Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/fe4f01-6116-4b97-b7a5-dff1f9ee6135/1/vi7lz0v8K2y90Iaq44d6v2eX3qg.mft
File:                     vi7lz0v8K2y90Iaq44d6v2eX3qg.mft (raw, json)
Hash identifier:          X8vgp7Be9/GGT0xNeVl3Cwrs5li6wYDZt3ds4iGBJ3Y=
Subject key identifier:   80:CB:D9:B9:84:D2:50:BA:6A:E1:42:08:78:5B:29:82:29:3B:40:FD
Authority key identifier: BE:2E:E5:CF:4B:FC:2B:6C:BD:D0:86:AA:E3:87:7A:BF:67:97:DE:A8
Certificate issuer:       /CN=be2ee5cf4bfc2b6cbdd086aae3877abf6797dea8
Certificate serial:       018AF8A175E5BD6B1DD126221EC9405CE6FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vi7lz0v8K2y90Iaq44d6v2eX3qg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/fe4f01-6116-4b97-b7a5-dff1f9ee6135/1/vi7lz0v8K2y90Iaq44d6v2eX3qg.mft
Manifest number:          085C
Signing time:             Wed 04 Oct 2023 03:00:45 +0000
Manifest this update:     Wed 04 Oct 2023 03:00:45 +0000
Manifest next update:     Thu 05 Oct 2023 03:00:45 +0000
Files and hashes:         1: 32a9v9UgxA6r_cq13J5Gp_7jvzU.roa (hash: MLsNjnNoAhk/VAJ3xWRMhpiB7w9OqJRiirI6Dj71X1s=)
                          2: vi7lz0v8K2y90Iaq44d6v2eX3qg.crl (hash: 4PTwAC2DIB6dWdwuvYVWr++vOPCuo8+GvTUdecYttb8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:f8:a1:75:e5:bd:6b:1d:d1:26:22:1e:c9:40:5c:e6:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be2ee5cf4bfc2b6cbdd086aae3877abf6797dea8
        Validity
            Not Before: Oct  4 03:00:45 2023 GMT
            Not After : Oct  5 03:00:45 2023 GMT
        Subject: CN=80cbd9b984d250ba6ae14208785b2982293b40fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:7e:64:5e:79:ec:0a:8d:08:2f:d0:6d:51:84:
                    6d:46:58:e7:76:7e:fc:64:5b:77:98:82:f7:2a:d9:
                    c3:c9:4c:a7:99:96:9a:92:e4:26:47:7c:05:dd:5c:
                    83:34:c5:c9:5e:2f:da:fb:e3:65:2e:60:46:0e:43:
                    3c:00:af:b0:99:6f:8c:b0:74:77:d1:51:b2:73:2d:
                    e6:57:c1:0c:5b:fd:17:19:e1:c4:bf:02:6d:86:86:
                    94:74:ec:d1:d2:33:79:f7:da:14:6d:b7:1a:eb:75:
                    39:00:77:ab:59:24:99:2e:31:0d:f9:a3:89:0c:05:
                    e9:18:c5:87:81:87:7d:20:d0:06:d1:20:e5:a2:00:
                    61:0e:a1:87:ca:06:c3:fe:aa:6a:f9:ac:d2:da:53:
                    95:15:40:bb:f4:3e:db:4c:c4:3a:94:02:4d:26:d4:
                    c8:d4:4f:08:27:18:35:45:7d:53:4c:3f:cb:97:b6:
                    db:42:3a:37:48:84:bb:0c:b8:42:b6:2d:80:ed:ea:
                    b2:a0:41:56:fe:98:af:18:22:2d:58:84:17:51:f4:
                    05:6b:02:1a:22:37:e8:0b:f3:7c:ea:83:e7:9c:e7:
                    08:97:f3:ff:24:a4:78:38:f1:c9:f2:bb:e7:08:c2:
                    09:f4:65:fe:db:79:23:47:fa:3d:1a:8a:b1:92:96:
                    de:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:CB:D9:B9:84:D2:50:BA:6A:E1:42:08:78:5B:29:82:29:3B:40:FD
            X509v3 Authority Key Identifier:
                keyid:BE:2E:E5:CF:4B:FC:2B:6C:BD:D0:86:AA:E3:87:7A:BF:67:97:DE:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vi7lz0v8K2y90Iaq44d6v2eX3qg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/fe4f01-6116-4b97-b7a5-dff1f9ee6135/1/vi7lz0v8K2y90Iaq44d6v2eX3qg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/fe4f01-6116-4b97-b7a5-dff1f9ee6135/1/vi7lz0v8K2y90Iaq44d6v2eX3qg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:a9:e8:a1:b4:c0:c7:2e:10:f1:5b:f6:c0:73:c6:02:b8:d0:
         d2:34:c3:f1:73:2f:76:fc:44:38:3e:eb:d9:85:16:2f:8c:a7:
         f1:14:a5:77:e5:ea:6c:96:d1:57:f6:28:99:30:77:aa:db:8e:
         42:2f:21:48:8d:59:56:7e:16:96:62:09:a0:b0:c9:fd:13:da:
         d8:96:90:a0:65:f2:ab:38:0a:4c:43:15:93:27:d7:8a:c0:4d:
         06:2c:94:fe:4d:2d:02:03:d1:d6:d2:3f:e5:06:2a:26:57:8d:
         f4:2e:f7:2b:81:35:34:87:19:19:5f:fd:94:41:e6:58:a5:e4:
         9b:2a:07:51:30:93:d5:7f:5b:e1:35:74:b3:bd:fe:62:5b:35:
         09:8b:9e:a9:29:4c:f9:fc:78:a1:f5:0f:47:1d:77:74:a5:b9:
         8d:09:94:6b:32:55:98:0d:a3:1a:7e:4b:43:80:9c:fa:bc:b9:
         41:14:02:9d:2e:5f:8b:66:bf:62:21:a5:e5:9c:19:9c:5c:d3:
         00:33:de:6f:6e:e9:b1:1c:3d:21:96:05:09:fe:da:d8:b4:be:
         2f:77:da:6b:7e:48:e2:ba:19:a9:a9:08:6a:a9:bc:01:12:72:
         9a:5d:96:1e:34:6a:4e:74:a7:67:62:f9:fd:9c:86:fe:21:0d:
         a7:3d:76:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----