Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/32ef0a-c5fd-4c1e-ae6e-93283df2c97f/1/ZeGimkV5vwic6EWkv_r4tkVTDZY.mft
File:                     ZeGimkV5vwic6EWkv_r4tkVTDZY.mft (raw, json)
Hash identifier:          LslZoIktREIfmQiyMVLsbWFaRVVZb6wEAG5qz0EaWD8=
Subject key identifier:   75:3B:0C:27:10:DA:B1:20:0C:4B:FF:3B:E9:FA:01:DC:5A:7F:A4:98
Authority key identifier: 65:E1:A2:9A:45:79:BF:08:9C:E8:45:A4:BF:FA:F8:B6:45:53:0D:96
Certificate issuer:       /CN=65e1a29a4579bf089ce845a4bffaf8b645530d96
Certificate serial:       018BD72600A9F3B4F7CD013489FC9C9D1B9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZeGimkV5vwic6EWkv_r4tkVTDZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/32ef0a-c5fd-4c1e-ae6e-93283df2c97f/1/ZeGimkV5vwic6EWkv_r4tkVTDZY.mft
Manifest number:          084E
Signing time:             Thu 16 Nov 2023 08:01:13 +0000
Manifest this update:     Thu 16 Nov 2023 08:01:13 +0000
Manifest next update:     Fri 17 Nov 2023 08:01:13 +0000
Files and hashes:         1: ZeGimkV5vwic6EWkv_r4tkVTDZY.crl (hash: SNAbydIhjPPwxbA8fSOmp7JJYHEumYrAq0m6w7gw+yU=)
                          2: qBNKeiXyahUPLm51ZAFQ9h2irjU.roa (hash: ++bxVnpALCo49LDSl6ZkYma++UgKuhc+WunZ2NI4nL4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:d7:26:00:a9:f3:b4:f7:cd:01:34:89:fc:9c:9d:1b:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65e1a29a4579bf089ce845a4bffaf8b645530d96
        Validity
            Not Before: Nov 16 08:01:13 2023 GMT
            Not After : Nov 17 08:01:13 2023 GMT
        Subject: CN=753b0c2710dab1200c4bff3be9fa01dc5a7fa498
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:84:02:f1:36:0f:9a:3a:1d:07:f9:23:68:46:
                    e1:cd:d2:af:64:97:7c:15:08:5e:06:91:65:9a:36:
                    03:65:80:9c:87:29:89:f8:43:98:14:73:17:92:c8:
                    bc:13:ae:39:f0:22:b1:2e:9b:02:78:50:b4:62:9d:
                    2d:ca:16:55:e8:a4:07:0d:9d:fa:63:50:73:7c:0c:
                    7f:40:6a:99:c1:d2:af:02:f2:7e:62:6d:7a:b5:33:
                    70:a7:25:4e:02:af:82:24:a5:e7:da:5c:1d:82:ba:
                    c5:f9:c1:b6:ee:87:4c:b1:30:fe:08:e6:fa:e2:14:
                    fb:1e:3a:69:1b:77:d5:9a:79:64:1a:c8:3c:35:ac:
                    c1:a7:98:e9:3a:5b:e2:e9:40:8b:f5:65:a0:5b:91:
                    d1:48:6e:ba:60:c8:a7:f4:04:4e:ef:15:00:91:25:
                    30:f4:a0:cf:32:16:df:44:d6:a4:31:8e:4f:ea:f7:
                    8e:5c:85:7b:bc:04:64:90:11:42:0a:fc:1c:93:7c:
                    7a:67:be:a9:e2:11:75:36:56:7d:ec:d5:6d:24:29:
                    66:d3:3a:61:c2:55:d6:99:db:ea:49:18:4a:22:28:
                    dc:88:7d:de:92:7f:58:9a:e2:d1:3d:dd:60:f9:c5:
                    39:3b:a9:2c:c3:ac:d9:94:fb:13:15:7b:e6:a1:64:
                    4a:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:3B:0C:27:10:DA:B1:20:0C:4B:FF:3B:E9:FA:01:DC:5A:7F:A4:98
            X509v3 Authority Key Identifier:
                keyid:65:E1:A2:9A:45:79:BF:08:9C:E8:45:A4:BF:FA:F8:B6:45:53:0D:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZeGimkV5vwic6EWkv_r4tkVTDZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/32ef0a-c5fd-4c1e-ae6e-93283df2c97f/1/ZeGimkV5vwic6EWkv_r4tkVTDZY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/32ef0a-c5fd-4c1e-ae6e-93283df2c97f/1/ZeGimkV5vwic6EWkv_r4tkVTDZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:10:66:4c:0f:78:d6:30:f6:e3:98:32:ee:fe:a9:dd:af:95:
         ff:d1:93:ce:07:be:2d:a5:6c:e0:94:27:3e:19:c6:4c:17:72:
         43:70:f1:a7:f7:9d:6c:d0:f8:93:1e:99:a9:c5:c0:95:32:11:
         aa:a5:fe:74:3b:86:1a:37:45:46:d0:c3:35:3e:65:f9:7d:82:
         90:ff:6d:4c:84:93:f8:81:a7:d1:c0:0e:37:88:ec:e0:e1:9f:
         f7:42:99:32:c0:74:d1:43:0f:64:29:7b:30:b3:2f:67:f3:c1:
         6a:e8:ff:ab:7b:b5:aa:2d:2c:d4:d7:a0:44:70:d8:37:20:49:
         67:be:fb:c1:c2:d0:57:f4:39:bf:6a:4f:ce:af:60:5a:a5:1c:
         2e:41:dd:db:da:0c:29:90:14:cc:83:ff:1c:b7:8e:65:ab:71:
         69:58:cc:c7:37:74:9d:bf:47:0a:39:10:d2:2d:16:03:41:2d:
         20:88:c2:da:d0:0b:a4:14:11:71:f1:b6:c0:6f:63:c6:41:1a:
         0f:bb:f7:63:6f:7c:6f:fb:0b:65:b6:35:9b:3d:05:db:8d:f6:
         1e:1b:bf:92:04:89:cd:0a:14:81:83:45:b8:e5:04:41:ee:29:
         59:08:7c:7f:21:51:e5:98:a3:a3:26:67:e1:fd:85:b2:fc:ba:
         9b:76:ea:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----