Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/7dee10-9313-4825-a1dd-8cb741aa8710/1/Iz24mRVKmCXRsx3QWlg40nCq9PQ.mft
File:                     Iz24mRVKmCXRsx3QWlg40nCq9PQ.mft (raw, json)
Hash identifier:          sWW6Qju363dqM2FUior4RxipWzttDfhwwKZNwuKhPc4=
Subject key identifier:   46:37:A4:4A:64:93:32:D7:D7:7C:96:54:C4:5F:56:5A:AD:C4:A5:C5
Authority key identifier: 23:3D:B8:99:15:4A:98:25:D1:B3:1D:D0:5A:58:38:D2:70:AA:F4:F4
Certificate issuer:       /CN=233db899154a9825d1b31dd05a5838d270aaf4f4
Certificate serial:       0188E311990093FC5EB795324F144B1A45C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Iz24mRVKmCXRsx3QWlg40nCq9PQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/7dee10-9313-4825-a1dd-8cb741aa8710/1/Iz24mRVKmCXRsx3QWlg40nCq9PQ.mft
Manifest number:          07CA
Signing time:             Thu 22 Jun 2023 12:26:01 +0000
Manifest this update:     Thu 22 Jun 2023 12:26:01 +0000
Manifest next update:     Fri 23 Jun 2023 12:26:01 +0000
Files and hashes:         1: Iz24mRVKmCXRsx3QWlg40nCq9PQ.crl (hash: CKgjlWi31pVzJ0224yBl2WBhiE+vfvDRly1fB6FhG80=)
                          2: _mxt3YSALWJBjgcGDNpU2WAuWXc.roa (hash: yW8Gi/Iikeut5CRre85li61K2cjNguAAcnjvRiL4Ghs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:e3:11:99:00:93:fc:5e:b7:95:32:4f:14:4b:1a:45:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=233db899154a9825d1b31dd05a5838d270aaf4f4
        Validity
            Not Before: Jun 22 12:26:01 2023 GMT
            Not After : Jun 23 12:26:01 2023 GMT
        Subject: CN=4637a44a649332d7d77c9654c45f565aadc4a5c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a9:c7:26:45:a9:89:3c:dd:47:0c:ad:fc:63:
                    59:48:f5:00:94:2f:c1:c2:f9:3c:81:22:2f:c0:2e:
                    a0:4b:40:ec:54:2d:de:82:10:69:60:5e:c8:63:d3:
                    af:65:16:db:74:d4:c4:ce:5f:26:f2:bb:a7:dd:8e:
                    bd:b7:88:f5:8c:29:76:9e:ca:70:a3:cd:b4:6a:38:
                    33:a8:2b:2f:d8:f7:66:d6:5b:31:c0:be:f8:af:43:
                    2e:6f:40:3c:54:1a:9e:2c:e3:d7:f7:9c:41:c1:72:
                    4e:86:93:3f:e9:f8:a2:c0:89:ab:58:84:fd:4b:04:
                    cc:f9:d2:79:16:44:a4:1c:b9:75:70:9f:4c:74:18:
                    e8:33:81:f6:0b:03:95:fd:4a:c6:cd:d5:d3:2e:ce:
                    38:43:ca:99:eb:96:78:41:b5:38:f8:7f:ff:90:3c:
                    69:e9:19:7c:e4:3a:fd:5d:31:83:e9:da:29:e9:3c:
                    ea:23:6e:14:1a:7d:33:83:26:e5:d1:1b:06:02:38:
                    d2:71:c4:58:39:ad:1e:8c:19:84:99:dc:37:1c:2e:
                    0a:f8:56:be:94:b4:af:d2:2b:d4:c2:6d:91:28:0f:
                    d1:cc:31:cd:ef:c6:ad:2c:07:f5:98:51:d8:8f:81:
                    3c:94:70:a0:7c:66:ae:a2:b2:ac:af:9d:89:58:8f:
                    87:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:37:A4:4A:64:93:32:D7:D7:7C:96:54:C4:5F:56:5A:AD:C4:A5:C5
            X509v3 Authority Key Identifier:
                keyid:23:3D:B8:99:15:4A:98:25:D1:B3:1D:D0:5A:58:38:D2:70:AA:F4:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iz24mRVKmCXRsx3QWlg40nCq9PQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7dee10-9313-4825-a1dd-8cb741aa8710/1/Iz24mRVKmCXRsx3QWlg40nCq9PQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7dee10-9313-4825-a1dd-8cb741aa8710/1/Iz24mRVKmCXRsx3QWlg40nCq9PQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:30:19:f2:13:1c:35:ad:80:db:2d:7f:35:a5:ae:6b:2e:3f:
         d8:42:65:3d:e9:26:b1:db:6b:64:ba:18:4f:46:e6:2c:e4:89:
         24:fe:4f:7d:03:51:fe:9c:93:4c:36:fb:e3:ae:6b:36:49:33:
         90:eb:63:03:63:ae:ae:b8:4d:e8:21:73:bc:4f:85:dc:f0:2a:
         cb:09:ea:2a:d2:05:f4:3b:70:39:55:3d:a5:04:c3:6c:07:f7:
         c6:10:62:37:84:76:c0:3e:c5:5e:7d:cc:4c:64:a2:97:f9:69:
         10:f7:4e:42:0c:5c:d3:a8:39:3e:6e:63:d8:73:9f:a9:dc:00:
         df:ff:db:c4:77:18:8b:e2:93:9f:88:6e:6c:0e:e5:0f:1f:1e:
         3a:b3:91:96:81:c7:01:2e:a2:be:24:db:00:18:83:52:91:56:
         9a:bc:c8:fa:fa:04:1a:db:79:05:a1:7d:c0:e3:ff:70:e4:7b:
         e5:d9:37:b8:34:0a:1a:8a:3b:7c:bd:db:41:85:92:8f:db:2e:
         66:1e:c2:eb:0e:4c:3c:62:f1:40:ad:1f:b6:3a:cf:7a:77:4c:
         bc:5c:ab:5f:f4:dd:ba:74:b1:f7:c2:16:e1:be:03:00:70:ea:
         8f:0c:9c:5c:92:6a:8d:a6:f6:7c:89:2d:70:28:d8:9a:a5:fc:
         f8:b1:6e:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----