Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/eaf169-fd91-48f7-953b-7e69c7283de4/1/CajCNPKw1snKE-VBHaKc8sRPKJE.mft
File:                     CajCNPKw1snKE-VBHaKc8sRPKJE.mft (raw, json)
Hash identifier:          yPcaADaeB+GBMHowV/K577IveMx9bLLkppVHA308KHs=
Subject key identifier:   E8:79:D6:17:1A:D7:F7:D7:9E:CE:40:F9:32:8B:1D:55:0B:26:3E:78
Authority key identifier: 09:A8:C2:34:F2:B0:D6:C9:CA:13:E5:41:1D:A2:9C:F2:C4:4F:28:91
Certificate issuer:       /CN=09a8c234f2b0d6c9ca13e5411da29cf2c44f2891
Certificate serial:       018BEA7517268081386F1940901C2C9EF3DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CajCNPKw1snKE-VBHaKc8sRPKJE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/eaf169-fd91-48f7-953b-7e69c7283de4/1/CajCNPKw1snKE-VBHaKc8sRPKJE.mft
Manifest number:          0870
Signing time:             Mon 20 Nov 2023 02:00:23 +0000
Manifest this update:     Mon 20 Nov 2023 02:00:23 +0000
Manifest next update:     Tue 21 Nov 2023 02:00:23 +0000
Files and hashes:         1: CajCNPKw1snKE-VBHaKc8sRPKJE.crl (hash: oUx4qurX3tdfr24+kRzDVJbL4H9d1yLrMQZznHfb+eY=)
                          2: gUKV6QfVrK-HWJx1mmF-aGDL0ic.roa (hash: z62bdn4pAsOBNYpFIY3bHqxq3bAi+5amzat58HCZHDg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:ea:75:17:26:80:81:38:6f:19:40:90:1c:2c:9e:f3:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a8c234f2b0d6c9ca13e5411da29cf2c44f2891
        Validity
            Not Before: Nov 20 02:00:23 2023 GMT
            Not After : Nov 21 02:00:23 2023 GMT
        Subject: CN=e879d6171ad7f7d79ece40f9328b1d550b263e78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:94:50:ce:d2:4f:f6:ad:9c:35:88:ad:c8:58:
                    ae:2b:a4:c5:91:a5:cb:b9:39:dd:07:2d:a3:22:93:
                    c4:1b:b1:c2:46:7e:e8:e1:f4:59:ec:0b:72:25:ec:
                    03:2b:fb:16:1c:96:bd:04:b2:ff:26:5f:7f:86:08:
                    68:24:8c:8a:41:98:9c:85:4d:ae:f2:2c:23:05:e6:
                    1a:d4:54:5e:bd:e1:04:9e:4d:16:18:d4:63:38:68:
                    b4:3f:50:c9:26:b1:fd:82:d1:3e:c4:2d:a0:7d:a4:
                    d8:cb:00:07:2c:be:83:67:3a:18:2b:34:80:36:c1:
                    00:81:c4:ce:4c:ac:2f:f4:b4:c5:98:3f:4d:04:08:
                    76:8c:12:a6:fb:06:65:80:aa:d2:ec:24:8c:0e:94:
                    97:fb:ca:11:58:8e:54:7e:59:72:76:95:55:d0:4f:
                    f7:a3:fb:45:91:96:60:3a:6d:32:5d:ec:d6:97:aa:
                    f1:f0:56:7c:d6:21:60:63:da:42:5d:78:0a:77:5b:
                    88:10:b8:ed:98:44:ec:d0:b9:33:f2:7e:fe:76:d1:
                    1a:10:ce:6d:02:aa:28:e6:fc:e9:cf:28:30:fc:07:
                    bd:ad:04:46:3d:5e:61:52:b3:fd:20:ae:20:ce:0a:
                    78:61:85:b1:7a:b6:69:4d:f1:31:e9:3a:50:78:43:
                    c6:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:79:D6:17:1A:D7:F7:D7:9E:CE:40:F9:32:8B:1D:55:0B:26:3E:78
            X509v3 Authority Key Identifier:
                keyid:09:A8:C2:34:F2:B0:D6:C9:CA:13:E5:41:1D:A2:9C:F2:C4:4F:28:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CajCNPKw1snKE-VBHaKc8sRPKJE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/eaf169-fd91-48f7-953b-7e69c7283de4/1/CajCNPKw1snKE-VBHaKc8sRPKJE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/eaf169-fd91-48f7-953b-7e69c7283de4/1/CajCNPKw1snKE-VBHaKc8sRPKJE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:86:07:c6:98:d9:ff:2e:2e:4e:73:df:30:b7:f3:7f:96:3e:
         8e:5d:3a:ab:76:a2:bf:66:b9:8d:a3:d9:94:98:f9:33:b8:c8:
         c3:b6:11:96:14:f6:d4:b1:02:84:13:f8:07:ca:d3:60:23:d4:
         15:e4:36:bb:d0:cb:86:c9:f8:9e:1a:ab:8d:3b:77:48:48:8b:
         62:0a:54:c4:1d:66:16:09:f8:ef:92:5e:e1:eb:a9:51:18:dd:
         29:a6:0c:93:be:94:e0:b3:49:5f:82:b0:94:c1:77:82:d1:19:
         99:aa:94:9d:64:c9:55:8e:1b:30:e6:a0:ea:77:eb:c2:dd:43:
         13:73:03:08:ef:f1:0d:ab:87:b8:f3:b4:19:eb:70:2b:be:63:
         53:4b:2a:c3:9f:c3:03:74:40:1c:55:e6:3f:fc:7c:54:09:22:
         d4:5f:b4:44:ef:62:e2:45:93:66:11:46:5c:9f:13:35:36:73:
         4c:9b:a2:99:a7:35:6e:9a:6f:e3:ec:32:8e:04:28:08:5b:13:
         03:f4:f5:7b:ac:0a:0e:a2:f9:2e:fd:32:28:75:ea:31:a5:57:
         f3:78:e9:c3:1b:02:55:26:90:8d:19:f3:be:7d:a0:15:a3:c2:
         f7:1a:38:c0:3d:b5:85:22:17:f0:b6:66:f3:9d:1e:17:49:fe:
         2a:69:68:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----