Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/6c3778-6458-4465-afbf-13a166d638b8/1/1Q3eVrKS-CseUleIEjZ4zlH4O9Y.mft
File:                     1Q3eVrKS-CseUleIEjZ4zlH4O9Y.mft (raw, json)
Hash identifier:          Uh6UHRI/RXO8ObpZZXfW0cqOpgqCEu4HrjRkI66yuqw=
Subject key identifier:   44:04:55:6E:3D:EB:84:36:33:7C:CF:B4:45:26:F1:C8:1D:5B:51:9E
Authority key identifier: D5:0D:DE:56:B2:92:F8:2B:1E:52:57:88:12:36:78:CE:51:F8:3B:D6
Certificate issuer:       /CN=d50dde56b292f82b1e525788123678ce51f83bd6
Certificate serial:       018A250AA4D00DFDA566274E505E085147E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1Q3eVrKS-CseUleIEjZ4zlH4O9Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/6c3778-6458-4465-afbf-13a166d638b8/1/1Q3eVrKS-CseUleIEjZ4zlH4O9Y.mft
Manifest number:          014D
Signing time:             Thu 24 Aug 2023 00:56:08 +0000
Manifest this update:     Thu 24 Aug 2023 00:56:08 +0000
Manifest next update:     Fri 25 Aug 2023 00:56:08 +0000
Files and hashes:         1: 1Q3eVrKS-CseUleIEjZ4zlH4O9Y.crl (hash: J9hnOx6VxuuSiJ0gev9+VR+9Jrasy2Xi4OSiSQhy8EM=)
                          2: GvTrFibFLmYDBgHUtTR3x7K6Edg.roa (hash: 7mAB7dWXpa2ecvnYQ3NESVbKZgTqTuD13tQMC4FK/eY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:25:0a:a4:d0:0d:fd:a5:66:27:4e:50:5e:08:51:47:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d50dde56b292f82b1e525788123678ce51f83bd6
        Validity
            Not Before: Aug 24 00:56:08 2023 GMT
            Not After : Aug 25 00:56:08 2023 GMT
        Subject: CN=4404556e3deb8436337ccfb44526f1c81d5b519e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:f9:72:0b:a0:4d:93:d7:64:05:23:37:d0:3c:
                    41:f9:51:90:41:1b:61:dd:eb:7f:d2:55:7f:b1:ce:
                    74:59:dc:96:a4:be:3c:4f:fb:1b:05:65:cd:66:50:
                    ca:f9:63:54:6d:23:65:87:03:2e:9f:a9:a4:61:8c:
                    a2:aa:85:07:12:3c:ff:f6:04:ec:f3:cb:43:ab:44:
                    ed:ea:6b:ac:bb:f5:db:20:7c:e8:ff:a0:17:5d:65:
                    3c:46:a4:ce:91:ea:7b:89:f5:c6:cc:c1:69:59:d6:
                    bc:49:d1:57:14:64:a0:9d:2a:f1:2c:fa:56:b7:15:
                    d7:17:81:98:7e:6a:32:fd:be:19:66:b1:0f:02:7b:
                    20:9c:c7:d6:52:39:eb:47:59:76:9a:57:eb:c3:17:
                    ef:b7:30:c2:63:b4:a2:fb:56:a2:b6:a1:bd:b0:74:
                    77:ef:7d:3b:cc:5a:58:6f:29:35:6a:7e:c4:78:e2:
                    61:c4:78:6f:42:7b:19:ec:85:12:bf:1a:f2:2e:e2:
                    79:d5:44:31:d0:e4:52:d8:e1:7b:e9:b5:3a:48:0f:
                    50:67:43:37:e8:c3:8d:c3:25:3b:48:ca:a0:2e:f9:
                    9c:b8:f7:5e:87:ff:28:ec:95:51:35:b7:5c:c8:11:
                    4e:49:39:41:12:20:80:85:af:28:4c:ec:c2:67:2e:
                    0c:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:04:55:6E:3D:EB:84:36:33:7C:CF:B4:45:26:F1:C8:1D:5B:51:9E
            X509v3 Authority Key Identifier:
                keyid:D5:0D:DE:56:B2:92:F8:2B:1E:52:57:88:12:36:78:CE:51:F8:3B:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Q3eVrKS-CseUleIEjZ4zlH4O9Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/6c3778-6458-4465-afbf-13a166d638b8/1/1Q3eVrKS-CseUleIEjZ4zlH4O9Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/6c3778-6458-4465-afbf-13a166d638b8/1/1Q3eVrKS-CseUleIEjZ4zlH4O9Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:60:dc:82:e3:31:25:f3:e0:28:b6:f9:23:fa:d7:2e:e1:b5:
         8e:e4:c7:7a:9a:8e:2f:68:b2:0e:17:af:52:bf:21:45:ff:98:
         13:78:c3:17:58:2e:61:9d:45:4d:03:29:ee:7f:d7:a8:6f:2a:
         3f:8c:0e:04:56:8a:b9:c4:17:59:95:c6:90:d4:69:17:9e:23:
         f7:0c:b3:32:4c:d9:78:df:11:55:ed:67:83:07:4d:ba:74:f0:
         29:81:77:0e:43:fc:3c:d8:bb:fa:d0:a2:2f:5e:d1:98:96:96:
         27:44:44:7a:2e:17:f4:a1:68:be:86:b1:7a:f5:0c:f0:7b:a2:
         05:9d:84:a0:a5:1c:0e:88:48:d9:c3:1a:16:2f:c0:4c:10:d4:
         38:c6:0b:25:67:1c:ca:f8:03:ac:39:03:32:29:50:ba:c7:ed:
         96:08:db:74:0e:b9:98:3c:74:af:cc:26:ab:63:00:ce:e5:d2:
         e7:a8:85:40:a8:8d:f8:b5:8b:3c:5e:3b:66:51:e3:e7:fe:25:
         f1:58:c8:a4:a0:5c:dc:0b:80:18:4b:96:17:92:6f:5a:e1:16:
         5c:62:7b:12:5b:e6:65:61:ed:e7:20:15:42:1f:fa:da:0d:04:
         9c:3d:50:93:1b:25:85:a2:ea:ef:a4:b1:21:ec:c6:07:9f:4e:
         8a:34:79:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----