Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/b70637-9132-4fa7-b82e-406809e639cc/1/7DkxqycSz4ggpY3M50IzXY76MxI.mft
File:                     7DkxqycSz4ggpY3M50IzXY76MxI.mft (raw, json)
Hash identifier:          D49tsCRS+qt3hi/1tFiG3TEc1v+NGOgDWvhzVMNM3K8=
Subject key identifier:   4B:9A:15:3E:D4:87:68:E8:09:A8:1B:1F:1A:EC:53:5D:74:ED:0E:07
Authority key identifier: EC:39:31:AB:27:12:CF:88:20:A5:8D:CC:E7:42:33:5D:8E:FA:33:12
Certificate issuer:       /CN=ec3931ab2712cf8820a58dcce742335d8efa3312
Certificate serial:       018C434C17F1C218866CF5DB794ACC7E6F30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7DkxqycSz4ggpY3M50IzXY76MxI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/b70637-9132-4fa7-b82e-406809e639cc/1/7DkxqycSz4ggpY3M50IzXY76MxI.mft
Manifest number:          0229
Signing time:             Thu 07 Dec 2023 08:01:49 +0000
Manifest this update:     Thu 07 Dec 2023 08:01:49 +0000
Manifest next update:     Fri 08 Dec 2023 08:01:49 +0000
Files and hashes:         1: 7DkxqycSz4ggpY3M50IzXY76MxI.crl (hash: qpPkWvEPaniXjfyz/Bst6LeZ3+sLbUnm8MwozEv86gM=)
                          2: TDQx3etdEdRILcqvGP8-qpHFON4.roa (hash: Ehg2lGevI/sZJ40i6g6pMuUiQLMNcxgJxOkvLFq2p+s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:43:4c:17:f1:c2:18:86:6c:f5:db:79:4a:cc:7e:6f:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec3931ab2712cf8820a58dcce742335d8efa3312
        Validity
            Not Before: Dec  7 08:01:49 2023 GMT
            Not After : Dec  8 08:01:49 2023 GMT
        Subject: CN=4b9a153ed48768e809a81b1f1aec535d74ed0e07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:b0:39:41:1c:60:9f:20:61:02:c5:b7:fe:f3:
                    5f:53:3f:ff:6b:d7:08:18:0a:ae:5a:96:61:8a:35:
                    f0:f5:87:ef:02:1f:ea:a9:b6:69:14:ae:0e:9c:1c:
                    f3:fa:ef:89:12:87:6e:d5:70:d1:1b:e4:7c:4d:23:
                    b8:d8:7b:37:5f:ae:a8:1d:ac:1a:ff:f1:04:63:35:
                    aa:32:7c:d2:4e:26:91:ab:de:06:e1:b8:58:02:cb:
                    b0:22:b6:0c:50:df:ca:39:f2:99:21:ee:17:f6:ed:
                    10:63:6e:e7:d9:32:f5:f8:e7:45:fe:0c:10:3d:60:
                    23:09:d1:43:8f:38:9b:47:12:84:7b:da:e1:51:f7:
                    65:7f:b6:95:3b:28:38:52:27:bc:45:be:41:0a:c9:
                    ac:48:77:58:06:24:1a:34:bf:94:a4:b6:d2:17:97:
                    ef:dc:5a:f4:33:23:f2:7f:f8:70:e5:a4:c9:50:1b:
                    57:04:83:a2:87:94:03:28:df:04:13:82:11:15:7f:
                    9e:6e:62:4b:ce:32:9b:e9:25:c9:96:ce:f1:95:7b:
                    fa:56:e9:be:97:b6:d8:13:4a:2a:19:61:51:51:8a:
                    c0:e6:1b:df:55:09:f7:ce:a5:af:58:f2:76:c3:a0:
                    cd:8b:ac:73:a5:44:c3:d6:8d:cf:5f:e5:1d:a4:1a:
                    bf:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:9A:15:3E:D4:87:68:E8:09:A8:1B:1F:1A:EC:53:5D:74:ED:0E:07
            X509v3 Authority Key Identifier:
                keyid:EC:39:31:AB:27:12:CF:88:20:A5:8D:CC:E7:42:33:5D:8E:FA:33:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7DkxqycSz4ggpY3M50IzXY76MxI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/b70637-9132-4fa7-b82e-406809e639cc/1/7DkxqycSz4ggpY3M50IzXY76MxI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/b70637-9132-4fa7-b82e-406809e639cc/1/7DkxqycSz4ggpY3M50IzXY76MxI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:6c:da:40:29:8d:d8:91:77:5e:57:51:28:8a:7e:3f:73:73:
         b8:38:c7:89:e6:1f:6e:a9:4d:eb:ac:50:97:dc:2f:a3:24:ca:
         e4:30:2d:19:0e:38:0c:89:0a:a0:3a:47:11:90:81:93:ac:77:
         48:64:ce:ef:d5:d7:5a:af:d2:d4:7a:6b:32:c5:93:d9:fd:ee:
         d0:c1:0b:c1:12:5f:11:7e:ef:bf:70:4f:75:be:45:6f:e9:54:
         61:4d:3f:fa:6a:7b:b4:b2:ca:7a:46:d1:ba:16:6f:9b:c0:30:
         96:18:14:1f:ed:eb:da:e4:5f:6e:92:8f:d0:61:37:d8:fc:f0:
         21:fc:e0:eb:3e:b8:87:27:82:fa:41:3c:e3:2c:3b:f5:b0:ae:
         e5:5c:4c:43:cf:d3:94:d0:76:25:fb:3f:07:60:74:57:2a:27:
         bf:4f:e1:00:94:c4:ab:eb:c7:ec:36:2f:a8:d7:e2:48:3a:04:
         ec:c6:1f:6d:40:71:e1:8d:a2:2a:d2:9a:dd:c4:41:cd:17:1b:
         26:f2:09:a0:1b:08:47:3d:e1:34:0a:af:0a:ce:0a:49:a8:f6:
         37:b6:81:4d:ee:81:2f:09:9d:fb:fb:25:41:c9:a9:2f:32:a3:
         cd:b5:49:65:c3:21:10:fd:70:f0:79:84:74:7d:3e:f7:6c:63:
         bc:84:8f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----