Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/42edbd-ceeb-410a-8fef-ecc5b082ca02/1/645r4vjaWmJQeG_drAdAvonKbXw.mft
File:                     645r4vjaWmJQeG_drAdAvonKbXw.mft (raw, json)
Hash identifier:          ff5TrhaDLaEZUD/LCEKjSAR0iu94VgBiMWzHWKqtmwU=
Subject key identifier:   47:CC:57:7C:01:9E:26:9E:99:9D:7E:B8:26:29:28:F6:04:54:ED:9D
Authority key identifier: EB:8E:6B:E2:F8:DA:5A:62:50:78:6F:DD:AC:07:40:BE:89:CA:6D:7C
Certificate issuer:       /CN=eb8e6be2f8da5a6250786fddac0740be89ca6d7c
Certificate serial:       0189D7EA582F57B004266A28AB005C95FFA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/645r4vjaWmJQeG_drAdAvonKbXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/42edbd-ceeb-410a-8fef-ecc5b082ca02/1/645r4vjaWmJQeG_drAdAvonKbXw.mft
Manifest number:          09C5
Signing time:             Wed 09 Aug 2023 01:30:06 +0000
Manifest this update:     Wed 09 Aug 2023 01:30:06 +0000
Manifest next update:     Thu 10 Aug 2023 01:30:06 +0000
Files and hashes:         1: 645r4vjaWmJQeG_drAdAvonKbXw.crl (hash: e0vWVizDOB5tYE0xNFg/WedxZi355RrfTMx6porhwJk=)
                          2: KyFo8P57o-wTJfmc3ycN5EggSlQ.roa (hash: wyEeG8qo4xjbLw03flISuJEvIcvx4bdeM/aDgl9oo6U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:d7:ea:58:2f:57:b0:04:26:6a:28:ab:00:5c:95:ff:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb8e6be2f8da5a6250786fddac0740be89ca6d7c
        Validity
            Not Before: Aug  9 01:30:06 2023 GMT
            Not After : Aug 10 01:30:06 2023 GMT
        Subject: CN=47cc577c019e269e999d7eb8262928f60454ed9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:67:2b:6d:ea:3c:b2:84:2c:30:fa:18:be:20:
                    0b:74:58:25:e5:7e:0c:e8:93:bf:cc:cc:ed:72:29:
                    64:d1:cd:d5:cb:e3:2f:84:4f:02:f8:43:86:c1:9e:
                    4f:7e:e6:99:3b:32:97:be:66:e3:da:59:c7:24:58:
                    55:81:f9:7b:5d:44:67:a8:02:c4:82:33:4b:cf:94:
                    31:d1:2b:5d:34:4a:9f:15:c0:26:61:36:30:fd:fa:
                    aa:98:b7:fd:cc:0b:e1:fa:65:36:3d:e4:83:da:b7:
                    94:06:ab:44:11:80:71:d0:12:49:f0:2d:30:48:17:
                    1b:09:64:d2:b1:1f:28:2c:8e:46:00:76:35:d0:5a:
                    6f:6c:00:94:80:3f:a1:f8:36:26:02:bd:fc:11:71:
                    b2:ca:44:19:33:8d:74:c1:75:18:08:28:7f:64:00:
                    cc:59:97:45:7d:a1:cc:54:12:33:fa:44:83:62:23:
                    b1:81:d0:9d:a1:bd:3d:cb:ae:28:b1:c6:52:92:ca:
                    66:d4:e6:2f:ba:40:59:ce:d9:44:c4:64:f7:20:7b:
                    40:04:19:5f:cd:8c:44:50:45:11:79:1a:48:94:4a:
                    f4:75:25:2b:cb:53:35:1f:0e:e6:4e:c5:c3:c6:2a:
                    49:9c:b0:c1:41:01:d2:34:24:84:09:19:df:8c:f2:
                    51:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:CC:57:7C:01:9E:26:9E:99:9D:7E:B8:26:29:28:F6:04:54:ED:9D
            X509v3 Authority Key Identifier:
                keyid:EB:8E:6B:E2:F8:DA:5A:62:50:78:6F:DD:AC:07:40:BE:89:CA:6D:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/645r4vjaWmJQeG_drAdAvonKbXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/42edbd-ceeb-410a-8fef-ecc5b082ca02/1/645r4vjaWmJQeG_drAdAvonKbXw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/42edbd-ceeb-410a-8fef-ecc5b082ca02/1/645r4vjaWmJQeG_drAdAvonKbXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:d4:85:00:fc:89:08:ff:61:e6:45:74:36:98:cb:ac:ee:28:
         bf:6b:1f:03:a5:c5:ab:d1:ad:b3:c6:8f:b9:43:14:7f:5a:60:
         8e:79:0d:6e:7e:3d:d8:e2:a6:87:68:ad:03:08:62:a8:c1:3e:
         9e:22:25:29:cc:f0:88:33:b9:1e:f8:53:38:d6:44:06:ce:66:
         cc:5d:38:5d:34:b8:ba:e3:df:0c:4b:a9:4f:95:28:4f:1a:78:
         65:d8:e5:b6:6c:f6:e1:14:9a:d7:15:db:d4:c2:10:a2:56:47:
         72:6d:0b:a1:9c:19:c5:90:96:00:b6:96:9b:9d:b2:2f:5a:3c:
         05:6e:9d:25:36:dd:24:d9:d9:59:15:c9:60:32:5c:ac:b7:25:
         cc:9d:64:9e:95:f5:9a:0e:05:9c:44:9a:03:6c:65:d8:cc:05:
         18:52:c9:a3:68:ba:29:f1:12:ee:62:b9:ad:30:0e:dd:be:e4:
         51:7d:46:db:9d:14:5c:32:f9:3f:87:33:9b:a3:4d:d1:08:86:
         a8:7b:a7:53:72:e5:1e:38:24:77:b5:15:48:1f:96:4b:07:e8:
         1d:9c:c1:f3:53:a6:cc:12:c6:00:86:6c:e0:4a:cc:4a:9a:8a:
         49:9f:40:32:93:37:bc:03:17:50:e8:fa:a4:d4:8f:37:ad:d5:
         73:29:7a:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 9 08:36:27 2023 by rpki-client on console-fra.rpki-client.org