Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/085cf7-d4ec-4817-88a9-7becf292e8df/1/Iv1sFTtG7k9iHadP1XKYO8r_BjI.mft
File:                     Iv1sFTtG7k9iHadP1XKYO8r_BjI.mft (raw, json)
Hash identifier:          lHHaB6RZx+uC5vTzkYQOOauqTW4sPhb9/XbdGrPj/Ig=
Subject key identifier:   3C:CA:15:7F:44:82:FF:B8:7F:73:0B:97:53:65:96:B4:3D:A0:0E:BB
Authority key identifier: 22:FD:6C:15:3B:46:EE:4F:62:1D:A7:4F:D5:72:98:3B:CA:FF:06:32
Certificate issuer:       /CN=22fd6c153b46ee4f621da74fd572983bcaff0632
Certificate serial:       018C811759D7FCFA070DB1BDE4CADA4D2D25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Iv1sFTtG7k9iHadP1XKYO8r_BjI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/085cf7-d4ec-4817-88a9-7becf292e8df/1/Iv1sFTtG7k9iHadP1XKYO8r_BjI.mft
Manifest number:          0A0C
Signing time:             Tue 19 Dec 2023 08:00:40 +0000
Manifest this update:     Tue 19 Dec 2023 08:00:40 +0000
Manifest next update:     Wed 20 Dec 2023 08:00:40 +0000
Files and hashes:         1: Iv1sFTtG7k9iHadP1XKYO8r_BjI.crl (hash: yjk+6NHDXBOsCF4+ue2Ylo0WxQyi1Hzc1y53qV0jjck=)
                          2: mbt7JkmbeFR4mJ5JmNLrtZvT_Ew.roa (hash: 36hYMEubq4zhlkylS0/FMnwbDomIuUCRVNeSWw7ddWI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:81:17:59:d7:fc:fa:07:0d:b1:bd:e4:ca:da:4d:2d:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22fd6c153b46ee4f621da74fd572983bcaff0632
        Validity
            Not Before: Dec 19 08:00:40 2023 GMT
            Not After : Dec 20 08:00:40 2023 GMT
        Subject: CN=3cca157f4482ffb87f730b97536596b43da00ebb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:9b:c7:5a:a0:78:c1:32:e8:be:7d:f1:71:81:
                    4d:f7:54:3b:b2:40:e6:98:a6:68:8e:94:cf:be:09:
                    6a:ff:b5:95:3e:a3:7a:01:15:81:dd:f1:64:83:f8:
                    b3:69:24:f6:f1:72:bb:26:e4:0c:6c:52:3b:c0:1d:
                    c0:09:4c:98:97:7f:15:99:06:e4:ee:d6:60:49:65:
                    45:37:f4:3a:fa:f7:b5:ce:3d:02:3f:2c:3f:cb:fb:
                    63:50:6f:c1:32:e8:5c:aa:49:03:ba:d1:9f:13:fc:
                    5b:22:fe:a1:34:a3:cf:0f:0b:8c:7c:e7:f4:26:78:
                    90:49:a3:6d:cb:b9:26:2d:6d:c8:9b:a1:f5:21:7f:
                    84:06:7f:01:7a:d9:c3:e6:f4:49:6d:25:e7:a5:e7:
                    f0:24:4d:c1:99:28:d2:d2:81:a9:00:fa:87:b2:4a:
                    d4:0a:50:c3:3c:6b:38:5d:cd:c5:04:59:4d:e6:0b:
                    d1:63:87:04:52:ab:66:ef:a1:a7:a5:ff:a9:01:3a:
                    ab:80:68:b8:da:29:b7:95:ec:4b:77:4e:a1:48:c7:
                    c5:b0:70:39:db:cd:56:c7:4d:07:cc:39:fd:4e:0f:
                    02:0c:d9:09:9e:a9:06:03:20:55:23:22:fe:da:aa:
                    49:01:93:f8:cb:77:31:5c:64:13:a5:a3:a3:a0:30:
                    57:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:CA:15:7F:44:82:FF:B8:7F:73:0B:97:53:65:96:B4:3D:A0:0E:BB
            X509v3 Authority Key Identifier:
                keyid:22:FD:6C:15:3B:46:EE:4F:62:1D:A7:4F:D5:72:98:3B:CA:FF:06:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iv1sFTtG7k9iHadP1XKYO8r_BjI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/085cf7-d4ec-4817-88a9-7becf292e8df/1/Iv1sFTtG7k9iHadP1XKYO8r_BjI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/085cf7-d4ec-4817-88a9-7becf292e8df/1/Iv1sFTtG7k9iHadP1XKYO8r_BjI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:05:91:e2:b9:8f:0c:81:21:ae:be:ab:3a:38:56:df:80:b9:
         38:93:e2:2a:7b:0e:9a:f2:7a:0e:c8:fc:da:9e:87:4d:a0:ca:
         ff:2a:5a:8f:ec:82:94:0f:9d:b0:ef:ca:c7:db:a8:c0:1b:ff:
         38:64:23:39:76:45:89:ef:d6:f8:9d:36:d1:d9:2f:b0:bc:9c:
         71:47:1e:40:ea:95:18:a9:e8:37:d6:09:8b:81:e1:c4:52:57:
         bd:81:ae:25:77:bf:b1:af:f4:7e:dc:25:ca:cd:d5:e1:80:c7:
         19:80:15:e8:29:7c:f1:08:59:e3:7c:1e:15:88:7f:20:f5:01:
         84:e5:cb:9e:12:5a:72:91:e3:70:8a:74:d8:02:a9:60:05:69:
         c7:cf:d5:f9:6c:6a:4a:68:86:10:7e:24:fe:4d:e8:ce:36:95:
         77:50:cf:61:6a:d6:da:05:4e:31:a3:82:85:39:f4:a0:36:16:
         99:30:f1:1e:9d:09:e1:11:30:3a:99:2c:5b:51:03:ed:90:ca:
         6b:77:6f:a6:32:30:4d:96:78:aa:a0:57:33:ad:dc:9a:9e:8e:
         74:ec:91:17:2d:f9:be:d1:d6:e8:c7:be:6e:d5:21:31:eb:a2:
         e7:37:8c:d7:94:33:f6:22:47:71:b5:1a:67:7e:5e:32:dd:42:
         71:9a:70:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----