Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/f17746-b9ce-4e15-b3bc-f8cc0851cefd/1/ZPOimPfekgVI6CUd52uAc4fi1Dw.mft
File:                     ZPOimPfekgVI6CUd52uAc4fi1Dw.mft (raw, json)
Hash identifier:          iVU+4kIEhvoFgEZKnrcPsIJoO6VcHjDMTxhxuwka2Ps=
Subject key identifier:   75:02:42:A9:71:BF:3D:9E:B4:4B:C9:DA:F9:21:A7:53:EE:33:3F:46
Authority key identifier: 64:F3:A2:98:F7:DE:92:05:48:E8:25:1D:E7:6B:80:73:87:E2:D4:3C
Certificate issuer:       /CN=64f3a298f7de920548e8251de76b807387e2d43c
Certificate serial:       018C1ED0B056B7EE4D0815C2A5B3EC8A949C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZPOimPfekgVI6CUd52uAc4fi1Dw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/f17746-b9ce-4e15-b3bc-f8cc0851cefd/1/ZPOimPfekgVI6CUd52uAc4fi1Dw.mft
Manifest number:          0874
Signing time:             Thu 30 Nov 2023 06:00:42 +0000
Manifest this update:     Thu 30 Nov 2023 06:00:42 +0000
Manifest next update:     Fri 01 Dec 2023 06:00:42 +0000
Files and hashes:         1: ZPOimPfekgVI6CUd52uAc4fi1Dw.crl (hash: UiHScFDoW2tI3hiGeJCrIFB0Hb2Pg8GiPWohg48RS6c=)
                          2: wp8CwnNsQrzmm_wjk7ZKFcioTQE.roa (hash: wQT3X98aJu6peawpqC7GZXgzBMbbguXRVLWL0QSI9ZA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:1e:d0:b0:56:b7:ee:4d:08:15:c2:a5:b3:ec:8a:94:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64f3a298f7de920548e8251de76b807387e2d43c
        Validity
            Not Before: Nov 30 06:00:42 2023 GMT
            Not After : Dec  1 06:00:42 2023 GMT
        Subject: CN=750242a971bf3d9eb44bc9daf921a753ee333f46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c9:75:f6:1a:16:30:3f:4a:4c:43:4a:4a:b8:
                    7e:85:46:ac:9a:b9:5e:f3:37:52:f2:06:8f:d8:3f:
                    57:1c:27:16:53:50:25:5e:68:77:72:29:dc:95:e0:
                    8c:58:4f:29:11:5a:af:1a:53:06:0a:49:67:c9:b7:
                    63:ee:62:cb:2c:a8:95:88:ee:0a:6d:73:13:17:4e:
                    de:11:b7:24:a2:12:28:ed:b5:5f:86:dc:69:e1:2b:
                    1f:b5:56:03:4f:0e:c1:43:46:be:ac:98:47:8b:e2:
                    da:52:ae:7a:d9:f1:0d:83:ed:5a:bf:12:cf:c5:91:
                    5c:82:0f:3d:03:3b:96:4f:3e:43:7e:69:5a:4f:af:
                    9d:d6:43:f5:12:14:ab:aa:8f:e8:3b:3b:82:7c:fe:
                    56:f1:d7:56:f4:75:8a:fd:17:fd:60:53:af:14:f4:
                    c5:cb:2d:79:0b:3f:ee:4d:a6:18:69:6f:be:82:d0:
                    fb:1b:35:15:14:84:46:a7:48:f9:0a:4d:56:28:c0:
                    11:2b:9d:da:b9:6e:22:ae:10:a4:8a:fc:de:7c:5b:
                    c5:34:ac:58:30:82:8e:54:5a:ab:74:06:c6:a1:71:
                    02:16:e0:69:f6:c0:9e:cd:20:89:b5:55:f0:a9:30:
                    9f:ac:71:d2:64:c1:eb:32:7b:41:1c:a7:36:4a:77:
                    cb:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:02:42:A9:71:BF:3D:9E:B4:4B:C9:DA:F9:21:A7:53:EE:33:3F:46
            X509v3 Authority Key Identifier:
                keyid:64:F3:A2:98:F7:DE:92:05:48:E8:25:1D:E7:6B:80:73:87:E2:D4:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPOimPfekgVI6CUd52uAc4fi1Dw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/f17746-b9ce-4e15-b3bc-f8cc0851cefd/1/ZPOimPfekgVI6CUd52uAc4fi1Dw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/f17746-b9ce-4e15-b3bc-f8cc0851cefd/1/ZPOimPfekgVI6CUd52uAc4fi1Dw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:c9:72:0e:23:2f:50:ad:a7:da:da:cb:d0:97:29:7c:90:54:
         64:ad:b2:be:56:73:ae:07:b8:52:97:2b:b7:72:5b:73:03:52:
         1c:2f:ea:ab:f1:c6:7c:2e:3d:43:04:a6:8c:03:f4:ab:d6:4f:
         37:2e:f6:7e:17:8d:86:f0:20:43:c1:c7:70:4d:ab:4d:93:94:
         34:04:d6:d2:6a:ed:ff:ed:d5:2e:90:34:af:be:a1:ce:25:34:
         c0:9a:ce:e9:14:5b:cf:2b:58:01:2c:16:2d:c3:93:a2:9a:b2:
         8f:16:52:d5:85:3c:78:f6:14:de:cf:0b:c2:a5:67:6c:49:71:
         4b:fe:e3:50:64:ad:1d:38:ac:99:83:6d:63:81:10:ed:26:fb:
         86:db:18:31:f2:9a:e2:e8:bd:f8:ca:44:0c:60:b8:0d:ea:03:
         d7:84:13:da:6e:f6:78:02:cb:ed:1c:0b:21:68:b6:94:67:18:
         5b:26:8e:7e:8e:88:65:88:6f:7b:a1:2c:3a:c5:fa:73:c4:1a:
         68:f6:1d:07:6c:ac:a3:ee:26:b9:e9:60:27:e5:28:9f:80:e9:
         f2:e5:2e:cd:e9:43:19:b4:c8:c0:17:92:41:e3:23:5b:30:70:
         3d:ce:28:4c:2f:96:53:29:ce:d5:08:da:a6:6c:5d:8c:38:a9:
         30:eb:0c:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----