Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/bbad9e-46d7-4d4f-901d-1935dd953700/1/0gSOSYl-YA8dG9fE3N_6mf0vE0w.mft
File:                     0gSOSYl-YA8dG9fE3N_6mf0vE0w.mft (raw, json)
Hash identifier:          2yy2SPNIe7CHQ+dH74tdqMoLmpIigibRrFivBdbbQ08=
Subject key identifier:   E5:F9:2B:33:3F:51:A5:BF:1D:89:71:67:EE:04:4C:52:A9:B1:3D:5F
Authority key identifier: D2:04:8E:49:89:7E:60:0F:1D:1B:D7:C4:DC:DF:FA:99:FD:2F:13:4C
Certificate issuer:       /CN=d2048e49897e600f1d1bd7c4dcdffa99fd2f134c
Certificate serial:       018C8FE61B954B3908118BFCBE99FBD02329
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0gSOSYl-YA8dG9fE3N_6mf0vE0w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/bbad9e-46d7-4d4f-901d-1935dd953700/1/0gSOSYl-YA8dG9fE3N_6mf0vE0w.mft
Manifest number:          039C
Signing time:             Fri 22 Dec 2023 05:01:11 +0000
Manifest this update:     Fri 22 Dec 2023 05:01:11 +0000
Manifest next update:     Sat 23 Dec 2023 05:01:11 +0000
Files and hashes:         1: 0gSOSYl-YA8dG9fE3N_6mf0vE0w.crl (hash: KeRdAb8Pxzylxi9Wml0gEOC5VaH7ypL4LSJhypGCJmM=)
                          2: 5qmG1IV26TKkqTX87Dv1kXK9vQ0.roa (hash: TUSz2kcSM2bS0pVSRJ6f+kkYDvAPwVUNiIog53Bsv+w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:8f:e6:1b:95:4b:39:08:11:8b:fc:be:99:fb:d0:23:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2048e49897e600f1d1bd7c4dcdffa99fd2f134c
        Validity
            Not Before: Dec 22 05:01:11 2023 GMT
            Not After : Dec 23 05:01:11 2023 GMT
        Subject: CN=e5f92b333f51a5bf1d897167ee044c52a9b13d5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c6:a4:61:15:cf:cd:46:28:d6:0d:25:d4:e0:
                    98:77:13:36:8f:80:23:ce:b5:e9:24:62:ca:a5:46:
                    7c:c5:87:3e:55:3b:77:c5:2d:23:77:4d:ac:fc:38:
                    f7:0f:0a:71:17:7f:e3:4a:15:5b:5c:72:ac:8c:dc:
                    0f:87:e6:19:3a:04:d6:06:46:c8:ed:e4:cd:9c:c2:
                    c3:f9:30:77:5d:25:d5:45:58:56:d5:54:0e:5d:46:
                    15:69:96:87:c6:0c:26:46:f5:1d:1a:0e:2d:1c:0a:
                    64:21:6b:8d:6d:ae:2d:09:dd:ac:d8:58:58:f3:54:
                    36:71:0c:53:d1:13:73:91:13:9c:52:24:ce:9a:94:
                    52:e2:4a:dc:03:bb:7c:67:19:59:3a:60:2e:b3:ff:
                    9c:0e:56:fa:15:6e:77:f0:a6:74:13:c3:83:48:8c:
                    e3:31:28:e1:0c:ec:2f:d4:e3:25:09:58:2f:3c:9a:
                    24:a3:45:76:a3:86:95:3f:ed:da:67:56:09:95:73:
                    45:83:05:5c:07:4d:41:d4:2e:0b:a3:41:0e:a0:ec:
                    b4:b2:b9:6e:ba:f3:d5:4b:ea:75:bf:5f:35:73:9f:
                    37:11:31:8d:50:32:71:07:8d:53:3e:c3:13:68:cb:
                    7a:d0:3f:2a:18:01:af:10:97:11:57:09:7c:f4:aa:
                    d1:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:F9:2B:33:3F:51:A5:BF:1D:89:71:67:EE:04:4C:52:A9:B1:3D:5F
            X509v3 Authority Key Identifier:
                keyid:D2:04:8E:49:89:7E:60:0F:1D:1B:D7:C4:DC:DF:FA:99:FD:2F:13:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0gSOSYl-YA8dG9fE3N_6mf0vE0w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bbad9e-46d7-4d4f-901d-1935dd953700/1/0gSOSYl-YA8dG9fE3N_6mf0vE0w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bbad9e-46d7-4d4f-901d-1935dd953700/1/0gSOSYl-YA8dG9fE3N_6mf0vE0w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:02:9c:a7:23:42:cb:77:f7:27:84:70:92:d6:64:ed:c3:ca:
         fa:af:ba:54:ab:de:45:5f:32:e8:0f:d5:fa:3b:46:5a:aa:c8:
         d7:6b:6a:4d:70:26:42:59:c9:00:1e:65:8f:82:54:09:80:d6:
         ea:49:00:0e:26:08:d8:56:ed:23:95:44:dc:12:f2:d5:65:1f:
         42:01:86:93:fb:94:bb:ae:9a:0a:8c:c1:b5:6c:93:03:58:8c:
         81:4b:83:d6:80:ac:7c:e1:df:b2:b0:37:ed:eb:94:38:4c:33:
         80:16:f5:d7:90:8f:e0:89:bc:37:f3:1e:3d:e7:3e:9b:65:9c:
         b7:ca:f7:7a:fe:92:38:5b:51:f0:b4:82:73:37:12:14:05:86:
         65:f1:de:0a:97:f8:3a:5d:de:24:11:fe:da:1f:c7:47:19:33:
         d6:e4:af:d1:ab:5a:f9:85:b2:ae:15:fd:95:e5:f5:79:92:f9:
         7a:ec:d4:02:c7:8b:e8:31:68:3f:e2:fe:bd:b3:79:a5:03:d5:
         7b:59:25:9e:5f:2f:3f:dc:c3:81:7e:19:6c:07:5e:e5:48:96:
         f2:63:89:c5:e6:44:a2:22:ac:55:22:4c:74:87:e3:ee:1d:c5:
         20:0a:07:d8:b9:a7:58:73:a3:05:b5:a4:e5:be:6b:b0:31:58:
         de:bd:52:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----