Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/564dc5-1793-4014-b412-2adf907d08b6/1/s3eaPY0qRXPAphWmVTrWMgpTuLM.mft
File:                     s3eaPY0qRXPAphWmVTrWMgpTuLM.mft (raw, json)
Hash identifier:          NybNRZth6A3JpYTLn8G0vwDgFFiaPfOIFykA+uCNVqY=
Subject key identifier:   E4:BD:6B:40:3F:11:30:AF:FD:53:63:AE:31:48:47:97:2B:2A:2D:65
Authority key identifier: B3:77:9A:3D:8D:2A:45:73:C0:A6:15:A6:55:3A:D6:32:0A:53:B8:B3
Certificate issuer:       /CN=b3779a3d8d2a4573c0a615a6553ad6320a53b8b3
Certificate serial:       018C588991E231537BAC6B7F26FB8EABB813
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s3eaPY0qRXPAphWmVTrWMgpTuLM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/564dc5-1793-4014-b412-2adf907d08b6/1/s3eaPY0qRXPAphWmVTrWMgpTuLM.mft
Manifest number:          0206
Signing time:             Mon 11 Dec 2023 11:00:59 +0000
Manifest this update:     Mon 11 Dec 2023 11:00:59 +0000
Manifest next update:     Tue 12 Dec 2023 11:00:59 +0000
Files and hashes:         1: s3eaPY0qRXPAphWmVTrWMgpTuLM.crl (hash: UBTrVp39YHb0hat5TvdZjjioaLZh5yk7rci+aqQCHBs=)
                          2: s7ZR1XwliJ_800ynLzamHCc7j9E.roa (hash: o2275A4pLxM+Mz6Uft1SpCb0w4g/QO2bdryZNiS96ds=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:58:89:91:e2:31:53:7b:ac:6b:7f:26:fb:8e:ab:b8:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3779a3d8d2a4573c0a615a6553ad6320a53b8b3
        Validity
            Not Before: Dec 11 11:00:59 2023 GMT
            Not After : Dec 12 11:00:59 2023 GMT
        Subject: CN=e4bd6b403f1130affd5363ae314847972b2a2d65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:30:4d:fb:cb:90:81:47:30:22:a9:9e:c0:9f:
                    05:0a:fc:6f:eb:44:02:9a:39:b3:a2:07:3b:44:ce:
                    2a:ca:4d:23:4f:99:17:be:85:e7:fe:70:14:2c:04:
                    de:e7:2b:90:77:c9:00:60:8f:03:58:8d:23:1e:43:
                    b3:8d:65:b5:c5:02:12:27:00:c7:07:96:16:70:ed:
                    a3:a6:c0:f0:f6:23:70:5b:55:65:cf:52:9f:3d:26:
                    e7:87:5c:dc:3b:79:91:8c:d1:ce:32:da:33:1c:ce:
                    14:9e:24:98:54:04:db:05:ef:e3:8a:ea:76:45:d0:
                    f6:9a:24:6e:60:fd:c2:3c:b8:e8:b8:25:71:f2:53:
                    5b:02:ce:a2:15:94:45:3b:71:ae:25:be:7e:b3:df:
                    1a:7e:93:ab:39:62:ec:95:aa:4f:82:91:f0:23:ab:
                    b2:ff:eb:d9:ea:4d:5f:43:4b:57:24:24:ce:9f:4d:
                    88:b4:3b:c2:4b:6f:90:e7:c0:15:29:57:ef:fa:dd:
                    30:e7:54:38:9c:c9:a8:2a:e7:cd:a8:31:c6:50:94:
                    77:5a:0d:86:52:f2:2b:10:ce:d5:37:0d:90:ea:12:
                    c4:45:c3:68:b5:3d:51:24:34:8e:f3:54:ee:e6:4d:
                    ea:4f:94:a6:32:58:3c:ce:26:91:14:07:16:26:b9:
                    48:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:BD:6B:40:3F:11:30:AF:FD:53:63:AE:31:48:47:97:2B:2A:2D:65
            X509v3 Authority Key Identifier:
                keyid:B3:77:9A:3D:8D:2A:45:73:C0:A6:15:A6:55:3A:D6:32:0A:53:B8:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s3eaPY0qRXPAphWmVTrWMgpTuLM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/564dc5-1793-4014-b412-2adf907d08b6/1/s3eaPY0qRXPAphWmVTrWMgpTuLM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/564dc5-1793-4014-b412-2adf907d08b6/1/s3eaPY0qRXPAphWmVTrWMgpTuLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:67:32:4c:6b:d7:46:f9:b6:5d:eb:27:17:aa:20:2f:2b:43:
         fa:36:5b:77:15:8b:d3:b5:8e:ff:96:97:a3:1e:7e:89:9e:01:
         a6:73:4a:fa:7d:cd:30:cc:d6:4e:84:f7:3b:b2:24:72:65:4c:
         4d:fb:63:3f:c0:cd:a2:a1:00:89:fa:a9:c3:57:c1:8e:1a:43:
         01:19:5c:87:e8:45:cf:4a:a2:48:f1:21:9e:4c:85:ca:b8:c4:
         86:19:86:d6:b1:2b:65:49:5c:ec:23:db:45:e4:62:d5:d0:8a:
         3f:f7:c0:e5:ec:10:a7:16:fb:90:b4:ad:77:2d:36:c4:cf:4e:
         ef:64:a2:24:cf:45:34:93:0b:7a:ad:94:9e:c6:4e:40:bb:99:
         6a:be:14:03:a0:08:ae:66:82:45:dd:75:03:68:74:a9:ad:6c:
         50:5e:06:07:4b:d9:53:93:fb:73:e0:d6:9c:af:92:b5:e8:bc:
         0a:db:14:ac:5d:cb:1e:a5:8c:2e:f6:67:ef:d9:f3:b2:9e:a9:
         54:65:f7:eb:9c:8b:8f:ce:32:4a:25:e9:69:a8:3d:e5:c4:24:
         49:62:43:ba:44:e7:dd:c4:15:96:37:8d:ad:17:6d:6f:35:35:
         44:15:ee:71:5e:8e:78:82:1a:ec:f1:68:3b:c8:79:ca:d6:3a:
         9d:ab:7b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----