Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/277c8a-d704-446f-ba87-1b98d491cd3c/1/1OwO0jfcB8JRZ4ZzVUVBFu7Okn4.mft
File:                     1OwO0jfcB8JRZ4ZzVUVBFu7Okn4.mft (raw, json)
Hash identifier:          O09RHK+m8Gb/T55h2GKhU9ZbR4aPD6rwPzfyu4UUd1M=
Subject key identifier:   EF:68:57:AC:53:42:4F:A8:FE:3F:A5:9A:3E:F7:0E:74:C3:C0:23:6A
Authority key identifier: D4:EC:0E:D2:37:DC:07:C2:51:67:86:73:55:45:41:16:EE:CE:92:7E
Certificate issuer:       /CN=d4ec0ed237dc07c25167867355454116eece927e
Certificate serial:       018C8BD2A4B21626042C47F80DC40475EDDD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1OwO0jfcB8JRZ4ZzVUVBFu7Okn4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/277c8a-d704-446f-ba87-1b98d491cd3c/1/1OwO0jfcB8JRZ4ZzVUVBFu7Okn4.mft
Manifest number:          0B9C
Signing time:             Thu 21 Dec 2023 10:01:26 +0000
Manifest this update:     Thu 21 Dec 2023 10:01:26 +0000
Manifest next update:     Fri 22 Dec 2023 10:01:26 +0000
Files and hashes:         1: 1OwO0jfcB8JRZ4ZzVUVBFu7Okn4.crl (hash: B4J86CeuPz218u6csFJ1OnmLJTNPBN8udT/EdQdsiVs=)
                          2: WmKfEjhhT2VCHmc7dDrNmevb9YY.roa (hash: LRF7WZQQRFHvk51KLCsRcO8sClTu1OsHT6vwpw+Ql4Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:8b:d2:a4:b2:16:26:04:2c:47:f8:0d:c4:04:75:ed:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4ec0ed237dc07c25167867355454116eece927e
        Validity
            Not Before: Dec 21 10:01:26 2023 GMT
            Not After : Dec 22 10:01:26 2023 GMT
        Subject: CN=ef6857ac53424fa8fe3fa59a3ef70e74c3c0236a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:5b:15:85:31:a5:e6:c6:44:c5:85:09:5e:04:
                    fc:73:47:8b:b9:64:9b:f2:54:9e:a3:43:e9:6d:30:
                    83:08:fc:9a:91:4c:44:6f:f3:89:08:31:1a:e2:f5:
                    f3:08:ae:db:2d:80:f8:40:b5:78:4f:4f:a3:1c:c7:
                    7b:8a:a5:01:3d:3c:9e:30:ff:08:fc:73:b4:e1:54:
                    2a:21:b5:47:19:23:07:c3:ac:24:94:74:8d:6d:ce:
                    4a:05:f4:67:af:27:62:a3:6d:4d:a4:12:ce:38:11:
                    c8:95:4f:cd:d2:05:fa:ca:18:23:18:ac:e0:bc:36:
                    27:e0:96:43:6d:69:58:ff:6b:df:65:63:3a:75:d2:
                    fb:56:84:f1:e1:54:84:c9:f3:b8:71:51:e7:0a:85:
                    e3:4f:b3:c9:79:ae:2b:90:8e:56:73:c2:d0:2b:73:
                    71:10:ea:f6:e1:67:ff:58:ba:dd:d4:d3:7a:07:af:
                    1d:93:43:bf:5e:e7:24:84:08:84:73:3c:75:bf:cf:
                    b2:8d:ff:fb:d4:4b:de:e3:b4:9a:21:0e:a0:50:0d:
                    5e:48:ae:9e:15:79:03:ee:1a:53:20:43:35:58:f2:
                    0c:19:b2:90:19:bc:3a:e5:1f:de:c2:0b:f2:ef:aa:
                    11:2c:20:6e:95:b1:b5:18:18:2b:1e:2c:0d:f2:6e:
                    03:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:68:57:AC:53:42:4F:A8:FE:3F:A5:9A:3E:F7:0E:74:C3:C0:23:6A
            X509v3 Authority Key Identifier:
                keyid:D4:EC:0E:D2:37:DC:07:C2:51:67:86:73:55:45:41:16:EE:CE:92:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1OwO0jfcB8JRZ4ZzVUVBFu7Okn4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/277c8a-d704-446f-ba87-1b98d491cd3c/1/1OwO0jfcB8JRZ4ZzVUVBFu7Okn4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/277c8a-d704-446f-ba87-1b98d491cd3c/1/1OwO0jfcB8JRZ4ZzVUVBFu7Okn4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:82:2d:90:b7:f9:d9:8d:c9:45:c2:bc:3f:9d:6f:62:b2:82:
         e2:f9:1b:ea:a5:ce:c9:65:f4:14:3c:69:33:9a:e9:63:21:e8:
         cf:dc:78:20:42:7f:6e:e8:08:3f:00:f3:b3:b0:4d:8d:cd:22:
         3c:28:bc:d1:a5:af:95:6d:97:49:a3:3c:ac:c0:ba:30:39:97:
         57:06:c1:47:5e:57:85:cb:41:a8:a2:ab:25:9a:69:ae:de:5c:
         ca:33:2e:3f:8a:66:65:cc:df:33:d4:b2:cc:3f:5d:75:be:cc:
         7c:5b:0f:ba:d5:70:76:bf:81:7d:90:cf:34:db:07:a6:09:be:
         5c:20:57:b4:ee:db:2d:9a:06:c3:92:d9:ec:89:86:08:c4:8e:
         be:66:9a:c8:6f:26:41:66:b7:91:e4:51:0e:a6:38:08:97:b8:
         0d:19:ed:e9:01:f0:87:25:c2:fb:f6:15:e4:5e:e2:b5:d6:05:
         68:35:30:aa:68:7b:96:69:a3:50:fc:da:3a:c6:a5:d9:2a:98:
         4d:e0:24:e6:10:cd:f3:a8:90:6f:f0:ba:77:04:0c:f9:f4:21:
         0c:3a:c6:e2:d6:71:71:ac:19:a6:55:12:60:49:22:8d:01:b7:
         69:01:82:fd:af:c4:88:79:c0:dc:95:0a:f0:b5:7d:26:d4:c7:
         ce:4e:9c:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----