Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/5ec1a9-44e2-436d-bacf-197abed4d16a/1/8GYD8Cgu1ZATXzNkX1Xytiwpjjw.mft
File:                     8GYD8Cgu1ZATXzNkX1Xytiwpjjw.mft (raw, json)
Hash identifier:          PlInyZ3DzU7MI/Qarhd5HILqvXSq2IXlbMHk8o3fvHI=
Subject key identifier:   82:9A:B2:E7:2B:DE:3F:DD:38:D9:CB:9E:94:8D:8B:7F:6F:F4:2F:A3
Authority key identifier: F0:66:03:F0:28:2E:D5:90:13:5F:33:64:5F:55:F2:B6:2C:29:8E:3C
Certificate issuer:       /CN=f06603f0282ed590135f33645f55f2b62c298e3c
Certificate serial:       018B8564C952F7388B8ADD1A13BC1C4127F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8GYD8Cgu1ZATXzNkX1Xytiwpjjw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/5ec1a9-44e2-436d-bacf-197abed4d16a/1/8GYD8Cgu1ZATXzNkX1Xytiwpjjw.mft
Manifest number:          08A5
Signing time:             Tue 31 Oct 2023 11:00:56 +0000
Manifest this update:     Tue 31 Oct 2023 11:00:56 +0000
Manifest next update:     Wed 01 Nov 2023 11:00:56 +0000
Files and hashes:         1: 8GYD8Cgu1ZATXzNkX1Xytiwpjjw.crl (hash: HSu5xZLBjYBZsu3QAK1WR5iDBR8GyDxI+4ZXBh8DRLc=)
                          2: ZDz0U-wPMqdO9KoSDJqCFE3jq_o.roa (hash: LMuJkAQyGhOiJf5mU84Os2KtLo1rHUimMMkc5MdjSAw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:85:64:c9:52:f7:38:8b:8a:dd:1a:13:bc:1c:41:27:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f06603f0282ed590135f33645f55f2b62c298e3c
        Validity
            Not Before: Oct 31 11:00:56 2023 GMT
            Not After : Nov  1 11:00:56 2023 GMT
        Subject: CN=829ab2e72bde3fdd38d9cb9e948d8b7f6ff42fa3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ff:f8:10:e3:86:a6:1c:ef:88:9b:13:19:43:
                    eb:bb:07:30:95:c6:f3:1b:33:a5:e0:4b:f1:81:5d:
                    04:98:6c:db:a5:15:27:e3:2a:a6:ae:88:b0:31:0f:
                    2e:86:4d:38:e1:b5:8f:49:05:17:a6:f8:f6:18:e2:
                    1a:3d:9a:80:e4:90:c3:74:50:2a:b5:8a:67:7c:25:
                    d4:a8:ab:f2:c2:83:90:b8:c9:5f:34:32:96:2d:f3:
                    3d:2d:29:00:b5:9d:fe:90:0a:1b:f0:06:1c:e1:83:
                    50:b5:4a:b1:80:4f:b2:92:a1:b3:80:28:f7:b1:1a:
                    47:82:13:3e:5b:b8:f6:05:e4:24:c2:46:0e:7e:79:
                    e2:ee:06:05:08:6a:69:3e:9a:e6:9b:05:ae:0b:a2:
                    f3:f2:c8:7a:97:17:ca:2a:a2:e0:a4:d8:cf:90:75:
                    77:e8:72:15:6f:24:63:12:5d:a9:8e:1f:8b:6e:72:
                    9a:0c:42:ec:d6:4b:21:f4:5d:78:40:ad:ce:3a:da:
                    d5:6a:dd:39:00:e5:98:3a:1c:29:2a:86:65:b4:f3:
                    80:19:93:ae:1f:d9:80:fa:fd:fb:b1:17:b4:72:88:
                    27:9c:af:76:d6:d4:a8:67:c6:bc:b5:01:3b:12:b0:
                    86:e1:c1:19:c4:61:76:84:85:ef:bf:b5:9e:05:5e:
                    54:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:9A:B2:E7:2B:DE:3F:DD:38:D9:CB:9E:94:8D:8B:7F:6F:F4:2F:A3
            X509v3 Authority Key Identifier:
                keyid:F0:66:03:F0:28:2E:D5:90:13:5F:33:64:5F:55:F2:B6:2C:29:8E:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8GYD8Cgu1ZATXzNkX1Xytiwpjjw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/5ec1a9-44e2-436d-bacf-197abed4d16a/1/8GYD8Cgu1ZATXzNkX1Xytiwpjjw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/5ec1a9-44e2-436d-bacf-197abed4d16a/1/8GYD8Cgu1ZATXzNkX1Xytiwpjjw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:19:c5:ff:fe:26:01:69:9e:44:b3:44:1e:20:78:2b:6e:98:
         c1:5f:6d:28:bf:ad:1c:3d:ce:5b:63:1b:62:1d:93:b7:bd:c4:
         a7:e9:f9:58:87:f7:1a:fc:3a:8d:64:24:36:db:92:89:20:34:
         90:5a:4a:75:57:f4:7a:20:23:0f:4a:94:96:fd:2f:56:8c:51:
         56:53:9c:0a:32:67:05:8a:23:b1:b3:32:7b:51:5c:4b:9d:3b:
         a1:bc:88:ec:c2:c0:82:4f:b0:40:a0:0d:f5:c9:54:eb:0e:35:
         d5:3b:12:28:06:f4:4a:f2:74:13:bc:f4:5b:7e:84:21:bd:9f:
         eb:81:1e:e0:9a:b0:22:e6:12:08:6e:f2:9d:a2:e3:c0:86:3a:
         1f:44:a2:6c:97:14:30:01:ad:3c:c4:50:50:1b:32:2f:a6:85:
         6b:ef:dd:2a:28:ef:0a:ca:02:8f:1e:05:2a:dc:03:a5:6d:a8:
         46:96:1d:45:e1:ae:0f:1c:7f:5d:24:e6:1d:61:5c:7d:3f:74:
         42:f8:23:b4:18:2d:fe:36:22:17:90:ec:36:36:d1:db:09:27:
         87:c1:68:a7:eb:a4:58:5b:5e:77:1c:e5:a1:47:fb:b6:94:d9:
         1e:40:76:95:e7:e7:ab:78:ad:7a:af:69:83:b4:97:1c:9a:55:
         10:54:f0:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----