Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/0a911a-0f34-4173-ade8-f9e471a0fa37/1/rb7r8DqT8o_emHgiwEqQTn42eVk.mft
File:                     rb7r8DqT8o_emHgiwEqQTn42eVk.mft (raw, json)
Hash identifier:          cOfhatwiG+lMdhaZHkFkNJzZKN7sxe6O2tA9hS0fW/w=
Subject key identifier:   B7:E8:C5:43:AE:0D:DC:A3:36:A7:EE:9C:14:16:8B:85:28:D2:DD:C6
Authority key identifier: AD:BE:EB:F0:3A:93:F2:8F:DE:98:78:22:C0:4A:90:4E:7E:36:79:59
Certificate issuer:       /CN=adbeebf03a93f28fde987822c04a904e7e367959
Certificate serial:       018DCF9DED74B81ACB3FD5994E6C090C6B83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rb7r8DqT8o_emHgiwEqQTn42eVk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/0a911a-0f34-4173-ade8-f9e471a0fa37/1/rb7r8DqT8o_emHgiwEqQTn42eVk.mft
Manifest number:          09A8
Signing time:             Thu 22 Feb 2024 07:00:50 +0000
Manifest this update:     Thu 22 Feb 2024 07:00:50 +0000
Manifest next update:     Fri 23 Feb 2024 07:00:50 +0000
Files and hashes:         1: Fj3rshY8ZLrzY9OW6iyyVxz7kac.roa (hash: rmT/uSK+yDY1FSUF8MGhl61aZ9+rOWvrvfa2UCbUHbI=)
                          2: rb7r8DqT8o_emHgiwEqQTn42eVk.crl (hash: 3+0QQ/LRXrGqhXlr73lzJN96vSVP9I1wfqP4rnmD1To=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:cf:9d:ed:74:b8:1a:cb:3f:d5:99:4e:6c:09:0c:6b:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adbeebf03a93f28fde987822c04a904e7e367959
        Validity
            Not Before: Feb 22 07:00:50 2024 GMT
            Not After : Feb 23 07:00:50 2024 GMT
        Subject: CN=b7e8c543ae0ddca336a7ee9c14168b8528d2ddc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:29:ae:ff:5c:49:82:74:0d:2f:f1:45:f5:9a:
                    f1:6b:59:01:71:6b:f8:11:bb:d9:92:55:8e:e4:2f:
                    b2:65:29:25:1c:89:79:46:db:af:47:4c:47:e4:e0:
                    b5:6f:8f:08:0d:d5:21:2a:b6:04:ed:2f:6b:a3:2a:
                    5f:a8:b3:91:cf:c9:cd:b3:7e:32:1f:13:59:d6:fa:
                    9c:dc:e5:b2:d4:9b:93:45:e2:eb:bf:c7:c3:3a:7a:
                    f2:e6:f7:f7:37:67:bd:85:1c:41:3d:78:32:66:d4:
                    f0:ce:76:2c:ae:26:f1:dc:34:da:56:83:37:8c:23:
                    6d:cd:e4:5e:3e:0a:86:ab:be:da:51:f2:b8:31:ef:
                    77:7d:63:da:16:e0:e5:e5:a0:db:af:b9:96:c8:2e:
                    9c:80:40:61:d7:a0:05:54:2f:48:d8:3c:aa:80:1d:
                    36:c4:97:9b:ee:36:f6:8a:6a:cf:95:89:c2:df:bc:
                    c7:84:9e:97:19:65:07:b1:59:35:bc:06:df:31:63:
                    9e:d7:42:c3:14:63:6f:92:02:b9:1d:7f:65:e4:e6:
                    46:77:9d:78:b4:84:60:bc:66:f5:9f:ae:0a:48:c0:
                    53:9c:fd:fb:3c:d5:b5:77:c1:7b:f7:ac:51:21:37:
                    8c:0a:96:73:e6:d4:b8:fb:9c:9d:f7:32:5e:98:dd:
                    6f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:E8:C5:43:AE:0D:DC:A3:36:A7:EE:9C:14:16:8B:85:28:D2:DD:C6
            X509v3 Authority Key Identifier:
                keyid:AD:BE:EB:F0:3A:93:F2:8F:DE:98:78:22:C0:4A:90:4E:7E:36:79:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rb7r8DqT8o_emHgiwEqQTn42eVk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0a911a-0f34-4173-ade8-f9e471a0fa37/1/rb7r8DqT8o_emHgiwEqQTn42eVk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0a911a-0f34-4173-ade8-f9e471a0fa37/1/rb7r8DqT8o_emHgiwEqQTn42eVk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:e0:15:cf:02:95:14:0a:5f:73:7c:0f:43:f4:ff:e7:28:22:
         46:2c:31:7b:96:1c:64:72:3a:58:ce:d1:09:ce:29:29:9f:44:
         62:5e:02:f4:0d:8d:c4:96:b8:a0:f1:60:fb:57:5e:32:6d:a8:
         cc:74:19:7a:5e:38:a4:87:88:4c:b5:89:e3:41:17:9b:98:cb:
         70:c4:32:65:2d:57:cd:bb:3a:b0:2a:4b:8e:97:84:11:ed:b7:
         bb:e0:4c:00:47:6a:63:d3:10:48:78:2b:5d:24:e7:d6:92:1a:
         2a:87:bc:60:11:e6:9f:8c:ac:ba:ad:8a:b2:99:97:00:75:ce:
         b7:cf:f2:ef:7c:df:c0:d7:9f:48:24:63:f9:0b:45:3a:ea:56:
         68:f6:dc:62:11:ed:f5:a3:04:3b:8f:56:85:56:85:c2:ea:bc:
         9d:35:2b:e1:15:3c:a5:84:78:8a:df:f1:e8:e6:78:f7:4c:38:
         b9:63:e6:d2:09:60:45:d2:ac:5c:e5:2c:ad:5b:e1:99:94:e3:
         d3:9b:c7:9d:f2:9a:20:0d:57:17:0c:05:26:eb:48:27:d4:02:
         86:cf:4f:c4:b9:ce:ee:6e:06:95:63:1f:0a:5f:df:90:e5:b1:
         c0:87:22:79:77:3b:6c:06:64:27:b2:42:d3:03:30:0b:e0:86:
         46:e7:0f:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----