Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/d12bef-eaab-46f3-a320-f7a9f19bbd12/1/kJglJoYC302PmVSrkrtqJ_JHw-w.mft
File:                     kJglJoYC302PmVSrkrtqJ_JHw-w.mft (raw, json)
Hash identifier:          rHWvyZbhYZlEhJBzdpa1I+CmqAguVtzMzHxIuHIXhfQ=
Subject key identifier:   C4:B2:43:F3:B7:36:99:E6:8D:61:72:1D:A8:2B:D8:73:08:9D:79:D9
Authority key identifier: 90:98:25:26:86:02:DF:4D:8F:99:54:AB:92:BB:6A:27:F2:47:C3:EC
Certificate issuer:       /CN=909825268602df4d8f9954ab92bb6a27f247c3ec
Certificate serial:       018B0B840CB22F37FECB29CC255CDAA3DE0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kJglJoYC302PmVSrkrtqJ_JHw-w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/d12bef-eaab-46f3-a320-f7a9f19bbd12/1/kJglJoYC302PmVSrkrtqJ_JHw-w.mft
Manifest number:          0F25
Signing time:             Sat 07 Oct 2023 19:01:25 +0000
Manifest this update:     Sat 07 Oct 2023 19:01:25 +0000
Manifest next update:     Sun 08 Oct 2023 19:01:25 +0000
Files and hashes:         1: kJglJoYC302PmVSrkrtqJ_JHw-w.crl (hash: wkEnb+KxRIcgKMiMSWRFu+PQZgberh2reh024WJGc5c=)
                          2: tqW5n7dXgv0MMkfKMp7y6aWSZ1Q.roa (hash: dCK3Gs7Vw6UfmZ0djtebTUYEyec/ztoSLE+AA1RL6kA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:0b:84:0c:b2:2f:37:fe:cb:29:cc:25:5c:da:a3:de:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=909825268602df4d8f9954ab92bb6a27f247c3ec
        Validity
            Not Before: Oct  7 19:01:25 2023 GMT
            Not After : Oct  8 19:01:25 2023 GMT
        Subject: CN=c4b243f3b73699e68d61721da82bd873089d79d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:95:e3:90:ac:8d:42:3b:da:ef:b4:3d:d7:6e:
                    db:5f:88:96:83:78:45:2b:52:6f:10:8d:f6:14:30:
                    8f:ec:5d:1a:71:71:c4:48:ae:89:3d:13:27:84:52:
                    ef:ee:2c:20:d9:1a:74:8f:e4:45:9e:c0:da:03:95:
                    48:19:66:01:a2:6e:fe:7a:12:47:c3:c0:34:8a:66:
                    12:fe:a9:15:d2:e6:1c:bb:62:60:6c:c6:6f:9e:e5:
                    c3:95:aa:b3:2c:d0:b1:b2:2f:d9:9a:f8:14:20:3c:
                    2c:a8:4a:a3:82:58:ff:3f:e9:83:63:6f:75:b9:e2:
                    39:66:9f:96:62:a8:f2:d1:bb:3e:4e:35:b6:60:32:
                    38:6b:a6:0e:07:14:fb:93:fc:e1:94:e3:82:93:3e:
                    58:bd:f5:ad:12:b2:55:03:da:87:3a:c9:68:82:55:
                    d1:93:59:05:8e:7c:05:0e:d2:55:7a:de:73:fa:7a:
                    da:fd:5a:87:55:4c:be:dc:f7:0b:cd:ac:f4:87:a2:
                    96:dc:c6:dc:90:d8:c8:93:f6:4c:27:99:89:05:17:
                    b6:ed:19:f3:8c:76:96:33:73:aa:7b:a9:5c:fb:9d:
                    31:f2:b8:56:70:7d:c6:02:19:47:7c:a2:e7:15:50:
                    57:ab:a1:2a:e7:0e:83:09:8f:10:5c:2c:97:26:10:
                    ad:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:B2:43:F3:B7:36:99:E6:8D:61:72:1D:A8:2B:D8:73:08:9D:79:D9
            X509v3 Authority Key Identifier:
                keyid:90:98:25:26:86:02:DF:4D:8F:99:54:AB:92:BB:6A:27:F2:47:C3:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kJglJoYC302PmVSrkrtqJ_JHw-w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d12bef-eaab-46f3-a320-f7a9f19bbd12/1/kJglJoYC302PmVSrkrtqJ_JHw-w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d12bef-eaab-46f3-a320-f7a9f19bbd12/1/kJglJoYC302PmVSrkrtqJ_JHw-w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:9a:a7:64:52:fd:fb:7d:5f:5f:33:78:13:1e:fd:94:ae:e3:
         1d:d9:49:d7:4c:48:b9:1d:9b:06:0c:c6:e8:89:f5:ee:bd:0f:
         5a:d6:ec:8d:81:87:b2:e9:aa:44:c6:0d:15:34:80:0f:63:64:
         3b:46:27:ec:c0:8a:61:86:ef:92:f4:a1:6e:4a:62:f4:f1:44:
         a2:bd:df:ae:83:8b:73:c9:b1:09:fa:fa:11:1a:f8:6d:d1:c8:
         1f:d6:20:2b:2f:1b:96:da:7d:6f:58:ae:43:7c:52:be:e9:40:
         19:b6:c7:db:1b:9d:dd:16:c7:f0:1f:fd:da:4b:b1:48:06:73:
         11:e0:72:e4:59:4f:43:0f:3e:47:a8:d7:27:c7:5c:f5:d1:f3:
         e3:fa:6b:ce:ae:9b:16:bc:76:fb:41:4d:e4:1e:0a:60:2b:15:
         6c:e7:0d:53:8a:93:2a:f5:1a:39:1c:01:00:1e:80:f2:8d:33:
         04:14:1f:94:87:07:cc:f2:09:b4:e5:18:60:37:a9:df:db:e0:
         5a:e0:f8:f6:ef:05:9f:20:be:cc:38:13:81:a5:c2:42:6a:59:
         0f:e8:31:93:77:06:b9:bf:aa:c6:0c:ca:7b:10:0c:b4:d8:36:
         eb:1a:14:b0:70:e6:fd:cb:4f:2f:64:0e:31:eb:99:11:17:4b:
         9a:33:ed:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----