Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/7aab20-06a4-4e1c-98e8-085c90211cd0/1/A5nswJFEFGzBdbWKTeQAx2Wa5PU.mft
File:                     A5nswJFEFGzBdbWKTeQAx2Wa5PU.mft (raw, json)
Hash identifier:          2iiFIbEL4ZBeq24oqxJ0YhbjYNbDIih6f3N0RHpyWEc=
Subject key identifier:   BB:D4:BF:D0:D7:76:36:7C:65:EF:40:83:E5:F0:6F:5E:D6:D4:55:60
Authority key identifier: 03:99:EC:C0:91:44:14:6C:C1:75:B5:8A:4D:E4:00:C7:65:9A:E4:F5
Certificate issuer:       /CN=0399ecc09144146cc175b58a4de400c7659ae4f5
Certificate serial:       018BDCF12F42C316E6D7DF5EE4C35F5C6FC9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A5nswJFEFGzBdbWKTeQAx2Wa5PU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/7aab20-06a4-4e1c-98e8-085c90211cd0/1/A5nswJFEFGzBdbWKTeQAx2Wa5PU.mft
Manifest number:          E3
Signing time:             Fri 17 Nov 2023 11:01:15 +0000
Manifest this update:     Fri 17 Nov 2023 11:01:15 +0000
Manifest next update:     Sat 18 Nov 2023 11:01:15 +0000
Files and hashes:         1: A5nswJFEFGzBdbWKTeQAx2Wa5PU.crl (hash: QoopKSPAn+ehd+2XMxXrmNgsub3J0Mij6EXwL2ksOrw=)
                          2: EhUhLoPFEe_fMdcCy6Je5OLlJCU.roa (hash: 2oY0iS8KLIUNSxYNMtcYNiQSDltdfzHsaPVyb6BYups=)
                          3: Rak8Ti9T_qNvciDfMdvCIeNDnb8.roa (hash: /iStEflpU1Y4g2bOXH/g5kaImJaHGSWxl8VdBg6LLY0=)
                          4: S2z1YDanPmR8PcYV3Zc-uSM0Qgc.roa (hash: fP9OQEKdYmvtvqgjiEb0zkgi0J6UmVL/4QjbIkOmlUg=)
                          5: e_mdzqPwWqsKge945WkUEXaThMs.roa (hash: KTZ/RBWmqgpw7stoTUVjY38MEdcgwYo4rorbHyG8sKc=)
                          6: g32gta9UUQsvHkDdJ9-J30T4nNI.roa (hash: Bwrbg41f02j7EM89nwwzuB/5AT38NcUvlkWhCM1iBEU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:dc:f1:2f:42:c3:16:e6:d7:df:5e:e4:c3:5f:5c:6f:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0399ecc09144146cc175b58a4de400c7659ae4f5
        Validity
            Not Before: Nov 17 11:01:15 2023 GMT
            Not After : Nov 18 11:01:15 2023 GMT
        Subject: CN=bbd4bfd0d776367c65ef4083e5f06f5ed6d45560
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a8:16:58:30:64:04:8b:eb:47:ae:76:af:c0:
                    f9:47:6a:c1:f8:47:0a:49:5b:ba:6c:2a:51:66:6a:
                    e9:7f:ce:4f:a1:61:0c:22:c9:39:28:ec:2a:f8:33:
                    0c:09:2f:f8:b4:b8:8f:25:87:93:f5:84:08:e6:5d:
                    75:44:73:64:fe:4d:23:b3:0b:4d:cc:55:ac:ce:81:
                    d4:6f:d9:87:7e:7d:32:cb:04:48:53:75:0e:b9:ea:
                    1e:14:9c:d2:b7:80:93:45:b2:ef:f8:e7:f3:9e:c4:
                    45:b7:2b:56:aa:3a:cf:9c:88:b7:ca:f9:4e:5c:a2:
                    2d:97:32:7f:5c:ce:fc:3e:b0:e8:31:a1:06:74:3f:
                    f0:37:10:fa:4c:0f:cc:7c:4e:57:80:c1:49:42:b0:
                    d6:fc:49:01:1c:56:db:08:bc:db:05:8a:a1:bd:51:
                    de:c2:4c:12:f5:5d:66:cd:fc:43:fe:7b:7a:12:19:
                    e1:21:8d:bd:19:cc:05:b0:1a:31:56:9c:e3:02:f4:
                    1a:cd:ff:10:f3:d6:61:c9:7e:1e:35:54:2c:99:65:
                    98:66:b3:21:87:70:b2:9d:bf:f4:8c:06:1b:c2:f0:
                    31:8f:3b:00:2d:ea:c6:c6:7e:56:f9:82:d4:bf:03:
                    13:06:8c:f1:05:f1:42:b2:41:8c:eb:53:9b:5d:02:
                    95:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:D4:BF:D0:D7:76:36:7C:65:EF:40:83:E5:F0:6F:5E:D6:D4:55:60
            X509v3 Authority Key Identifier:
                keyid:03:99:EC:C0:91:44:14:6C:C1:75:B5:8A:4D:E4:00:C7:65:9A:E4:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5nswJFEFGzBdbWKTeQAx2Wa5PU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7aab20-06a4-4e1c-98e8-085c90211cd0/1/A5nswJFEFGzBdbWKTeQAx2Wa5PU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7aab20-06a4-4e1c-98e8-085c90211cd0/1/A5nswJFEFGzBdbWKTeQAx2Wa5PU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:41:6c:b7:5f:71:e5:df:12:43:66:4d:02:39:04:e6:f3:22:
         8f:0b:a2:8c:98:31:17:f2:20:80:6f:97:eb:9f:ec:58:98:16:
         10:b9:96:38:20:82:6a:15:77:4f:07:c1:98:a8:8d:90:a4:42:
         25:2e:de:d5:3f:61:d0:c4:d9:09:d9:2b:cb:f3:92:a7:2a:57:
         0e:27:21:d7:55:32:ac:7b:d8:15:bd:50:2b:aa:f9:43:7c:42:
         61:bb:a0:fb:c0:3a:63:29:9c:3d:26:b1:56:51:09:a3:59:32:
         8c:e8:55:32:83:34:98:5f:a5:36:ec:db:8d:4e:00:89:6e:93:
         b3:f6:8c:dc:ba:49:5d:d4:82:3a:f9:23:c0:7f:52:d8:76:18:
         0b:3e:d0:63:41:f8:f4:43:f3:63:9e:a7:e7:41:f4:c1:88:55:
         1b:99:7a:d2:67:6b:67:01:77:aa:ae:63:50:3d:ec:8f:b2:6d:
         ad:a7:ce:73:89:46:81:b8:c5:7b:4f:0e:d5:34:17:1c:93:17:
         0d:c9:ed:03:f4:68:25:17:13:6b:28:be:74:84:e1:fc:0d:d1:
         23:49:d5:22:f7:dd:60:1a:eb:7c:43:8e:4d:f9:57:0d:59:ac:
         ea:27:78:6e:07:b3:5c:57:98:a0:23:c1:ab:66:4b:43:df:ca:
         ee:e1:82:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----