Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/f71b3e-64bd-4587-9479-91eda98f8365/1/e1CduRlyUj06HUzumAU27q8z6sk.mft
File:                     e1CduRlyUj06HUzumAU27q8z6sk.mft (raw, json)
Hash identifier:          CsWWXQXlOeIJPTq3Sd5IZaDWfETSTwSzW/9v4lBW9fA=
Subject key identifier:   EC:4B:C8:D1:AF:97:D6:30:A7:5D:1E:49:7C:4D:13:EF:0F:FD:8B:8E
Authority key identifier: 7B:50:9D:B9:19:72:52:3D:3A:1D:4C:EE:98:05:36:EE:AF:33:EA:C9
Certificate issuer:       /CN=7b509db91972523d3a1d4cee980536eeaf33eac9
Certificate serial:       018BEBBF35B200ADF230341E96AA1285FD7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e1CduRlyUj06HUzumAU27q8z6sk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/f71b3e-64bd-4587-9479-91eda98f8365/1/e1CduRlyUj06HUzumAU27q8z6sk.mft
Manifest number:          085A
Signing time:             Mon 20 Nov 2023 08:00:58 +0000
Manifest this update:     Mon 20 Nov 2023 08:00:58 +0000
Manifest next update:     Tue 21 Nov 2023 08:00:58 +0000
Files and hashes:         1: dtoZzn3WtFNe0ZmFMYIlCh9FvgY.roa (hash: BnoP21n7WY0aCaknNvJW9jPZlK4kFIkNtnF3GTJlmrM=)
                          2: e1CduRlyUj06HUzumAU27q8z6sk.crl (hash: 9bRsqANE0ihA2yiOvVPbMi4LlWCl1PMQ5kzVdxEMyYo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:eb:bf:35:b2:00:ad:f2:30:34:1e:96:aa:12:85:fd:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b509db91972523d3a1d4cee980536eeaf33eac9
        Validity
            Not Before: Nov 20 08:00:58 2023 GMT
            Not After : Nov 21 08:00:58 2023 GMT
        Subject: CN=ec4bc8d1af97d630a75d1e497c4d13ef0ffd8b8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a8:ab:e7:c4:8c:55:26:15:8f:4d:6e:31:d2:
                    38:68:b6:cf:f3:e3:a7:f6:e3:42:92:51:81:6c:3a:
                    0b:12:0b:9a:69:08:eb:4f:59:b5:73:a8:d8:ce:e2:
                    ff:16:4c:0c:2c:7e:ac:fb:56:db:d2:19:81:ef:82:
                    83:9b:d7:af:83:0b:1a:06:bc:86:95:81:7f:66:46:
                    6d:ad:8c:58:0f:20:af:36:3b:08:97:67:57:f8:f8:
                    8b:2e:01:95:89:33:80:fc:ac:33:97:72:75:5d:4e:
                    8a:7b:8c:6b:16:7d:c2:a1:08:72:26:7b:06:82:e8:
                    69:0e:15:ba:27:f2:7b:54:d1:a9:7e:ec:21:e3:9a:
                    7a:b8:fd:24:62:8b:b0:d3:0d:90:fc:83:99:11:f5:
                    97:47:8b:89:a7:f8:87:e6:ca:f7:36:21:c8:44:2d:
                    78:a5:ee:7d:9e:3c:b7:8e:9f:6e:64:6d:2d:5f:ac:
                    d3:54:3b:5e:8f:c0:15:b0:de:df:b3:df:7d:cb:ac:
                    cc:4c:30:ac:bf:0d:13:cd:bc:c5:07:89:37:0a:2b:
                    d5:9c:bf:c4:ac:79:2e:35:45:11:94:74:19:46:09:
                    c4:3e:b6:8b:d8:97:37:b4:d6:bd:ea:9d:27:c5:d3:
                    e5:8a:fc:c5:b9:3c:15:3d:86:7e:98:df:f1:c5:94:
                    7c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:4B:C8:D1:AF:97:D6:30:A7:5D:1E:49:7C:4D:13:EF:0F:FD:8B:8E
            X509v3 Authority Key Identifier:
                keyid:7B:50:9D:B9:19:72:52:3D:3A:1D:4C:EE:98:05:36:EE:AF:33:EA:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1CduRlyUj06HUzumAU27q8z6sk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/f71b3e-64bd-4587-9479-91eda98f8365/1/e1CduRlyUj06HUzumAU27q8z6sk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/f71b3e-64bd-4587-9479-91eda98f8365/1/e1CduRlyUj06HUzumAU27q8z6sk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:66:e5:71:8e:8c:e4:28:86:44:ed:b4:f1:06:0e:05:32:72:
         97:ca:95:86:3c:8e:0c:2e:cf:bf:80:ad:46:89:34:a8:7c:a7:
         2b:b4:c6:bc:c3:6e:9f:c9:b5:f2:f3:d0:4c:6f:47:21:92:74:
         79:4d:b5:e9:5b:5d:a6:c7:cc:e6:ee:c2:8e:59:f3:9c:9e:eb:
         a8:ea:eb:bb:0a:d1:70:24:70:c3:60:99:cf:83:19:9d:a6:95:
         55:c6:f2:ed:7e:e9:87:0c:56:da:12:02:70:a0:1e:7c:bd:e6:
         69:a0:ab:d1:56:fd:d0:d9:3f:64:0b:85:fd:56:26:b9:14:5e:
         51:b5:83:60:b3:96:cd:8c:88:6f:26:ae:92:f5:c4:41:f9:60:
         bc:51:02:51:81:c3:9f:60:10:75:89:f4:eb:fe:c3:25:7a:0a:
         3d:ab:ce:67:69:cc:5a:e6:d3:e9:64:84:fa:32:a9:29:fe:fe:
         76:f7:a3:df:cb:d3:6e:df:2c:dd:af:48:eb:47:2f:11:82:f1:
         e7:e7:b9:3a:18:3a:71:04:53:21:a8:92:47:1f:b5:87:74:9e:
         d7:a4:e4:bd:8e:ca:4e:a1:7e:65:bd:24:d2:a9:e6:d7:c6:84:
         4c:ca:75:cc:aa:3f:23:6c:4d:52:aa:f0:4e:9f:f0:60:05:70:
         ae:87:e7:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----