Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/04c71b-1fd1-4d50-8f16-ad236b49cd6f/1/cVH-1bPZh6Ljas9wTmL2kUEp0rQ.mft
File:                     cVH-1bPZh6Ljas9wTmL2kUEp0rQ.mft (raw, json)
Hash identifier:          +1NOOu3Z1Uju39FyQcfeCwviobG9Pjk+DBe7FKA+IYs=
Subject key identifier:   AC:43:10:89:97:F7:83:C6:3C:A5:A6:05:AB:C8:25:4F:21:E1:1D:22
Authority key identifier: 71:51:FE:D5:B3:D9:87:A2:E3:6A:CF:70:4E:62:F6:91:41:29:D2:B4
Certificate issuer:       /CN=7151fed5b3d987a2e36acf704e62f6914129d2b4
Certificate serial:       01894443AA6809F63EE878F330CC36C9513E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cVH-1bPZh6Ljas9wTmL2kUEp0rQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/04c71b-1fd1-4d50-8f16-ad236b49cd6f/1/cVH-1bPZh6Ljas9wTmL2kUEp0rQ.mft
Manifest number:          089B
Signing time:             Tue 11 Jul 2023 09:23:52 +0000
Manifest this update:     Tue 11 Jul 2023 09:23:52 +0000
Manifest next update:     Wed 12 Jul 2023 09:23:52 +0000
Files and hashes:         1: 4rqR2SThD7Tbr3Myq6cRU-NMWoY.roa (hash: 8oWNCj4o29FB8vRfxX1Vq12BermUI6Rq4mU/C5H8qJA=)
                          2: Vvc0mFReXzwvt1klWaH3g2XCw6c.roa (hash: pdV3hHy+o9aHUn/puWZoULSBRoG7c23aZLMxpCh5b1M=)
                          3: cVH-1bPZh6Ljas9wTmL2kUEp0rQ.crl (hash: 10Qtu/B25RlejVJJfgFRf716uPO1qYUcD8qD8H6X5Iw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:44:43:aa:68:09:f6:3e:e8:78:f3:30:cc:36:c9:51:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7151fed5b3d987a2e36acf704e62f6914129d2b4
        Validity
            Not Before: Jul 11 09:23:52 2023 GMT
            Not After : Jul 12 09:23:52 2023 GMT
        Subject: CN=ac43108997f783c63ca5a605abc8254f21e11d22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:bf:63:5a:37:d4:bf:14:8d:f5:2e:f8:2e:53:
                    6b:b5:d2:f4:18:97:3a:7c:40:b3:57:42:df:43:22:
                    75:c5:ee:86:1d:59:69:3a:77:cb:08:bf:dc:ff:0f:
                    db:ff:d9:a1:7e:95:f1:c8:15:bd:55:42:06:bb:aa:
                    0a:29:0c:a4:47:aa:63:ea:b5:28:98:f5:92:52:7a:
                    d6:87:c7:50:ac:0c:28:ec:2b:be:2b:0c:0e:7c:b9:
                    18:40:fb:e7:88:ef:8b:72:f9:e0:b3:b0:53:68:90:
                    ee:ca:42:a1:5d:8e:95:0b:b3:9c:56:d2:0c:68:0d:
                    5d:4b:fa:9e:95:1b:69:b5:0f:0d:48:2f:ff:03:c9:
                    45:66:f1:bc:5e:27:7e:ad:79:92:9f:21:9b:3c:2f:
                    41:c3:59:15:31:fb:34:6c:44:b5:ca:28:2a:f9:8e:
                    8a:7b:60:e6:1f:c0:12:4a:37:b0:af:40:2f:e8:ae:
                    23:f1:c4:5b:e7:45:70:79:12:b6:df:9e:35:db:7f:
                    e6:35:63:7c:1c:1d:6a:6b:af:29:7f:3e:fc:e7:bb:
                    cb:8a:b5:63:ec:e2:0b:d5:9d:3c:3e:e3:a8:64:af:
                    55:26:a5:b6:06:3c:de:0d:d0:c2:f6:79:34:7c:34:
                    91:d5:a4:f3:5d:07:d0:b6:d0:a5:8d:65:02:b6:85:
                    bb:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:43:10:89:97:F7:83:C6:3C:A5:A6:05:AB:C8:25:4F:21:E1:1D:22
            X509v3 Authority Key Identifier:
                keyid:71:51:FE:D5:B3:D9:87:A2:E3:6A:CF:70:4E:62:F6:91:41:29:D2:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cVH-1bPZh6Ljas9wTmL2kUEp0rQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/04c71b-1fd1-4d50-8f16-ad236b49cd6f/1/cVH-1bPZh6Ljas9wTmL2kUEp0rQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/04c71b-1fd1-4d50-8f16-ad236b49cd6f/1/cVH-1bPZh6Ljas9wTmL2kUEp0rQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:0c:1a:c5:6d:c2:a5:30:24:19:73:9e:21:4e:33:55:10:81:
         a9:26:cc:41:9d:19:c9:3a:a3:69:fe:3b:ae:b3:a6:cd:bb:a4:
         f2:8d:6e:6e:fa:74:62:a6:dc:a5:08:76:27:34:4b:47:d9:90:
         d7:61:9e:b0:3a:dc:0b:fd:f6:a3:ee:6c:7e:35:61:16:c8:16:
         7f:21:01:3d:7a:6c:04:4b:f8:5f:60:a3:92:39:09:6f:61:11:
         e5:a0:dc:0f:36:8b:41:49:79:ee:ac:92:07:30:3c:34:81:d1:
         d8:ee:5a:2d:9c:bb:29:82:df:30:f8:e3:7f:54:02:74:06:7e:
         4a:21:af:ea:02:4a:a4:ed:3a:67:04:8e:08:ca:fc:07:98:40:
         22:89:72:74:c1:6d:26:e4:71:f0:5f:72:98:e3:16:c7:4d:d7:
         00:80:1a:0c:41:05:1d:c2:31:3e:ce:0d:bb:1a:dc:01:ba:83:
         bc:8e:d4:a5:00:ae:29:42:2f:77:b4:1c:fb:2d:f8:87:bb:43:
         5c:f9:55:cf:8f:b4:00:1c:0a:3a:56:56:34:3b:77:18:d1:84:
         5d:ad:23:bc:c8:64:9e:04:73:e0:54:0b:2f:a1:e7:3e:f1:14:
         03:51:d8:98:a3:06:0e:bf:03:6e:ec:c9:cd:20:26:40:1d:22:
         d3:60:d6:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----