Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f33dff-8270-4894-ba8a-bbf2e37438d5/1/10deyw9oClbSD1gbvc5SHPt-tG0.mft
File:                     10deyw9oClbSD1gbvc5SHPt-tG0.mft (raw, json)
Hash identifier:          ey29P3kRGWvkVNf5Q7I0m3cebqnNWrTqD96uzk/c+qE=
Subject key identifier:   67:6F:B8:97:06:3F:93:C4:C7:42:81:43:08:BA:3E:96:27:3B:60:64
Authority key identifier: D7:47:5E:CB:0F:68:0A:56:D2:0F:58:1B:BD:CE:52:1C:FB:7E:B4:6D
Certificate issuer:       /CN=d7475ecb0f680a56d20f581bbdce521cfb7eb46d
Certificate serial:       018D94646B2B8DD20220E55F4347C293589F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/10deyw9oClbSD1gbvc5SHPt-tG0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/f33dff-8270-4894-ba8a-bbf2e37438d5/1/10deyw9oClbSD1gbvc5SHPt-tG0.mft
Manifest number:          09E3
Signing time:             Sat 10 Feb 2024 19:00:25 +0000
Manifest this update:     Sat 10 Feb 2024 19:00:25 +0000
Manifest next update:     Sun 11 Feb 2024 19:00:25 +0000
Files and hashes:         1: 10deyw9oClbSD1gbvc5SHPt-tG0.crl (hash: VqOeMi3uL9em21LK7jL6sGb0MrrBguB51egWCQB5DkM=)
                          2: B0_1LneUfwPox5JpoXP_TCqaVs4.roa (hash: +YqRKmNkwqx8MGLz4uDmXX79VrvDouNpjFnOaPql3fA=)
                          3: CrTleAgl0-LZTN7EYV-ozb1g4D8.roa (hash: CMXoV8TSdqAwvN946jDp8ZonPGmk8rvDl9DBYd0e2wI=)
                          4: JnSYkiSyx-SzAbIm3cGp7cO2BiI.roa (hash: l2uZFgQjtW/uHkOn3XiELxEIclKc3wO6oXrwIajeTpw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:94:64:6b:2b:8d:d2:02:20:e5:5f:43:47:c2:93:58:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7475ecb0f680a56d20f581bbdce521cfb7eb46d
        Validity
            Not Before: Feb 10 19:00:25 2024 GMT
            Not After : Feb 11 19:00:25 2024 GMT
        Subject: CN=676fb897063f93c4c742814308ba3e96273b6064
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:db:b2:8c:ef:1d:85:ed:38:5b:ec:c5:10:ab:
                    a6:67:bc:72:63:09:2b:32:cb:b3:56:5d:13:4e:42:
                    60:a0:b1:67:b4:a9:5a:15:57:01:5c:1f:fb:f9:c9:
                    88:cd:0d:b9:60:d7:b8:f2:65:f2:92:b7:6d:38:70:
                    90:64:c6:34:2e:46:0c:33:6b:e2:6d:0c:5a:54:cf:
                    7b:d5:6f:a0:38:6f:c9:50:77:79:b9:b8:8a:2a:f9:
                    37:4e:0b:36:0c:f6:0a:61:31:67:5f:92:59:d7:17:
                    a8:de:52:31:6f:b5:a3:6a:1e:da:44:91:71:14:76:
                    0b:50:ec:f4:c1:a1:98:7f:d0:11:6b:45:8d:69:11:
                    17:8f:82:52:db:2d:d1:22:25:f4:41:a7:4e:c3:9a:
                    2b:50:ea:11:d4:e8:d5:2b:bc:d6:b4:76:9e:12:b4:
                    55:5f:9c:58:96:c6:9a:d8:fd:4d:40:96:ad:9d:cd:
                    7f:d6:05:7b:03:66:a2:bb:ce:81:a5:7c:07:c1:8a:
                    e4:79:9f:29:c7:65:89:25:0e:5f:19:df:4c:a1:33:
                    6b:a9:58:67:5c:06:f9:71:c4:d7:e7:c7:f1:c5:2b:
                    90:79:14:99:7e:85:58:37:cf:b3:65:f1:a6:5e:a7:
                    9f:44:c0:45:b9:45:f9:c0:38:6a:0c:1c:11:f3:3b:
                    ec:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:6F:B8:97:06:3F:93:C4:C7:42:81:43:08:BA:3E:96:27:3B:60:64
            X509v3 Authority Key Identifier:
                keyid:D7:47:5E:CB:0F:68:0A:56:D2:0F:58:1B:BD:CE:52:1C:FB:7E:B4:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10deyw9oClbSD1gbvc5SHPt-tG0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f33dff-8270-4894-ba8a-bbf2e37438d5/1/10deyw9oClbSD1gbvc5SHPt-tG0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f33dff-8270-4894-ba8a-bbf2e37438d5/1/10deyw9oClbSD1gbvc5SHPt-tG0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:cb:de:b8:6f:e9:f8:76:00:37:4d:6a:bb:40:03:c0:91:a5:
         d2:28:e9:94:62:ab:14:cf:58:5d:b1:48:74:d9:d4:6c:46:83:
         d6:29:cc:55:51:bb:2b:1b:f3:87:ad:c9:03:92:8c:19:e5:8c:
         12:10:96:f3:72:b2:77:ce:62:5d:dc:e8:cd:4f:e9:0c:3b:64:
         80:ed:42:0a:b0:29:eb:47:dd:d6:2b:de:54:5b:cf:8c:7a:ff:
         fb:d0:b4:38:dd:6d:36:a9:f4:d1:d5:a4:b7:7f:f3:32:99:b4:
         17:66:91:06:95:de:11:52:bc:51:29:51:bb:6b:3e:ce:64:44:
         6b:ef:36:35:6f:09:61:70:67:51:68:8e:7c:22:06:61:b6:8b:
         b2:48:1c:6d:96:92:ea:96:61:4c:0a:27:33:c8:e9:05:64:a7:
         82:4a:74:2f:7c:80:24:67:84:32:ad:81:72:2c:3c:15:45:01:
         62:f1:22:27:b1:75:ae:59:86:db:a8:34:8d:27:75:d3:fe:9f:
         a4:e3:c1:e2:7e:07:0d:80:08:58:98:99:82:28:5b:58:7e:a8:
         b7:69:e9:64:51:73:df:9c:be:4e:ea:fb:ad:4d:79:7e:0b:d7:
         0d:6d:56:06:57:a0:94:44:09:c1:4b:b8:18:d3:2d:f4:85:2c:
         18:3b:83:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----