Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/c78f12-2d14-4276-8c8e-8bdc8fbbd40d/1/6ftt1aXL_YTaguJ1n2lVYiwe6TI.mft
File:                     6ftt1aXL_YTaguJ1n2lVYiwe6TI.mft (raw, json)
Hash identifier:          Edq2rjgq8xkFzi13sYH3UcuQCNck/kDnA6NLLgJxMnY=
Subject key identifier:   66:95:62:68:05:5B:EA:F9:7D:30:C1:BA:D7:65:A1:F4:C7:CF:08:DC
Authority key identifier: E9:FB:6D:D5:A5:CB:FD:84:DA:82:E2:75:9F:69:55:62:2C:1E:E9:32
Certificate issuer:       /CN=e9fb6dd5a5cbfd84da82e2759f6955622c1ee932
Certificate serial:       018B4C875C2E3F5763179F02DB3FF21A7C66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6ftt1aXL_YTaguJ1n2lVYiwe6TI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/c78f12-2d14-4276-8c8e-8bdc8fbbd40d/1/6ftt1aXL_YTaguJ1n2lVYiwe6TI.mft
Manifest number:          0870
Signing time:             Fri 20 Oct 2023 10:00:21 +0000
Manifest this update:     Fri 20 Oct 2023 10:00:21 +0000
Manifest next update:     Sat 21 Oct 2023 10:00:21 +0000
Files and hashes:         1: 6ftt1aXL_YTaguJ1n2lVYiwe6TI.crl (hash: P9NYAQA48ujtj34EG01QwiSt4sf0LnfrphoRBDKuHM8=)
                          2: bFV_pAGPphHMJVujPjWv2JgjIok.roa (hash: /RhEH/ewbd4rUu+/GqnH33IQJjPz5MXAu1+yrJQPswE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:4c:87:5c:2e:3f:57:63:17:9f:02:db:3f:f2:1a:7c:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9fb6dd5a5cbfd84da82e2759f6955622c1ee932
        Validity
            Not Before: Oct 20 10:00:21 2023 GMT
            Not After : Oct 21 10:00:21 2023 GMT
        Subject: CN=66956268055beaf97d30c1bad765a1f4c7cf08dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e7:1f:95:93:ed:e8:bd:1c:56:7a:52:ee:d3:
                    97:33:69:e2:6a:a6:aa:05:97:2c:5d:a3:66:34:64:
                    42:5f:f1:fc:5e:52:2e:78:c0:73:5f:63:22:12:e1:
                    9e:7c:2c:5d:a5:8b:7c:59:9f:b1:d9:27:23:64:3d:
                    b7:75:bb:33:1c:68:a2:cf:73:3e:8d:25:8d:b5:0d:
                    d4:dd:18:e5:6b:e5:cf:05:6b:eb:7f:c5:56:87:3c:
                    91:79:7d:20:4b:2d:fb:8d:71:18:2f:94:f9:60:42:
                    c0:17:07:d0:e4:52:3f:64:1f:d4:7e:ad:14:1a:68:
                    98:2a:28:56:df:18:3c:cc:ff:fc:48:2a:04:27:23:
                    83:78:77:13:37:c8:3d:a4:6b:03:ea:6b:05:e8:1f:
                    24:a8:00:1b:c4:f4:12:2d:0b:3c:95:29:c2:29:fd:
                    f3:66:a4:fb:f4:d8:ec:69:00:d5:5a:9b:87:4a:06:
                    3b:45:d2:a1:aa:a1:cc:dd:06:bd:4f:11:39:6a:42:
                    1e:e9:fa:36:45:1c:5f:b4:9b:6f:f0:95:dc:1d:8a:
                    e7:77:61:ec:c7:cb:47:a4:d9:24:06:ce:2f:d5:5f:
                    70:98:bc:94:26:c3:7b:dd:da:5f:a1:73:09:e9:a4:
                    f7:2e:d5:86:98:0f:cf:fb:5d:f3:f4:fd:a5:00:3c:
                    71:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:95:62:68:05:5B:EA:F9:7D:30:C1:BA:D7:65:A1:F4:C7:CF:08:DC
            X509v3 Authority Key Identifier:
                keyid:E9:FB:6D:D5:A5:CB:FD:84:DA:82:E2:75:9F:69:55:62:2C:1E:E9:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ftt1aXL_YTaguJ1n2lVYiwe6TI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/c78f12-2d14-4276-8c8e-8bdc8fbbd40d/1/6ftt1aXL_YTaguJ1n2lVYiwe6TI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/c78f12-2d14-4276-8c8e-8bdc8fbbd40d/1/6ftt1aXL_YTaguJ1n2lVYiwe6TI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:18:37:71:c9:13:4f:17:a9:48:af:f2:6e:c6:7f:53:09:db:
         1f:53:14:aa:6e:98:7f:b6:64:dd:57:6d:0d:45:50:9a:ef:f8:
         ef:37:01:fe:3b:46:97:7a:59:63:49:f4:03:79:7a:16:67:f7:
         1b:b0:57:b3:80:ba:4a:32:01:23:79:69:9e:f2:a1:ec:62:3b:
         3b:7a:9d:a6:0b:1e:cc:a1:31:fc:a1:d3:80:f9:ee:b3:c8:d2:
         4e:b4:1d:d0:2d:fb:1c:91:cf:2e:ca:45:52:ee:4f:ae:da:7a:
         7f:64:f9:4a:8c:8e:87:e9:f4:50:60:2d:33:4e:3e:3e:d2:20:
         f7:99:19:2f:36:37:35:d0:27:d7:1d:6b:49:36:31:ab:ad:f2:
         6e:24:c6:79:15:12:4b:1d:a1:1d:cf:2a:f5:e7:97:22:6d:4f:
         03:a1:4f:3e:63:68:f9:5b:0e:e7:12:e5:e6:18:46:3c:78:af:
         75:75:cb:05:28:54:c3:90:19:12:99:69:16:8b:a4:ad:25:b2:
         f5:6a:8f:31:81:cf:c8:65:11:c8:07:f5:a0:3f:66:15:69:ac:
         9d:90:d7:d6:fc:dd:87:2c:cc:57:8e:ae:a9:cd:e6:37:b0:d7:
         aa:75:92:ea:34:b0:25:5f:18:27:95:88:33:34:be:9f:4a:1f:
         b7:71:5e:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----