Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/9a331f-ddab-4d25-a6d7-a35c025fd122/1/FneZFLvFe165CAJ6nWizEBfbigw.mft
File:                     FneZFLvFe165CAJ6nWizEBfbigw.mft (raw, json)
Hash identifier:          EzOb76aEFgEFU7qXqaPrTz/d9hZhlFMO0B3wZcHaBhw=
Subject key identifier:   AB:83:D9:B9:B3:AE:71:F0:C2:1D:13:6E:25:E5:4E:DC:A6:77:B1:E7
Authority key identifier: 16:77:99:14:BB:C5:7B:5E:B9:08:02:7A:9D:68:B3:10:17:DB:8A:0C
Certificate issuer:       /CN=16779914bbc57b5eb908027a9d68b31017db8a0c
Certificate serial:       018C005845340B271DF28E05F79FD3EF037D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FneZFLvFe165CAJ6nWizEBfbigw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/9a331f-ddab-4d25-a6d7-a35c025fd122/1/FneZFLvFe165CAJ6nWizEBfbigw.mft
Manifest number:          087F
Signing time:             Fri 24 Nov 2023 08:00:33 +0000
Manifest this update:     Fri 24 Nov 2023 08:00:33 +0000
Manifest next update:     Sat 25 Nov 2023 08:00:33 +0000
Files and hashes:         1: 9W3r73fxloeldREn0CProVikKfg.roa (hash: m6f2VO0q7nznpFfPsjMt1WMbCCMGE9WwQb+Rhz/MKQM=)
                          2: FneZFLvFe165CAJ6nWizEBfbigw.crl (hash: T0aeC45piMLEqh2+VWcE3u1gqcFEz0QO2Jw663y+URE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:00:58:45:34:0b:27:1d:f2:8e:05:f7:9f:d3:ef:03:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16779914bbc57b5eb908027a9d68b31017db8a0c
        Validity
            Not Before: Nov 24 08:00:33 2023 GMT
            Not After : Nov 25 08:00:33 2023 GMT
        Subject: CN=ab83d9b9b3ae71f0c21d136e25e54edca677b1e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:dd:d4:f1:a1:3c:fc:eb:a7:0c:e7:53:fb:0d:
                    70:5c:77:7e:2a:63:cd:31:4a:12:f5:3d:1b:05:e5:
                    38:8b:3f:5b:ab:ba:0c:d6:f9:3a:20:0a:61:04:4b:
                    83:8f:12:9c:68:2a:11:02:bb:69:83:6f:42:34:50:
                    a7:92:35:e2:dc:39:96:21:9a:a7:4b:9b:62:03:fe:
                    79:e8:e0:f9:ea:8d:f8:a3:99:23:9c:56:0b:5d:8c:
                    0b:45:70:c3:6f:4c:99:e6:97:a2:1b:be:57:c2:0b:
                    56:28:0d:d3:34:8b:c3:2d:b8:c9:d3:a4:52:e7:78:
                    a5:db:fb:83:d9:df:c3:54:96:7a:05:32:0a:fc:72:
                    8f:42:ca:3c:72:2a:6b:ec:9c:14:55:6f:dd:f1:fb:
                    54:ce:57:91:77:77:56:78:30:39:ef:4d:f0:a7:21:
                    ea:89:fe:fc:67:d6:38:d5:48:65:f0:50:03:44:fa:
                    db:19:a3:8b:cf:4b:dd:bc:46:d3:0a:07:99:b9:b9:
                    ba:22:bf:d5:5e:d1:9c:b3:be:5c:67:bc:73:6e:ae:
                    d9:f5:dd:26:6e:7a:09:59:c9:da:63:ca:ec:c6:75:
                    b1:ce:1d:2e:11:b9:ea:15:84:6e:56:b8:97:c4:14:
                    03:fa:24:81:79:c2:33:15:ae:8d:2d:6d:42:0c:74:
                    c4:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:83:D9:B9:B3:AE:71:F0:C2:1D:13:6E:25:E5:4E:DC:A6:77:B1:E7
            X509v3 Authority Key Identifier:
                keyid:16:77:99:14:BB:C5:7B:5E:B9:08:02:7A:9D:68:B3:10:17:DB:8A:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FneZFLvFe165CAJ6nWizEBfbigw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9a331f-ddab-4d25-a6d7-a35c025fd122/1/FneZFLvFe165CAJ6nWizEBfbigw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9a331f-ddab-4d25-a6d7-a35c025fd122/1/FneZFLvFe165CAJ6nWizEBfbigw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:36:b5:66:a5:9d:44:39:42:46:36:22:1e:14:d1:32:34:d1:
         d9:04:18:6a:a9:50:0b:66:f3:7b:6d:b7:b2:80:eb:4c:bd:4d:
         fd:20:9b:4e:df:36:5c:27:f7:43:a5:13:5b:a6:de:13:41:93:
         de:ad:1d:a6:79:5a:48:48:e1:8e:8e:e8:02:27:75:fd:a4:64:
         f5:ad:99:ce:fc:98:f2:76:7a:9e:1d:0c:91:61:e3:f5:da:99:
         99:4a:ce:a7:4a:c5:f3:0e:5c:02:46:c7:4d:1e:9f:35:b2:e9:
         78:c8:25:3d:09:7a:da:b0:e5:99:09:fc:8e:3e:0f:a1:42:50:
         7d:29:e8:43:bb:db:d6:1c:4a:a9:6c:a6:b6:f0:8b:31:12:8c:
         2c:08:15:78:c4:f4:8b:55:67:0e:41:d4:08:18:92:06:8d:11:
         84:70:76:f7:e2:c2:f4:76:5c:39:88:e5:8c:06:f2:cf:42:79:
         fa:b0:b4:4d:03:d1:01:b6:54:66:15:ea:04:42:ec:d1:41:13:
         6b:fb:b7:03:de:1a:6d:c0:dd:22:25:b8:b8:76:d4:52:32:b0:
         e1:09:f9:4d:2a:b5:f2:67:47:7e:fe:06:22:68:9b:47:2b:91:
         3c:47:0c:81:30:50:21:a0:59:1b:56:6a:a6:d0:b7:0f:97:7f:
         f1:f7:ea:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----