Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/29c524-c98e-4320-8274-521171b7d268/1/DJheuNlLn6EUIteC8xT_bi3tB60.mft
File:                     DJheuNlLn6EUIteC8xT_bi3tB60.mft (raw, json)
Hash identifier:          JR7EWurpfDAAMN1zEN1JjMaORS2yUKYEZ2jGlfF5hZ0=
Subject key identifier:   6E:D5:73:2E:5E:5A:C9:8E:E1:24:CB:15:3A:F8:D8:B7:C1:EA:4C:57
Authority key identifier: 0C:98:5E:B8:D9:4B:9F:A1:14:22:D7:82:F3:14:FF:6E:2D:ED:07:AD
Certificate issuer:       /CN=0c985eb8d94b9fa11422d782f314ff6e2ded07ad
Certificate serial:       018C660DE7149E8884A3C47520C5EDC0E592
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DJheuNlLn6EUIteC8xT_bi3tB60.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/29c524-c98e-4320-8274-521171b7d268/1/DJheuNlLn6EUIteC8xT_bi3tB60.mft
Manifest number:          0944
Signing time:             Thu 14 Dec 2023 02:00:36 +0000
Manifest this update:     Thu 14 Dec 2023 02:00:36 +0000
Manifest next update:     Fri 15 Dec 2023 02:00:36 +0000
Files and hashes:         1: DJheuNlLn6EUIteC8xT_bi3tB60.crl (hash: zz1S7J1/WNPV+q6txKDudgkX0QrzxdAPUP1XEcT6yAc=)
                          2: SvzFfi81sF7knDcW8-CT9FhI1Ms.roa (hash: 3sGJ74p+gQ5/fD3i0rY6YhYQn2R5ywDNpTwaHaKO+uQ=)
                          3: VQhErn7RGRyIB9bzOfqBB541HX4.roa (hash: oNpbo6ByjPywQ+J9PEc1zbwi0+az4/fTEZ8UwKaZ3ko=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:66:0d:e7:14:9e:88:84:a3:c4:75:20:c5:ed:c0:e5:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c985eb8d94b9fa11422d782f314ff6e2ded07ad
        Validity
            Not Before: Dec 14 02:00:36 2023 GMT
            Not After : Dec 15 02:00:36 2023 GMT
        Subject: CN=6ed5732e5e5ac98ee124cb153af8d8b7c1ea4c57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1c:83:e9:f2:6e:bd:1b:73:6a:a3:aa:2c:19:
                    dc:6f:4c:84:92:00:d6:b5:77:75:50:53:d3:44:aa:
                    fb:26:5a:5a:dc:06:13:9b:e9:87:b6:a4:02:12:75:
                    9f:07:9a:54:2e:1b:74:47:7f:7b:3a:46:34:1d:72:
                    b3:ed:6a:b9:3a:71:96:51:ea:05:cf:61:3a:a6:fb:
                    aa:1e:79:72:e6:09:fc:7d:de:1e:c2:20:23:d7:e2:
                    8d:5a:a9:3b:24:3a:3f:cb:3b:8e:fb:75:58:c5:88:
                    5b:14:51:23:e1:f9:6d:7f:ae:34:7d:57:d4:06:68:
                    75:e9:59:12:af:2f:39:8f:64:d0:8d:77:fd:76:ff:
                    ea:19:96:2e:a5:af:33:87:bb:45:b7:ed:2c:9d:f3:
                    d7:58:b3:e5:0e:04:7f:3b:78:20:46:f3:7d:cd:42:
                    b4:1a:ff:e5:6b:c2:d7:a4:3f:8a:32:45:49:cf:a2:
                    b4:f9:d9:2c:6f:5c:02:02:ef:ec:51:49:34:fc:a5:
                    9c:df:d3:5f:71:9e:f9:3d:52:62:b7:59:4e:25:6e:
                    b7:85:21:a0:b1:8d:10:7f:6a:d0:ca:58:17:de:9e:
                    c8:96:eb:0a:6a:50:84:b4:f3:35:44:9e:e6:b4:72:
                    94:f7:58:a3:fd:86:c0:5a:6b:72:fd:02:42:b2:6e:
                    31:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:D5:73:2E:5E:5A:C9:8E:E1:24:CB:15:3A:F8:D8:B7:C1:EA:4C:57
            X509v3 Authority Key Identifier:
                keyid:0C:98:5E:B8:D9:4B:9F:A1:14:22:D7:82:F3:14:FF:6E:2D:ED:07:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJheuNlLn6EUIteC8xT_bi3tB60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/29c524-c98e-4320-8274-521171b7d268/1/DJheuNlLn6EUIteC8xT_bi3tB60.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/29c524-c98e-4320-8274-521171b7d268/1/DJheuNlLn6EUIteC8xT_bi3tB60.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:17:1d:75:b4:15:5c:a7:37:22:20:a0:26:00:a4:7a:40:3b:
         56:0a:e0:f7:ea:96:a7:eb:37:c5:b9:7e:ca:1b:e0:e4:89:71:
         dd:de:2b:12:96:98:5b:6b:d5:ae:ca:8f:c0:27:a0:7c:9e:55:
         03:51:0e:aa:5f:a6:cd:13:12:4b:9d:9e:d3:c7:8b:72:88:37:
         f3:98:9f:75:df:29:f0:fd:88:8b:05:c2:47:e2:4a:b0:7a:55:
         79:06:85:7d:22:6b:29:e8:eb:16:7f:58:6e:16:f2:53:3a:99:
         20:d8:7a:5b:e2:43:2b:95:c6:49:08:e1:5b:ab:69:99:db:ad:
         ae:6d:c2:05:4e:21:64:1b:40:1d:40:11:a5:85:dd:28:16:ae:
         24:42:82:6e:46:1a:b2:74:99:8a:66:49:92:9d:51:70:f8:3e:
         21:ea:88:cb:cf:73:b5:2c:9d:2e:ff:db:43:0f:4a:1c:5b:50:
         35:cf:7b:de:eb:ed:73:74:d1:0d:09:23:af:e2:9c:5b:da:01:
         58:43:8d:d9:86:ba:b8:73:d0:ce:b1:7a:89:74:5e:60:f4:a7:
         cf:c9:9f:c5:a7:60:ac:b8:47:97:a4:2a:da:11:38:e4:e3:2c:
         47:9a:07:a1:ec:84:70:20:e2:f2:6c:e9:29:fa:b9:ef:5d:ee:
         86:53:7a:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----