Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/707f09-0cd4-4735-aa98-3ec7e7dd4a20/1/WCbFRUTdw8i-u7eLfi6s5d4oGJQ.mft
File:                     WCbFRUTdw8i-u7eLfi6s5d4oGJQ.mft (raw, json)
Hash identifier:          NWRnronE5PMCP/cE9dq59ZcDR13fgtZapyq482mN5W0=
Subject key identifier:   A9:5E:85:5F:C7:CB:2D:5F:B4:8F:D0:2E:5A:99:98:4F:07:B2:94:78
Authority key identifier: 58:26:C5:45:44:DD:C3:C8:BE:BB:B7:8B:7E:2E:AC:E5:DE:28:18:94
Certificate issuer:       /CN=5826c54544ddc3c8bebbb78b7e2eace5de281894
Certificate serial:       018C155FDD10A42DE9E8325495EA4D0ED534
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WCbFRUTdw8i-u7eLfi6s5d4oGJQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/707f09-0cd4-4735-aa98-3ec7e7dd4a20/1/WCbFRUTdw8i-u7eLfi6s5d4oGJQ.mft
Manifest number:          0FAC
Signing time:             Tue 28 Nov 2023 10:00:53 +0000
Manifest this update:     Tue 28 Nov 2023 10:00:53 +0000
Manifest next update:     Wed 29 Nov 2023 10:00:53 +0000
Files and hashes:         1: WCbFRUTdw8i-u7eLfi6s5d4oGJQ.crl (hash: 5CTwWmMKr/upPZudwZCFFhWEhp4zku88aYXtSmggdO4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:15:5f:dd:10:a4:2d:e9:e8:32:54:95:ea:4d:0e:d5:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5826c54544ddc3c8bebbb78b7e2eace5de281894
        Validity
            Not Before: Nov 28 10:00:53 2023 GMT
            Not After : Nov 29 10:00:53 2023 GMT
        Subject: CN=a95e855fc7cb2d5fb48fd02e5a99984f07b29478
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:47:cc:7e:c0:ed:1c:0d:90:b7:88:55:6a:a2:
                    7e:b0:2d:8a:d9:5d:a2:4c:ce:db:ba:6f:f7:8f:83:
                    b0:7c:72:f4:49:d2:5b:9b:8e:39:2a:a2:6c:d9:91:
                    0b:bb:47:8f:99:f1:b8:8e:f5:21:53:45:2e:d7:43:
                    b7:c6:79:fb:3b:2c:00:aa:91:be:9e:e1:65:5a:de:
                    1b:48:95:4a:2a:da:6b:42:b9:4f:84:4e:e5:23:fb:
                    fc:e0:29:32:67:66:42:22:0f:34:3b:5d:61:3d:df:
                    b8:01:0f:9f:95:d4:92:32:6f:50:e9:bd:1f:8d:6d:
                    5f:d1:9d:7a:26:a5:36:a2:f1:3c:ea:01:eb:38:29:
                    ff:18:4d:af:17:34:e7:e1:92:2b:ec:cd:18:4b:bd:
                    df:ee:a8:ba:b8:87:a4:0f:76:29:f2:0e:ec:d0:76:
                    c6:fc:2b:49:25:b6:6c:19:da:8e:cd:0a:a7:df:76:
                    e5:a6:d8:95:92:01:34:d0:a6:f4:4f:a3:29:f5:8b:
                    f2:f4:d9:c5:24:22:32:ef:7b:60:7e:0f:f8:3e:4f:
                    6f:78:16:15:6d:f0:a4:3b:a6:96:da:95:a8:f8:58:
                    de:53:ac:86:a7:0b:1a:f1:9c:98:4d:0f:11:72:1c:
                    f3:4e:bb:cd:67:c2:c7:a1:a1:32:8a:47:d7:9c:8d:
                    62:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:5E:85:5F:C7:CB:2D:5F:B4:8F:D0:2E:5A:99:98:4F:07:B2:94:78
            X509v3 Authority Key Identifier:
                keyid:58:26:C5:45:44:DD:C3:C8:BE:BB:B7:8B:7E:2E:AC:E5:DE:28:18:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WCbFRUTdw8i-u7eLfi6s5d4oGJQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/707f09-0cd4-4735-aa98-3ec7e7dd4a20/1/WCbFRUTdw8i-u7eLfi6s5d4oGJQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/707f09-0cd4-4735-aa98-3ec7e7dd4a20/1/WCbFRUTdw8i-u7eLfi6s5d4oGJQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:c6:0c:4d:fb:04:f3:78:f7:30:ac:0e:95:72:d4:2d:7f:df:
         d8:98:27:e0:5b:21:65:e5:e9:72:1f:20:5b:23:2e:13:d3:5c:
         38:1c:32:fc:f1:0a:86:4e:da:4e:3e:b4:55:74:58:aa:e6:9e:
         b5:92:d1:19:7c:75:15:1c:c0:1e:5d:df:08:cf:d8:41:dc:69:
         a3:d0:b9:9c:c6:83:a5:cf:6d:67:18:09:0d:0e:0b:fb:c1:d4:
         00:61:da:f7:4d:0a:fe:a5:73:3f:80:3f:8c:3c:13:bb:2f:c9:
         9a:b6:7d:1f:24:4f:f6:43:0c:99:07:23:1d:b2:61:94:3e:77:
         38:12:39:05:69:45:32:07:40:ff:52:4f:74:41:ae:e3:fe:9a:
         c5:ed:e2:c6:43:15:97:30:27:de:f5:20:16:5b:64:04:2e:1a:
         9b:9a:60:36:cd:15:19:e3:3c:c2:dc:f5:6e:f4:f1:9a:fb:16:
         b4:9a:e6:5a:3f:41:4c:58:38:30:35:2c:69:25:62:73:4a:98:
         93:6e:73:37:b5:be:32:42:52:df:b5:4a:7d:00:33:b0:5f:aa:
         7c:2e:20:e2:5a:db:60:89:bf:02:a0:c5:9a:05:50:4b:41:b4:
         1b:1b:42:f3:12:1d:c8:1a:4e:5e:8f:c8:3e:8a:74:d9:fa:dc:
         bc:91:74:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----