Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/0a3e12-bfc5-4b45-9fc5-37a1f61aecf1/1/I1IxmK43wCBh9Fxnna8-M3woVXM.mft
File:                     I1IxmK43wCBh9Fxnna8-M3woVXM.mft (raw, json)
Hash identifier:          aIe5NDDOxslyOYy56O0CQuP4iBioemc3DGCt6Tnd6sI=
Subject key identifier:   53:CC:3C:2C:DE:F1:A9:6F:01:73:C4:72:AB:D2:67:D8:30:BA:BC:A8
Authority key identifier: 23:52:31:98:AE:37:C0:20:61:F4:5C:67:9D:AF:3E:33:7C:28:55:73
Certificate issuer:       /CN=23523198ae37c02061f45c679daf3e337c285573
Certificate serial:       018DAB5A404EE70878B2C47224D31AB18E12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I1IxmK43wCBh9Fxnna8-M3woVXM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/0a3e12-bfc5-4b45-9fc5-37a1f61aecf1/1/I1IxmK43wCBh9Fxnna8-M3woVXM.mft
Manifest number:          0870
Signing time:             Thu 15 Feb 2024 06:00:35 +0000
Manifest this update:     Thu 15 Feb 2024 06:00:35 +0000
Manifest next update:     Fri 16 Feb 2024 06:00:35 +0000
Files and hashes:         1: I1IxmK43wCBh9Fxnna8-M3woVXM.crl (hash: cBq2ZtlNn01vieHxS+O+HUDv624a0YVD5pB+TBIhvhg=)
                          2: p2RneU6waIH_3t5QzxBTUgroQaQ.roa (hash: a4EIh6bQ54f9MIPH/W868pF3KErS2QLPaviy5UWwHKc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:ab:5a:40:4e:e7:08:78:b2:c4:72:24:d3:1a:b1:8e:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23523198ae37c02061f45c679daf3e337c285573
        Validity
            Not Before: Feb 15 06:00:35 2024 GMT
            Not After : Feb 16 06:00:35 2024 GMT
        Subject: CN=53cc3c2cdef1a96f0173c472abd267d830babca8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ff:46:43:3e:e7:75:7d:1c:97:2c:28:5e:ef:
                    13:a7:ea:61:4e:94:59:5c:31:65:a3:61:76:c7:30:
                    fe:d4:87:d5:f8:05:1b:73:e6:a4:60:12:3c:3b:f3:
                    93:f7:aa:bb:6e:5a:2e:f9:6a:bb:17:e6:50:bf:d2:
                    28:d6:5c:b6:ff:75:7c:90:d0:71:1d:5d:a7:bb:09:
                    f9:3e:4c:aa:d1:6c:34:26:94:01:46:fc:66:6a:41:
                    35:25:18:35:f6:a1:b9:af:5d:f8:f8:1d:5d:48:69:
                    eb:9a:a5:29:f3:dd:64:7e:15:58:f3:b1:0f:c6:a7:
                    68:c3:0b:bf:25:b0:8e:66:43:8b:8d:7a:9c:49:de:
                    78:f1:ed:0e:84:ae:9c:9b:ec:bf:b1:27:76:14:8a:
                    49:81:73:da:dc:bd:22:48:72:82:8b:79:2a:e4:e1:
                    e0:d1:f3:70:2f:98:65:01:56:15:30:e0:96:57:ec:
                    f4:24:75:be:49:0b:d5:43:54:2f:e5:1c:fe:a4:23:
                    10:40:50:95:f2:d0:af:81:0b:bb:86:73:62:8d:51:
                    bf:7b:50:78:48:79:31:11:51:5e:03:d8:bd:f7:27:
                    1b:a5:f8:d6:b1:34:4b:3e:74:e8:05:2f:34:d7:c7:
                    9e:72:7c:f6:73:2a:92:98:3f:85:b0:31:ab:cd:34:
                    43:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:CC:3C:2C:DE:F1:A9:6F:01:73:C4:72:AB:D2:67:D8:30:BA:BC:A8
            X509v3 Authority Key Identifier:
                keyid:23:52:31:98:AE:37:C0:20:61:F4:5C:67:9D:AF:3E:33:7C:28:55:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I1IxmK43wCBh9Fxnna8-M3woVXM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0a3e12-bfc5-4b45-9fc5-37a1f61aecf1/1/I1IxmK43wCBh9Fxnna8-M3woVXM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0a3e12-bfc5-4b45-9fc5-37a1f61aecf1/1/I1IxmK43wCBh9Fxnna8-M3woVXM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d7:c2:63:22:b8:98:58:e4:9a:3e:6b:1e:96:da:51:49:70:47:
         a8:f1:51:e1:b7:95:a6:fa:16:db:21:38:19:1f:d0:42:c6:e9:
         f9:a9:cd:2c:1a:fe:db:0a:4e:c4:e0:1f:74:bc:3e:72:d3:27:
         2b:01:03:b8:0f:ed:e2:3d:fc:99:1e:df:af:b3:a6:c1:be:0d:
         11:3a:ee:28:6e:a7:b1:56:d6:6d:7c:46:16:f0:40:bb:1e:b4:
         96:68:cb:4b:9a:30:e7:d5:c2:2f:7e:c9:ae:ae:f4:5a:69:71:
         c2:3e:cf:14:5e:55:77:2d:87:fa:5e:d9:6c:05:2f:ef:9f:f6:
         7d:dd:e7:08:6e:88:ec:1e:ec:9d:30:e9:f1:17:0e:1d:5b:75:
         50:f7:a4:1a:91:e6:f8:d6:b3:4e:f1:ce:0b:36:7a:81:c3:cc:
         11:62:05:f5:af:27:3d:c1:83:59:67:f4:e6:7d:48:67:06:ab:
         fa:e4:14:a5:46:3a:59:c3:ad:bd:ba:b8:20:ec:d9:bf:1e:8c:
         49:55:2e:07:40:4d:8f:f0:d6:b9:ff:9c:2b:f7:8f:40:b3:7e:
         49:77:08:37:d9:e3:6a:b7:fa:87:df:3b:39:21:08:0b:46:e9:
         b4:f0:4c:7d:b4:6d:0b:e2:79:be:0b:19:46:8e:20:19:53:cb:
         95:01:3c:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----