Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/44fd9e-fdb5-497a-8f94-128189aa027d/1/0M7c4I0rT9J4sKlJttzQUNowfNs.mft
File:                     0M7c4I0rT9J4sKlJttzQUNowfNs.mft (raw, json)
Hash identifier:          QYwjh2utYQnPFGWMX6imp7/3fvCGo1/0Stu85IOky7M=
Subject key identifier:   7F:4D:5E:27:72:45:63:9D:39:78:75:37:4A:DE:DF:BE:95:F4:EE:20
Authority key identifier: D0:CE:DC:E0:8D:2B:4F:D2:78:B0:A9:49:B6:DC:D0:50:DA:30:7C:DB
Certificate issuer:       /CN=d0cedce08d2b4fd278b0a949b6dcd050da307cdb
Certificate serial:       018B6F13BD786085A276D35931C564F9AF33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0M7c4I0rT9J4sKlJttzQUNowfNs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/44fd9e-fdb5-497a-8f94-128189aa027d/1/0M7c4I0rT9J4sKlJttzQUNowfNs.mft
Manifest number:          086D
Signing time:             Fri 27 Oct 2023 03:00:46 +0000
Manifest this update:     Fri 27 Oct 2023 03:00:46 +0000
Manifest next update:     Sat 28 Oct 2023 03:00:46 +0000
Files and hashes:         1: 0M7c4I0rT9J4sKlJttzQUNowfNs.crl (hash: I1OS/pP38Fie4/zAyB+lwRJMfMFKH7LboodckvGtuL0=)
                          2: ZsllMnqlP90v_egK89sCCLhl7MI.roa (hash: t0QJ7DwA/wQmZqZKq5CWnwMa0EY6Q3CgoM75haRZCmo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:6f:13:bd:78:60:85:a2:76:d3:59:31:c5:64:f9:af:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0cedce08d2b4fd278b0a949b6dcd050da307cdb
        Validity
            Not Before: Oct 27 03:00:46 2023 GMT
            Not After : Oct 28 03:00:46 2023 GMT
        Subject: CN=7f4d5e277245639d397875374adedfbe95f4ee20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:4f:e6:47:41:fd:9f:e0:db:8b:1c:6a:4e:fa:
                    fa:60:15:30:c7:c0:2f:b8:24:64:23:b5:cc:95:07:
                    57:7e:9a:48:01:17:f8:fc:d4:83:51:34:84:f1:aa:
                    80:5c:3c:b5:d3:40:f2:58:37:62:65:d3:1b:1b:83:
                    e8:41:13:9d:7d:48:c3:31:24:d1:d5:46:80:d5:23:
                    b8:92:92:62:b9:ac:16:72:28:8d:d6:42:51:23:b9:
                    26:0b:fa:44:1c:6c:40:a3:dd:0a:36:4e:66:2d:88:
                    09:98:fc:3e:79:ca:ce:70:92:a1:10:07:b6:06:32:
                    c9:83:96:c7:a2:ec:cc:0a:7d:ff:01:ff:35:72:09:
                    12:c3:ec:40:e8:10:62:5c:4b:a6:5e:4c:ca:03:27:
                    63:10:68:d0:5e:88:0f:c5:49:ac:c5:e9:d9:92:9d:
                    e7:b0:8f:4c:80:1d:cd:14:66:34:8e:a4:f9:e4:48:
                    31:d2:63:03:13:0a:51:35:a1:ba:4b:ca:db:2c:44:
                    a9:1e:cb:8f:9c:ef:a2:d7:06:f9:2a:dd:09:a6:e1:
                    92:38:2c:88:f0:af:4f:86:49:80:4e:31:7f:e2:28:
                    69:48:7e:3f:5b:7f:a5:e5:b0:2a:ad:7a:92:0d:94:
                    9f:bb:9a:3e:f0:8c:bb:54:c5:7c:c8:ac:6a:58:bf:
                    b9:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:4D:5E:27:72:45:63:9D:39:78:75:37:4A:DE:DF:BE:95:F4:EE:20
            X509v3 Authority Key Identifier:
                keyid:D0:CE:DC:E0:8D:2B:4F:D2:78:B0:A9:49:B6:DC:D0:50:DA:30:7C:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0M7c4I0rT9J4sKlJttzQUNowfNs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/44fd9e-fdb5-497a-8f94-128189aa027d/1/0M7c4I0rT9J4sKlJttzQUNowfNs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/44fd9e-fdb5-497a-8f94-128189aa027d/1/0M7c4I0rT9J4sKlJttzQUNowfNs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:ae:3e:0a:46:36:31:d1:d6:02:97:3b:7e:d3:c0:ea:fa:53:
         6f:e9:9e:7e:d4:90:66:db:c1:97:36:02:69:85:76:71:be:f4:
         a7:4c:cd:a9:27:a0:aa:f0:0f:49:d9:04:d3:1b:be:17:98:23:
         d2:71:83:84:14:a3:6c:6e:88:f3:83:0c:d6:82:4c:65:2e:4e:
         53:f6:8c:b6:cf:ee:6f:ae:61:f0:0b:a9:2d:bf:34:f2:1e:c9:
         36:d2:9b:49:6b:51:15:36:c1:42:a9:f5:86:18:12:3d:ea:53:
         34:63:0a:8a:03:b5:c6:ff:5e:c7:04:9d:c1:68:3b:eb:5d:f5:
         47:fa:3c:6d:e1:8a:d0:f2:5a:88:84:83:74:81:ab:1b:8a:21:
         02:22:b2:5a:34:02:8c:38:5a:2c:5e:8a:60:b8:e7:3c:68:20:
         83:33:16:2e:d3:3f:28:11:24:20:22:b4:ed:43:8f:cb:38:5b:
         6e:d9:5b:ea:2c:26:57:55:bb:88:ed:d1:36:bd:e6:4b:2c:27:
         9c:d7:7b:7f:d8:e1:c0:2e:2b:97:dc:48:6c:11:3e:52:da:2e:
         4e:7e:fa:66:4c:71:86:e1:3a:80:f7:03:bb:b5:d3:d9:00:8b:
         96:63:ab:9d:1b:80:dd:76:47:19:44:53:aa:93:bc:af:c6:90:
         42:86:2d:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----