Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/23cb9a-2de2-443d-8013-0b9291e16015/1/MpmLT4hkb14YW_yDd2u7BaaeaEU.mft
File:                     MpmLT4hkb14YW_yDd2u7BaaeaEU.mft (raw, json)
Hash identifier:          7S+tiIXHpyMN/MFy0x7tF8fD+oroRB1lPxOD6beKbCc=
Subject key identifier:   DF:A1:45:18:8D:A5:E9:E2:6C:68:05:E9:9B:55:4B:C6:B5:69:B8:3F
Authority key identifier: 32:99:8B:4F:88:64:6F:5E:18:5B:FC:83:77:6B:BB:05:A6:9E:68:45
Certificate issuer:       /CN=32998b4f88646f5e185bfc83776bbb05a69e6845
Certificate serial:       01894869C7FBD0E926710A55DA468269E26D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MpmLT4hkb14YW_yDd2u7BaaeaEU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/23cb9a-2de2-443d-8013-0b9291e16015/1/MpmLT4hkb14YW_yDd2u7BaaeaEU.mft
Manifest number:          0602
Signing time:             Wed 12 Jul 2023 04:43:59 +0000
Manifest this update:     Wed 12 Jul 2023 04:43:59 +0000
Manifest next update:     Thu 13 Jul 2023 04:43:59 +0000
Files and hashes:         1: EoO1E6UfH7g2EKyiX1j_QG6Glqo.roa (hash: bg1j+VTS+8+xSo12+siugfdCkBtsGgoBv5Edl4WLu+4=)
                          2: MpmLT4hkb14YW_yDd2u7BaaeaEU.crl (hash: aa8T7mr1k7puylkyQj9zLrH8rIpeB8hAYjvJzyeACts=)
                          3: wX3NDN829r_qFjQYdwpY_AS1HWg.roa (hash: sMgKG/hnksBOw4iDZuw36mwJ9Y7dAcb43ZLY3JVoa1w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:48:69:c7:fb:d0:e9:26:71:0a:55:da:46:82:69:e2:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32998b4f88646f5e185bfc83776bbb05a69e6845
        Validity
            Not Before: Jul 12 04:43:59 2023 GMT
            Not After : Jul 13 04:43:59 2023 GMT
        Subject: CN=dfa145188da5e9e26c6805e99b554bc6b569b83f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:66:b0:b1:02:f7:55:6a:3f:89:18:99:6a:6e:
                    a9:bc:86:fd:e4:7b:6f:8d:76:9f:35:91:5a:dc:94:
                    2e:7a:7a:a2:5c:f6:1b:2d:cb:8a:ba:64:0b:c7:ab:
                    4d:61:b2:c3:13:ad:6a:43:da:e6:d5:f0:0c:a8:25:
                    9c:95:03:3f:4a:ff:0b:40:9f:13:f1:95:8a:57:5e:
                    5b:60:be:2f:b7:99:b8:37:1d:26:69:ca:e0:f7:46:
                    51:d9:bf:86:59:53:a2:7c:75:63:54:11:d6:3e:38:
                    64:18:4c:07:f1:82:a6:90:90:98:d9:d4:fd:8b:93:
                    d4:33:ae:3c:80:34:ff:54:c6:97:20:2c:2a:4e:21:
                    ba:cc:9f:5d:75:a2:51:6a:e1:02:e1:da:24:62:22:
                    69:51:69:7f:bb:03:da:ad:8d:f2:70:40:8a:b0:9e:
                    08:e7:49:19:21:11:a7:0a:5a:05:c1:bf:b6:89:cd:
                    7e:c2:74:0c:18:de:ea:6f:06:83:46:2c:b3:95:f0:
                    3b:78:36:65:cd:b1:39:2c:14:7a:0f:a9:0a:90:29:
                    40:5e:5a:32:68:b2:3f:d8:7d:46:43:48:b0:1b:06:
                    fa:fa:b3:8d:74:e5:46:b8:43:c7:0b:48:62:6f:9a:
                    da:9d:3b:e2:fe:a4:95:87:10:a5:fb:11:7d:12:bd:
                    44:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:A1:45:18:8D:A5:E9:E2:6C:68:05:E9:9B:55:4B:C6:B5:69:B8:3F
            X509v3 Authority Key Identifier:
                keyid:32:99:8B:4F:88:64:6F:5E:18:5B:FC:83:77:6B:BB:05:A6:9E:68:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MpmLT4hkb14YW_yDd2u7BaaeaEU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/23cb9a-2de2-443d-8013-0b9291e16015/1/MpmLT4hkb14YW_yDd2u7BaaeaEU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/23cb9a-2de2-443d-8013-0b9291e16015/1/MpmLT4hkb14YW_yDd2u7BaaeaEU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:56:db:97:4a:69:c0:3e:77:0f:f7:92:72:9b:1f:32:b1:95:
         25:9c:74:6e:40:bd:e3:be:54:c0:07:4d:dc:98:d5:11:7d:dd:
         a7:40:6e:e2:96:14:4e:e5:02:aa:c9:3f:00:bf:87:49:a8:74:
         dd:6c:03:a2:47:a0:59:f1:74:4e:f4:e7:4b:10:16:d6:40:29:
         c9:b2:c6:84:e6:98:02:5d:53:68:ff:d5:01:31:1f:05:fb:9c:
         58:09:b0:8b:85:02:02:e3:e6:4f:66:e4:d4:b7:1d:ca:3f:d2:
         b2:16:67:da:b5:d8:e2:d7:aa:db:84:ba:b9:12:58:e3:25:7d:
         19:26:9d:c6:ef:6c:2f:3b:e4:ab:48:0d:eb:f7:89:f7:b1:3c:
         f4:5a:49:47:70:0a:e4:dc:d1:36:0a:1b:71:ff:79:22:93:73:
         29:2e:79:8b:d1:1a:53:9c:7c:58:7b:05:39:88:47:56:ab:95:
         cb:b5:d0:d7:37:ac:c7:36:d0:25:7b:16:24:d5:5d:01:9a:74:
         f8:6f:56:f9:31:a9:2e:0d:31:5e:c3:50:e7:b1:b4:8d:16:43:
         33:15:6d:7a:c4:da:87:ec:09:3c:f7:bb:07:41:55:6a:52:ba:
         10:84:dc:a7:53:dc:ce:06:e7:76:9b:d4:92:0d:a9:c0:44:56:
         17:5a:f7:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----