Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/dde46d-d883-43f0-8796-236a30d527fb/1/6Jp8qHBdhp38GDLeFoKC1Lcl1lE.mft
File:                     6Jp8qHBdhp38GDLeFoKC1Lcl1lE.mft (raw, json)
Hash identifier:          AHf4Tjf3sGDP/mTRLwDo5VVvMJ2GmkDZxkaq7HqNSxg=
Subject key identifier:   72:65:2B:87:7C:61:F2:40:E9:21:56:4B:8C:EF:39:9C:5D:75:1D:8C
Authority key identifier: E8:9A:7C:A8:70:5D:86:9D:FC:18:32:DE:16:82:82:D4:B7:25:D6:51
Certificate issuer:       /CN=e89a7ca8705d869dfc1832de168282d4b725d651
Certificate serial:       0188E110E8D0475F95B99B7010A4467C38A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Jp8qHBdhp38GDLeFoKC1Lcl1lE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/dde46d-d883-43f0-8796-236a30d527fb/1/6Jp8qHBdhp38GDLeFoKC1Lcl1lE.mft
Manifest number:          0728
Signing time:             Thu 22 Jun 2023 03:06:01 +0000
Manifest this update:     Thu 22 Jun 2023 03:06:01 +0000
Manifest next update:     Fri 23 Jun 2023 03:06:01 +0000
Files and hashes:         1: 4wwSraUVJXPtGvw3Y0UNo8f0wtQ.roa (hash: zSufXvuMTfhV/BLU02z/6KiftrPKjmv06IUuQhBePRA=)
                          2: 6Jp8qHBdhp38GDLeFoKC1Lcl1lE.crl (hash: bJRrpjeAy9HYRhObAO797lA3CbqfIlADVwnv6V4E09Y=)
                          3: XKsnV9wHCxAbDGk2FYjfvbjYvWk.roa (hash: bxJqGTr2Byo0n41XjCnHdb7hDqVsejzloNoO6VwHGa4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:e1:10:e8:d0:47:5f:95:b9:9b:70:10:a4:46:7c:38:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e89a7ca8705d869dfc1832de168282d4b725d651
        Validity
            Not Before: Jun 22 03:06:01 2023 GMT
            Not After : Jun 23 03:06:01 2023 GMT
        Subject: CN=72652b877c61f240e921564b8cef399c5d751d8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:df:f5:e9:5d:c9:fb:0c:ba:18:57:d7:9f:54:
                    63:c6:d3:33:ab:06:7a:43:e1:ae:1f:da:d3:6c:42:
                    dc:43:5d:16:aa:9a:6b:1f:ca:08:8c:30:06:51:9a:
                    6c:e4:d4:0b:0f:d0:19:d5:cd:18:87:5d:30:10:19:
                    ce:ac:6b:13:3a:d6:6a:7a:38:bf:f0:c6:e9:97:9c:
                    d0:0f:8e:60:58:b8:5c:12:66:3a:aa:3e:bf:6e:52:
                    97:db:5d:1c:22:6c:37:b8:e7:d4:43:b2:97:07:5c:
                    4d:c2:77:05:7d:12:6a:24:07:95:a5:d8:1b:3a:14:
                    d1:22:b0:b9:1a:c9:c8:e1:99:04:ab:2c:14:de:b7:
                    f2:49:9a:e2:f7:c3:2f:74:ab:31:f6:56:9f:cd:63:
                    79:4e:a4:ae:4c:e8:1b:33:3a:7b:7d:44:d8:99:15:
                    57:d1:92:88:a8:80:28:6e:f2:09:94:8d:9c:fe:42:
                    77:d8:36:d7:36:a9:8b:60:71:b3:70:f5:2a:b2:c6:
                    78:72:dd:b3:70:71:99:fb:9f:a5:c4:ea:19:54:76:
                    2e:b7:01:35:aa:c8:84:e3:28:f1:1a:a2:db:66:3c:
                    5a:63:49:04:96:30:ab:15:b7:72:f4:c1:ea:73:a9:
                    bb:ae:71:df:f9:11:66:79:ad:a6:8a:19:e6:92:9f:
                    b6:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:65:2B:87:7C:61:F2:40:E9:21:56:4B:8C:EF:39:9C:5D:75:1D:8C
            X509v3 Authority Key Identifier:
                keyid:E8:9A:7C:A8:70:5D:86:9D:FC:18:32:DE:16:82:82:D4:B7:25:D6:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Jp8qHBdhp38GDLeFoKC1Lcl1lE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/dde46d-d883-43f0-8796-236a30d527fb/1/6Jp8qHBdhp38GDLeFoKC1Lcl1lE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/dde46d-d883-43f0-8796-236a30d527fb/1/6Jp8qHBdhp38GDLeFoKC1Lcl1lE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:ed:24:a6:bb:ca:f6:30:0e:3a:ba:7f:59:57:c3:9b:a5:7d:
         cd:50:9c:49:e5:b6:3f:5f:0a:a5:e3:b9:8f:06:22:e7:7b:a7:
         ed:e3:39:df:d0:77:0c:ce:28:79:39:f7:73:39:6d:8a:ef:4b:
         e0:ee:82:3c:3f:4f:f9:e8:be:55:17:9e:3d:7d:62:b1:e8:fb:
         2d:14:b5:4d:2e:dc:29:65:47:d9:29:47:59:be:13:c4:b3:77:
         6a:6a:12:1a:51:be:97:9e:72:dd:96:a9:0c:57:ce:0c:0f:29:
         f6:2e:19:e7:84:ee:f7:75:7d:c9:2c:5e:b8:74:b3:52:08:8b:
         1a:8d:35:77:f1:7a:57:0a:f1:77:bc:52:07:29:62:a7:4f:1f:
         f9:76:cb:43:2d:27:9e:60:33:f3:d8:55:eb:b3:e3:01:8b:cc:
         e0:60:e8:d2:ba:0e:c6:4e:11:29:e7:71:12:60:fa:27:45:eb:
         fd:0a:98:a2:86:c5:42:00:b3:d4:c6:5b:4d:db:03:0c:09:b0:
         9e:7d:3d:f4:e8:ab:19:8e:a2:72:db:e4:b0:b7:78:3e:a5:9b:
         84:d2:fe:c6:eb:da:cd:b1:46:b7:5e:f2:2a:48:5e:41:78:0a:
         5e:76:b2:33:d1:14:2d:51:8d:73:37:c1:07:6e:e2:b3:0b:8b:
         32:44:c9:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----