Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/59a733-7dc5-4111-9e62-753663d28c82/1/lriX1k2fPd9oWb9iOsUWGl8ZIUw.mft
File:                     lriX1k2fPd9oWb9iOsUWGl8ZIUw.mft (raw, json)
Hash identifier:          yaL7ItorPlZtpKlGit4lVxmb86qvu5EnoCgnZkrBizU=
Subject key identifier:   A7:34:E4:F6:A9:1B:9F:D7:18:D0:1A:DD:BC:5C:53:8F:6C:22:22:FE
Authority key identifier: 96:B8:97:D6:4D:9F:3D:DF:68:59:BF:62:3A:C5:16:1A:5F:19:21:4C
Certificate issuer:       /CN=96b897d64d9f3ddf6859bf623ac5161a5f19214c
Certificate serial:       018BB79B60FC6F53BDEDDC34AE1460BC11BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lriX1k2fPd9oWb9iOsUWGl8ZIUw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/59a733-7dc5-4111-9e62-753663d28c82/1/lriX1k2fPd9oWb9iOsUWGl8ZIUw.mft
Manifest number:          087F
Signing time:             Fri 10 Nov 2023 05:01:35 +0000
Manifest this update:     Fri 10 Nov 2023 05:01:35 +0000
Manifest next update:     Sat 11 Nov 2023 05:01:35 +0000
Files and hashes:         1: QYBO-M8tjPMY8FlbuysodJAelv8.roa (hash: Hk9QAa6fsK2ZbW86qUyBej5BGEu0qq+7BJaJ4UABv7A=)
                          2: lriX1k2fPd9oWb9iOsUWGl8ZIUw.crl (hash: nTd0W627wI7tRrojJkxcU+zyw8OHWtFUakK3fCFsUog=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:b7:9b:60:fc:6f:53:bd:ed:dc:34:ae:14:60:bc:11:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96b897d64d9f3ddf6859bf623ac5161a5f19214c
        Validity
            Not Before: Nov 10 05:01:35 2023 GMT
            Not After : Nov 11 05:01:35 2023 GMT
        Subject: CN=a734e4f6a91b9fd718d01addbc5c538f6c2222fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:85:10:04:2e:0b:e0:78:51:83:68:95:e5:fa:
                    f3:c8:9c:f6:a8:b3:68:ef:22:33:ac:06:ad:c7:1c:
                    e0:e9:70:e1:f2:cd:ee:8c:ec:25:a3:83:5a:51:0a:
                    61:c4:8e:02:15:92:6c:f8:ab:e3:b5:3e:ea:12:9c:
                    5d:3d:60:8b:e4:cc:6e:bc:b2:05:a1:38:2e:86:9e:
                    14:c9:90:fc:25:bc:09:00:c5:b4:a2:96:f5:17:66:
                    78:74:c5:21:7e:5a:84:66:9e:ab:69:d2:ca:fc:20:
                    28:b6:ec:13:8a:55:20:7b:fe:87:3e:c6:6c:88:3e:
                    74:98:7a:ce:49:11:28:c3:78:5a:22:7e:95:fe:cf:
                    5c:17:3f:c0:d2:e9:02:d5:18:c6:b8:5b:93:c0:6d:
                    f1:c0:d4:00:0b:df:84:15:66:59:a1:f6:06:fc:de:
                    79:2a:1e:01:e4:72:36:ad:36:34:ea:27:a9:77:e3:
                    55:26:64:ce:d9:69:95:08:ee:1b:70:b1:da:65:94:
                    e7:55:45:a0:f3:ac:af:69:6b:a0:0c:ab:37:75:a1:
                    38:b3:e1:69:dd:2f:df:0f:b3:6c:01:99:40:cf:24:
                    bc:fc:33:07:36:0b:e2:d7:37:59:7e:e8:0f:67:2b:
                    86:c2:3a:40:b0:0f:9e:53:bc:92:00:69:ba:70:51:
                    3e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:34:E4:F6:A9:1B:9F:D7:18:D0:1A:DD:BC:5C:53:8F:6C:22:22:FE
            X509v3 Authority Key Identifier:
                keyid:96:B8:97:D6:4D:9F:3D:DF:68:59:BF:62:3A:C5:16:1A:5F:19:21:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lriX1k2fPd9oWb9iOsUWGl8ZIUw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/59a733-7dc5-4111-9e62-753663d28c82/1/lriX1k2fPd9oWb9iOsUWGl8ZIUw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/59a733-7dc5-4111-9e62-753663d28c82/1/lriX1k2fPd9oWb9iOsUWGl8ZIUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:0e:4f:6d:bc:36:0d:f8:de:1e:b7:59:a3:85:9b:39:e4:d5:
         cf:52:34:14:4c:e5:f7:54:ac:87:f0:95:27:a1:78:75:b0:81:
         6f:42:bd:98:03:42:bf:7b:6c:93:5e:f4:91:8f:03:09:a8:9a:
         97:34:36:9e:9b:ab:22:8c:50:11:e2:e5:2b:9f:02:26:30:23:
         bc:85:0f:69:18:50:3f:f5:e6:6c:71:ce:ac:b1:4e:af:7f:ce:
         cc:e8:23:c4:60:0e:4a:9c:51:45:19:d3:3e:8f:a5:97:85:39:
         41:4b:86:96:b4:94:ae:eb:a4:99:2a:94:8b:5c:04:56:84:d3:
         11:c1:1a:b6:1d:63:db:10:59:1f:94:74:28:dc:f7:54:1e:81:
         14:ba:69:e1:a6:71:fa:36:d6:cd:37:1e:72:ea:bf:08:aa:39:
         84:07:95:21:a9:a2:a2:f5:8d:a2:34:7d:9e:c2:6a:6b:80:c2:
         c7:7f:bb:0d:9b:a6:58:c7:8e:34:00:4e:c6:ce:5e:3e:68:a6:
         f9:22:2a:83:80:5e:e8:37:f0:fd:3c:0a:ee:1d:e6:bb:13:cb:
         e4:e6:08:af:35:8d:aa:6b:39:8e:45:47:32:6a:3d:d0:42:a7:
         e9:7f:d1:2e:3c:9a:ab:7d:a4:42:98:db:6e:21:f5:f8:14:c6:
         4d:77:b9:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----