Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/9842db-e432-481f-961f-96824cbb6756/1/wc9cHvlTRKeFLz5ze__z2mm1Qmk.mft
File:                     wc9cHvlTRKeFLz5ze__z2mm1Qmk.mft (raw, json)
Hash identifier:          d45piamdchSw+bQuzQ5o/KEKQ6lR3XBsmCHpYwSSIIA=
Subject key identifier:   DD:BA:3D:A8:C4:97:B5:D3:FC:24:85:13:8A:79:8E:32:D7:8C:D1:30
Authority key identifier: C1:CF:5C:1E:F9:53:44:A7:85:2F:3E:73:7B:FF:F3:DA:69:B5:42:69
Certificate issuer:       /CN=c1cf5c1ef95344a7852f3e737bfff3da69b54269
Certificate serial:       018B8F43C5D087377087A85B37C32DF8FE87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wc9cHvlTRKeFLz5ze__z2mm1Qmk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/9842db-e432-481f-961f-96824cbb6756/1/wc9cHvlTRKeFLz5ze__z2mm1Qmk.mft
Manifest number:          0894
Signing time:             Thu 02 Nov 2023 09:01:05 +0000
Manifest this update:     Thu 02 Nov 2023 09:01:05 +0000
Manifest next update:     Fri 03 Nov 2023 09:01:05 +0000
Files and hashes:         1: iJq7KuI9V-z5rE8BJUG0t5IhuQw.roa (hash: QQAtbf0tSqb9kxA7Ehsn3m2DcrCRyLdh/t7z8p/wOl4=)
                          2: wc9cHvlTRKeFLz5ze__z2mm1Qmk.crl (hash: 7T/xIN/jn8NzPyUY+wf4zfDSw9w5vThHGUj7wcyMmt8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:8f:43:c5:d0:87:37:70:87:a8:5b:37:c3:2d:f8:fe:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1cf5c1ef95344a7852f3e737bfff3da69b54269
        Validity
            Not Before: Nov  2 09:01:05 2023 GMT
            Not After : Nov  3 09:01:05 2023 GMT
        Subject: CN=ddba3da8c497b5d3fc2485138a798e32d78cd130
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:b6:9b:95:bd:b9:8c:69:1c:91:d8:83:7f:4e:
                    7e:ee:07:77:0e:b1:dc:3a:4a:25:6b:18:b1:3a:e6:
                    37:99:ff:7a:ba:f0:df:84:98:f8:41:a0:e7:34:17:
                    56:b8:7a:c2:62:81:50:67:18:71:db:10:cd:85:09:
                    d0:58:4e:6c:0c:a2:f1:e6:cc:8f:45:b0:9a:c9:99:
                    6a:5b:4c:a5:8f:ce:a6:94:99:42:1f:3b:1a:80:2a:
                    b0:81:80:cf:bf:9e:0e:c9:7c:f1:a4:d2:5d:46:94:
                    10:fa:c6:1b:91:52:33:a1:f5:53:b0:61:e7:be:f8:
                    9e:9c:f6:69:35:02:a1:65:85:c1:fa:8a:8b:12:85:
                    f9:7f:f2:68:87:bc:f0:67:d0:ad:47:29:67:b1:57:
                    00:d0:c3:4a:7e:dc:6d:eb:4e:69:58:39:16:b7:65:
                    ec:4f:cf:36:e1:b9:c7:7d:d8:e7:eb:5c:85:dc:e7:
                    f7:79:da:68:7e:d3:30:21:6d:3c:5d:89:f9:e6:4a:
                    0a:3e:ce:18:b7:90:93:f9:b0:5d:4c:cf:31:fc:ad:
                    d6:f3:13:94:fa:b6:1a:dd:44:75:1f:b3:1a:ca:e7:
                    80:51:72:27:f3:c3:57:f6:81:dd:d7:81:5a:cc:4f:
                    f0:17:93:f4:24:d9:42:73:9b:07:02:95:41:27:fc:
                    b8:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:BA:3D:A8:C4:97:B5:D3:FC:24:85:13:8A:79:8E:32:D7:8C:D1:30
            X509v3 Authority Key Identifier:
                keyid:C1:CF:5C:1E:F9:53:44:A7:85:2F:3E:73:7B:FF:F3:DA:69:B5:42:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wc9cHvlTRKeFLz5ze__z2mm1Qmk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9842db-e432-481f-961f-96824cbb6756/1/wc9cHvlTRKeFLz5ze__z2mm1Qmk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9842db-e432-481f-961f-96824cbb6756/1/wc9cHvlTRKeFLz5ze__z2mm1Qmk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:d7:44:cf:67:93:79:26:31:ab:0d:60:92:50:15:8a:03:d3:
         22:d7:f4:bd:46:af:33:11:76:c6:9b:df:a3:a3:80:7e:a5:df:
         06:ee:d4:3b:c3:7a:8e:ad:42:a6:23:c3:f7:26:cb:81:fe:2e:
         0c:18:7a:c5:d5:44:a9:49:15:ca:f1:5b:cd:ea:fa:b2:32:4d:
         c2:05:75:e9:59:f9:fa:14:2a:42:46:2a:bd:b6:b0:62:2c:6b:
         5e:1a:6a:c5:f0:b8:39:8b:b4:a2:5c:4f:22:65:8d:aa:34:08:
         bc:b4:f9:73:fd:c7:44:81:2b:de:22:01:9b:89:9c:01:7f:62:
         f6:73:62:77:53:35:87:e0:e5:a7:b7:eb:e2:39:3e:ef:5b:d6:
         8f:60:a8:52:00:6b:e9:a0:26:b5:7f:61:40:f9:ba:e8:53:48:
         2f:a8:56:c4:5e:4c:03:e6:e8:a9:22:98:e6:80:0b:87:61:34:
         43:a1:e6:aa:10:dc:36:76:f4:53:03:3f:4c:25:0a:a1:62:1a:
         ef:3c:81:51:4c:b2:b7:27:32:68:41:58:55:92:15:8f:d8:ea:
         71:d8:a7:82:92:3c:a9:0a:b8:ec:d8:b3:3c:d8:97:c3:b4:d8:
         ef:65:d2:f6:33:4a:ad:68:a1:22:d5:36:83:b2:46:f6:67:82:
         be:c1:09:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 2 12:50:36 2023 by rpki-client on console-fra.rpki-client.org