Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/1463db-c0fa-4449-aa1f-808d2a02edca/1/Gv9LIO-lvhg9aDXzp6idUVR-bfY.mft
File:                     Gv9LIO-lvhg9aDXzp6idUVR-bfY.mft (raw, json)
Hash identifier:          jsHCRPesc4+Mxy+ylWx5FZ0boTWR2tog9zmOd1T+zmU=
Subject key identifier:   99:8A:52:84:15:ED:85:72:6C:AD:EE:46:0F:5E:62:EE:62:56:FD:07
Authority key identifier: 1A:FF:4B:20:EF:A5:BE:18:3D:68:35:F3:A7:A8:9D:51:54:7E:6D:F6
Certificate issuer:       /CN=1aff4b20efa5be183d6835f3a7a89d51547e6df6
Certificate serial:       0189AA5CE478595A9188E959C2FE3CF54872
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gv9LIO-lvhg9aDXzp6idUVR-bfY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/1463db-c0fa-4449-aa1f-808d2a02edca/1/Gv9LIO-lvhg9aDXzp6idUVR-bfY.mft
Manifest number:          047C
Signing time:             Mon 31 Jul 2023 05:12:41 +0000
Manifest this update:     Mon 31 Jul 2023 05:12:41 +0000
Manifest next update:     Tue 01 Aug 2023 05:12:41 +0000
Files and hashes:         1: 2_oYhrGa3i_RMcvQWJo95s9ksKk.roa (hash: Kk0eWlcys2gs+oDD5MaKZBG5OWSKm34kqKLw1zsws6c=)
                          2: Gv9LIO-lvhg9aDXzp6idUVR-bfY.crl (hash: MD1NjHTGVCCwJTrcvxYbo+fSYtys5w1yqTBSNxzOIJ8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:aa:5c:e4:78:59:5a:91:88:e9:59:c2:fe:3c:f5:48:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1aff4b20efa5be183d6835f3a7a89d51547e6df6
        Validity
            Not Before: Jul 31 05:12:41 2023 GMT
            Not After : Aug  1 05:12:41 2023 GMT
        Subject: CN=998a528415ed85726cadee460f5e62ee6256fd07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:1e:61:0e:a1:65:cc:57:04:7b:26:d3:5a:6e:
                    52:84:a0:a4:8b:d7:f6:e2:94:0b:4d:9f:4f:90:39:
                    eb:70:26:94:97:57:00:ac:c0:24:33:6f:17:26:df:
                    4d:1b:bf:85:b0:18:63:46:34:32:7c:f3:de:13:b5:
                    d5:39:92:09:b7:08:5a:fd:2c:e9:2d:99:49:0f:9b:
                    af:45:1b:29:85:90:a6:ae:f2:d1:7f:d3:98:aa:da:
                    19:10:ea:af:62:0e:12:a1:d9:f8:74:04:5f:c6:63:
                    e8:be:94:67:e9:bc:dc:9a:21:36:2f:18:3a:75:64:
                    eb:ae:5b:c9:2c:54:25:2a:cd:99:7e:5e:1f:0e:45:
                    8a:95:fa:6b:7f:4c:7d:b2:53:14:11:3a:26:41:da:
                    bb:2b:24:8a:27:ba:34:5f:7b:61:d1:83:31:85:46:
                    0f:dc:58:57:e8:c2:b8:f4:4f:2a:ed:d0:98:f8:86:
                    17:5f:75:0e:0f:a3:60:7b:af:24:43:6b:1f:f5:46:
                    32:ef:af:de:8c:49:77:ca:66:25:e7:83:a6:bd:6f:
                    62:18:97:65:c8:8a:87:4b:dc:20:9b:3c:79:1a:ce:
                    4b:12:bc:5d:c9:cf:40:c3:be:53:62:8a:da:76:41:
                    92:d5:da:86:6e:f6:85:10:5d:38:a4:0c:a5:95:74:
                    d3:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:8A:52:84:15:ED:85:72:6C:AD:EE:46:0F:5E:62:EE:62:56:FD:07
            X509v3 Authority Key Identifier:
                keyid:1A:FF:4B:20:EF:A5:BE:18:3D:68:35:F3:A7:A8:9D:51:54:7E:6D:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gv9LIO-lvhg9aDXzp6idUVR-bfY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/1463db-c0fa-4449-aa1f-808d2a02edca/1/Gv9LIO-lvhg9aDXzp6idUVR-bfY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/1463db-c0fa-4449-aa1f-808d2a02edca/1/Gv9LIO-lvhg9aDXzp6idUVR-bfY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:b9:ea:58:ed:6f:b8:51:b7:1c:3a:50:75:75:19:f2:6e:f6:
         03:03:06:62:44:81:ea:f5:32:b6:a4:6c:13:e7:39:55:cb:b1:
         1c:73:64:b0:39:47:c5:63:9d:b3:4d:15:aa:6a:a8:0f:2e:4c:
         2a:58:f0:40:29:c6:f7:2e:12:14:69:7e:75:01:56:9b:38:9e:
         04:a6:9c:1d:ae:18:8f:9a:2c:aa:4b:98:36:af:da:98:c3:29:
         91:e3:d6:f2:a9:1c:d0:30:70:7b:aa:d1:3a:41:1f:60:c0:75:
         ec:51:d6:63:4b:73:84:dd:dc:79:89:3a:48:76:e8:fe:b4:1e:
         f2:0e:56:cc:8c:9a:2a:d2:b2:a9:be:d5:53:97:8c:04:47:00:
         08:2a:9d:48:f5:03:0a:33:ed:89:d9:7a:89:43:77:8c:47:f9:
         47:01:73:7f:f5:a8:dd:a8:cf:7c:36:7b:a2:6e:c2:9b:c7:56:
         fd:17:59:aa:8f:c2:4f:7e:6c:17:06:a9:8a:68:25:4c:f0:a2:
         94:bf:0e:81:f9:f9:3a:34:e9:d1:f0:df:81:c6:0d:2c:6f:1b:
         35:e3:b7:a2:dd:51:c9:9e:c5:70:1f:cf:ef:d8:4f:2d:7c:ae:
         b4:d0:01:f0:70:b6:29:b6:12:ca:ae:12:e3:ad:07:47:86:f5:
         05:43:86:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----