Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/efcd83-f0b9-489d-9b70-4cb686f15c6e/1/_9QxEvkYxxZswFWMGjpuze0cDk8.mft
File:                     _9QxEvkYxxZswFWMGjpuze0cDk8.mft (raw, json)
Hash identifier:          BlDoGkycOPJVtuCNZK1KrAuqb4C+WK/h+qOffa6GKHM=
Subject key identifier:   E0:48:9C:91:CE:C5:FF:BC:0F:58:38:FA:56:F0:4C:33:9B:1E:5D:61
Authority key identifier: FF:D4:31:12:F9:18:C7:16:6C:C0:55:8C:1A:3A:6E:CD:ED:1C:0E:4F
Certificate issuer:       /CN=ffd43112f918c7166cc0558c1a3a6ecded1c0e4f
Certificate serial:       018AC1B37C63C2040990008E0A8F6F4E5658
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_9QxEvkYxxZswFWMGjpuze0cDk8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/efcd83-f0b9-489d-9b70-4cb686f15c6e/1/_9QxEvkYxxZswFWMGjpuze0cDk8.mft
Manifest number:          0447
Signing time:             Sat 23 Sep 2023 11:01:19 +0000
Manifest this update:     Sat 23 Sep 2023 11:01:19 +0000
Manifest next update:     Sun 24 Sep 2023 11:01:19 +0000
Files and hashes:         1: VrBIik-px-B2Sg3A0PYj6BIDY5E.roa (hash: +Vd5KMjSXMbZybWCyRJletm+kjtb25tf8H5j2u05CCQ=)
                          2: _9QxEvkYxxZswFWMGjpuze0cDk8.crl (hash: +KwF5Si/WBQAQ9E0q+ayvhhEDMZQaRspeKvOGqpKx34=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:c1:b3:7c:63:c2:04:09:90:00:8e:0a:8f:6f:4e:56:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffd43112f918c7166cc0558c1a3a6ecded1c0e4f
        Validity
            Not Before: Sep 23 11:01:19 2023 GMT
            Not After : Sep 24 11:01:19 2023 GMT
        Subject: CN=e0489c91cec5ffbc0f5838fa56f04c339b1e5d61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8c:f1:47:de:a6:84:91:2b:52:c9:1b:ef:31:
                    7b:86:ad:4e:73:10:f9:0d:22:72:1c:45:b1:9c:7f:
                    ed:08:8e:04:31:17:c6:f1:48:5f:cb:af:0d:19:1e:
                    64:b7:62:70:2d:1d:e6:f5:c7:7c:71:c9:71:8f:19:
                    f3:b1:86:f2:bf:01:84:f4:e3:01:a3:3c:29:dd:3a:
                    f6:44:f2:1e:ae:91:f2:ed:72:08:77:33:66:d2:f4:
                    33:3b:55:cc:9b:ad:bb:2a:9e:22:5f:03:30:39:76:
                    b1:30:ad:f1:6d:01:ae:37:90:c7:10:b8:96:0f:b8:
                    8a:82:fc:fa:c8:43:45:19:5f:6f:3c:25:fb:7f:f7:
                    c5:1e:69:aa:91:dd:a5:c6:04:8b:ab:1b:97:df:6b:
                    3e:85:67:ad:db:3c:ff:21:b2:60:7d:b6:a3:2f:70:
                    42:57:ff:14:f1:19:78:8a:74:4a:73:d4:ed:14:36:
                    19:5f:25:5a:05:89:d0:0f:f7:da:68:4e:f0:08:b4:
                    4c:cb:30:52:06:de:2a:18:0d:3a:80:48:0c:93:e5:
                    7a:8b:6e:37:28:1c:ed:32:6c:66:ce:09:a2:e4:09:
                    5d:d0:aa:e4:32:b4:61:ce:e8:56:67:bd:2c:3a:c3:
                    95:96:89:13:04:dd:2f:36:5e:0c:c4:8b:88:c3:09:
                    27:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:48:9C:91:CE:C5:FF:BC:0F:58:38:FA:56:F0:4C:33:9B:1E:5D:61
            X509v3 Authority Key Identifier:
                keyid:FF:D4:31:12:F9:18:C7:16:6C:C0:55:8C:1A:3A:6E:CD:ED:1C:0E:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_9QxEvkYxxZswFWMGjpuze0cDk8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/efcd83-f0b9-489d-9b70-4cb686f15c6e/1/_9QxEvkYxxZswFWMGjpuze0cDk8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/efcd83-f0b9-489d-9b70-4cb686f15c6e/1/_9QxEvkYxxZswFWMGjpuze0cDk8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:2a:38:5b:fe:78:97:f9:3b:54:c6:e0:2e:8a:32:2e:fa:63:
         d4:82:ae:98:57:2b:1f:75:0f:01:e1:de:bc:7c:73:a5:d1:9f:
         02:6e:28:9c:eb:a0:70:c5:8d:a1:91:06:44:62:78:d0:74:79:
         ea:af:d2:3a:9d:5f:bb:de:21:bd:5b:01:46:21:03:7f:6f:83:
         00:88:bd:0b:d8:ce:13:6f:7f:ef:a5:71:fd:9e:8d:8d:47:94:
         19:a8:95:4a:44:3b:0c:ea:68:b3:00:5f:82:d1:6c:e1:0e:87:
         23:31:b9:d7:09:d5:b7:d5:36:e0:99:f8:a2:0c:64:dd:20:f2:
         85:b3:33:68:9a:d9:16:b9:22:3a:69:bf:8b:95:46:f7:35:82:
         32:81:14:c3:b9:5d:7b:31:9d:6f:0a:af:f4:82:6e:ee:f3:c5:
         71:ca:9f:0f:90:10:86:c7:22:e8:40:37:3e:a3:74:8d:4d:66:
         ca:54:d0:28:b4:8f:df:59:3f:92:5d:2e:44:17:2c:8d:c4:3f:
         6f:e6:e5:10:f7:71:b6:02:de:29:75:f4:5c:6e:94:2a:cc:14:
         b2:10:35:84:74:50:76:19:48:3f:65:27:40:21:d8:08:dd:45:
         1e:18:78:99:85:80:cb:70:3f:1e:54:5e:95:fc:7b:4b:df:23:
         1c:62:64:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----