Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/0e9e2a-a6f0-4784-9677-bd2626e99073/1/C0Mm-EwVAWDHIHZZmP6PpTyi4ug.mft
File:                     C0Mm-EwVAWDHIHZZmP6PpTyi4ug.mft (raw, json)
Hash identifier:          a6FX2hrnn3UgEJsm81hjhYfXAFNAF0mBECJ6kVA2zx8=
Subject key identifier:   DB:0D:7C:67:53:B2:4C:2E:28:89:97:6A:AC:01:39:D0:9E:DB:C9:33
Authority key identifier: 0B:43:26:F8:4C:15:01:60:C7:20:76:59:98:FE:8F:A5:3C:A2:E2:E8
Certificate issuer:       /CN=0b4326f84c150160c720765998fe8fa53ca2e2e8
Certificate serial:       018AA7BCCC4B6A5315BDD3FED98FCD98450B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C0Mm-EwVAWDHIHZZmP6PpTyi4ug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/0e9e2a-a6f0-4784-9677-bd2626e99073/1/C0Mm-EwVAWDHIHZZmP6PpTyi4ug.mft
Manifest number:          04BB
Signing time:             Mon 18 Sep 2023 10:01:22 +0000
Manifest this update:     Mon 18 Sep 2023 10:01:22 +0000
Manifest next update:     Tue 19 Sep 2023 10:01:22 +0000
Files and hashes:         1: C0Mm-EwVAWDHIHZZmP6PpTyi4ug.crl (hash: GTaIIHGKUM64pTDS4G7FlVxmmB/lNooHqljYi9SP1EU=)
                          2: N0FfK1xtF1a1AWIxdrqcyyISdks.roa (hash: QMPeRf8X/HzIc4d0IVaLfjH7HwCXcrG5Pizu41s4EB4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:a7:bc:cc:4b:6a:53:15:bd:d3:fe:d9:8f:cd:98:45:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b4326f84c150160c720765998fe8fa53ca2e2e8
        Validity
            Not Before: Sep 18 10:01:22 2023 GMT
            Not After : Sep 19 10:01:22 2023 GMT
        Subject: CN=db0d7c6753b24c2e2889976aac0139d09edbc933
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:9b:48:6e:18:67:82:0e:49:28:32:c0:0e:e1:
                    fb:47:8f:3a:89:26:ba:04:3b:54:a5:69:bc:b5:9c:
                    ed:b6:1c:d8:cd:b6:89:ef:c3:7e:ae:d3:a5:22:6b:
                    af:e8:0d:f7:2d:05:39:49:3b:52:01:0e:78:0d:79:
                    b6:5d:94:88:a9:bb:ce:56:f1:83:78:e4:34:45:1f:
                    04:80:eb:8e:6b:d4:70:da:5b:47:6f:e4:c0:1a:3d:
                    3b:d2:74:64:f4:08:6b:bf:60:54:e5:c8:73:4a:36:
                    92:6c:1e:0a:81:fb:c0:39:a9:4c:a8:e3:60:f3:17:
                    91:93:b0:df:59:f8:62:7a:05:7a:74:bf:ad:01:4b:
                    4b:5d:68:6e:78:2d:8c:cf:2a:23:55:74:5b:47:96:
                    29:6e:09:0a:26:be:fa:90:7d:1a:f3:08:9a:4e:f4:
                    bb:3c:3b:eb:02:76:fe:91:2e:6c:42:5c:90:1a:bc:
                    39:d5:af:01:0a:5f:6e:64:a8:1d:bc:1a:2d:5b:01:
                    ce:d6:0f:a8:ed:7b:6c:be:17:97:04:bd:e5:58:2d:
                    ae:e3:ea:f1:11:6a:5f:7f:f2:45:3f:bc:4a:23:ee:
                    59:e6:2b:79:5f:53:1a:76:f0:87:66:8e:9f:3d:26:
                    50:1a:e5:c3:04:2f:3b:f4:6d:32:c8:a3:09:e2:bc:
                    f4:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:0D:7C:67:53:B2:4C:2E:28:89:97:6A:AC:01:39:D0:9E:DB:C9:33
            X509v3 Authority Key Identifier:
                keyid:0B:43:26:F8:4C:15:01:60:C7:20:76:59:98:FE:8F:A5:3C:A2:E2:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0Mm-EwVAWDHIHZZmP6PpTyi4ug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0e9e2a-a6f0-4784-9677-bd2626e99073/1/C0Mm-EwVAWDHIHZZmP6PpTyi4ug.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0e9e2a-a6f0-4784-9677-bd2626e99073/1/C0Mm-EwVAWDHIHZZmP6PpTyi4ug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:20:55:10:ca:b3:59:ba:3d:5b:35:d2:de:1a:82:6b:db:0a:
         66:51:41:28:98:d1:52:93:d6:a6:44:08:98:80:cb:32:3b:9f:
         d1:4e:4a:d2:4e:05:56:9a:5f:8d:d3:0d:cb:a6:85:8c:58:b3:
         31:0f:6d:91:24:40:00:2b:b5:68:48:30:42:ea:07:a8:e5:41:
         77:16:d6:1e:9d:a0:01:25:7f:ab:9a:98:2a:a3:75:7e:78:3a:
         a8:31:07:0f:13:85:6b:50:f4:97:6d:88:8b:b4:cc:7e:cb:34:
         33:71:8a:18:be:be:14:f1:d1:c1:ab:69:e6:48:a2:5d:23:5b:
         32:1b:1a:fb:46:26:16:0d:ce:67:13:7f:f1:c3:4d:53:f8:88:
         aa:d6:06:b0:f3:2f:d2:29:44:92:8a:97:d9:2f:29:4e:91:d8:
         5f:3c:0d:a9:c1:0c:61:49:99:6a:06:ac:84:a1:a2:20:85:c5:
         dc:6d:ec:2a:1f:51:ba:06:eb:20:f0:6b:b6:10:54:0f:84:a6:
         91:e3:a9:68:ba:b0:2d:17:64:e1:7e:1d:b9:8c:b9:37:b5:63:
         d2:87:fd:e8:44:41:94:85:9a:53:df:cb:d4:50:ed:0b:9b:d9:
         35:f4:0e:33:1f:d3:e3:26:ee:6e:61:13:66:d0:16:c6:2d:6f:
         6b:0d:70:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----