Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/81b044-a129-4874-a8a3-adb5e96631f7/1/apkJ4CGHNE_FFKsFT7G2JefVfcw.mft
File:                     apkJ4CGHNE_FFKsFT7G2JefVfcw.mft (raw, json)
Hash identifier:          vwAUJV8AyKvniiMpynyNjuarWLTGfbQ9KCHEaUR6K9M=
Subject key identifier:   63:CB:AE:F7:A6:14:91:6C:BD:7D:B6:E6:EF:95:C2:BF:AC:F0:95:49
Authority key identifier: 6A:99:09:E0:21:87:34:4F:C5:14:AB:05:4F:B1:B6:25:E7:D5:7D:CC
Certificate issuer:       /CN=6a9909e02187344fc514ab054fb1b625e7d57dcc
Certificate serial:       018C43F02BE987F5D82C0753A2476A5E2BD0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/apkJ4CGHNE_FFKsFT7G2JefVfcw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/81b044-a129-4874-a8a3-adb5e96631f7/1/apkJ4CGHNE_FFKsFT7G2JefVfcw.mft
Manifest number:          0FC4
Signing time:             Thu 07 Dec 2023 11:01:02 +0000
Manifest this update:     Thu 07 Dec 2023 11:01:02 +0000
Manifest next update:     Fri 08 Dec 2023 11:01:02 +0000
Files and hashes:         1: apkJ4CGHNE_FFKsFT7G2JefVfcw.crl (hash: mqgjX/jhjxErZkmVFtPr+v+BXctVm0xWRkpxittz1go=)
                          2: hjH4NO3zlbmidnFg44NvxBdwA1Q.roa (hash: ccsxfsYUzxTvoxaZzOajYD9bIMUtcMWhgCjJ2d5hqYg=)
                          3: lFdzl1ixNWqzU0GEpfeie7iyKHg.roa (hash: K6cm/JkbjksR4EZLvN3SUmGtt11Q33UR3iHz7X5LMQc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:43:f0:2b:e9:87:f5:d8:2c:07:53:a2:47:6a:5e:2b:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a9909e02187344fc514ab054fb1b625e7d57dcc
        Validity
            Not Before: Dec  7 11:01:02 2023 GMT
            Not After : Dec  8 11:01:02 2023 GMT
        Subject: CN=63cbaef7a614916cbd7db6e6ef95c2bfacf09549
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:26:87:22:81:46:b1:e5:84:21:84:71:3d:27:
                    8a:6a:9b:eb:7c:27:60:ef:52:e5:df:95:4b:95:8d:
                    47:4e:ba:68:20:c7:3c:01:0e:6d:ef:a4:22:ee:bd:
                    81:f2:70:ff:4f:e5:30:b0:49:8f:5a:48:48:c3:cb:
                    78:c5:09:3e:ca:51:df:9e:27:5c:2e:53:12:f7:96:
                    35:47:f6:5f:53:6b:13:cc:29:a0:1d:50:4a:0d:10:
                    98:91:fd:e0:91:fb:f6:bf:1b:d8:30:84:61:45:f1:
                    cd:e6:9d:75:3e:27:be:0c:bd:4f:4b:21:61:6d:2b:
                    b7:49:24:08:6d:3f:f0:4c:db:c4:d5:a8:dd:3a:ad:
                    09:b5:9f:b6:0c:a5:2a:48:f7:db:a4:e1:b4:db:e5:
                    2b:ab:b9:e0:7b:fd:96:43:7e:46:67:74:ce:29:a8:
                    da:4f:63:8c:26:5c:0e:16:43:7b:2b:40:4b:f0:e8:
                    c9:0c:ce:fb:76:2a:2e:6d:27:2d:e9:f0:2a:50:9a:
                    81:da:13:71:9b:0f:b1:00:0d:4b:71:51:ef:6d:c1:
                    eb:38:00:cb:87:62:45:7f:d6:81:ae:f8:91:0d:02:
                    3a:2c:e0:80:30:d1:fe:bb:03:8c:72:97:e6:ef:68:
                    27:30:9c:26:ab:11:94:13:6d:49:b2:8b:fe:c9:29:
                    38:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:CB:AE:F7:A6:14:91:6C:BD:7D:B6:E6:EF:95:C2:BF:AC:F0:95:49
            X509v3 Authority Key Identifier:
                keyid:6A:99:09:E0:21:87:34:4F:C5:14:AB:05:4F:B1:B6:25:E7:D5:7D:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/apkJ4CGHNE_FFKsFT7G2JefVfcw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/81b044-a129-4874-a8a3-adb5e96631f7/1/apkJ4CGHNE_FFKsFT7G2JefVfcw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/81b044-a129-4874-a8a3-adb5e96631f7/1/apkJ4CGHNE_FFKsFT7G2JefVfcw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:56:97:d2:a5:39:74:97:f4:30:c5:a1:a7:77:b2:1b:a8:f1:
         15:38:68:6d:a4:aa:f8:56:37:76:04:d0:37:4a:bf:20:0e:e2:
         f0:28:59:2a:ec:eb:6c:19:be:68:f5:4a:d4:d5:36:5f:15:1c:
         50:98:c3:0c:df:9b:cc:de:11:11:02:98:77:3c:14:1d:c1:1c:
         91:08:5c:17:f2:3b:ca:95:0c:b1:86:d1:64:3b:44:b3:b8:e4:
         e8:5b:91:98:85:de:a1:ad:68:09:75:8d:dd:3d:ea:ee:11:50:
         1c:95:af:c8:ae:18:ab:d7:95:72:5f:10:49:54:63:1b:24:db:
         a8:82:c7:72:9a:e9:d0:86:7b:d9:d5:e8:62:73:f0:fd:18:7d:
         c3:c1:be:d8:39:63:08:6f:d7:ce:c3:85:78:f2:af:4d:b5:33:
         26:89:30:8f:6a:3d:67:1f:00:a8:37:18:bf:05:c5:79:33:12:
         b6:ea:ce:58:0c:ca:f3:8d:fb:9c:cb:78:37:db:89:ba:62:0d:
         fe:85:0c:65:c8:ee:a5:58:38:07:b2:bb:43:60:00:d8:df:cd:
         9b:da:02:b4:2e:3f:ea:e3:60:f6:02:da:a9:77:83:14:a2:39:
         2e:52:b7:d2:82:05:54:f7:85:42:6b:c3:1c:09:21:23:25:63:
         7e:d3:c3:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----