Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/36756a-16b1-47cf-bb16-83601ed836bf/1/DVwdcS0FViSRpKJ4qEuc2jVTlDI.mft
File:                     DVwdcS0FViSRpKJ4qEuc2jVTlDI.mft (raw, json)
Hash identifier:          WFEW3ybC8bgdvys3aznLVbgrh8uyZotRGIMb+tjY+sE=
Subject key identifier:   6A:F8:A0:58:52:BE:14:9B:6E:E0:83:4B:59:ED:A6:75:E5:7E:C6:8C
Authority key identifier: 0D:5C:1D:71:2D:05:56:24:91:A4:A2:78:A8:4B:9C:DA:35:53:94:32
Certificate issuer:       /CN=0d5c1d712d05562491a4a278a84b9cda35539432
Certificate serial:       018C908B8BE9BBD3B4D368B03CD8EE90B026
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DVwdcS0FViSRpKJ4qEuc2jVTlDI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/36756a-16b1-47cf-bb16-83601ed836bf/1/DVwdcS0FViSRpKJ4qEuc2jVTlDI.mft
Manifest number:          0789
Signing time:             Fri 22 Dec 2023 08:01:53 +0000
Manifest this update:     Fri 22 Dec 2023 08:01:53 +0000
Manifest next update:     Sat 23 Dec 2023 08:01:53 +0000
Files and hashes:         1: DVwdcS0FViSRpKJ4qEuc2jVTlDI.crl (hash: vblA0oZCt4WueTV5uvTLDdHhereCF8L8TrILcQibB2k=)
                          2: hg9bz1D74PMGFJVVcJ-xSorVrTU.roa (hash: uAESxLGARvfAkwjbjCbnOUMAeSbeYgloXryW16d83GE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:90:8b:8b:e9:bb:d3:b4:d3:68:b0:3c:d8:ee:90:b0:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d5c1d712d05562491a4a278a84b9cda35539432
        Validity
            Not Before: Dec 22 08:01:53 2023 GMT
            Not After : Dec 23 08:01:53 2023 GMT
        Subject: CN=6af8a05852be149b6ee0834b59eda675e57ec68c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:16:c9:0f:13:f8:83:fb:2e:af:6c:f4:d3:aa:
                    69:ed:65:a6:fe:b1:7d:8b:63:d9:24:95:1c:f2:35:
                    05:6d:36:23:89:99:19:16:26:1f:69:5f:fa:8c:88:
                    11:a3:1a:1a:0e:c0:6b:7a:2f:b1:17:4e:2c:39:ef:
                    0b:b5:74:ec:78:ad:93:2f:b4:7b:7f:4e:c5:18:ac:
                    be:84:06:b4:1b:87:bf:80:6a:1d:25:2b:a2:86:dc:
                    16:da:b1:a1:a5:e7:a2:d5:40:dd:55:a9:b6:a4:f9:
                    13:eb:e8:b9:e0:d5:f4:22:f2:ff:f8:eb:69:2b:c4:
                    15:6d:8b:ff:c8:75:72:e4:ea:43:7e:67:25:42:3d:
                    c3:6d:c0:60:11:11:1a:a3:75:3e:31:6a:68:81:f1:
                    53:3d:6f:ed:b5:5f:f4:7e:cf:5a:d1:d3:a2:dc:7a:
                    28:05:4a:94:19:a7:a6:6b:46:ce:50:a5:79:81:3a:
                    e7:c0:2d:68:96:86:40:aa:6a:47:83:9b:d1:16:b2:
                    22:dd:ec:a7:aa:41:86:03:d8:da:fb:9a:bd:18:d6:
                    af:6c:e9:e2:4c:4c:a0:c1:32:6b:42:3a:6b:62:ad:
                    65:5b:f5:24:d5:4f:58:24:97:36:da:47:01:b4:24:
                    b1:d1:37:53:9d:c2:34:b1:f3:a5:c1:87:42:48:48:
                    69:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:F8:A0:58:52:BE:14:9B:6E:E0:83:4B:59:ED:A6:75:E5:7E:C6:8C
            X509v3 Authority Key Identifier:
                keyid:0D:5C:1D:71:2D:05:56:24:91:A4:A2:78:A8:4B:9C:DA:35:53:94:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DVwdcS0FViSRpKJ4qEuc2jVTlDI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/36756a-16b1-47cf-bb16-83601ed836bf/1/DVwdcS0FViSRpKJ4qEuc2jVTlDI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/36756a-16b1-47cf-bb16-83601ed836bf/1/DVwdcS0FViSRpKJ4qEuc2jVTlDI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:c6:58:53:cd:ea:40:b9:85:48:79:59:1d:e5:d9:f5:ba:f6:
         ed:d1:73:5c:bf:b9:92:ae:2c:5e:bb:de:a6:76:9f:63:4d:cd:
         74:f0:22:85:50:5f:ed:16:12:44:61:66:6e:82:c0:79:06:d0:
         42:78:08:f3:a0:f2:ec:df:18:b5:99:61:a8:7b:1d:7f:75:49:
         bf:74:96:f0:21:93:c6:b2:22:55:84:e2:a0:37:d4:48:69:3e:
         70:32:96:1a:67:1a:57:e1:9e:36:ba:e7:37:11:a1:99:37:84:
         9d:79:90:93:7a:6f:5c:31:97:e9:4a:0f:40:c7:10:54:4b:e3:
         88:bf:40:f4:d0:87:84:84:f7:d4:85:57:ce:a2:a5:c5:93:1a:
         aa:91:73:6c:55:6e:7f:6e:c5:cc:f7:42:0b:5e:53:c9:24:48:
         a4:04:63:97:8c:59:7d:59:b2:04:84:70:2e:c1:97:74:b6:9d:
         02:60:bc:d0:5c:7d:55:86:c3:ba:3b:22:d7:56:5b:0f:8c:7c:
         1b:23:83:ac:e8:94:cb:f1:0d:bc:34:e5:60:32:d2:99:75:a8:
         19:16:90:ab:a7:7f:de:0f:b7:95:cd:5b:30:84:40:66:a1:19:
         48:e6:57:2c:79:30:b3:d3:a1:60:d6:5c:64:22:11:74:7a:b1:
         a6:8d:0d:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----