Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/93b0f3-c21f-45f4-81f8-b95a9d173cb7/1/tGaMbNjEDd-Twwp2aeMPa1DBg8M.mft
File:                     tGaMbNjEDd-Twwp2aeMPa1DBg8M.mft (raw, json)
Hash identifier:          k+rkC034d+dnKQ0PK8zBnq5MTR3yIKNuF2uxUC3ApV0=
Subject key identifier:   02:84:AC:01:D4:96:B5:EC:9C:36:C9:A4:38:9B:D9:D9:C8:BE:10:11
Authority key identifier: B4:66:8C:6C:D8:C4:0D:DF:93:C3:0A:76:69:E3:0F:6B:50:C1:83:C3
Certificate issuer:       /CN=b4668c6cd8c40ddf93c30a7669e30f6b50c183c3
Certificate serial:       018C65A0224E918F984D75C945F6E46E94D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tGaMbNjEDd-Twwp2aeMPa1DBg8M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/93b0f3-c21f-45f4-81f8-b95a9d173cb7/1/tGaMbNjEDd-Twwp2aeMPa1DBg8M.mft
Manifest number:          0FDA
Signing time:             Thu 14 Dec 2023 00:00:42 +0000
Manifest this update:     Thu 14 Dec 2023 00:00:42 +0000
Manifest next update:     Fri 15 Dec 2023 00:00:42 +0000
Files and hashes:         1: 4fhL2d5Hv0DW88a_EHgmfUXOflE.roa (hash: Mih9Lc9j0AISFFQD3tR5T/Pc4Z9obZP+Ky2oSkhwzTg=)
                          2: grS7nG9l_T4p6WYXOwZijUSzL94.roa (hash: PKwMf5uzcRtnCpMFxJxg+lfhwAdkhKsvopIK2NNn1Cw=)
                          3: tGaMbNjEDd-Twwp2aeMPa1DBg8M.crl (hash: PzLBLTx/6KWowVaY9JzOVdjkL7fBBBGq7W5p6h6mkOY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:65:a0:22:4e:91:8f:98:4d:75:c9:45:f6:e4:6e:94:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4668c6cd8c40ddf93c30a7669e30f6b50c183c3
        Validity
            Not Before: Dec 14 00:00:42 2023 GMT
            Not After : Dec 15 00:00:42 2023 GMT
        Subject: CN=0284ac01d496b5ec9c36c9a4389bd9d9c8be1011
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:7e:2e:88:78:bb:88:a9:71:a5:3f:9b:7f:a2:
                    4e:ad:64:f4:43:5e:ad:c4:e0:88:f5:d3:b7:fb:71:
                    83:8c:02:8f:5f:83:ef:97:8e:07:93:31:e2:8a:60:
                    f9:36:a0:29:1c:f9:21:63:a5:0e:c8:0d:4a:c7:fe:
                    eb:b0:71:2b:67:e9:e9:5f:ad:e5:0e:de:cf:0b:18:
                    9c:e4:6d:38:45:65:18:5c:a6:b4:73:7b:17:f8:b6:
                    f2:dc:d0:4d:94:23:57:81:28:2c:ac:2b:67:e5:6f:
                    d6:73:21:3c:79:39:49:c4:2d:26:ce:53:d6:9c:05:
                    92:92:ad:b8:ae:54:a3:59:1b:18:04:c0:e1:a4:e6:
                    5a:75:af:02:43:87:ad:02:67:f4:55:02:32:4f:66:
                    74:df:94:77:67:5c:83:34:72:0d:38:0d:75:97:9b:
                    4f:07:c4:2b:42:ba:25:57:4b:e1:7c:3f:04:6b:91:
                    81:be:1d:d1:f3:18:44:c4:18:00:44:33:8d:01:33:
                    33:7a:9d:89:f2:d5:4b:02:80:a5:21:ce:80:b7:85:
                    d8:79:30:58:63:3f:40:f0:ed:2f:36:33:c8:fd:bd:
                    e4:52:e7:1d:9d:f5:f0:d0:72:ac:89:cd:b1:ff:fd:
                    f7:9e:d6:a2:7b:2d:43:7a:78:8d:22:b8:c7:5a:f7:
                    ba:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:84:AC:01:D4:96:B5:EC:9C:36:C9:A4:38:9B:D9:D9:C8:BE:10:11
            X509v3 Authority Key Identifier:
                keyid:B4:66:8C:6C:D8:C4:0D:DF:93:C3:0A:76:69:E3:0F:6B:50:C1:83:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGaMbNjEDd-Twwp2aeMPa1DBg8M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/93b0f3-c21f-45f4-81f8-b95a9d173cb7/1/tGaMbNjEDd-Twwp2aeMPa1DBg8M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/93b0f3-c21f-45f4-81f8-b95a9d173cb7/1/tGaMbNjEDd-Twwp2aeMPa1DBg8M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:32:5e:f3:10:57:46:7e:bd:e2:8e:6b:80:31:83:e2:e2:da:
         ab:12:8a:68:89:ed:d9:8f:80:a1:a5:75:44:1b:7a:cd:ba:83:
         9e:ed:ff:e3:b2:05:3d:04:7d:3c:2e:45:7c:6d:12:55:8a:0b:
         90:10:84:b6:7d:56:49:85:17:c4:84:d8:1f:cb:1d:cb:ee:3c:
         ae:c4:93:94:f1:d1:f7:68:2a:81:57:9a:51:0e:45:b6:7e:bc:
         5b:a7:b4:28:52:a5:b8:0c:cd:4b:c1:c1:6d:1f:e0:c5:e9:de:
         97:17:8d:69:c5:4d:df:0a:bf:bc:85:ea:8f:92:f6:82:0d:f4:
         dc:3b:7e:e6:5b:ad:96:65:1e:da:6f:17:e4:ac:2c:11:80:11:
         2e:a2:7d:a1:32:c3:fb:cf:7d:c5:21:60:bd:45:47:99:57:e6:
         ca:34:2c:31:15:3d:c3:95:bd:2c:d0:db:6f:6e:e5:a4:cf:41:
         58:c0:4d:14:3e:ee:66:d7:40:66:b1:63:2c:93:91:b0:06:cc:
         2a:44:ca:0b:d2:ce:ed:f5:58:f0:38:ea:58:80:93:fd:8d:43:
         d9:10:e7:9c:50:5a:a8:a5:69:ea:36:75:43:ba:30:27:61:e8:
         b7:f9:3b:0a:d6:51:6b:77:09:45:05:6b:f8:2e:1f:16:7f:46:
         48:c7:cc:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----