Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/6e6c29-4972-4f4e-b428-aee1e39a24ed/1/KeZ5NJ2jZ4hN6xPcWiGnruAZ5KU.mft
File:                     KeZ5NJ2jZ4hN6xPcWiGnruAZ5KU.mft (raw, json)
Hash identifier:          fC+tuDnQmsDoejAXsyUIZHr7QkbrsJ4m7tWRLv7wxfM=
Subject key identifier:   78:A3:B7:70:37:FA:78:73:28:F3:E6:63:60:1F:D2:C0:19:64:63:87
Authority key identifier: 29:E6:79:34:9D:A3:67:88:4D:EB:13:DC:5A:21:A7:AE:E0:19:E4:A5
Certificate issuer:       /CN=29e679349da367884deb13dc5a21a7aee019e4a5
Certificate serial:       018A2A530A85EE924C775EA4DF19F7216546
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KeZ5NJ2jZ4hN6xPcWiGnruAZ5KU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/6e6c29-4972-4f4e-b428-aee1e39a24ed/1/KeZ5NJ2jZ4hN6xPcWiGnruAZ5KU.mft
Manifest number:          72
Signing time:             Fri 25 Aug 2023 01:33:19 +0000
Manifest this update:     Fri 25 Aug 2023 01:33:19 +0000
Manifest next update:     Sat 26 Aug 2023 01:33:19 +0000
Files and hashes:         1: KeZ5NJ2jZ4hN6xPcWiGnruAZ5KU.crl (hash: JFqrH4wjQAJDSYx8tuW+AK+ZIhvKG/k+PHZgktjGfU8=)
                          2: wBQp-62Y_xHpfxQ3nF5PkL6UUUg.roa (hash: 1q2eLknkh9gHVvsRFaQKMQ4o1nbX7/Qf0RvNPYOsDdw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:2a:53:0a:85:ee:92:4c:77:5e:a4:df:19:f7:21:65:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29e679349da367884deb13dc5a21a7aee019e4a5
        Validity
            Not Before: Aug 25 01:33:19 2023 GMT
            Not After : Aug 26 01:33:19 2023 GMT
        Subject: CN=78a3b77037fa787328f3e663601fd2c019646387
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:4e:36:9c:7b:c7:ae:f6:b5:7b:35:9c:c8:a0:
                    14:bb:ef:01:ec:07:27:34:9e:f9:be:03:05:b4:ed:
                    e4:38:bd:40:88:28:04:a8:88:7e:3a:b0:d2:fa:56:
                    d2:87:1a:53:57:f4:78:1f:ae:fe:5b:4f:81:e9:b0:
                    b5:5e:2e:3b:49:7d:fd:92:fa:3f:88:b4:c4:88:ea:
                    b6:c6:28:f2:ca:d4:79:4c:6f:02:29:c0:a4:65:b6:
                    e8:a3:0a:63:18:84:8c:05:bc:d3:44:12:64:70:e9:
                    ac:3f:fe:0e:f5:c1:e4:65:81:d3:66:40:74:c4:71:
                    21:0c:d5:50:b0:c1:8f:c9:b3:4d:84:6c:56:02:52:
                    8c:2e:ad:c8:e5:d1:ef:96:97:b1:38:f6:82:b5:30:
                    ae:f2:61:85:16:74:c7:bc:9a:4a:41:70:93:e1:dc:
                    2c:d7:ca:18:1c:72:1b:23:ed:a2:a7:6e:33:42:e6:
                    c4:d3:73:b5:1a:47:dd:0c:f9:af:a1:3e:31:7d:08:
                    f5:97:fc:04:66:3f:9f:5f:0c:b0:05:15:f7:40:f1:
                    a1:c0:91:c4:49:41:e5:5d:d5:95:0f:0c:03:37:fa:
                    8c:4e:11:3b:01:ad:4c:d7:59:a3:6b:a5:78:3b:83:
                    29:f8:65:56:cd:5c:fa:f5:3a:c6:eb:64:91:5a:16:
                    3d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:A3:B7:70:37:FA:78:73:28:F3:E6:63:60:1F:D2:C0:19:64:63:87
            X509v3 Authority Key Identifier:
                keyid:29:E6:79:34:9D:A3:67:88:4D:EB:13:DC:5A:21:A7:AE:E0:19:E4:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KeZ5NJ2jZ4hN6xPcWiGnruAZ5KU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/6e6c29-4972-4f4e-b428-aee1e39a24ed/1/KeZ5NJ2jZ4hN6xPcWiGnruAZ5KU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/6e6c29-4972-4f4e-b428-aee1e39a24ed/1/KeZ5NJ2jZ4hN6xPcWiGnruAZ5KU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:13:e9:6d:c9:b1:6d:0d:d5:3a:74:64:00:61:91:fa:67:b1:
         99:5e:f6:da:67:4f:0b:0f:39:44:dc:6c:ae:7e:85:2b:cb:28:
         13:d4:ce:7d:69:fc:32:2f:ee:9f:87:71:11:99:89:da:70:dd:
         cb:c9:3a:f6:b3:cc:60:f4:00:ba:83:8d:0a:be:04:90:71:a1:
         41:4f:ae:19:8a:51:f6:42:d6:bf:e3:bf:ee:22:62:43:23:61:
         3a:7e:c7:f2:b1:6c:0f:de:f1:b7:56:a0:0d:c0:05:19:ec:7e:
         4c:12:44:e6:fb:2d:51:17:e5:7c:a2:45:ea:0a:18:aa:1d:a1:
         75:c2:dd:62:96:bb:07:6c:9e:ca:2c:c7:bc:ed:de:e1:6b:a3:
         63:e1:9f:aa:45:b2:e7:08:80:cc:47:0b:34:eb:80:16:fe:0d:
         3d:b5:7d:6d:b3:f9:bb:07:31:94:56:0d:75:fd:64:28:e6:6d:
         56:b9:0f:12:f0:66:b6:ea:60:73:70:9a:84:f0:e5:d7:65:20:
         ac:b5:b3:b3:09:3b:f5:7c:df:20:f3:c1:ea:fd:00:3e:1e:8d:
         d3:f1:15:b3:d4:f2:34:d2:ad:1a:0c:40:63:01:10:fa:30:25:
         a8:2a:ea:11:55:7c:e6:8d:39:24:78:96:f1:88:8b:f9:18:2c:
         cb:04:29:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----