Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/39d818-0ae0-4a41-bc10-cca70b2a7d34/1/fgzO9rwOeqzd0g2vWKYAjkqANag.mft
File:                     fgzO9rwOeqzd0g2vWKYAjkqANag.mft (raw, json)
Hash identifier:          Au1Ll2jEM+dTs9zUoInsmeZHTDrAm80OdmKoOxpxUK8=
Subject key identifier:   0E:98:57:AE:32:78:6B:F6:B3:DD:D7:D7:1A:BC:E6:08:59:35:8E:13
Authority key identifier: 7E:0C:CE:F6:BC:0E:7A:AC:DD:D2:0D:AF:58:A6:00:8E:4A:80:35:A8
Certificate issuer:       /CN=7e0ccef6bc0e7aacddd20daf58a6008e4a8035a8
Certificate serial:       018B03257E9B648B73729684B44B069C2E6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fgzO9rwOeqzd0g2vWKYAjkqANag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/39d818-0ae0-4a41-bc10-cca70b2a7d34/1/fgzO9rwOeqzd0g2vWKYAjkqANag.mft
Manifest number:          08A5
Signing time:             Fri 06 Oct 2023 04:01:10 +0000
Manifest this update:     Fri 06 Oct 2023 04:01:10 +0000
Manifest next update:     Sat 07 Oct 2023 04:01:10 +0000
Files and hashes:         1: MMEqKlTn-LFGf5Ie1u1lYUW85wM.roa (hash: IjustwHJu0leuuISlWIG4pIrgYojVBCpoba5HuUKSx8=)
                          2: fgzO9rwOeqzd0g2vWKYAjkqANag.crl (hash: j0n66Gpry/LD2mxMDhszVim/tlSn2kJSnapp5tR2eVE=)
                          3: imphuyEUD_0a-PzKEFXpgjDjkoQ.roa (hash: vD5/aGciamHIXrNeGEpI/ToEbpbSbVHyXWYap1wP9To=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:03:25:7e:9b:64:8b:73:72:96:84:b4:4b:06:9c:2e:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e0ccef6bc0e7aacddd20daf58a6008e4a8035a8
        Validity
            Not Before: Oct  6 04:01:10 2023 GMT
            Not After : Oct  7 04:01:10 2023 GMT
        Subject: CN=0e9857ae32786bf6b3ddd7d71abce60859358e13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d3:71:59:8f:9c:3e:51:39:7c:27:23:6b:24:
                    5d:78:2d:fa:e5:02:d8:1e:cd:dc:bf:ff:6f:7d:1c:
                    ad:32:56:e0:c1:69:95:23:57:63:af:ea:04:14:59:
                    f5:6c:de:f5:cc:f2:1e:0c:df:c3:0b:37:89:49:fd:
                    35:db:35:24:f4:b3:25:3a:af:02:4c:b3:2a:ab:8c:
                    77:88:43:f6:ff:a9:2a:7b:05:e5:51:a1:b9:65:62:
                    53:60:b2:98:4f:50:6a:9d:b8:2a:9d:ea:46:b3:c6:
                    0d:9d:e0:de:24:9f:a2:66:52:60:0d:c9:86:48:d4:
                    6c:eb:f6:3d:16:17:04:b0:91:6c:70:7a:e1:06:53:
                    80:51:55:a1:85:aa:f6:a0:be:6e:5b:01:26:24:c0:
                    4a:3a:09:96:ae:ac:06:ed:4e:06:0d:60:d0:2e:7c:
                    6f:ca:b2:cb:d9:0e:7b:22:fa:35:a5:71:28:19:09:
                    90:9f:f3:d3:00:58:0f:64:4d:c5:30:e4:97:06:ee:
                    07:8c:37:82:39:b4:bc:e8:96:61:63:7c:6f:31:79:
                    28:bc:18:82:c3:0f:71:73:7f:31:5c:36:2c:70:eb:
                    c1:db:89:55:a1:6c:7b:22:54:4b:8b:14:a1:5b:e1:
                    d6:f1:d0:17:9d:f4:ba:0f:4e:60:b3:f6:ea:42:c9:
                    44:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:98:57:AE:32:78:6B:F6:B3:DD:D7:D7:1A:BC:E6:08:59:35:8E:13
            X509v3 Authority Key Identifier:
                keyid:7E:0C:CE:F6:BC:0E:7A:AC:DD:D2:0D:AF:58:A6:00:8E:4A:80:35:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgzO9rwOeqzd0g2vWKYAjkqANag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/39d818-0ae0-4a41-bc10-cca70b2a7d34/1/fgzO9rwOeqzd0g2vWKYAjkqANag.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/39d818-0ae0-4a41-bc10-cca70b2a7d34/1/fgzO9rwOeqzd0g2vWKYAjkqANag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:7e:68:3d:f8:4e:64:56:2b:9e:62:e2:9c:60:67:4e:b0:a2:
         95:17:a0:b2:ca:7a:eb:8d:79:f2:60:fa:8b:fd:b3:bb:9a:6b:
         cc:c8:4f:36:a6:26:b8:36:be:60:88:d8:f3:7e:6b:11:cf:67:
         34:24:83:2a:c8:99:1b:cd:6c:c9:34:34:65:c7:ae:99:9f:4e:
         ca:d8:85:a8:c5:34:c3:b7:2e:98:a8:a1:08:a2:33:c9:63:43:
         28:6c:35:6e:1c:b2:1f:bf:f7:2f:31:5c:26:9e:5d:37:4a:5c:
         4d:5c:42:54:d1:cc:b2:40:68:48:02:8a:77:0a:46:ee:e4:0d:
         35:18:fd:43:24:99:5d:d0:a3:c3:7d:93:33:73:8b:4d:63:fe:
         d9:5c:13:c7:6d:a2:c2:83:7b:66:97:60:11:a7:3a:34:b9:9a:
         0f:62:d5:40:bb:b1:d9:d6:7c:41:27:cc:92:be:c6:95:23:ff:
         5b:a2:bd:e8:6a:ad:57:57:db:7c:dd:47:34:4f:81:39:d5:cd:
         d0:c5:38:2e:b3:e2:38:97:c7:f9:d6:8d:ba:16:1c:3c:d6:d5:
         83:87:3a:dd:39:85:c8:59:a6:81:6c:84:50:30:9e:6a:bc:3e:
         8c:9e:e0:f6:e4:d2:e7:e8:f4:a8:c2:00:f0:9d:d4:c6:ca:ef:
         03:3c:06:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----