Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d9540d-2ecf-4e0d-ab24-6a737deabb0f/1/3gWrKD0rVEZzt9cinzK5Ys_Gih4.mft
File:                     3gWrKD0rVEZzt9cinzK5Ys_Gih4.mft (raw, json)
Hash identifier:          z3nKn2yrzo27Ia+99u/mHSKjYScK5Kn3OU5XQcooQsI=
Subject key identifier:   25:0B:6F:73:6D:21:57:23:1F:9A:6E:CE:BB:24:FB:90:0D:A1:C7:15
Authority key identifier: DE:05:AB:28:3D:2B:54:46:73:B7:D7:22:9F:32:B9:62:CF:C6:8A:1E
Certificate issuer:       /CN=de05ab283d2b544673b7d7229f32b962cfc68a1e
Certificate serial:       018B85D2E19B33991EC66DBC8C5B19D8BD73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3gWrKD0rVEZzt9cinzK5Ys_Gih4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/d9540d-2ecf-4e0d-ab24-6a737deabb0f/1/3gWrKD0rVEZzt9cinzK5Ys_Gih4.mft
Manifest number:          085F
Signing time:             Tue 31 Oct 2023 13:01:11 +0000
Manifest this update:     Tue 31 Oct 2023 13:01:11 +0000
Manifest next update:     Wed 01 Nov 2023 13:01:11 +0000
Files and hashes:         1: 3gWrKD0rVEZzt9cinzK5Ys_Gih4.crl (hash: L2kSThiOCV6kNwiKuo6emKW9JpEA8Og6nxav/6PTrug=)
                          2: sKWNtaqadPeAa8HWZSkxz3YK1M8.roa (hash: YfHFiCcFeOHFIrGX8xfZvy8T2h7J1+MoTdKfb4/XfpI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:85:d2:e1:9b:33:99:1e:c6:6d:bc:8c:5b:19:d8:bd:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de05ab283d2b544673b7d7229f32b962cfc68a1e
        Validity
            Not Before: Oct 31 13:01:11 2023 GMT
            Not After : Nov  1 13:01:11 2023 GMT
        Subject: CN=250b6f736d2157231f9a6ecebb24fb900da1c715
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:25:3b:37:4c:35:7a:b4:e6:d1:b3:f4:f9:68:
                    f0:1c:04:89:b4:ab:90:aa:cd:37:cc:27:6a:50:bd:
                    4e:1f:9b:c4:70:be:b5:c4:4c:70:7a:48:f6:39:39:
                    92:ab:bc:6c:c3:da:d1:e5:a2:5d:ae:c1:1c:55:3d:
                    47:8c:48:d5:89:d1:35:53:ec:97:c5:22:d9:21:06:
                    e6:bd:ca:a6:d3:58:60:df:d4:3e:f4:a5:3c:ee:0c:
                    1a:c7:02:83:e2:29:97:f0:b9:98:df:a4:82:c9:a8:
                    87:fd:7e:b0:7d:fa:0e:ed:2a:bd:2c:45:c3:96:7c:
                    37:0d:82:02:df:42:55:6d:39:31:ef:69:d3:db:8a:
                    f1:bd:b6:93:b4:bf:fb:dc:58:27:55:30:c3:f2:91:
                    2d:0c:57:72:60:a4:04:45:60:f0:84:47:a8:f6:03:
                    8c:3c:d0:7d:b4:a1:2b:32:9d:e0:43:7b:e5:be:a2:
                    42:0c:58:f2:fd:36:8e:62:f4:6c:b7:90:bd:b7:2c:
                    42:97:7e:82:c0:d7:8f:c5:96:57:18:0b:cd:dd:a6:
                    ed:82:e7:87:68:82:3e:e5:95:b6:2c:8c:09:ac:9b:
                    8f:e9:40:64:a6:78:a0:e6:34:28:ec:13:66:3a:b3:
                    71:f5:32:05:23:0b:38:b6:7b:9c:cc:b6:21:73:98:
                    d1:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:0B:6F:73:6D:21:57:23:1F:9A:6E:CE:BB:24:FB:90:0D:A1:C7:15
            X509v3 Authority Key Identifier:
                keyid:DE:05:AB:28:3D:2B:54:46:73:B7:D7:22:9F:32:B9:62:CF:C6:8A:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3gWrKD0rVEZzt9cinzK5Ys_Gih4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d9540d-2ecf-4e0d-ab24-6a737deabb0f/1/3gWrKD0rVEZzt9cinzK5Ys_Gih4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d9540d-2ecf-4e0d-ab24-6a737deabb0f/1/3gWrKD0rVEZzt9cinzK5Ys_Gih4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:e7:7a:d3:0e:6b:7a:4a:b5:3e:75:3d:b6:24:15:0e:cf:ad:
         ee:f3:a5:35:75:b0:4d:04:a1:57:af:96:92:7a:4d:bb:9b:dc:
         5b:4b:25:57:ae:46:76:e9:28:91:ab:65:b5:71:78:de:9e:5f:
         67:ff:f7:ba:88:a2:53:cf:d8:a3:e5:2f:25:ec:16:22:75:58:
         34:d9:40:4a:d7:20:d0:03:0a:53:6c:29:e1:21:3e:fa:27:8d:
         9c:99:2c:2f:2d:6b:82:9a:a1:70:34:57:5d:1f:1c:bf:cd:ce:
         6f:d7:1c:e8:32:fd:09:07:38:ee:d7:26:97:f7:b3:54:22:fd:
         e3:d8:ea:5b:c1:30:8a:22:61:5f:62:d2:36:8f:40:90:60:51:
         fb:45:30:25:bd:85:61:35:88:d2:eb:9d:b3:85:a5:c9:be:70:
         66:5a:e6:78:dd:d4:db:b3:99:6d:08:91:a4:74:96:23:97:a9:
         13:57:aa:67:0c:b2:c0:e4:f6:3b:2e:6d:fa:1b:8e:84:1f:13:
         0e:e7:a4:94:80:0c:e5:88:c0:15:2a:4d:40:77:0f:47:77:3e:
         5a:b1:8f:48:15:67:95:7c:16:26:18:48:4e:7d:75:62:03:83:
         69:47:1a:7b:bc:20:07:ba:d2:91:07:e9:c9:b9:96:8b:dc:26:
         da:39:13:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----