Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/9c6c86-6aad-4f61-9750-c6dea957b0e0/1/GxjBHfoKuwUyzj4oyiB36QHxqx4.mft
File:                     GxjBHfoKuwUyzj4oyiB36QHxqx4.mft (raw, json)
Hash identifier:          n6D43mfBUIvqzdV+q9SBUercnKxViMU214CNLvYfNtM=
Subject key identifier:   F6:5B:7F:F8:DE:D5:62:F7:9F:DC:72:CA:67:C4:BB:C2:4E:1E:EB:07
Authority key identifier: 1B:18:C1:1D:FA:0A:BB:05:32:CE:3E:28:CA:20:77:E9:01:F1:AB:1E
Certificate issuer:       /CN=1b18c11dfa0abb0532ce3e28ca2077e901f1ab1e
Certificate serial:       01889DEA62BA87DF2A3B6CEF323EEC99BA26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GxjBHfoKuwUyzj4oyiB36QHxqx4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/9c6c86-6aad-4f61-9750-c6dea957b0e0/1/GxjBHfoKuwUyzj4oyiB36QHxqx4.mft
Manifest number:          0DCA
Signing time:             Fri 09 Jun 2023 02:09:23 +0000
Manifest this update:     Fri 09 Jun 2023 02:09:23 +0000
Manifest next update:     Sat 10 Jun 2023 02:09:23 +0000
Files and hashes:         1: 6DvH1iFCulVbgYP8j3CaUxopFhY.roa (hash: 6jJkSxXWrmvX+OpMzNLXgz9eYAiVQnSIP9ivJhUR6mU=)
                          2: GxjBHfoKuwUyzj4oyiB36QHxqx4.crl (hash: UvS5jMDvR4aeHT74p4hfPLFoiaJTuI91W8Bq1Jj3VlE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:9d:ea:62:ba:87:df:2a:3b:6c:ef:32:3e:ec:99:ba:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b18c11dfa0abb0532ce3e28ca2077e901f1ab1e
        Validity
            Not Before: Jun  9 02:09:23 2023 GMT
            Not After : Jun 10 02:09:23 2023 GMT
        Subject: CN=f65b7ff8ded562f79fdc72ca67c4bbc24e1eeb07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:a8:28:8b:c0:cb:2c:ba:eb:9b:6a:07:bf:22:
                    d7:d8:18:d0:01:64:ab:db:df:6e:a1:78:35:cb:f1:
                    ba:29:8e:8e:a0:a5:e5:7c:e4:33:e1:79:d7:f2:f9:
                    a0:80:67:1d:21:d9:4e:fe:4d:b1:f8:97:dc:ae:c4:
                    eb:02:16:6b:19:20:7b:5c:9b:ba:32:47:e7:97:a5:
                    53:9f:96:21:ee:3f:6b:43:29:c6:f1:f8:b6:7d:e3:
                    53:94:d7:c7:df:f6:36:2d:ba:d3:69:96:9b:8c:22:
                    ce:b5:34:06:86:f0:e5:11:f7:5f:67:86:57:84:08:
                    8c:d9:40:08:e9:01:dd:32:ba:33:99:51:26:6d:bd:
                    ab:c1:8d:31:29:fe:00:97:46:87:e6:a0:10:ba:e1:
                    0d:c9:7f:87:78:c1:87:69:c4:b7:df:fb:f8:c9:cc:
                    5c:0f:c7:dc:b9:74:19:43:01:77:5e:84:ca:4b:82:
                    cc:06:9e:aa:dd:15:31:8e:49:af:60:c3:5a:b4:e5:
                    1b:86:bd:88:f3:59:4f:b7:be:4b:81:32:e3:0c:7e:
                    df:24:30:3d:76:ec:6b:47:ce:68:06:9d:75:fc:63:
                    73:20:c5:16:9d:18:00:bc:59:39:fd:6a:ff:63:fa:
                    42:94:34:de:c3:f9:1a:56:12:24:84:96:89:72:49:
                    be:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:5B:7F:F8:DE:D5:62:F7:9F:DC:72:CA:67:C4:BB:C2:4E:1E:EB:07
            X509v3 Authority Key Identifier:
                keyid:1B:18:C1:1D:FA:0A:BB:05:32:CE:3E:28:CA:20:77:E9:01:F1:AB:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxjBHfoKuwUyzj4oyiB36QHxqx4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9c6c86-6aad-4f61-9750-c6dea957b0e0/1/GxjBHfoKuwUyzj4oyiB36QHxqx4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9c6c86-6aad-4f61-9750-c6dea957b0e0/1/GxjBHfoKuwUyzj4oyiB36QHxqx4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:0f:84:53:03:9e:8f:36:3d:be:68:4a:6f:32:e6:d0:f3:3b:
         c5:d9:04:9d:1e:68:f0:08:b8:70:10:3f:5f:e3:c7:bd:ea:ab:
         0b:b1:32:71:1f:06:06:12:12:b7:c0:26:85:df:6c:30:48:d2:
         d2:3a:21:97:92:64:67:07:7d:81:4d:34:55:87:8e:6b:28:bd:
         66:72:29:15:7b:3f:ff:6a:e6:f2:27:80:9e:8d:ec:52:72:2f:
         16:e7:8b:68:a7:cc:35:aa:4b:83:83:c2:2b:88:c5:7e:4c:34:
         43:af:67:75:f6:24:41:70:4c:20:f8:4f:23:77:93:77:7e:8d:
         0d:0b:6b:37:18:23:a8:cb:12:b5:1f:a0:8f:f6:96:05:3f:19:
         23:ad:de:89:f0:ef:74:74:83:be:1b:9f:2c:90:54:16:3a:8f:
         7f:d1:a0:d1:66:9a:30:61:bd:1c:38:4f:62:ca:ff:92:7b:3b:
         c0:c4:5e:54:d1:5b:6d:64:14:b3:ad:64:91:26:0e:c6:d3:ef:
         de:2f:0e:96:0b:a0:84:b7:5c:76:4f:6e:99:0c:40:5b:46:f5:
         6f:25:77:1e:ef:04:14:c2:7b:71:5e:0e:38:8d:ff:83:a8:27:
         73:1c:e4:36:cc:a6:56:0d:2c:92:61:43:1d:98:d8:77:a1:3e:
         72:aa:c2:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----