Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/0a606c-4d74-43d6-9f52-fe6bdc0e4399/1/xjf6gTA0QEMLd1wsItMA4zIJGMg.mft
File:                     xjf6gTA0QEMLd1wsItMA4zIJGMg.mft (raw, json)
Hash identifier:          kuTbzN8DffHn1Xn4Mddj3rHSy0sMI14LUkpry0y83Xc=
Subject key identifier:   85:64:0B:9F:8A:89:EF:61:D1:CF:50:7A:6C:5A:1A:B0:59:65:97:50
Authority key identifier: C6:37:FA:81:30:34:40:43:0B:77:5C:2C:22:D3:00:E3:32:09:18:C8
Certificate issuer:       /CN=c637fa81303440430b775c2c22d300e3320918c8
Certificate serial:       018AA717D9F6138C483AB773A7F76F839730
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xjf6gTA0QEMLd1wsItMA4zIJGMg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/0a606c-4d74-43d6-9f52-fe6bdc0e4399/1/xjf6gTA0QEMLd1wsItMA4zIJGMg.mft
Manifest number:          04BA
Signing time:             Mon 18 Sep 2023 07:01:12 +0000
Manifest this update:     Mon 18 Sep 2023 07:01:12 +0000
Manifest next update:     Tue 19 Sep 2023 07:01:12 +0000
Files and hashes:         1: mwQp_djBPig0cMZ3KW6BYgsAUtw.roa (hash: UBK9vNUsdiIzrW9Ynb9615t3uVFoLZcxGrutMPDUB/o=)
                          2: xjf6gTA0QEMLd1wsItMA4zIJGMg.crl (hash: LiziwZXAQx7z5bEo90E9EMR+Y3vt6XIcHR38LUq193s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:a7:17:d9:f6:13:8c:48:3a:b7:73:a7:f7:6f:83:97:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c637fa81303440430b775c2c22d300e3320918c8
        Validity
            Not Before: Sep 18 07:01:12 2023 GMT
            Not After : Sep 19 07:01:12 2023 GMT
        Subject: CN=85640b9f8a89ef61d1cf507a6c5a1ab059659750
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ed:0a:ed:44:18:c5:17:1f:90:b8:1d:c8:4c:
                    cb:5d:55:fc:33:ad:dc:fe:c5:ea:8d:b6:f4:12:7e:
                    ed:4d:d3:9e:93:56:64:d7:ad:64:bc:58:d4:35:cf:
                    31:3f:65:47:52:d6:06:ad:b8:56:7c:da:c8:22:0e:
                    79:ad:47:21:cd:98:a4:fd:ad:52:c7:77:fb:11:3b:
                    30:72:e2:d4:1a:b2:5b:8e:ad:74:2d:a3:f5:04:f5:
                    e3:cd:32:6b:28:72:7c:ed:e9:2b:bc:b2:0d:af:23:
                    10:65:48:5b:9e:d7:cc:d7:f5:1e:85:c4:1a:f2:5b:
                    93:78:a3:71:ad:64:e7:07:a9:c9:65:7c:a4:b9:d9:
                    e8:04:45:cd:46:7b:02:59:39:9d:3a:9b:de:55:3f:
                    82:e3:1b:e0:95:40:0e:37:8e:38:7e:9e:bf:7d:71:
                    08:1b:b9:36:ba:43:5c:22:d6:0b:f8:bf:0f:5b:f7:
                    b3:91:89:62:75:e9:f4:4f:f0:36:9c:e3:49:1f:b1:
                    aa:1c:dd:8d:e9:69:27:4b:f3:cf:58:df:b9:19:16:
                    ac:00:d9:6f:49:b6:57:4a:7d:50:3b:6a:06:78:d7:
                    6b:1d:75:5d:02:f4:46:27:cf:85:7a:0f:19:e1:54:
                    7b:22:65:f5:e0:8a:4e:5d:4f:c7:e3:25:c0:8a:2f:
                    58:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:64:0B:9F:8A:89:EF:61:D1:CF:50:7A:6C:5A:1A:B0:59:65:97:50
            X509v3 Authority Key Identifier:
                keyid:C6:37:FA:81:30:34:40:43:0B:77:5C:2C:22:D3:00:E3:32:09:18:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xjf6gTA0QEMLd1wsItMA4zIJGMg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/0a606c-4d74-43d6-9f52-fe6bdc0e4399/1/xjf6gTA0QEMLd1wsItMA4zIJGMg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/0a606c-4d74-43d6-9f52-fe6bdc0e4399/1/xjf6gTA0QEMLd1wsItMA4zIJGMg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:22:82:8d:a1:ad:98:5c:bb:6c:0e:1d:0e:56:cd:bd:41:6b:
         4a:40:41:ed:a0:60:b7:04:db:2d:7c:79:ef:5c:a1:2c:4b:19:
         05:d2:f9:97:69:3f:f5:2a:c7:23:ef:38:d6:8c:37:11:97:48:
         98:cb:d6:dc:d7:6a:89:c5:32:5a:63:22:5a:14:6e:e4:ac:b8:
         7a:14:9a:c5:b3:4f:da:ec:23:e9:2a:06:26:a6:52:ba:17:c0:
         f9:fe:a7:8f:f1:de:ff:5f:ff:3d:eb:26:f4:ef:90:08:8b:e4:
         32:7b:2d:62:f8:fe:b0:f4:3c:39:45:cb:af:19:e0:ba:cf:bb:
         25:7b:ca:bf:68:12:ae:6f:48:80:de:6a:21:4c:f2:40:9d:d8:
         f2:ed:d1:c7:10:89:c1:72:dc:a5:b6:4f:fb:ed:ab:35:7f:23:
         73:d4:fa:ad:3a:7e:0b:6a:fd:73:f3:c0:7d:1a:89:52:27:6c:
         65:54:c1:3f:89:ce:9d:8f:68:27:0a:96:4f:c8:fb:c4:5f:99:
         6d:2b:dd:31:31:07:d1:8c:0f:ee:8d:38:ae:24:90:d0:ed:5b:
         22:7c:2d:51:da:61:1f:ee:88:1e:5b:73:29:d0:cb:d8:3c:a7:
         77:21:23:84:6d:6d:d2:c9:bd:b2:c6:70:df:be:28:16:65:59:
         ad:45:8a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----