Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/90269f-46b4-4e03-9b61-bd9f444a0d70/1/_l70sPJo0ewkzPVCtIEdMHrvADQ.mft
File:                     _l70sPJo0ewkzPVCtIEdMHrvADQ.mft (raw, json)
Hash identifier:          WeD9ehQnUNBNqUx7WG3ru7OjmIWdCuQdLAqiRfj5Afs=
Subject key identifier:   2F:DD:14:54:FB:19:E3:69:71:96:27:7F:F5:55:91:44:0C:2B:4E:1E
Authority key identifier: FE:5E:F4:B0:F2:68:D1:EC:24:CC:F5:42:B4:81:1D:30:7A:EF:00:34
Certificate issuer:       /CN=fe5ef4b0f268d1ec24ccf542b4811d307aef0034
Certificate serial:       018B7138CBC820EA2D7EE9DB948185BEF2F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_l70sPJo0ewkzPVCtIEdMHrvADQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/90269f-46b4-4e03-9b61-bd9f444a0d70/1/_l70sPJo0ewkzPVCtIEdMHrvADQ.mft
Manifest number:          06A4
Signing time:             Fri 27 Oct 2023 13:00:29 +0000
Manifest this update:     Fri 27 Oct 2023 13:00:29 +0000
Manifest next update:     Sat 28 Oct 2023 13:00:29 +0000
Files and hashes:         1: 8zIbGC4T5YjXGexxSjafGAR1zb0.roa (hash: ycN7lkA7MdMDnMHuGFxqfln63gxv6UpHIEqq/4mHaVE=)
                          2: WF1pgVoViXjG1TXvka170bQUFVw.roa (hash: s9kqeJLXe76eQS5HB24sg7H6H93iaq/hoFsrGCSkQL4=)
                          3: _l70sPJo0ewkzPVCtIEdMHrvADQ.crl (hash: Orn/ogygpc/VOVg/g2bpamQDmCeX+jN0muIlNG/anF4=)
                          4: gfP9b-oO_fySJek1gRyyUlyz3zM.roa (hash: T8+fLec6UpKNqh01L5/NFoYt+AplFHqI87RYDXktwgY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:71:38:cb:c8:20:ea:2d:7e:e9:db:94:81:85:be:f2:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe5ef4b0f268d1ec24ccf542b4811d307aef0034
        Validity
            Not Before: Oct 27 13:00:29 2023 GMT
            Not After : Oct 28 13:00:29 2023 GMT
        Subject: CN=2fdd1454fb19e3697196277ff55591440c2b4e1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:0e:e7:50:d5:fc:0d:9a:45:04:30:cb:05:ed:
                    95:aa:57:79:d0:90:b8:fc:9c:7b:cf:0c:43:18:54:
                    ee:c0:2e:33:cf:5e:aa:d8:12:76:86:82:11:12:01:
                    ab:8f:28:48:fc:1e:8a:ae:46:0e:81:d4:ad:7f:19:
                    26:a1:7e:e6:43:d8:99:ce:13:ac:c9:1b:fc:b9:3c:
                    db:62:8e:79:80:ad:a2:56:d4:b1:84:74:8c:51:35:
                    bc:aa:e9:44:67:0b:7c:d6:0b:6c:75:4d:93:41:b5:
                    b4:9f:1f:7d:28:99:b9:af:c9:16:15:c7:7a:ea:4d:
                    89:46:1e:8f:33:7c:b2:0b:9d:42:a8:8f:4c:3f:3c:
                    a1:04:8e:e6:e3:08:22:c3:3b:c1:90:1a:91:2f:64:
                    6a:93:8f:21:62:3d:69:a2:2a:cd:79:b0:18:f1:5d:
                    ab:c9:51:98:ab:66:4a:f1:62:af:cb:ca:f5:88:37:
                    3b:f1:b0:f2:a0:8a:3d:b2:d8:6f:4b:6c:24:9e:cd:
                    f8:88:c9:f5:f5:4d:d4:3f:62:c2:8c:6c:33:9e:fc:
                    69:a6:5f:80:3d:fc:34:d3:c2:7b:6a:dc:26:57:dd:
                    e8:26:86:39:d1:a6:19:ba:0b:74:7f:11:92:7d:68:
                    54:f8:27:67:70:8f:0d:4e:9f:a4:fb:af:88:f9:ed:
                    64:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:DD:14:54:FB:19:E3:69:71:96:27:7F:F5:55:91:44:0C:2B:4E:1E
            X509v3 Authority Key Identifier:
                keyid:FE:5E:F4:B0:F2:68:D1:EC:24:CC:F5:42:B4:81:1D:30:7A:EF:00:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_l70sPJo0ewkzPVCtIEdMHrvADQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/90269f-46b4-4e03-9b61-bd9f444a0d70/1/_l70sPJo0ewkzPVCtIEdMHrvADQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/90269f-46b4-4e03-9b61-bd9f444a0d70/1/_l70sPJo0ewkzPVCtIEdMHrvADQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:eb:8d:05:11:d3:fe:06:be:7c:a4:d4:dc:95:3c:d5:1a:5f:
         9e:5b:a3:e7:6c:a9:01:80:f0:a2:83:5c:d6:4b:d6:52:26:5b:
         e3:2a:17:3f:c4:7b:a9:12:2b:68:84:22:2a:90:e0:30:6f:a4:
         05:ff:80:e2:9b:4a:b9:6a:48:40:1f:b5:73:92:1f:42:10:b7:
         24:45:6d:0e:c0:bb:06:9a:64:88:a9:d3:5e:be:67:bb:4a:77:
         71:5c:68:85:c9:bb:09:1e:89:ff:94:03:84:b3:2e:1a:33:d1:
         2f:85:9f:f6:b3:8a:f6:89:83:ff:2e:bc:1c:7a:9b:7e:ea:91:
         59:4c:3f:7c:0e:39:48:ed:42:72:56:38:ce:f5:85:c6:a4:02:
         99:7e:eb:3a:fc:83:e5:d6:27:d1:5d:40:13:84:ad:76:d4:93:
         26:be:39:04:62:f8:47:f2:38:c9:30:d0:f9:a3:65:79:a1:eb:
         71:4d:28:f8:31:e7:50:ff:cc:1a:63:e7:8f:11:9f:f1:dc:35:
         a4:77:3d:f2:5a:84:63:e8:63:33:9d:60:17:de:bb:4e:49:b6:
         a6:3b:fc:72:38:60:2b:f3:1a:2f:de:dc:17:28:68:9f:00:1e:
         4e:20:81:cc:54:42:92:fd:f9:a7:ea:53:e5:42:02:77:27:e1:
         65:10:0d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----