Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/8179a7-b735-47f7-a8ba-6922b49d0747/1/FCs7hgfEFNhpNM4J4Rb9vB0ffyg.mft
File:                     FCs7hgfEFNhpNM4J4Rb9vB0ffyg.mft (raw, json)
Hash identifier:          nhbfSP2iLPplTayJMu2Pb0dZJ0+dDKwCNyw69UaT7Yc=
Subject key identifier:   FD:98:26:60:8C:99:FF:68:FD:F3:3B:31:BE:A2:98:58:94:D5:31:0C
Authority key identifier: 14:2B:3B:86:07:C4:14:D8:69:34:CE:09:E1:16:FD:BC:1D:1F:7F:28
Certificate issuer:       /CN=142b3b8607c414d86934ce09e116fdbc1d1f7f28
Certificate serial:       018C3D4A2B367A373134FAF9DB56A4AA8439
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FCs7hgfEFNhpNM4J4Rb9vB0ffyg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/8179a7-b735-47f7-a8ba-6922b49d0747/1/FCs7hgfEFNhpNM4J4Rb9vB0ffyg.mft
Manifest number:          0883
Signing time:             Wed 06 Dec 2023 04:01:59 +0000
Manifest this update:     Wed 06 Dec 2023 04:01:59 +0000
Manifest next update:     Thu 07 Dec 2023 04:01:59 +0000
Files and hashes:         1: FCs7hgfEFNhpNM4J4Rb9vB0ffyg.crl (hash: 66tjDxwNCUN6gtQy3rarYV6r1/1cIZl8KCDpHacZ87M=)
                          2: eNd8Al7oDt-zwdw_Q9BcC1ZvoX8.roa (hash: ZUBhlCXLVuTiZXQ4+JQo2TLilfbvTwLGl29pYydY/jg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:3d:4a:2b:36:7a:37:31:34:fa:f9:db:56:a4:aa:84:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=142b3b8607c414d86934ce09e116fdbc1d1f7f28
        Validity
            Not Before: Dec  6 04:01:59 2023 GMT
            Not After : Dec  7 04:01:59 2023 GMT
        Subject: CN=fd9826608c99ff68fdf33b31bea2985894d5310c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:3d:70:19:a3:34:9e:21:6e:30:7e:c8:27:94:
                    2b:a9:d3:2f:60:51:a5:20:55:39:c6:b6:3b:16:36:
                    13:6b:d2:2c:c5:d6:ab:f7:4b:10:d4:b9:18:1f:fd:
                    41:73:e2:e0:25:08:70:b9:bb:f6:d0:d6:d2:b3:43:
                    b1:2f:0a:73:96:4e:41:b4:f3:fd:97:f9:ff:15:e7:
                    c0:cb:f6:2f:43:43:e2:11:de:d1:5a:cf:33:1d:0c:
                    7c:71:19:bc:d6:e4:44:d3:62:03:50:39:6e:86:f9:
                    f3:1e:b1:35:dd:a4:73:df:fa:34:19:49:d8:0f:61:
                    b6:9e:77:a6:b6:e7:22:ae:8f:81:72:a3:52:4a:18:
                    a8:77:ce:c5:5f:b6:8a:7e:be:5f:64:7d:26:e4:fb:
                    ab:b3:e3:27:ed:3d:e4:2e:71:b2:9b:9f:0b:e6:96:
                    7a:08:6d:a9:d7:f8:03:7f:d4:95:79:16:fa:8f:25:
                    35:88:c6:d1:c4:e9:52:50:eb:e2:4c:eb:a9:6b:88:
                    ec:fa:b5:3e:1d:63:b0:d1:21:a9:81:46:1d:0b:01:
                    7f:40:44:03:42:05:0a:2c:7e:c6:ef:1f:61:09:f2:
                    5e:a9:27:86:36:10:3e:03:e8:90:dd:1e:d4:5d:b6:
                    4c:87:90:c2:9b:cf:57:41:a8:eb:55:31:cf:fa:89:
                    1b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:98:26:60:8C:99:FF:68:FD:F3:3B:31:BE:A2:98:58:94:D5:31:0C
            X509v3 Authority Key Identifier:
                keyid:14:2B:3B:86:07:C4:14:D8:69:34:CE:09:E1:16:FD:BC:1D:1F:7F:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FCs7hgfEFNhpNM4J4Rb9vB0ffyg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/8179a7-b735-47f7-a8ba-6922b49d0747/1/FCs7hgfEFNhpNM4J4Rb9vB0ffyg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/8179a7-b735-47f7-a8ba-6922b49d0747/1/FCs7hgfEFNhpNM4J4Rb9vB0ffyg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:00:04:4b:2e:a6:e2:f6:81:17:1e:29:eb:99:cc:a4:b2:2e:
         12:20:9d:97:b8:8c:84:ab:f4:d1:be:fb:13:c0:40:25:a8:42:
         a4:7f:02:9e:83:4c:81:b5:8e:02:7f:89:7f:96:17:f3:14:c8:
         f1:51:db:62:25:80:47:c4:72:4b:87:6d:c7:9a:fb:ab:e8:62:
         a9:ff:74:b0:db:ec:bd:56:2a:ca:8d:63:54:9a:67:a9:4e:fe:
         b9:60:ff:08:71:3c:b2:a5:81:5f:4e:d3:e6:b8:3d:3e:38:45:
         58:97:af:f1:8f:23:9f:70:4d:d5:76:29:ae:02:26:b5:4e:51:
         e0:a7:90:4c:93:08:9a:96:5e:98:eb:51:fb:82:f3:7b:cb:96:
         bc:a3:62:13:c8:24:35:54:9e:a6:2a:08:6c:19:b4:9f:64:17:
         22:4f:07:77:24:95:ba:f2:3f:1a:91:77:71:ca:11:9c:2b:0e:
         c6:6c:64:f8:8d:26:e5:4c:33:14:1e:a9:89:f1:a9:83:24:85:
         5f:89:ac:ad:97:a6:48:00:b7:10:a3:5b:23:3f:71:33:a3:61:
         7a:c4:1e:b0:2f:7c:24:72:a1:b3:8f:e0:48:4b:b4:0e:3b:93:
         5c:5f:03:98:0b:49:93:bd:70:52:66:be:90:83:5e:06:a8:7e:
         26:51:4a:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----