Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/d59880-4dc4-4ae0-b93e-b3d345a1ff17/1/ndZeie84ER7MC_vWCs9icdO8U-U.mft
File:                     ndZeie84ER7MC_vWCs9icdO8U-U.mft (raw, json)
Hash identifier:          hsgWuLnlUN/qki2iu6JRCOkEFPnzsIvGC3a+f7U359Y=
Subject key identifier:   6B:38:EF:75:5B:64:D3:3C:96:51:82:D9:D3:25:FF:72:22:B9:C4:B0
Authority key identifier: 9D:D6:5E:89:EF:38:11:1E:CC:0B:FB:D6:0A:CF:62:71:D3:BC:53:E5
Certificate issuer:       /CN=9dd65e89ef38111ecc0bfbd60acf6271d3bc53e5
Certificate serial:       018C811783FF74249E6F21D012DC9ED4A45E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ndZeie84ER7MC_vWCs9icdO8U-U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/d59880-4dc4-4ae0-b93e-b3d345a1ff17/1/ndZeie84ER7MC_vWCs9icdO8U-U.mft
Manifest number:          0854
Signing time:             Tue 19 Dec 2023 08:00:51 +0000
Manifest this update:     Tue 19 Dec 2023 08:00:51 +0000
Manifest next update:     Wed 20 Dec 2023 08:00:51 +0000
Files and hashes:         1: iFNaYGUOSCk7fC7cieuXUicJ72o.roa (hash: oh5+NxtHYWOT9Zc4t54aWDPFJiJTyY16H+simoGnff8=)
                          2: ndZeie84ER7MC_vWCs9icdO8U-U.crl (hash: xk2CMyf3J3RLfNk8qmlTOU7OSrSHWE3NilkwlGGXew0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:81:17:83:ff:74:24:9e:6f:21:d0:12:dc:9e:d4:a4:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9dd65e89ef38111ecc0bfbd60acf6271d3bc53e5
        Validity
            Not Before: Dec 19 08:00:51 2023 GMT
            Not After : Dec 20 08:00:51 2023 GMT
        Subject: CN=6b38ef755b64d33c965182d9d325ff7222b9c4b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e4:f4:70:1b:e8:4b:10:3c:1f:9e:bd:6f:ad:
                    2a:3b:8a:a7:45:dc:19:87:0d:21:13:c8:b2:d8:b1:
                    60:c0:bc:48:ff:00:6b:94:fc:4d:11:c3:16:36:49:
                    f8:ec:45:de:cc:f3:1d:73:09:ea:ec:ee:20:8e:aa:
                    3c:c9:5a:41:96:2f:83:5e:2f:ce:fd:86:4d:2e:14:
                    0e:07:44:95:70:0f:28:47:11:8b:98:4b:16:a1:ab:
                    c0:89:8a:1b:e4:56:9d:8d:e1:f0:4a:84:12:e3:f7:
                    1b:45:55:5a:2b:03:22:ef:37:f8:ac:48:4f:b8:13:
                    ef:73:d8:2b:71:f2:69:f0:d2:fa:91:f8:ed:22:e4:
                    9e:21:e0:00:0a:a6:49:8a:29:c9:62:84:33:29:58:
                    99:7a:d9:ef:47:55:4a:ba:92:44:93:89:c6:32:72:
                    54:45:bf:74:ca:ac:9d:74:99:d5:4a:03:25:e3:4c:
                    b6:a0:24:68:5b:8e:fb:6e:e1:10:bf:1e:2e:d4:25:
                    e5:6b:4c:4e:0f:46:32:5b:71:9f:d0:67:08:d9:64:
                    9e:c5:5e:06:c6:55:51:db:36:3d:1b:ee:9b:23:cf:
                    b5:5d:ab:38:13:54:2b:94:d7:42:56:45:9d:dc:0b:
                    70:97:02:01:cf:90:b8:10:f1:d3:d6:d4:9d:37:91:
                    48:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:38:EF:75:5B:64:D3:3C:96:51:82:D9:D3:25:FF:72:22:B9:C4:B0
            X509v3 Authority Key Identifier:
                keyid:9D:D6:5E:89:EF:38:11:1E:CC:0B:FB:D6:0A:CF:62:71:D3:BC:53:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ndZeie84ER7MC_vWCs9icdO8U-U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/d59880-4dc4-4ae0-b93e-b3d345a1ff17/1/ndZeie84ER7MC_vWCs9icdO8U-U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/d59880-4dc4-4ae0-b93e-b3d345a1ff17/1/ndZeie84ER7MC_vWCs9icdO8U-U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:7a:04:41:fd:f3:db:80:99:8e:5c:dc:5d:57:5a:a5:1a:d9:
         f5:69:42:62:31:4e:67:9d:3a:55:d9:a1:8c:58:1d:97:5e:61:
         be:e6:ca:91:67:15:db:bb:40:6d:2d:13:84:e0:17:a6:8c:af:
         9b:a0:42:86:15:ee:a1:7e:bc:fe:37:42:2a:23:94:f3:d3:9a:
         8a:51:16:a8:f6:77:a6:53:cd:36:54:46:da:85:85:1a:f3:2a:
         47:02:35:2e:f0:8f:8b:ce:57:42:fa:81:b2:ad:0f:9f:05:d3:
         87:1e:be:8f:28:dd:17:27:79:f8:7e:49:96:87:d9:b5:a9:9a:
         d0:85:45:71:7d:ea:e0:d2:52:df:01:67:b5:1d:02:71:2b:82:
         a3:6d:6d:1e:93:43:f7:7b:31:f4:d5:7f:29:f8:42:df:8a:57:
         08:b3:16:17:da:db:cf:76:2e:a8:1c:f8:9a:a3:3e:70:24:b7:
         e0:7a:73:c8:cf:58:1b:5a:03:1d:d6:0b:a5:66:06:1e:f3:8b:
         1f:4d:dc:f1:18:b2:96:43:0d:e6:6e:70:aa:71:00:2a:82:58:
         dc:b4:2d:f0:b1:e9:05:66:8d:32:ae:e5:23:1e:e5:e1:c2:b8:
         44:da:e8:6a:b4:7a:46:98:2f:87:6d:5e:ef:25:1d:ca:a0:f2:
         23:fd:5c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----