Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/78859a-f43c-4c21-96e2-9a7ae32c625b/1/2gEyPvr-4zIGTieLl8uNH52P73k.mft
File:                     2gEyPvr-4zIGTieLl8uNH52P73k.mft (raw, json)
Hash identifier:          muVas5HtvkDHpUTKQCcyQTQio+e7/UiRooclt9Ic8/4=
Subject key identifier:   8B:3C:71:D9:F8:60:38:0A:FF:CB:AA:B3:E2:18:3D:36:41:BD:E0:AD
Authority key identifier: DA:01:32:3E:FA:FE:E3:32:06:4E:27:8B:97:CB:8D:1F:9D:8F:EF:79
Certificate issuer:       /CN=da01323efafee332064e278b97cb8d1f9d8fef79
Certificate serial:       018C5E549002247FEA48BD11872012417735
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2gEyPvr-4zIGTieLl8uNH52P73k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/78859a-f43c-4c21-96e2-9a7ae32c625b/1/2gEyPvr-4zIGTieLl8uNH52P73k.mft
Manifest number:          07B0
Signing time:             Tue 12 Dec 2023 14:00:49 +0000
Manifest this update:     Tue 12 Dec 2023 14:00:49 +0000
Manifest next update:     Wed 13 Dec 2023 14:00:49 +0000
Files and hashes:         1: 2gEyPvr-4zIGTieLl8uNH52P73k.crl (hash: QTK97l3ooZWFE0y9nfBLWTJtFCTsjMEVBO9/ozwYd2A=)
                          2: KEO3nuJ9gJCoRVhL9gceW9OSl2M.roa (hash: 4fptjiJZxHQpCKLcmsmsR7ss3cighMJAW3YcyxtKE6I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:5e:54:90:02:24:7f:ea:48:bd:11:87:20:12:41:77:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da01323efafee332064e278b97cb8d1f9d8fef79
        Validity
            Not Before: Dec 12 14:00:49 2023 GMT
            Not After : Dec 13 14:00:49 2023 GMT
        Subject: CN=8b3c71d9f860380affcbaab3e2183d3641bde0ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:37:9a:b3:26:35:79:63:52:1c:9d:b0:e8:4d:
                    fe:c9:f8:62:88:6e:fa:36:79:15:cd:b8:49:d2:61:
                    ee:ef:db:15:c6:f7:65:a3:71:63:bb:24:69:fa:f9:
                    e3:4a:3e:57:e6:3c:41:a8:63:15:8d:e8:85:da:6f:
                    de:62:df:f4:0d:5a:6e:9b:53:6f:f0:e3:30:38:a2:
                    b9:7b:69:52:fd:76:d2:4c:bb:21:ba:76:9d:97:2c:
                    83:70:08:6c:f7:ef:ee:aa:c6:27:e7:02:07:67:5f:
                    25:0f:41:11:b9:8d:e8:1b:64:87:7c:11:f6:69:4e:
                    c1:57:d6:e5:8c:ae:72:b1:50:01:91:78:94:b2:7b:
                    d8:f5:3b:7f:d5:b5:32:6e:51:5b:c2:2c:07:5d:b3:
                    77:20:33:ad:71:88:20:72:cb:ba:e8:ec:cc:de:53:
                    70:cd:cc:42:fc:4d:a8:90:86:6a:91:78:ab:a0:9d:
                    98:15:2f:1c:66:a7:7b:7c:f7:12:4c:a5:2b:12:b6:
                    7d:1e:7a:da:8f:14:50:88:be:fd:d9:52:8d:10:c3:
                    03:dc:c9:ea:dd:3e:0e:23:06:e0:88:59:c4:f0:e0:
                    a3:d0:17:99:b8:3a:07:f2:de:0c:64:06:94:aa:4a:
                    60:d8:15:a1:c9:89:7b:d3:c8:e8:96:5a:19:83:47:
                    e5:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:3C:71:D9:F8:60:38:0A:FF:CB:AA:B3:E2:18:3D:36:41:BD:E0:AD
            X509v3 Authority Key Identifier:
                keyid:DA:01:32:3E:FA:FE:E3:32:06:4E:27:8B:97:CB:8D:1F:9D:8F:EF:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gEyPvr-4zIGTieLl8uNH52P73k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/78859a-f43c-4c21-96e2-9a7ae32c625b/1/2gEyPvr-4zIGTieLl8uNH52P73k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/78859a-f43c-4c21-96e2-9a7ae32c625b/1/2gEyPvr-4zIGTieLl8uNH52P73k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:04:53:ae:51:e2:dd:7c:5d:50:82:82:25:ec:63:c4:ff:dc:
         5d:e3:06:bc:23:a8:3e:c7:fc:cb:d2:99:15:e6:47:82:bc:40:
         6b:ac:0b:92:15:43:c0:37:aa:9c:6d:c8:4d:4c:ab:0a:93:cc:
         47:69:c8:7c:e1:1e:d6:44:41:42:48:cb:be:17:be:32:fb:ea:
         f0:7c:7f:25:f1:a4:47:c6:a4:e2:67:ec:67:32:9e:08:52:63:
         61:9d:f7:1a:d6:8e:ef:65:94:68:03:f6:45:47:ea:21:61:cf:
         71:5d:2a:cd:d5:89:11:2b:23:1b:60:24:8d:e6:f1:98:f8:de:
         f7:ab:ca:b2:d0:99:71:11:7d:35:61:5d:04:7e:53:a0:f4:b2:
         74:a1:24:57:d1:38:b0:3c:2b:df:72:4e:5f:1b:79:c3:2e:e8:
         dc:01:13:52:c2:5c:7b:54:39:34:8a:e4:f3:61:84:73:13:11:
         1d:2f:6d:e0:7d:f8:d7:fb:7a:13:68:be:b5:05:59:62:71:76:
         49:57:31:3f:68:42:f3:d4:2a:3c:f7:9e:6c:bf:e0:b6:4a:3e:
         d2:8d:6d:e6:84:bb:7f:2d:57:96:69:38:17:31:c4:60:bb:a3:
         1b:88:48:0c:19:55:ea:bd:d4:9a:96:fc:0d:b6:49:0d:b0:af:
         b1:12:48:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----