Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/97d5c7-935c-41da-9991-cd4b2a1d79aa/1/KaefPGi_9F0hYDL5knKQj0647GA.mft
File:                     KaefPGi_9F0hYDL5knKQj0647GA.mft (raw, json)
Hash identifier:          945dneMggVj5VtGt0uLpT6puZwa2lIsZzoFSztquX80=
Subject key identifier:   0E:EF:83:32:7B:EC:3F:B7:8D:64:04:E5:EC:E9:35:DE:94:2D:53:B4
Authority key identifier: 29:A7:9F:3C:68:BF:F4:5D:21:60:32:F9:92:72:90:8F:4E:B8:EC:60
Certificate issuer:       /CN=29a79f3c68bff45d216032f99272908f4eb8ec60
Certificate serial:       018B7FD06EB640709A534B9FB621BB686A6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KaefPGi_9F0hYDL5knKQj0647GA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/97d5c7-935c-41da-9991-cd4b2a1d79aa/1/KaefPGi_9F0hYDL5knKQj0647GA.mft
Manifest number:          0876
Signing time:             Mon 30 Oct 2023 09:00:48 +0000
Manifest this update:     Mon 30 Oct 2023 09:00:48 +0000
Manifest next update:     Tue 31 Oct 2023 09:00:48 +0000
Files and hashes:         1: KaefPGi_9F0hYDL5knKQj0647GA.crl (hash: MdF/PeQbMi36j5fw7+Tio7TM4y7KpsJNQ9qIMlRnlBQ=)
                          2: i6KKj8_ALTYk48cinPzbteL_OSw.roa (hash: xTvjtiaHh+ru4Av2LAbD4RDJ3BZKR0UN3qj2lN/gS/8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:7f:d0:6e:b6:40:70:9a:53:4b:9f:b6:21:bb:68:6a:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29a79f3c68bff45d216032f99272908f4eb8ec60
        Validity
            Not Before: Oct 30 09:00:48 2023 GMT
            Not After : Oct 31 09:00:48 2023 GMT
        Subject: CN=0eef83327bec3fb78d6404e5ece935de942d53b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:a3:dd:38:f2:c3:fa:fe:32:4d:ce:3a:f1:0b:
                    50:25:eb:34:9b:cf:f1:0d:df:78:f2:89:62:e5:34:
                    47:5d:44:af:1f:56:61:10:e0:22:7e:48:1f:4e:fc:
                    41:6a:2a:d2:fd:bd:6e:18:a2:c9:c5:81:8c:57:04:
                    8f:90:0e:b8:69:90:a1:91:b5:1f:ff:a6:a0:5f:0b:
                    97:50:0b:b0:0d:72:a8:f7:1a:25:c1:66:6b:e4:6d:
                    d5:8f:c1:bd:90:58:84:cf:bb:9f:1f:49:42:2d:4c:
                    4d:2f:f9:0c:95:b8:0f:80:ec:f2:9d:5a:a3:a6:8a:
                    72:f1:e9:eb:43:61:ac:1f:11:be:4d:a6:b3:4d:45:
                    68:f4:a4:c5:6e:29:4f:c8:8a:f9:40:3c:02:1d:88:
                    00:c7:1c:90:c2:8f:23:74:65:a5:6c:76:75:ce:e5:
                    1c:81:47:36:51:98:94:88:23:80:14:e3:19:c7:88:
                    3a:cf:aa:e5:a5:59:af:0a:0b:8b:84:de:02:80:93:
                    bc:c1:49:51:98:79:cc:c6:57:03:a2:25:95:c4:50:
                    64:74:60:c3:78:4f:a3:da:bc:44:2f:4b:1d:1e:93:
                    1d:19:8f:e0:9d:b2:eb:e6:f5:66:18:47:26:62:cf:
                    ae:e4:f4:1e:81:07:af:3d:4c:a4:3e:50:d7:32:e7:
                    d5:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:EF:83:32:7B:EC:3F:B7:8D:64:04:E5:EC:E9:35:DE:94:2D:53:B4
            X509v3 Authority Key Identifier:
                keyid:29:A7:9F:3C:68:BF:F4:5D:21:60:32:F9:92:72:90:8F:4E:B8:EC:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KaefPGi_9F0hYDL5knKQj0647GA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/97d5c7-935c-41da-9991-cd4b2a1d79aa/1/KaefPGi_9F0hYDL5knKQj0647GA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/97d5c7-935c-41da-9991-cd4b2a1d79aa/1/KaefPGi_9F0hYDL5knKQj0647GA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:2c:b3:c1:47:28:7a:10:19:9d:4b:16:f1:80:f4:e7:1d:5e:
         c6:e3:01:f1:a8:ae:88:18:c2:91:55:ce:c0:66:cc:84:71:38:
         b2:cc:1c:d1:9a:62:e8:f4:39:fe:5a:5f:5c:74:78:4a:b9:ff:
         94:f6:d6:85:a7:9d:a6:95:e0:ad:15:ce:7c:74:ce:82:46:c4:
         a1:85:9e:5a:d3:d6:47:4b:80:33:03:21:d3:4b:6f:91:51:30:
         ce:0d:2d:f4:d6:5c:5e:80:48:10:2c:d9:fa:63:57:a7:01:68:
         86:66:45:24:4c:fc:7a:78:74:c6:f9:e2:da:ff:45:3f:9d:ba:
         cb:46:ce:9a:2f:c6:39:24:bc:f1:bc:96:0a:95:64:75:ef:07:
         dd:f1:c6:aa:89:a1:1d:f3:4d:77:66:7c:1a:20:cd:5e:d1:30:
         39:0d:29:cc:be:7e:f1:f1:54:16:b6:f6:43:4f:1e:e1:cf:92:
         e1:86:e1:36:a5:a4:9c:79:63:eb:f6:b3:89:b5:df:3e:46:3e:
         cd:76:5a:ac:62:61:4a:a6:85:c2:96:25:3b:68:1f:93:7d:b8:
         4b:0a:c2:1f:f1:7f:be:44:1c:30:af:b5:b6:6e:51:f4:fd:45:
         0e:a0:cb:e0:83:3a:bd:db:28:7c:18:68:c0:a0:7b:f9:3a:09:
         04:9b:3b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----