Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/6d64a3-c0ba-46b3-af52-cc66fb8392c4/1/6wa2BDHWwnqB2IudCDBMupyIFDM.mft
File:                     6wa2BDHWwnqB2IudCDBMupyIFDM.mft (raw, json)
Hash identifier:          hvLeJGKPOLi7z3gBgTL+g/keIXXfshrj9w/kslc//LQ=
Subject key identifier:   FA:49:3D:70:C9:01:19:F7:9F:CB:3B:B0:34:EB:C7:25:1D:AD:C5:28
Authority key identifier: EB:06:B6:04:31:D6:C2:7A:81:D8:8B:9D:08:30:4C:BA:9C:88:14:33
Certificate issuer:       /CN=eb06b60431d6c27a81d88b9d08304cba9c881433
Certificate serial:       018B7FD0F93D6412B6DC80DF8D15EE01AF32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6wa2BDHWwnqB2IudCDBMupyIFDM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/6d64a3-c0ba-46b3-af52-cc66fb8392c4/1/6wa2BDHWwnqB2IudCDBMupyIFDM.mft
Manifest number:          0873
Signing time:             Mon 30 Oct 2023 09:01:23 +0000
Manifest this update:     Mon 30 Oct 2023 09:01:23 +0000
Manifest next update:     Tue 31 Oct 2023 09:01:23 +0000
Files and hashes:         1: 6wa2BDHWwnqB2IudCDBMupyIFDM.crl (hash: BRevx/vs5aPTLwU2w68i7Kc74JbOjcHWDrloCEekSig=)
                          2: iZhNWta2oBBqBTFJ95s_PMc7QCs.roa (hash: 8rY14wBKFYgM1dpsy1/ErREsNctjESH7r6cLhYWALa0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:7f:d0:f9:3d:64:12:b6:dc:80:df:8d:15:ee:01:af:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb06b60431d6c27a81d88b9d08304cba9c881433
        Validity
            Not Before: Oct 30 09:01:23 2023 GMT
            Not After : Oct 31 09:01:23 2023 GMT
        Subject: CN=fa493d70c90119f79fcb3bb034ebc7251dadc528
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:b1:fa:08:78:f8:0c:a2:95:89:36:c8:3e:16:
                    27:60:1e:d0:e7:18:89:69:3a:26:94:fe:78:e5:a7:
                    aa:70:a9:38:0c:f9:dd:03:f5:7c:d6:0d:f6:a3:7c:
                    20:33:72:0f:91:22:62:dc:46:f7:fb:9e:18:c8:6c:
                    08:a0:f6:c8:39:14:80:df:f4:2e:f1:85:63:64:5d:
                    ec:39:5b:85:81:8e:7c:4a:c4:f5:c8:6a:c0:21:d6:
                    03:c9:f0:6b:d3:b8:4c:25:05:d0:39:a0:99:f0:a8:
                    3d:62:f8:43:92:26:86:ff:2a:82:59:fd:1b:65:87:
                    91:ce:d6:45:47:88:76:24:d6:ef:8f:09:2f:2a:7f:
                    b2:bf:63:ac:d5:22:15:97:f1:24:e9:5f:ba:ee:2a:
                    e0:28:2a:c5:41:a8:4a:7a:a2:0e:e4:b0:ad:33:03:
                    5e:95:24:48:d0:62:b5:b0:3b:f2:72:67:07:a3:d5:
                    eb:21:8d:32:f2:5b:75:2c:46:94:73:bc:b7:af:73:
                    a1:47:c3:f0:dc:af:e7:54:31:f8:b1:7a:c8:41:cd:
                    1a:58:c7:d1:67:f0:1a:39:f6:d1:f4:09:fa:3c:e7:
                    ca:63:ad:ad:8c:fd:85:d9:28:a1:df:e6:a3:92:2b:
                    9d:b9:ea:23:f1:71:a7:f1:fc:85:ac:17:ca:b9:59:
                    3d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:49:3D:70:C9:01:19:F7:9F:CB:3B:B0:34:EB:C7:25:1D:AD:C5:28
            X509v3 Authority Key Identifier:
                keyid:EB:06:B6:04:31:D6:C2:7A:81:D8:8B:9D:08:30:4C:BA:9C:88:14:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6wa2BDHWwnqB2IudCDBMupyIFDM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6d64a3-c0ba-46b3-af52-cc66fb8392c4/1/6wa2BDHWwnqB2IudCDBMupyIFDM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6d64a3-c0ba-46b3-af52-cc66fb8392c4/1/6wa2BDHWwnqB2IudCDBMupyIFDM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:f2:fb:55:51:80:42:ce:17:4f:94:18:b1:34:3f:30:b5:88:
         68:8d:1c:9d:4a:8c:ac:ea:f8:36:48:47:54:c0:b2:43:ab:5e:
         0d:12:e1:0b:00:d7:4d:49:8b:bd:50:46:e6:a8:c5:87:59:58:
         12:c1:15:9b:6d:52:48:4b:d9:39:3f:ab:5e:d9:d2:81:b0:88:
         94:ee:d1:cd:be:5b:46:d6:df:23:96:7f:8c:01:75:3b:49:51:
         33:d5:ae:58:84:2a:ae:d6:eb:78:34:42:57:bd:b7:0b:36:20:
         86:a2:3a:8c:75:89:db:dd:64:46:e6:fa:74:b3:32:be:41:2c:
         cd:24:60:f2:8d:31:1a:dc:d5:6d:ca:4e:0c:e1:ed:f2:6d:b5:
         db:f2:8c:b7:97:fb:3d:98:b0:9b:62:61:b0:c6:e3:cf:a0:36:
         b5:e5:10:1c:0b:9b:06:53:94:b5:f2:97:36:97:11:82:61:2e:
         e8:69:d9:a2:ae:66:32:dc:3f:62:7e:76:c0:ce:6b:d6:7d:67:
         b8:f1:b4:70:5f:12:30:50:96:51:a6:3d:db:83:be:d0:77:f7:
         ad:e1:65:86:5c:3f:de:9c:7c:2a:65:44:8f:e3:9c:d9:d4:4c:
         2b:cd:08:d0:5a:cc:d1:78:f4:32:d2:ee:94:54:b4:8a:b5:a7:
         94:b0:96:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----