Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/afd92f-0307-4099-86d4-5653a5976704/1/71kepEyoVEBK7iKCSz05Xt08TA0.mft
File:                     71kepEyoVEBK7iKCSz05Xt08TA0.mft (raw, json)
Hash identifier:          +9El3+g5zwpHoOrU0EmvPqDW+rK47T/Uw1HKNuIPb8E=
Subject key identifier:   6A:A3:2D:28:00:F1:18:29:66:A2:ED:51:F5:17:34:D8:C8:B6:17:F7
Authority key identifier: EF:59:1E:A4:4C:A8:54:40:4A:EE:22:82:4B:3D:39:5E:DD:3C:4C:0D
Certificate issuer:       /CN=ef591ea44ca854404aee22824b3d395edd3c4c0d
Certificate serial:       018A25606474B1F27BD5987B64FF42634D0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/71kepEyoVEBK7iKCSz05Xt08TA0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/afd92f-0307-4099-86d4-5653a5976704/1/71kepEyoVEBK7iKCSz05Xt08TA0.mft
Manifest number:          0876
Signing time:             Thu 24 Aug 2023 02:29:48 +0000
Manifest this update:     Thu 24 Aug 2023 02:29:48 +0000
Manifest next update:     Fri 25 Aug 2023 02:29:48 +0000
Files and hashes:         1: 71kepEyoVEBK7iKCSz05Xt08TA0.crl (hash: gJz/sds1JdcFJ0no53YUdPBze5mvKsalD3yVhsgv8gg=)
                          2: IaHwikw7fxANXGgYTOlIyIL2rIQ.roa (hash: MV3IU4AALjHerQMR12nYgbXazTXRZVyEU1rAj3QrkYU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:25:60:64:74:b1:f2:7b:d5:98:7b:64:ff:42:63:4d:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef591ea44ca854404aee22824b3d395edd3c4c0d
        Validity
            Not Before: Aug 24 02:29:48 2023 GMT
            Not After : Aug 25 02:29:48 2023 GMT
        Subject: CN=6aa32d2800f1182966a2ed51f51734d8c8b617f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e5:f1:59:4e:97:31:31:22:e2:54:8c:bd:ca:
                    d8:f8:bf:16:b4:65:b3:52:94:fd:d2:00:72:e0:37:
                    cc:3e:f9:c8:2b:af:36:c2:5f:55:2d:44:60:03:d8:
                    12:39:89:9b:2a:e3:49:5f:0d:71:5a:65:be:86:a8:
                    16:b1:1f:d4:43:b7:1b:8b:c7:6b:87:4e:d2:2d:e2:
                    e7:68:b8:1a:40:b6:c1:b1:87:09:be:ac:cc:b4:bf:
                    86:19:87:12:85:c2:08:ce:01:65:6b:af:48:db:e2:
                    d8:cd:44:52:1c:32:af:cc:f2:cc:70:86:51:3c:9c:
                    2b:88:0c:c9:69:90:2e:83:f7:cc:f0:7c:46:b8:eb:
                    a0:b3:64:02:2c:87:79:9b:23:6b:27:2e:1e:a5:be:
                    52:10:c0:6c:0c:8b:2c:a3:1a:e0:93:fb:bc:d1:d5:
                    b0:b0:39:cf:36:c7:d9:07:bf:88:b8:59:a1:e3:ae:
                    2d:40:00:d4:aa:c0:cb:52:56:2c:fc:26:4a:7a:49:
                    e4:2d:bf:3d:ca:b0:e3:e2:fe:d6:d8:2f:2e:7b:8f:
                    ee:c2:dd:00:4e:37:b8:95:a2:19:b5:cb:de:85:b9:
                    54:8c:15:8b:5c:5a:81:ac:3e:86:2b:9a:87:c2:2b:
                    9c:14:b8:30:3c:d6:1b:28:11:cb:ae:19:bc:26:18:
                    fb:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:A3:2D:28:00:F1:18:29:66:A2:ED:51:F5:17:34:D8:C8:B6:17:F7
            X509v3 Authority Key Identifier:
                keyid:EF:59:1E:A4:4C:A8:54:40:4A:EE:22:82:4B:3D:39:5E:DD:3C:4C:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71kepEyoVEBK7iKCSz05Xt08TA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/afd92f-0307-4099-86d4-5653a5976704/1/71kepEyoVEBK7iKCSz05Xt08TA0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/afd92f-0307-4099-86d4-5653a5976704/1/71kepEyoVEBK7iKCSz05Xt08TA0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:b8:83:a5:49:e2:5a:6a:b1:2c:0e:5f:80:cf:97:74:c5:a9:
         14:6f:bc:8e:aa:12:53:c3:e8:d7:16:dd:7a:ae:98:c6:ff:c1:
         bb:da:a8:98:82:d3:65:38:b9:42:d5:73:20:a7:87:8d:64:ae:
         70:48:1b:f5:78:ff:c4:d6:d5:ce:e0:97:77:db:65:79:99:d4:
         28:21:7f:cf:55:63:ef:6c:78:ca:39:18:18:50:0a:36:45:3e:
         31:a3:78:ce:5f:94:5c:98:aa:b0:47:7d:b2:08:4a:94:43:9c:
         b5:52:e8:e3:0b:1e:6c:9f:91:01:89:c9:38:8b:25:8d:29:8e:
         1f:f0:6d:0d:c0:98:b2:48:ff:61:8c:29:10:39:20:88:05:55:
         b4:e8:24:9f:ae:b3:36:87:ba:d5:f3:00:87:d5:f5:89:62:7d:
         ca:98:f4:8d:f5:36:67:35:6f:40:cc:9c:49:4d:a1:3e:ec:16:
         06:5d:cb:3c:5e:d3:98:a3:12:50:b9:2c:e3:3d:53:9a:e2:75:
         f4:3e:79:01:16:38:c5:26:bf:87:0c:48:61:b0:b4:31:3d:e3:
         17:5a:83:4a:31:95:fb:4f:6f:27:32:72:30:78:1f:a5:87:27:
         08:80:23:f4:61:3e:65:47:8a:43:07:45:b4:06:a4:00:3c:3b:
         55:e3:cb:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----