Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/8c66f8-db5e-454d-a3d1-713903314a70/1/SraGimIHs0dow7Q5zLyO3Ue2hmU.mft
File:                     SraGimIHs0dow7Q5zLyO3Ue2hmU.mft (raw, json)
Hash identifier:          Cn5AwV3e8jyGUbncg4ijFzW0vaJCREdtwpB9zC8hhBI=
Subject key identifier:   C5:46:CB:3E:EB:98:F4:6A:F6:16:3E:17:C9:CF:E8:8C:FF:60:C2:74
Authority key identifier: 4A:B6:86:8A:62:07:B3:47:68:C3:B4:39:CC:BC:8E:DD:47:B6:86:65
Certificate issuer:       /CN=4ab6868a6207b34768c3b439ccbc8edd47b68665
Certificate serial:       018BD64A12F41B2906508DCF48AB250D390B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SraGimIHs0dow7Q5zLyO3Ue2hmU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/8c66f8-db5e-454d-a3d1-713903314a70/1/SraGimIHs0dow7Q5zLyO3Ue2hmU.mft
Manifest number:          0862
Signing time:             Thu 16 Nov 2023 04:01:00 +0000
Manifest this update:     Thu 16 Nov 2023 04:01:00 +0000
Manifest next update:     Fri 17 Nov 2023 04:01:00 +0000
Files and hashes:         1: CViOE1pLKIPMSC4LUp96zcYJR4o.roa (hash: xtstgW6/lMt+xfuLUBZxLOsXmlr7wKCCh73iQnVdYKM=)
                          2: SraGimIHs0dow7Q5zLyO3Ue2hmU.crl (hash: qQHbQCFcvx6wGyAURFZOSqksZTHpy2MTmU99/jMrgXY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:d6:4a:12:f4:1b:29:06:50:8d:cf:48:ab:25:0d:39:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab6868a6207b34768c3b439ccbc8edd47b68665
        Validity
            Not Before: Nov 16 04:01:00 2023 GMT
            Not After : Nov 17 04:01:00 2023 GMT
        Subject: CN=c546cb3eeb98f46af6163e17c9cfe88cff60c274
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f1:20:91:3e:13:69:cc:c6:58:5b:0d:9c:f3:
                    0a:02:7e:cb:f6:40:b8:ca:07:9b:2d:45:68:11:58:
                    d6:b5:e4:d5:6e:51:c4:ad:89:8c:15:77:4d:90:a6:
                    2a:6a:8f:aa:34:f0:f1:37:c4:98:92:20:6b:29:fa:
                    85:10:99:ec:5a:23:40:6e:13:df:10:9a:85:10:f6:
                    d0:77:18:b8:ea:b5:20:47:ea:69:99:36:5c:b9:c2:
                    4a:a7:c9:79:03:d0:c0:47:30:cd:91:5a:7e:db:8a:
                    7c:6e:3a:0c:7d:a2:9c:de:67:e4:e7:ec:c0:90:b2:
                    06:cf:10:ac:99:c3:9d:6b:dc:5a:86:85:a7:85:a1:
                    3c:75:a5:91:6b:c6:86:bb:eb:d4:f8:23:f6:44:86:
                    ca:57:e9:7d:c6:f0:25:f7:bc:a6:43:10:08:16:5a:
                    13:f6:26:76:e7:ee:2f:9a:73:a2:cc:4f:ad:6c:0f:
                    ec:0d:5f:31:28:be:03:47:57:25:84:4a:39:d9:da:
                    cf:45:14:e6:f2:ee:d2:0a:0c:fb:30:44:9e:a4:4f:
                    63:f7:2f:1a:4a:03:9a:d6:b0:99:68:0c:17:26:40:
                    4c:36:75:14:b1:28:ec:3f:a9:99:e4:65:2c:6b:ef:
                    da:af:e0:90:88:96:b3:d4:62:2a:6f:8c:ca:98:b6:
                    f7:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:46:CB:3E:EB:98:F4:6A:F6:16:3E:17:C9:CF:E8:8C:FF:60:C2:74
            X509v3 Authority Key Identifier:
                keyid:4A:B6:86:8A:62:07:B3:47:68:C3:B4:39:CC:BC:8E:DD:47:B6:86:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SraGimIHs0dow7Q5zLyO3Ue2hmU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/8c66f8-db5e-454d-a3d1-713903314a70/1/SraGimIHs0dow7Q5zLyO3Ue2hmU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/8c66f8-db5e-454d-a3d1-713903314a70/1/SraGimIHs0dow7Q5zLyO3Ue2hmU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:29:8e:a7:be:83:5d:4f:20:24:67:0b:cd:c7:09:72:75:b7:
         51:c8:d3:67:fc:95:42:47:cb:0a:24:98:39:ed:35:92:97:bc:
         c9:59:26:9c:8d:3d:d7:18:5d:fe:48:de:67:1f:22:cb:e4:c4:
         cc:86:a6:5e:7b:11:eb:4d:41:ab:04:59:25:c6:7a:03:6d:3f:
         bf:de:35:a5:dc:81:58:01:be:fb:37:5b:fe:f0:2a:1f:c6:b9:
         a8:a1:83:ce:24:1e:dc:49:a4:b6:b9:81:81:92:96:b1:7b:7e:
         da:9c:94:2a:48:d4:86:0d:f6:4b:2e:79:e5:ff:f9:d7:db:d9:
         51:3c:da:5a:e6:1b:c5:69:45:9e:45:ef:8d:96:18:4b:3a:5d:
         d2:1d:7c:3a:f2:1e:ee:4d:f3:09:e2:28:70:e8:a2:11:f1:25:
         ed:14:69:f1:41:02:c2:68:13:01:89:d7:ce:24:a9:c4:f4:de:
         b1:78:12:72:26:85:1c:f0:ee:02:a7:18:f5:d2:38:ed:32:74:
         92:aa:67:75:e1:6b:d6:fa:06:95:44:5a:d3:51:e2:5b:38:90:
         3b:15:fc:2b:7b:e1:28:4b:54:55:ac:48:86:82:04:6e:74:f7:
         af:92:7e:7d:47:76:ca:37:f3:45:27:2c:09:98:4b:cf:e6:28:
         2c:a1:96:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----