Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/7c1131-966f-43af-8f4c-c3fbc8d8f966/1/9-1uBmQ24KC2F0dJVainWObjXXY.mft
File:                     9-1uBmQ24KC2F0dJVainWObjXXY.mft (raw, json)
Hash identifier:          8RERD3anetQi7yUoQLHsrr2FO39ArQsErnNp9VANlKM=
Subject key identifier:   BA:30:2A:82:A0:23:54:0B:36:3C:92:3D:F7:EC:FB:0C:85:A8:76:86
Authority key identifier: F7:ED:6E:06:64:36:E0:A0:B6:17:47:49:55:A8:A7:58:E6:E3:5D:76
Certificate issuer:       /CN=f7ed6e066436e0a0b617474955a8a758e6e35d76
Certificate serial:       018BFBD6CC269C38C8A48A7FCA731A10D7AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9-1uBmQ24KC2F0dJVainWObjXXY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/7c1131-966f-43af-8f4c-c3fbc8d8f966/1/9-1uBmQ24KC2F0dJVainWObjXXY.mft
Manifest number:          0873
Signing time:             Thu 23 Nov 2023 11:00:39 +0000
Manifest this update:     Thu 23 Nov 2023 11:00:39 +0000
Manifest next update:     Fri 24 Nov 2023 11:00:39 +0000
Files and hashes:         1: 4sVkGMwvf-HK4QxWi42MsAMLStY.roa (hash: wz26emVsEqtzrOEYTgYatV4wrrgYXfZ4tOmoKuAtPFY=)
                          2: 9-1uBmQ24KC2F0dJVainWObjXXY.crl (hash: 1CaiYOkTggQoTa9vOi1v2CQ60c54jmdTSnaJCfPCpag=)
                          3: N7uAbt4ZjvrIomwZmr5CpKiaM4c.roa (hash: VNw7jbBFTUkw3gs00g1//SaDmV1xzR9Z2dGGwG/rQ3k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:fb:d6:cc:26:9c:38:c8:a4:8a:7f:ca:73:1a:10:d7:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7ed6e066436e0a0b617474955a8a758e6e35d76
        Validity
            Not Before: Nov 23 11:00:39 2023 GMT
            Not After : Nov 24 11:00:39 2023 GMT
        Subject: CN=ba302a82a023540b363c923df7ecfb0c85a87686
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:11:27:7c:f3:18:fe:e1:6c:90:d1:e5:8b:62:
                    01:a4:18:10:f0:cc:ee:1b:5b:17:12:e6:75:a9:a1:
                    5f:47:c8:74:ae:54:4d:f3:fd:9d:66:93:e4:1f:88:
                    1e:02:bf:5a:08:0c:3e:6c:59:60:a3:32:1e:e3:ee:
                    bb:9c:8e:e3:fc:00:b9:86:56:08:c6:d5:0a:73:7c:
                    34:a1:01:5c:5e:ac:c1:05:5f:cf:02:88:c0:e8:00:
                    92:94:a7:59:a0:b0:69:98:69:79:84:52:9b:51:36:
                    1c:df:55:a6:17:0e:30:a6:42:c9:87:09:8a:c1:7d:
                    85:e2:83:9a:41:b3:11:4b:9f:68:91:6d:96:ac:f0:
                    54:ae:7d:0a:9d:e4:22:a3:6a:27:89:12:54:e1:d3:
                    55:a4:6c:b4:1c:aa:04:ae:01:ea:77:87:9c:8b:21:
                    db:61:5d:90:25:86:92:d3:87:db:c4:9c:c7:19:93:
                    f7:01:86:9a:6c:d7:77:32:05:e8:88:a5:7f:53:d3:
                    94:17:43:65:c7:23:0e:b2:f2:67:ad:03:17:3d:cb:
                    ef:ce:bf:c3:41:1f:d0:48:b1:57:3d:cd:de:eb:8a:
                    18:6e:6e:57:07:3b:d1:d2:a5:69:6a:2a:b0:d7:5d:
                    d1:c9:ff:85:92:90:69:f2:19:58:1a:51:df:b1:36:
                    1a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:30:2A:82:A0:23:54:0B:36:3C:92:3D:F7:EC:FB:0C:85:A8:76:86
            X509v3 Authority Key Identifier:
                keyid:F7:ED:6E:06:64:36:E0:A0:B6:17:47:49:55:A8:A7:58:E6:E3:5D:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9-1uBmQ24KC2F0dJVainWObjXXY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/7c1131-966f-43af-8f4c-c3fbc8d8f966/1/9-1uBmQ24KC2F0dJVainWObjXXY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/7c1131-966f-43af-8f4c-c3fbc8d8f966/1/9-1uBmQ24KC2F0dJVainWObjXXY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:f0:3a:1c:df:fb:2b:52:2d:93:11:7b:a4:1f:32:64:b4:47:
         16:19:d5:1b:5a:60:ae:c5:6c:dd:a6:d1:1d:16:0c:d2:66:6e:
         42:f7:eb:70:9d:31:ff:dd:13:d1:87:e3:7b:33:ac:11:3f:ba:
         c7:ee:e3:4f:73:b7:a1:10:79:2e:11:6c:3e:ff:de:3c:6e:8a:
         a4:54:a3:dd:9e:e9:2e:a1:df:f4:58:3d:1d:e1:7a:0b:cf:65:
         10:69:70:58:f5:64:99:be:42:79:1c:f8:02:d8:23:b9:7d:00:
         6e:c5:fd:fc:5b:8f:32:49:05:59:5b:e4:90:31:64:f6:88:b7:
         7c:b9:8b:92:79:4f:90:ad:7c:90:22:b8:a4:94:50:da:51:71:
         ef:a6:44:fa:1b:50:97:43:1a:44:33:44:62:5f:b2:99:fd:0e:
         05:f9:42:8f:4f:41:19:90:6d:6b:74:b3:4e:81:9c:cb:64:ee:
         8a:5c:04:44:42:f3:3b:d4:d9:c1:93:eb:1a:08:7e:09:27:2f:
         c3:30:a0:fe:c4:21:ea:06:8c:78:1c:eb:4c:69:58:27:55:7b:
         9f:83:2a:1d:24:3c:21:5a:ab:47:a3:8a:70:de:ea:c5:8f:d0:
         88:58:0d:31:99:53:1d:75:e4:48:5b:55:2a:28:ac:e0:c1:70:
         2d:d3:b4:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----