Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/ee1d76-59bb-40b9-bc31-b06e20997889/1/B0R6UQmqlfW1WAOlUs6eybt67eE.mft
File:                     B0R6UQmqlfW1WAOlUs6eybt67eE.mft (raw, json)
Hash identifier:          d6ePyqWpXwkaGOHri54t3O0X7iUSSUgQGvePO0M6iWk=
Subject key identifier:   E5:09:4D:71:B8:62:88:ED:DE:68:2B:E6:E7:BA:11:C8:FD:DC:F9:44
Authority key identifier: 07:44:7A:51:09:AA:95:F5:B5:58:03:A5:52:CE:9E:C9:BB:7A:ED:E1
Certificate issuer:       /CN=07447a5109aa95f5b55803a552ce9ec9bb7aede1
Certificate serial:       018D0BB5AFD66C20523DD3528C8FD75C70AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B0R6UQmqlfW1WAOlUs6eybt67eE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/ee1d76-59bb-40b9-bc31-b06e20997889/1/B0R6UQmqlfW1WAOlUs6eybt67eE.mft
Manifest number:          0C4A
Signing time:             Mon 15 Jan 2024 06:01:12 +0000
Manifest this update:     Mon 15 Jan 2024 06:01:12 +0000
Manifest next update:     Tue 16 Jan 2024 06:01:12 +0000
Files and hashes:         1: B0R6UQmqlfW1WAOlUs6eybt67eE.crl (hash: voYal3gpNCNgAmfo/vuY1sJRxIRmXO0o/zHqbRkagY0=)
                          2: vmI5mSyKu4J1y_HFSTqEsk-KWV0.roa (hash: IgXI5zpEqm6AdojwhpLa6fc9mOJOYL1xGmFxRAdSIHs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:0b:b5:af:d6:6c:20:52:3d:d3:52:8c:8f:d7:5c:70:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07447a5109aa95f5b55803a552ce9ec9bb7aede1
        Validity
            Not Before: Jan 15 06:01:12 2024 GMT
            Not After : Jan 16 06:01:12 2024 GMT
        Subject: CN=e5094d71b86288edde682be6e7ba11c8fddcf944
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:fb:b7:63:dd:3e:7b:5b:e2:77:51:0e:e1:11:
                    f4:52:bf:eb:12:df:ea:f7:b8:b6:35:ba:84:8d:ae:
                    b4:4f:6e:20:0f:44:1a:b1:3e:e9:ba:39:b8:ef:69:
                    9f:10:c2:57:a2:ad:ff:a5:7f:dc:8a:28:a1:0c:22:
                    9d:dc:d8:12:c8:2b:97:20:ac:78:85:c3:21:43:11:
                    ed:a0:54:7f:df:fe:9a:84:35:e6:1e:e5:62:cd:aa:
                    fc:86:3e:98:ad:6e:c4:39:79:d8:3b:7a:fa:d0:31:
                    9a:9b:67:61:40:c3:c3:41:7f:f1:e3:f0:6b:7a:94:
                    3a:57:7e:66:43:98:88:c3:50:1b:c1:30:64:ed:6c:
                    21:fa:ff:2b:8e:68:58:98:07:45:3b:db:77:00:2e:
                    73:68:73:c6:f3:71:9b:35:47:c9:89:4c:9d:07:98:
                    ac:91:c0:69:c4:f7:50:d2:cc:04:4e:8f:94:97:2c:
                    54:f4:2c:98:d8:93:6d:6c:f3:b2:14:91:38:bc:b3:
                    84:57:79:be:2b:31:c9:14:a3:3b:93:4e:43:52:eb:
                    bc:a8:99:9e:ee:ed:2b:51:d5:44:ee:a8:df:33:3f:
                    77:30:97:fa:ea:31:22:41:e2:e8:11:a0:fb:56:3a:
                    73:76:8c:89:bc:2a:ae:86:26:6a:ea:07:f5:4d:85:
                    47:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:09:4D:71:B8:62:88:ED:DE:68:2B:E6:E7:BA:11:C8:FD:DC:F9:44
            X509v3 Authority Key Identifier:
                keyid:07:44:7A:51:09:AA:95:F5:B5:58:03:A5:52:CE:9E:C9:BB:7A:ED:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B0R6UQmqlfW1WAOlUs6eybt67eE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ee1d76-59bb-40b9-bc31-b06e20997889/1/B0R6UQmqlfW1WAOlUs6eybt67eE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ee1d76-59bb-40b9-bc31-b06e20997889/1/B0R6UQmqlfW1WAOlUs6eybt67eE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:b2:c1:40:e7:91:95:54:b4:82:2b:cc:cf:cb:52:b6:c4:bb:
         2c:29:67:e2:73:0c:ff:3f:9b:51:d8:15:57:79:7d:e7:63:86:
         e0:29:99:99:b7:b8:56:5d:0d:f3:d3:f0:1c:45:6d:37:43:5c:
         b4:d8:73:ae:6d:9f:0f:96:a2:64:39:8b:ce:03:0d:e2:a2:44:
         6a:40:a6:e9:0d:0c:ae:70:79:4c:05:42:76:39:be:d9:36:2e:
         31:8d:87:a7:1e:d9:09:68:3d:4f:e1:4d:e2:60:d2:93:34:67:
         7a:2d:50:b1:3c:29:1e:8d:6d:ca:35:45:1c:81:a4:95:df:bd:
         0c:b0:e8:82:58:7a:86:c7:a4:d2:6f:c2:0b:0d:4e:5c:a9:de:
         1d:4c:57:ab:f5:bf:c5:43:0b:74:4f:ee:89:22:02:82:a7:a9:
         dc:8d:30:46:db:eb:79:12:31:c7:ae:f7:90:65:c5:2f:a2:3f:
         20:98:01:37:81:3e:ab:70:99:f9:c3:3e:a9:0c:67:6e:e1:65:
         27:f4:32:46:32:d7:66:43:59:30:3e:17:34:b9:4c:51:0c:10:
         46:62:ce:33:83:60:70:dc:ff:ea:30:0b:c6:a2:5b:e6:d2:87:
         67:bb:92:3e:95:21:59:05:e0:b8:ad:a4:96:79:7d:f4:62:96:
         e1:ad:b8:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----