Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/dbdaca-1e15-47c9-8c80-ddaac7f9a72f/1/f898ZItKZXIK3wBmZBrDD18HpRI.mft
File:                     f898ZItKZXIK3wBmZBrDD18HpRI.mft (raw, json)
Hash identifier:          XJdHqzEzhu4b/TcFYxl1f3OXHPuHZO99qcSXjNzbxXA=
Subject key identifier:   32:68:2F:4A:49:FF:03:26:E4:1D:AE:8A:B6:0D:11:7E:0A:B0:6C:77
Authority key identifier: 7F:CF:7C:64:8B:4A:65:72:0A:DF:00:66:64:1A:C3:0F:5F:07:A5:12
Certificate issuer:       /CN=7fcf7c648b4a65720adf0066641ac30f5f07a512
Certificate serial:       018A43F4AC475DB9676E78310D11B161BED1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f898ZItKZXIK3wBmZBrDD18HpRI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/dbdaca-1e15-47c9-8c80-ddaac7f9a72f/1/f898ZItKZXIK3wBmZBrDD18HpRI.mft
Manifest number:          0768
Signing time:             Wed 30 Aug 2023 01:00:22 +0000
Manifest this update:     Wed 30 Aug 2023 01:00:22 +0000
Manifest next update:     Thu 31 Aug 2023 01:00:22 +0000
Files and hashes:         1: 88P6umTrNHq4UL4uIV_CcD1g2SA.roa (hash: AsCvz4Qz+INPo/wsxCh7iI4LoANBH5LwoMjMOrzPMP8=)
                          2: OgsaULOfXZ2zfGxYzOTOAZM45aM.roa (hash: rcMV347SNskmeluwO6hCBgebyPACq+EsagBiYPr/5D4=)
                          3: f898ZItKZXIK3wBmZBrDD18HpRI.crl (hash: DD7fhqSINiF6EebL6VgywEpx02QWApGwC/r8Stb1v+o=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:43:f4:ac:47:5d:b9:67:6e:78:31:0d:11:b1:61:be:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fcf7c648b4a65720adf0066641ac30f5f07a512
        Validity
            Not Before: Aug 30 01:00:22 2023 GMT
            Not After : Aug 31 01:00:22 2023 GMT
        Subject: CN=32682f4a49ff0326e41dae8ab60d117e0ab06c77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:42:d9:c6:0d:e1:30:8e:8a:84:91:51:f6:3a:
                    05:a8:2a:ea:c3:93:5e:91:1f:e8:96:f5:d8:e3:70:
                    ce:bb:d8:31:23:9c:bf:6a:58:02:4d:eb:b8:7a:d7:
                    94:51:58:98:5c:67:01:e4:21:63:61:cc:80:a5:3e:
                    8d:ea:c3:f1:83:03:5b:46:b5:c2:e0:64:77:d3:c4:
                    16:f3:a5:6c:73:79:c5:77:31:64:2f:73:7e:6b:cb:
                    2d:cc:87:ec:d5:43:51:41:1c:28:f5:a5:87:5c:6f:
                    98:7e:00:b7:c1:aa:9e:0d:24:44:7c:c2:4f:3d:69:
                    a4:9e:6c:2e:ac:77:dd:5e:b3:41:90:c6:84:94:55:
                    48:7b:fd:c2:34:95:eb:94:4f:c1:ed:3b:30:e7:1c:
                    fe:8d:1d:b9:12:6c:09:b7:05:a5:68:28:fc:a7:6c:
                    b8:96:c1:07:dc:20:b8:13:b7:5e:b5:93:1d:7d:d6:
                    3c:1e:9d:ef:66:f4:cc:28:a1:8e:54:e1:9a:a9:94:
                    ac:9c:2a:6a:58:53:f3:22:58:f5:83:3f:26:ee:75:
                    1a:33:2f:81:e8:af:b3:b2:4f:2d:eb:f5:6f:08:08:
                    fb:67:26:79:2d:64:59:5a:06:21:f3:20:0c:1b:12:
                    88:7c:1d:5d:d0:f5:a5:05:76:fa:52:84:4d:ec:e6:
                    aa:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:68:2F:4A:49:FF:03:26:E4:1D:AE:8A:B6:0D:11:7E:0A:B0:6C:77
            X509v3 Authority Key Identifier:
                keyid:7F:CF:7C:64:8B:4A:65:72:0A:DF:00:66:64:1A:C3:0F:5F:07:A5:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f898ZItKZXIK3wBmZBrDD18HpRI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/dbdaca-1e15-47c9-8c80-ddaac7f9a72f/1/f898ZItKZXIK3wBmZBrDD18HpRI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/dbdaca-1e15-47c9-8c80-ddaac7f9a72f/1/f898ZItKZXIK3wBmZBrDD18HpRI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:68:9c:e7:1a:73:65:19:9d:05:bc:32:1e:9e:c6:46:03:0b:
         a7:b9:c1:65:3e:c7:93:3e:06:14:6e:f9:c6:31:52:1b:27:3f:
         8b:84:aa:4d:8b:04:e3:2b:d5:87:9a:38:5a:08:9e:00:b4:2a:
         38:d2:22:31:0d:fe:99:e6:df:13:61:4c:cf:a8:3e:f4:22:80:
         00:fe:98:cf:e4:5a:7a:40:25:d9:2b:fc:ba:d3:2a:bf:71:8b:
         03:f0:71:4d:97:88:ef:23:f0:b2:10:17:13:44:ab:e5:54:90:
         24:ee:3a:13:b8:7e:07:73:f7:60:23:b8:25:86:27:39:a0:bb:
         d8:26:2f:09:f7:d5:80:41:00:f7:2b:84:72:aa:d6:69:ef:4b:
         a3:56:ca:d9:59:1c:10:2d:5d:a0:4d:f5:66:58:ed:08:da:45:
         e0:cf:99:5c:ab:1f:d1:e6:71:5d:d2:a8:d0:e3:b8:42:29:7d:
         6f:68:f9:33:df:55:40:24:d4:56:10:59:47:04:9f:ae:1d:39:
         7f:c6:64:a3:f8:cd:0b:98:f3:af:e4:4d:df:32:f1:e8:a6:15:
         7f:84:30:1e:e8:65:f6:15:09:1e:11:4e:3f:67:2d:47:fb:3c:
         90:21:28:32:10:be:30:3c:17:d6:c8:78:3d:dd:97:0a:00:17:
         8b:49:11:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----