Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/1ff727-da95-4c98-ba59-5c4958004179/1/m64-yZSxM_gCN_KP5uNlt2W76Ck.mft
File:                     m64-yZSxM_gCN_KP5uNlt2W76Ck.mft (raw, json)
Hash identifier:          jmlilswHVSE1q0j1GDQ95GaJF9WomHYnQbv8MbYTBHA=
Subject key identifier:   3A:70:48:46:DF:2D:94:43:AB:68:C0:31:6D:FF:7E:64:8A:C2:D1:75
Authority key identifier: 9B:AE:3E:C9:94:B1:33:F8:02:37:F2:8F:E6:E3:65:B7:65:BB:E8:29
Certificate issuer:       /CN=9bae3ec994b133f80237f28fe6e365b765bbe829
Certificate serial:       018BC8210AB94EB5056E2C6ACC6A33E4A36F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m64-yZSxM_gCN_KP5uNlt2W76Ck.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/1ff727-da95-4c98-ba59-5c4958004179/1/m64-yZSxM_gCN_KP5uNlt2W76Ck.mft
Manifest number:          09AA
Signing time:             Mon 13 Nov 2023 10:01:30 +0000
Manifest this update:     Mon 13 Nov 2023 10:01:30 +0000
Manifest next update:     Tue 14 Nov 2023 10:01:30 +0000
Files and hashes:         1: e1HcWEJI0zGfxtPcMSmNGZM41C4.roa (hash: 3YAbYRIFDaKo0ScEd96dlvwlFsjbHSkJK1UVdUSTDbg=)
                          2: m64-yZSxM_gCN_KP5uNlt2W76Ck.crl (hash: OY30BAx3+6JFQPvO2Ut3a1Rl4D4W92mr8SL8B4Txbtw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:c8:21:0a:b9:4e:b5:05:6e:2c:6a:cc:6a:33:e4:a3:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bae3ec994b133f80237f28fe6e365b765bbe829
        Validity
            Not Before: Nov 13 10:01:30 2023 GMT
            Not After : Nov 14 10:01:30 2023 GMT
        Subject: CN=3a704846df2d9443ab68c0316dff7e648ac2d175
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:71:23:aa:82:91:71:34:36:8c:99:56:f9:05:
                    4a:f4:10:6d:ed:ea:2b:b8:d3:c6:cc:6d:cc:ad:aa:
                    93:5f:5c:74:b3:63:2d:4c:91:cd:63:a4:d2:48:98:
                    33:44:b1:20:63:7a:bb:88:5a:74:0a:1b:a2:d2:7d:
                    5d:19:3a:6f:85:d9:cb:c4:61:fd:55:21:be:0f:2a:
                    c7:04:76:c4:d2:28:c3:63:b5:53:95:ab:ef:08:53:
                    3b:e7:5a:1b:4d:14:9d:ca:d2:ad:86:ea:a8:ed:e9:
                    7f:88:56:4e:1e:34:6c:e7:b3:3a:1f:42:cc:91:58:
                    7c:c9:2a:fc:6d:76:01:ba:31:a9:06:6c:d6:ac:d0:
                    39:3e:e1:61:2a:d3:65:42:6f:f5:12:fb:ca:19:02:
                    5a:de:c1:b6:bf:d7:ba:2d:a0:86:5c:fa:d0:0a:8b:
                    cb:d2:8a:bb:cf:51:48:f6:43:e8:b5:9c:55:19:c1:
                    dd:af:74:62:ff:ce:03:de:73:8c:16:97:5c:9a:2b:
                    8a:bd:eb:6c:a8:9f:68:bf:9e:00:48:fd:eb:fd:69:
                    d0:8a:b1:27:39:07:b6:7d:c9:1c:a1:f0:62:f9:e8:
                    c9:ed:a4:db:1b:1a:58:44:3d:3a:6a:c3:02:92:35:
                    32:2e:36:eb:b5:89:55:2c:2b:19:6d:eb:5c:8a:25:
                    ae:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:70:48:46:DF:2D:94:43:AB:68:C0:31:6D:FF:7E:64:8A:C2:D1:75
            X509v3 Authority Key Identifier:
                keyid:9B:AE:3E:C9:94:B1:33:F8:02:37:F2:8F:E6:E3:65:B7:65:BB:E8:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m64-yZSxM_gCN_KP5uNlt2W76Ck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1ff727-da95-4c98-ba59-5c4958004179/1/m64-yZSxM_gCN_KP5uNlt2W76Ck.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1ff727-da95-4c98-ba59-5c4958004179/1/m64-yZSxM_gCN_KP5uNlt2W76Ck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:e5:5d:f4:68:73:50:55:3f:cf:0a:22:d2:b2:05:57:98:00:
         8c:af:fe:88:0a:f6:9e:a2:3b:31:f5:9f:43:60:c6:14:bd:8f:
         e0:20:9b:66:f1:09:13:df:d7:05:b3:78:77:76:95:7c:87:fe:
         b4:5a:4c:9f:3b:ec:0e:c7:4c:99:2f:8d:a8:91:45:fd:af:2a:
         02:4e:81:19:1e:39:0c:5a:9c:cb:22:21:fe:e9:92:88:8b:32:
         f1:8a:5b:9b:7f:62:0d:a7:d4:16:24:2d:72:1e:7e:d1:e3:9b:
         0a:dc:0b:43:7a:cd:72:20:ad:63:3c:25:f3:0a:c7:6a:02:11:
         9b:e6:4f:1d:2c:dc:52:23:39:4f:03:bf:32:58:dc:7e:3f:92:
         94:4c:41:8a:d8:58:4e:c7:07:86:d0:23:33:f9:93:e5:b4:80:
         6b:9c:81:dd:30:bf:0d:af:4b:ed:3b:5d:e5:5c:59:d8:3a:c4:
         87:8d:40:eb:a6:1a:57:9f:dd:a5:22:2d:b6:37:0f:0c:f6:a7:
         22:b4:18:4d:58:6c:10:22:a8:c8:b6:0f:d0:7b:44:ef:36:56:
         ea:ea:2d:e6:80:93:2e:40:ab:4c:11:08:f8:5c:7d:10:f1:7f:
         10:9c:ee:0a:0f:12:d3:02:d8:77:28:42:dd:1b:17:7d:cf:84:
         be:bb:24:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----