Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/094180-0171-4252-afea-923546ed3e8a/1/D0fsc7zuzt1UHvtzUl1hIy-oAhk.mft
File:                     D0fsc7zuzt1UHvtzUl1hIy-oAhk.mft (raw, json)
Hash identifier:          +YCaP+W7RMaxZm5CG1V3U4dk3g8rGQ1e+C3gu3S/I6o=
Subject key identifier:   F5:39:B4:4B:97:A2:D0:1B:2D:C3:28:7A:11:C3:71:32:CA:2B:5B:14
Authority key identifier: 0F:47:EC:73:BC:EE:CE:DD:54:1E:FB:73:52:5D:61:23:2F:A8:02:19
Certificate issuer:       /CN=0f47ec73bceecedd541efb73525d61232fa80219
Certificate serial:       018C8B649E08CD385F2359A17735BADA46D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D0fsc7zuzt1UHvtzUl1hIy-oAhk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/094180-0171-4252-afea-923546ed3e8a/1/D0fsc7zuzt1UHvtzUl1hIy-oAhk.mft
Manifest number:          0FF2
Signing time:             Thu 21 Dec 2023 08:01:16 +0000
Manifest this update:     Thu 21 Dec 2023 08:01:16 +0000
Manifest next update:     Fri 22 Dec 2023 08:01:16 +0000
Files and hashes:         1: BhdwhdiHrV30s5zkPz2fsDOjrBM.roa (hash: tK38wUgTFZd14z0Xr9s6FI/bVnojg5szjw6BUa8IvbM=)
                          2: D0fsc7zuzt1UHvtzUl1hIy-oAhk.crl (hash: ZvfE184rme4sLj5YcLWG1J3nOkkZroagwwG1JITtHQw=)
                          3: x9IiB929fBzfjkULQHq7sQeIpGU.roa (hash: VlOSnP3q/VWLn/bsSWhFpONKSo2t71ygv5v/DtwNmpA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:8b:64:9e:08:cd:38:5f:23:59:a1:77:35:ba:da:46:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f47ec73bceecedd541efb73525d61232fa80219
        Validity
            Not Before: Dec 21 08:01:16 2023 GMT
            Not After : Dec 22 08:01:16 2023 GMT
        Subject: CN=f539b44b97a2d01b2dc3287a11c37132ca2b5b14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:a3:f4:74:55:39:cf:29:68:69:03:17:b2:7d:
                    06:a6:d4:36:c9:3e:b6:1c:0b:10:50:68:d5:b9:54:
                    7c:d5:c8:30:f2:9e:21:6c:2a:44:51:09:f7:19:ac:
                    7a:3c:8d:cf:f7:bf:e2:c0:60:95:d1:60:04:ea:19:
                    c9:4e:00:34:0c:ca:7e:2c:9d:c4:3d:a9:08:69:e2:
                    ce:f0:6b:1c:d8:6a:c7:d8:08:7a:0d:01:c7:4d:b1:
                    d1:e1:b0:77:1e:ac:bc:9f:a3:df:33:d6:6a:16:5f:
                    d8:0a:33:95:49:26:9b:0c:d6:ea:f7:e8:fc:21:a9:
                    bb:c9:ca:01:ae:d7:49:0a:85:f6:39:c9:01:ab:c5:
                    1c:f5:f6:a0:88:c1:bd:69:07:92:3a:6a:c3:8b:21:
                    98:45:78:72:6d:14:4b:66:df:8f:4f:07:c0:8a:ed:
                    0c:fb:6c:af:cd:59:f0:23:fa:9f:0d:5f:6b:c0:48:
                    51:2e:3c:d5:81:82:d9:de:bb:09:8d:46:6c:94:62:
                    1a:19:01:ab:7a:59:20:07:43:55:50:20:ed:f9:8d:
                    ae:8f:4e:38:f3:0e:63:5f:8e:b6:6e:61:35:e1:a0:
                    9b:88:01:52:d3:c0:13:18:09:cc:71:69:7a:5c:a3:
                    8d:dd:05:26:c0:cd:d6:cf:96:a0:8b:bf:20:95:54:
                    91:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:39:B4:4B:97:A2:D0:1B:2D:C3:28:7A:11:C3:71:32:CA:2B:5B:14
            X509v3 Authority Key Identifier:
                keyid:0F:47:EC:73:BC:EE:CE:DD:54:1E:FB:73:52:5D:61:23:2F:A8:02:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D0fsc7zuzt1UHvtzUl1hIy-oAhk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/094180-0171-4252-afea-923546ed3e8a/1/D0fsc7zuzt1UHvtzUl1hIy-oAhk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/094180-0171-4252-afea-923546ed3e8a/1/D0fsc7zuzt1UHvtzUl1hIy-oAhk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:ac:e0:4c:fe:fb:db:d6:46:a8:aa:c9:45:d0:83:6e:4e:3f:
         8a:bd:b6:43:2c:0c:14:ea:c3:5b:66:f5:2c:b0:02:b7:39:c3:
         e9:d5:49:0f:0c:f9:8f:6c:73:47:91:32:f7:b3:24:78:8e:44:
         bd:2e:b5:a8:c2:d5:fb:d5:fe:0d:81:91:60:ad:18:3e:9c:4a:
         1a:60:ea:79:48:29:4a:3a:1a:c0:30:40:11:21:25:e5:86:16:
         cb:5c:7c:d1:31:fd:26:36:37:38:ae:75:97:6c:81:4d:5e:70:
         42:cc:f2:76:95:a9:77:c6:13:4c:24:ca:74:e4:cb:8d:42:6f:
         2e:a2:e7:fa:92:2e:96:e1:f3:7c:f4:07:fb:97:f1:72:b5:62:
         1d:59:13:65:77:57:31:05:05:81:9f:a3:d5:88:93:33:3b:40:
         14:c8:7e:b1:01:8a:3a:06:4a:c5:43:70:a7:42:2f:1c:a0:b1:
         2a:79:a5:d9:22:01:99:82:8a:55:db:f3:da:b4:c1:2d:b2:ee:
         06:18:30:ab:23:66:f6:81:4d:27:da:14:9e:dc:10:79:cb:a6:
         24:09:13:2e:69:4d:3d:f0:09:aa:c1:82:e3:41:44:53:73:a7:
         f2:85:6b:df:de:61:22:87:4e:02:14:c3:e5:61:bc:1b:dc:76:
         d5:b0:04:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----