:87:
                    e2:5e:11:44:3f:79:92:56:4e:23:a4:3b:52:cd:19:
                    e8:e2:78:f0:27:e2:e2:cf:9b:0e:90:0a:ff:47:39:
                    be:bd:ad:af:14:55:e5:60:8b:4d:49:d4:a4:17:a8:
                    64:26:d1:63:ac:36:e3:65:43:3c:33:be:fb:72:1a:
                    cf:1f:59:74:c9:ac:cc:b0:25:36:66:7d:82:f8:e4:
                    6d:2e:84:af:47:cd:03:93:5a:7f:32:70:46:54:e8:
                    f3:1e:d0:ec:92:e4:c3:94:95:7e:2a:bb:c4:c0:f3:
                    5c:7b:c7:db:ac:53:83:8c:8a:7e:0c:62:5c:86:57:
                    33:60:6f:72:c2:1e:10:34:28:62:26:26:6d:84:cd:
                    8d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:B3:1C:08:86:9A:B5:64:0C:7D:C3:D5:1E:09:07:78:4A:16:FF:F2
            X509v3 Authority Key Identifier:
                keyid:FC:23:2F:0E:86:C2:91:EB:A6:D6:3E:86:61:EF:3F:09:BC:27:A5:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_CMvDobCkeum1j6GYe8_CbwnpX4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/58ce8a-8a04-4db2-ad05-08a6e1fd8b01/1/_CMvDobCkeum1j6GYe8_CbwnpX4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/58ce8a-8a04-4db2-ad05-08a6e1fd8b01/1/_CMvDobCkeum1j6GYe8_CbwnpX4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:c1:29:4a:47:30:6a:db:ca:d3:6e:c0:c1:22:bb:04:8c:77:
         8b:be:38:37:a8:72:51:30:c2:d4:38:23:24:04:07:63:cb:4c:
         24:61:07:44:ae:b6:41:c9:49:fa:ee:91:54:eb:56:39:94:7d:
         3e:c0:7c:fd:33:fe:91:be:e5:03:14:a2:4e:d5:aa:1b:10:0f:
         7a:cf:4d:c1:f6:40:23:a3:d1:0c:5e:e0:72:a5:4f:41:c1:94:
         f6:a1:62:09:72:1b:75:36:67:e8:4b:97:6c:93:f3:ff:03:eb:
         d5:53:4d:4c:46:8e:b8:ce:13:c6:bd:2f:17:91:58:d1:ed:0c:
         6c:d3:95:f3:9a:1e:44:d5:1e:c9:ef:1c:83:ec:21:54:ab:4b:
         59:f3:93:03:e0:b6:67:9b:8e:78:8a:95:76:11:5b:43:fd:7e:
         b3:44:3c:60:7f:ee:dd:54:d0:83:35:c3:44:0e:4e:95:71:0d:
         3b:af:02:5e:15:cc:e2:a0:a7:86:31:19:00:b0:1e:5a:88:e7:
         4d:9b:00:1b:33:37:bd:ed:61:50:73:40:61:99:72:a3:70:b7:
         ec:d4:2b:a9:9c:f3:29:72:d3:46:87:00:37:0a:eb:41:b4:80:
         9c:fc:4f:b5:f2:64:82:89:8b:a1:93:c4:33:7b:07:cc:89:08:
         b7:4c:e4:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----