Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/4c16e9-cc8d-435e-ad81-cd2de77b2ae4/1/lGj8whds8snKZwR6_3acdoK-0aQ.mft
File:                     lGj8whds8snKZwR6_3acdoK-0aQ.mft (raw, json)
Hash identifier:          IVDwI8iE/CtNawL6um74SvbSmA0gwnUkLU0HTml70lc=
Subject key identifier:   29:C3:36:C1:26:F6:96:47:F8:93:F6:C0:4E:7D:B0:06:F2:76:CD:2F
Authority key identifier: 94:68:FC:C2:17:6C:F2:C9:CA:67:04:7A:FF:76:9C:76:82:BE:D1:A4
Certificate issuer:       /CN=9468fcc2176cf2c9ca67047aff769c7682bed1a4
Certificate serial:       018BDA949A5F5D7B7BC960922BAC89A0C4A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lGj8whds8snKZwR6_3acdoK-0aQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/4c16e9-cc8d-435e-ad81-cd2de77b2ae4/1/lGj8whds8snKZwR6_3acdoK-0aQ.mft
Manifest number:          087A
Signing time:             Fri 17 Nov 2023 00:00:53 +0000
Manifest this update:     Fri 17 Nov 2023 00:00:53 +0000
Manifest next update:     Sat 18 Nov 2023 00:00:53 +0000
Files and hashes:         1: KtTdGckqjG-ghODDWZFkFu3Kpdg.roa (hash: pKaWP576p0y+Vp845q2Sp5H4GNCnNKazIB6U9gplqms=)
                          2: lGj8whds8snKZwR6_3acdoK-0aQ.crl (hash: NLGRyutK0JxPp8Wa+QpsZCcYF28hnjNO6QrL5s0zfJg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:da:94:9a:5f:5d:7b:7b:c9:60:92:2b:ac:89:a0:c4:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9468fcc2176cf2c9ca67047aff769c7682bed1a4
        Validity
            Not Before: Nov 17 00:00:53 2023 GMT
            Not After : Nov 18 00:00:53 2023 GMT
        Subject: CN=29c336c126f69647f893f6c04e7db006f276cd2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:3b:2d:b6:2b:a9:6f:9e:30:15:fd:40:eb:bc:
                    03:dc:91:26:54:d7:55:90:d6:d8:c0:b2:49:3c:8e:
                    4b:02:01:ba:76:ca:08:2b:ef:58:fc:b7:3e:c9:f4:
                    db:7b:b1:0c:f3:b1:73:03:83:64:9d:37:9d:c9:c3:
                    67:2a:aa:1e:76:8f:fc:08:05:59:2b:6b:e9:1c:ea:
                    01:ea:40:17:82:c1:4c:32:2c:91:68:73:5f:1e:2b:
                    79:7f:15:5d:0a:10:ce:11:ae:49:77:7f:2a:3f:82:
                    bb:a0:70:9a:5c:dd:d9:26:f7:8e:23:5c:74:8f:41:
                    24:ad:f0:bd:b8:15:8d:e8:d4:7a:4a:84:13:7e:a5:
                    77:75:a9:35:ce:ac:0e:a2:dc:0f:4d:7d:fb:7f:66:
                    16:ac:b4:5f:34:00:4e:b7:d2:55:42:51:9a:5f:59:
                    75:a2:bf:c4:18:fe:34:45:22:db:5b:db:3e:f7:05:
                    5f:20:2c:ff:02:05:2f:b0:b3:f9:c0:b5:15:95:fd:
                    7c:6f:8e:2e:f7:34:3f:5d:2a:dc:24:90:61:c2:c9:
                    8f:32:a3:39:d9:24:32:f8:ee:c8:d4:94:4e:16:66:
                    16:9d:01:08:5f:2e:0d:81:ef:42:5e:9a:76:39:c2:
                    d7:b4:b6:43:fb:95:e0:a4:9a:db:b7:46:6c:ad:ba:
                    8d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:C3:36:C1:26:F6:96:47:F8:93:F6:C0:4E:7D:B0:06:F2:76:CD:2F
            X509v3 Authority Key Identifier:
                keyid:94:68:FC:C2:17:6C:F2:C9:CA:67:04:7A:FF:76:9C:76:82:BE:D1:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lGj8whds8snKZwR6_3acdoK-0aQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/4c16e9-cc8d-435e-ad81-cd2de77b2ae4/1/lGj8whds8snKZwR6_3acdoK-0aQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/4c16e9-cc8d-435e-ad81-cd2de77b2ae4/1/lGj8whds8snKZwR6_3acdoK-0aQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:b1:2b:99:72:cc:a0:ec:b4:cf:63:b3:90:8a:68:ff:eb:0c:
         fd:4a:0e:0e:f7:f3:f1:e7:d9:bc:c5:0f:9a:0c:ff:a0:07:5d:
         72:9b:a0:8a:3f:df:5f:6a:95:34:4b:aa:e0:45:49:b8:9a:ab:
         e7:7c:d9:97:d9:ff:71:db:13:93:7f:74:4c:36:57:c7:0a:8d:
         6c:50:e1:32:71:ac:4e:c7:78:a5:16:03:16:9e:a4:16:ac:e7:
         7e:8f:d6:b7:ae:b2:88:18:8d:a9:78:00:17:a4:fa:80:79:26:
         4e:be:22:61:af:93:01:dd:56:58:07:7a:8a:8e:2e:a6:e1:47:
         e3:b1:cb:09:56:f2:67:c7:40:a5:11:5b:1f:5b:d0:aa:15:13:
         48:cc:3e:c5:43:b0:35:b5:0e:8b:ff:81:aa:0f:0b:19:93:15:
         09:19:56:9b:5b:39:af:44:5b:b2:54:8a:e7:c3:00:cd:49:95:
         af:c4:54:bd:77:d7:5b:b4:e0:3d:4b:5c:1d:13:b2:10:15:54:
         8d:07:35:07:95:46:f0:b8:b0:f4:14:7c:56:ff:a5:e1:a2:b6:
         7e:5c:42:75:04:34:99:cb:56:fd:f3:a5:b1:68:77:2b:e1:e1:
         5b:de:1a:3f:27:bc:36:33:94:1f:ff:a7:98:51:63:92:f0:fc:
         82:26:49:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----