Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/986efb-a10c-491c-816e-663d87f4351d/1/aMEv-mJ_DRuDTBvJHkdtzlqVXbw.mft
File:                     aMEv-mJ_DRuDTBvJHkdtzlqVXbw.mft (raw, json)
Hash identifier:          v/cQivMYGWozv0TkB24BtEc6Zh3/sU8zkXXsMkYuE9M=
Subject key identifier:   B0:E6:0A:34:7C:0D:E8:8F:D7:76:A7:56:7E:E6:C2:B9:71:66:76:E8
Authority key identifier: 68:C1:2F:FA:62:7F:0D:1B:83:4C:1B:C9:1E:47:6D:CE:5A:95:5D:BC
Certificate issuer:       /CN=68c12ffa627f0d1b834c1bc91e476dce5a955dbc
Certificate serial:       018ACE931777B994081E4A50E0ABDC06E298
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aMEv-mJ_DRuDTBvJHkdtzlqVXbw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/986efb-a10c-491c-816e-663d87f4351d/1/aMEv-mJ_DRuDTBvJHkdtzlqVXbw.mft
Manifest number:          0867
Signing time:             Mon 25 Sep 2023 23:01:00 +0000
Manifest this update:     Mon 25 Sep 2023 23:01:00 +0000
Manifest next update:     Tue 26 Sep 2023 23:01:00 +0000
Files and hashes:         1: 7J2coi8yjwZkMqksfQxoD2pyv28.roa (hash: FExrhrjYpiKwZMXkEi+7eC1iv1IKNKByaZN9Qo7L4bI=)
                          2: aMEv-mJ_DRuDTBvJHkdtzlqVXbw.crl (hash: UYy9od+kOHpoMSNwsn7/rV+fYrdYr6Fnq5i1ctmi4RE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:ce:93:17:77:b9:94:08:1e:4a:50:e0:ab:dc:06:e2:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68c12ffa627f0d1b834c1bc91e476dce5a955dbc
        Validity
            Not Before: Sep 25 23:01:00 2023 GMT
            Not After : Sep 26 23:01:00 2023 GMT
        Subject: CN=b0e60a347c0de88fd776a7567ee6c2b9716676e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:4a:c6:42:40:52:8f:4f:48:e3:eb:4c:1a:c8:
                    d8:cd:ff:3d:68:eb:9d:96:7b:7e:af:3e:13:6e:2d:
                    de:2d:d5:cc:94:b2:b3:cf:19:9b:22:ce:92:91:d3:
                    e6:be:3b:30:2a:50:40:05:fc:fb:03:92:f4:7d:a2:
                    4b:2a:a1:77:c0:d6:9c:54:93:af:ef:2b:32:5d:41:
                    25:80:35:76:c1:06:7e:8e:d4:a1:41:8c:b0:d3:0e:
                    37:c3:72:fe:03:b0:84:e7:d5:17:7e:67:80:f0:c6:
                    c5:78:60:18:77:27:10:15:08:17:c3:6b:a3:b8:5a:
                    02:24:64:c7:7d:b5:88:55:6c:b2:ec:78:97:0c:a9:
                    3b:a9:0c:40:92:9f:1c:b4:30:62:88:a4:a6:13:5d:
                    1c:59:94:f1:85:40:25:1c:d5:76:2e:3e:c6:f8:71:
                    81:eb:27:a9:f1:7a:38:0c:77:ff:33:68:6c:2d:ed:
                    6f:90:b5:5d:65:29:53:99:bf:3b:82:0d:1b:45:64:
                    6b:9f:a5:ac:c8:b3:38:b7:9d:a5:3e:4a:5f:4c:61:
                    35:65:59:a1:9f:63:6f:d0:00:c2:f8:ec:9e:14:2e:
                    26:3d:45:59:c8:84:06:77:e6:c6:5b:aa:25:12:76:
                    a1:16:76:fa:44:2b:45:0f:30:32:23:03:84:56:40:
                    0c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:E6:0A:34:7C:0D:E8:8F:D7:76:A7:56:7E:E6:C2:B9:71:66:76:E8
            X509v3 Authority Key Identifier:
                keyid:68:C1:2F:FA:62:7F:0D:1B:83:4C:1B:C9:1E:47:6D:CE:5A:95:5D:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMEv-mJ_DRuDTBvJHkdtzlqVXbw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/986efb-a10c-491c-816e-663d87f4351d/1/aMEv-mJ_DRuDTBvJHkdtzlqVXbw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/986efb-a10c-491c-816e-663d87f4351d/1/aMEv-mJ_DRuDTBvJHkdtzlqVXbw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:2b:2f:fe:47:93:cc:11:b9:94:4a:b1:18:a7:e9:a9:5b:6c:
         ac:75:fa:37:76:2d:a8:36:14:e7:1f:11:16:ff:49:76:74:bc:
         80:22:26:18:61:c3:f2:09:3c:1b:c2:13:74:73:83:fa:49:e4:
         93:67:7b:5e:fb:03:9b:9c:e7:8d:95:5b:a7:9b:04:f9:42:14:
         79:cb:e0:18:31:ae:ca:98:fb:36:75:7d:39:e1:63:fe:59:39:
         98:aa:df:60:c9:6f:42:8e:dd:6c:59:3e:40:b7:f0:fa:df:c0:
         e5:f8:97:de:1e:1e:2d:ed:e5:55:fd:9d:af:df:91:75:c4:f2:
         d9:e9:f8:c6:d8:c1:15:e5:ed:92:7f:7b:2a:ee:41:2c:16:61:
         1b:2d:3c:27:ef:b3:b9:77:8d:69:01:bf:5d:e3:b9:3f:4e:30:
         11:e9:2f:ee:e1:6f:ae:e2:4b:28:f1:2c:6f:85:4b:f9:ab:2b:
         68:06:e5:a8:2a:50:6c:12:c6:56:b3:a2:e4:f7:ff:04:3c:8f:
         d9:7e:e5:b9:c6:ce:ea:1d:3c:6b:e4:0a:7c:a1:e2:f9:4e:e8:
         c9:9d:48:a3:a8:9d:41:89:53:4c:69:a8:ad:02:ca:5f:bc:bf:
         1f:aa:0c:19:ec:db:ed:f0:49:0e:20:e7:c4:cc:a0:b9:df:f6:
         61:91:6b:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----