Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/d7d11f-a94e-4262-bf21-dda11a535986/1/W-I-OTTwtJoLuWUQXCFCCGWpIis.mft
File:                     W-I-OTTwtJoLuWUQXCFCCGWpIis.mft (raw, json)
Hash identifier:          YZ4NOmpX77NPTuIzsNkutTcsRXYh6NszE7QVYhRrKP8=
Subject key identifier:   08:55:93:BC:C0:06:98:BC:B9:5D:3D:51:A6:1B:97:D5:1D:66:9A:5C
Authority key identifier: 5B:E2:3E:39:34:F0:B4:9A:0B:B9:65:10:5C:21:42:08:65:A9:22:2B
Certificate issuer:       /CN=5be23e3934f0b49a0bb965105c21420865a9222b
Certificate serial:       018BB9C0211563E0C7D42147303EB6071C5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W-I-OTTwtJoLuWUQXCFCCGWpIis.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/d7d11f-a94e-4262-bf21-dda11a535986/1/W-I-OTTwtJoLuWUQXCFCCGWpIis.mft
Manifest number:          09A7
Signing time:             Fri 10 Nov 2023 15:00:58 +0000
Manifest this update:     Fri 10 Nov 2023 15:00:58 +0000
Manifest next update:     Sat 11 Nov 2023 15:00:58 +0000
Files and hashes:         1: 9o0bv9g6uAVKCTzDBwVeBfZ3Bqs.roa (hash: UZcXjbWGXCesBFhAcSEoGKojA1GEhpsJ4HCQon31U4I=)
                          2: W-I-OTTwtJoLuWUQXCFCCGWpIis.crl (hash: Q1DcKV7sf5ZNdRqarASWGT5PwJdjsZuojzVwpTwEVwA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:b9:c0:21:15:63:e0:c7:d4:21:47:30:3e:b6:07:1c:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5be23e3934f0b49a0bb965105c21420865a9222b
        Validity
            Not Before: Nov 10 15:00:58 2023 GMT
            Not After : Nov 11 15:00:58 2023 GMT
        Subject: CN=085593bcc00698bcb95d3d51a61b97d51d669a5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a2:7a:38:3d:8a:3e:dd:d2:b6:74:98:f9:76:
                    30:b5:a7:ef:2a:42:fe:6b:dd:68:7a:71:3d:8d:58:
                    d6:d9:a2:f9:c7:85:f8:e8:29:62:b1:7d:24:b5:6b:
                    e7:bd:9e:60:d3:b5:f6:25:30:e0:65:ad:27:06:f4:
                    d1:40:22:73:39:39:a9:d6:df:10:11:cc:ef:08:d4:
                    ef:b0:c2:46:99:91:d8:7d:8e:4a:a1:f0:c7:1b:3f:
                    c6:41:c9:d3:12:88:3f:db:fc:c0:3a:18:7f:94:e1:
                    0a:aa:7c:49:2d:96:4d:e1:d8:7d:6d:12:b7:e9:eb:
                    fb:6e:9b:9a:cf:9f:e6:7f:73:ab:50:7a:4e:44:fd:
                    b2:0a:36:da:89:73:3f:a3:93:51:85:7f:7e:c6:2e:
                    ef:51:07:4b:6e:67:03:af:9a:d5:f0:5e:99:08:aa:
                    29:b3:c7:c1:00:a8:9c:15:a5:4d:67:3f:c1:d1:6b:
                    8b:2a:3b:89:4e:a5:96:cf:12:74:73:04:ed:b4:51:
                    84:03:86:a8:9d:63:8d:e7:2a:43:99:57:03:fb:07:
                    90:d9:dc:99:41:43:1a:8d:46:bc:4b:4b:5b:d5:05:
                    42:51:9e:97:a8:92:56:ae:1d:30:df:6f:20:f4:c1:
                    b3:0f:a7:fb:f8:11:b2:ec:93:24:45:48:05:42:8b:
                    74:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:55:93:BC:C0:06:98:BC:B9:5D:3D:51:A6:1B:97:D5:1D:66:9A:5C
            X509v3 Authority Key Identifier:
                keyid:5B:E2:3E:39:34:F0:B4:9A:0B:B9:65:10:5C:21:42:08:65:A9:22:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-I-OTTwtJoLuWUQXCFCCGWpIis.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d7d11f-a94e-4262-bf21-dda11a535986/1/W-I-OTTwtJoLuWUQXCFCCGWpIis.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d7d11f-a94e-4262-bf21-dda11a535986/1/W-I-OTTwtJoLuWUQXCFCCGWpIis.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:2a:fe:58:14:55:10:b1:03:6b:60:bb:7e:52:88:b9:e0:ab:
         22:60:e2:ce:5f:a7:f3:56:28:57:a6:6c:d1:d8:02:ae:cf:4c:
         aa:21:c5:69:19:68:e1:52:77:cb:a8:fa:58:f0:89:ae:f2:e4:
         c5:ba:d1:fc:44:a0:83:93:3f:74:9f:e3:73:ba:7c:95:d8:c7:
         43:52:58:c1:5b:8d:48:6b:30:4c:66:54:40:04:91:86:0b:8d:
         c6:05:13:99:3c:0d:c8:aa:f6:1a:44:52:c8:83:cb:09:07:76:
         aa:57:46:1e:c0:8a:f3:d1:1f:28:53:7c:39:f2:48:a1:c5:c8:
         46:b9:b3:51:d6:d3:db:73:1d:3d:5a:40:32:d7:fe:79:68:fe:
         40:f0:99:81:67:d5:5e:c5:fb:93:e3:ef:95:45:af:67:f3:42:
         68:c6:04:dc:88:50:72:ac:46:40:bd:73:bc:ea:d5:c7:c5:df:
         2c:81:ec:ce:7c:9e:22:34:40:08:c8:db:d0:61:3e:5f:e9:18:
         48:06:d2:c6:fd:16:ea:ca:07:38:51:76:ef:26:b5:1d:35:5e:
         3d:50:44:4d:e7:7d:68:91:67:c8:f3:f0:9f:f6:99:ae:98:5c:
         bc:a0:0c:22:a0:83:22:86:7f:6f:9f:4a:c6:63:46:fe:7b:c2:
         ef:f4:0c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----