Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/349835-9cde-473a-9a11-67d95a5f2441/1/3UmIsJViBs-Gu2gFaKJHcjpGqUs.mft
File:                     3UmIsJViBs-Gu2gFaKJHcjpGqUs.mft (raw, json)
Hash identifier:          /LfU7VvgN19dgwTxeI9BqzfUpTjp7nTskbEK7ELnHFQ=
Subject key identifier:   B9:89:D0:2C:E8:50:4A:83:BD:4F:9D:DD:7A:28:92:10:04:2B:15:C9
Authority key identifier: DD:49:88:B0:95:62:06:CF:86:BB:68:05:68:A2:47:72:3A:46:A9:4B
Certificate issuer:       /CN=dd4988b0956206cf86bb680568a247723a46a94b
Certificate serial:       018B8074CF7023D9EA5C80B8BAA82C1FB1D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3UmIsJViBs-Gu2gFaKJHcjpGqUs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/349835-9cde-473a-9a11-67d95a5f2441/1/3UmIsJViBs-Gu2gFaKJHcjpGqUs.mft
Manifest number:          0884
Signing time:             Mon 30 Oct 2023 12:00:20 +0000
Manifest this update:     Mon 30 Oct 2023 12:00:20 +0000
Manifest next update:     Tue 31 Oct 2023 12:00:20 +0000
Files and hashes:         1: 3UmIsJViBs-Gu2gFaKJHcjpGqUs.crl (hash: ByP1CDbZJhoDLKJhEgX6gJf1YEQs9bRtAw4umI+miNU=)
                          2: EpXAUZSF7SKkBFAI9A5upBZxTdk.roa (hash: DuFTOPI3eWvI1vLxTKvZ9JhEAyAnQfxFWY73szs96rU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:80:74:cf:70:23:d9:ea:5c:80:b8:ba:a8:2c:1f:b1:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd4988b0956206cf86bb680568a247723a46a94b
        Validity
            Not Before: Oct 30 12:00:20 2023 GMT
            Not After : Oct 31 12:00:20 2023 GMT
        Subject: CN=b989d02ce8504a83bd4f9ddd7a289210042b15c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e5:ab:ad:7f:7a:2a:ed:93:31:1f:2f:5d:c1:
                    28:f8:05:15:35:48:96:d5:a1:01:5e:a3:2d:8b:32:
                    0a:99:7f:d4:9f:d8:f0:0d:a7:70:ad:82:1e:23:70:
                    6d:fc:83:84:30:c4:7e:9f:b2:95:43:2d:ef:e6:62:
                    0b:83:ca:8d:6f:62:63:9a:81:26:e1:a0:94:79:78:
                    59:75:9e:69:b5:75:a0:4e:ac:cc:b3:a7:af:be:58:
                    ec:88:56:c9:1b:d7:4f:1e:e4:9c:35:ef:be:88:3d:
                    28:e1:bc:0c:b7:a2:a1:35:29:9a:7f:18:2b:ff:65:
                    ce:16:a6:bd:35:d7:49:55:d6:f5:0c:69:b7:28:0d:
                    1b:bb:71:e9:b3:e2:10:2b:ca:69:45:03:1b:83:65:
                    85:ab:bb:43:a3:f8:cb:66:c8:0f:24:ab:48:89:c0:
                    6a:58:ca:6d:12:7f:62:8a:1a:5c:1b:d1:d3:f7:47:
                    64:8e:08:a5:61:2b:ac:03:aa:f7:5a:20:ec:ed:ca:
                    91:3e:6c:38:54:80:95:fc:44:75:ac:c2:6e:53:7c:
                    1f:c1:ee:78:ea:36:8a:67:94:29:a1:9d:d4:1b:2d:
                    3f:d0:05:74:43:dc:3f:6b:95:3e:db:92:17:de:fd:
                    15:58:a6:7a:a1:2d:b7:1d:f1:64:dd:bd:c3:e2:c0:
                    7d:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:89:D0:2C:E8:50:4A:83:BD:4F:9D:DD:7A:28:92:10:04:2B:15:C9
            X509v3 Authority Key Identifier:
                keyid:DD:49:88:B0:95:62:06:CF:86:BB:68:05:68:A2:47:72:3A:46:A9:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3UmIsJViBs-Gu2gFaKJHcjpGqUs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/349835-9cde-473a-9a11-67d95a5f2441/1/3UmIsJViBs-Gu2gFaKJHcjpGqUs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/349835-9cde-473a-9a11-67d95a5f2441/1/3UmIsJViBs-Gu2gFaKJHcjpGqUs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:d1:e6:c0:d9:fa:71:aa:20:14:6d:bd:fa:93:80:f5:31:29:
         07:88:cb:df:22:32:ba:6b:63:55:9a:87:30:75:b7:72:81:81:
         1d:4a:87:b9:02:e2:28:50:ec:0b:27:65:51:b4:fe:f0:cb:cf:
         99:b9:09:db:b1:55:19:9c:fd:89:47:29:84:1c:76:d9:ae:88:
         01:9d:44:ed:83:5d:7e:4b:d1:33:d8:43:dc:eb:94:6f:ab:49:
         74:6c:7c:2e:df:32:49:6f:77:8a:54:51:63:00:36:bc:1a:70:
         4c:40:5d:56:3a:31:63:ff:16:1f:dc:d6:bd:b9:0b:fd:2f:6a:
         5c:21:f1:74:90:2f:fa:88:9e:79:28:62:60:f8:85:13:89:6c:
         ef:ef:3b:76:0e:52:35:fa:6b:0e:d7:71:43:aa:79:fb:8c:21:
         b2:2a:f1:7d:8c:86:0c:09:b9:f5:b3:4f:00:ed:2a:b8:3e:14:
         c7:13:42:47:3c:aa:3d:1c:8b:89:0f:a5:c2:39:6d:33:42:1e:
         f1:00:df:e7:cb:90:6d:17:b9:c9:7d:89:68:6e:ff:04:83:10:
         78:93:8d:78:bb:59:e0:3d:77:f7:55:c1:08:2a:9a:b8:e5:1f:
         00:46:3c:67:af:0e:1b:6b:ac:a4:a6:c7:95:95:c9:93:b4:9d:
         04:e8:1a:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----