Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/7c0249-f7aa-4eb4-aa3c-1a65ddc99be7/1/3FQNfHZATV9K3_nl0iXTysGbWDI.mft
File:                     3FQNfHZATV9K3_nl0iXTysGbWDI.mft (raw, json)
Hash identifier:          eTI+YRwEMEjqvFjihikbVLtWH4hmfVYuJorMplGWAV8=
Subject key identifier:   AB:67:0E:69:BB:6F:7F:50:15:A3:4A:94:CE:AB:D8:60:80:1F:90:9F
Authority key identifier: DC:54:0D:7C:76:40:4D:5F:4A:DF:F9:E5:D2:25:D3:CA:C1:9B:58:32
Certificate issuer:       /CN=dc540d7c76404d5f4adff9e5d225d3cac19b5832
Certificate serial:       018B13AAD7FD1F7BE0E5E3799F4690C0F48D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3FQNfHZATV9K3_nl0iXTysGbWDI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/7c0249-f7aa-4eb4-aa3c-1a65ddc99be7/1/3FQNfHZATV9K3_nl0iXTysGbWDI.mft
Manifest number:          0997
Signing time:             Mon 09 Oct 2023 09:00:45 +0000
Manifest this update:     Mon 09 Oct 2023 09:00:45 +0000
Manifest next update:     Tue 10 Oct 2023 09:00:45 +0000
Files and hashes:         1: 3FQNfHZATV9K3_nl0iXTysGbWDI.crl (hash: NiXwcngpeSp03rtA+5YyITkBY1wslOweKtzIYLtZGCQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:13:aa:d7:fd:1f:7b:e0:e5:e3:79:9f:46:90:c0:f4:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc540d7c76404d5f4adff9e5d225d3cac19b5832
        Validity
            Not Before: Oct  9 09:00:45 2023 GMT
            Not After : Oct 10 09:00:45 2023 GMT
        Subject: CN=ab670e69bb6f7f5015a34a94ceabd860801f909f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:5f:2f:7a:8f:46:36:16:ea:9e:b0:4a:f9:75:
                    d9:b0:5a:cc:af:76:fd:42:a4:79:35:61:79:9d:9c:
                    b8:93:f3:a1:5e:27:fe:38:a5:c1:6f:ff:62:0e:dc:
                    4c:e9:98:4c:14:1d:59:62:60:4d:99:02:72:f9:bd:
                    00:9b:01:a1:a7:0c:b9:ad:92:a1:b5:8f:38:c6:c6:
                    db:70:ec:ce:1c:53:c8:70:f8:3f:51:74:a3:72:00:
                    0c:9c:c0:c8:36:f0:6b:45:82:7e:dd:46:aa:c0:ea:
                    d7:67:bb:09:07:67:da:43:57:0a:e3:8e:81:22:9d:
                    95:69:94:bd:1e:bc:67:2f:c2:0f:eb:9d:68:66:ff:
                    bd:9d:fe:17:85:32:9b:95:f5:a0:6b:d7:36:b4:81:
                    51:d1:1f:5d:7c:2f:1f:05:38:d1:82:af:78:15:9c:
                    b1:86:9b:52:d0:07:25:f5:06:6b:ae:f5:28:8c:77:
                    ba:33:e6:12:3a:dd:2f:7a:9e:37:46:8c:b7:8e:f8:
                    d1:ed:2e:91:a7:2d:ae:e5:ce:42:29:e0:aa:b5:8b:
                    c2:b6:18:5d:e2:78:94:25:d9:c2:56:f8:30:87:a3:
                    a0:74:b5:38:8e:82:82:3c:d7:2d:19:33:d6:02:6a:
                    f4:2f:7f:ea:bf:05:fc:c4:dd:1c:e5:9d:4b:6b:60:
                    4b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:67:0E:69:BB:6F:7F:50:15:A3:4A:94:CE:AB:D8:60:80:1F:90:9F
            X509v3 Authority Key Identifier:
                keyid:DC:54:0D:7C:76:40:4D:5F:4A:DF:F9:E5:D2:25:D3:CA:C1:9B:58:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3FQNfHZATV9K3_nl0iXTysGbWDI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/7c0249-f7aa-4eb4-aa3c-1a65ddc99be7/1/3FQNfHZATV9K3_nl0iXTysGbWDI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/7c0249-f7aa-4eb4-aa3c-1a65ddc99be7/1/3FQNfHZATV9K3_nl0iXTysGbWDI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:ce:34:b4:e1:95:45:05:64:8a:de:cc:46:52:cd:9d:9e:b9:
         77:55:7b:d7:3a:80:1c:c0:e9:76:c0:dd:38:05:93:45:5f:cd:
         c8:f5:40:6d:a8:24:ce:5d:c0:8c:40:94:de:bd:59:8c:8e:93:
         86:d2:42:4b:13:75:0d:53:2e:24:ad:9d:38:3e:97:f0:ad:b6:
         41:08:1f:e1:57:ba:0e:1a:98:06:2e:cc:e3:40:34:96:f2:e0:
         5a:e9:5f:96:b5:2c:f9:39:a4:6e:b6:41:3f:35:4f:10:51:3b:
         ec:20:04:be:c9:78:f0:e9:f7:ba:ff:bb:4f:d2:7e:22:c1:7c:
         3c:58:85:5c:f3:b7:62:f4:52:64:2d:5d:26:20:2b:08:de:75:
         8f:5b:db:a8:3d:32:bd:57:93:a2:5c:52:4a:de:2a:94:31:b5:
         27:d6:5a:7f:be:16:0f:fe:ea:58:d9:81:29:de:2a:77:e4:b6:
         8f:66:bf:3d:6d:8a:43:fc:51:a0:ff:2c:fd:5e:07:e9:f5:b5:
         12:c7:96:f7:ab:53:54:1b:26:a3:4e:42:2d:77:dc:98:39:ac:
         a9:1d:54:55:63:e8:75:cd:0e:8f:eb:af:ab:03:26:3e:5d:06:
         a7:07:1c:73:68:53:49:5c:fe:70:5e:f8:28:73:df:35:ab:92:
         e0:5b:06:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----