Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/cf4025-3198-4a93-ab76-35720860a5b2/1/BKCP6Dp8K_FVJPSNmnysQ5xG_Wc.mft
File:                     BKCP6Dp8K_FVJPSNmnysQ5xG_Wc.mft (raw, json)
Hash identifier:          dZJEaYmdzCLRi3tlbtUmVfyHXrdE1Sv8J2649X+PnNc=
Subject key identifier:   A6:2F:74:63:64:78:46:2F:75:C4:B4:50:BC:D6:84:99:AF:6E:31:19
Authority key identifier: 04:A0:8F:E8:3A:7C:2B:F1:55:24:F4:8D:9A:7C:AC:43:9C:46:FD:67
Certificate issuer:       /CN=04a08fe83a7c2bf15524f48d9a7cac439c46fd67
Certificate serial:       018B932085CB07C59E753D88BB9143E94728
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BKCP6Dp8K_FVJPSNmnysQ5xG_Wc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/cf4025-3198-4a93-ab76-35720860a5b2/1/BKCP6Dp8K_FVJPSNmnysQ5xG_Wc.mft
Manifest number:          082C
Signing time:             Fri 03 Nov 2023 03:01:03 +0000
Manifest this update:     Fri 03 Nov 2023 03:01:03 +0000
Manifest next update:     Sat 04 Nov 2023 03:01:03 +0000
Files and hashes:         1: 2TxMC9wLhR40lmKxKn-ta-khKRk.roa (hash: b3pp7NO23jaCsAolsc8+SXkqUVdLm/exqPuJqMOwkok=)
                          2: BKCP6Dp8K_FVJPSNmnysQ5xG_Wc.crl (hash: MSESbc5qAkosiAuJc9nJ2bs7orOSiSazB5TMQSB+bfE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:93:20:85:cb:07:c5:9e:75:3d:88:bb:91:43:e9:47:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04a08fe83a7c2bf15524f48d9a7cac439c46fd67
        Validity
            Not Before: Nov  3 03:01:03 2023 GMT
            Not After : Nov  4 03:01:03 2023 GMT
        Subject: CN=a62f74636478462f75c4b450bcd68499af6e3119
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:7d:1e:d1:cf:d5:5b:47:e6:6e:88:5b:e2:b0:
                    45:ff:a4:e1:a6:27:6c:23:9d:82:cd:5e:13:6b:2a:
                    2e:1f:e2:72:ea:ea:54:76:3e:a6:dc:6a:ed:a5:b8:
                    42:31:97:48:53:d5:80:c9:6f:16:9f:3b:c6:59:37:
                    17:7f:47:e7:3f:bf:5c:0c:53:26:4f:c2:e9:f5:c2:
                    fe:fa:f8:be:0e:55:f5:2b:21:a8:a8:f7:7b:bd:24:
                    84:91:17:06:71:12:5e:78:4f:e7:08:f0:a3:c4:8c:
                    00:6e:87:15:1d:5b:4f:8e:df:8d:3c:5d:c4:07:2a:
                    04:a7:7e:76:e2:36:f5:9a:6c:c0:27:ad:e2:9d:87:
                    f6:5f:1b:ff:99:b5:d2:2f:9d:4d:ad:f5:d1:29:47:
                    49:e3:8f:c8:ad:9a:b3:49:8b:1c:70:8d:61:bf:c4:
                    13:7d:21:2c:cf:43:25:fd:a5:bb:5f:73:0d:c6:f6:
                    11:d2:fb:d7:0d:d6:85:a0:dd:86:8c:d6:bb:81:c7:
                    ff:7f:a1:93:9d:d3:69:71:08:38:06:65:34:b3:1a:
                    ba:69:d2:4e:47:b9:4e:12:e3:82:c7:74:6a:d1:5a:
                    5b:a9:3e:cf:ca:e7:c2:3d:01:37:bf:75:59:b4:a2:
                    70:95:d0:2d:21:09:1e:f8:ff:4e:f3:d5:6c:bd:d0:
                    37:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:2F:74:63:64:78:46:2F:75:C4:B4:50:BC:D6:84:99:AF:6E:31:19
            X509v3 Authority Key Identifier:
                keyid:04:A0:8F:E8:3A:7C:2B:F1:55:24:F4:8D:9A:7C:AC:43:9C:46:FD:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKCP6Dp8K_FVJPSNmnysQ5xG_Wc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cf4025-3198-4a93-ab76-35720860a5b2/1/BKCP6Dp8K_FVJPSNmnysQ5xG_Wc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cf4025-3198-4a93-ab76-35720860a5b2/1/BKCP6Dp8K_FVJPSNmnysQ5xG_Wc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:70:3b:c4:e4:3e:ed:3c:90:3c:96:db:4f:56:9f:ad:b4:5a:
         2c:69:b6:bb:f7:21:dc:d5:0d:c3:b2:75:5a:52:ae:b4:2f:b0:
         1e:6b:04:c9:f9:15:1c:e2:45:e1:99:32:47:0d:c0:a5:a5:11:
         2f:95:29:49:20:7b:28:33:a3:d3:d4:2d:67:7d:f2:01:8b:ed:
         83:15:dd:a6:d7:10:dc:6f:61:6a:e5:b9:ce:3d:9a:72:52:b4:
         3f:93:fe:c1:d0:ee:f4:7e:ca:bc:4f:09:a6:29:3d:0b:29:f1:
         fc:61:98:24:0a:6d:c2:39:6f:bc:40:d9:a2:6e:46:8f:6e:e2:
         52:ff:4e:20:cc:e4:4f:d8:6d:3d:75:21:56:f1:1c:d2:2c:56:
         f0:68:c8:7c:64:68:fd:54:31:93:39:00:a6:37:d4:be:92:26:
         75:ca:0d:a3:db:c8:c5:75:94:a4:f0:74:a5:16:5b:72:6b:4a:
         06:2b:74:f3:4d:a5:1b:d0:59:18:7d:ca:15:53:a2:e5:74:97:
         8c:dc:55:c2:67:8d:7f:f6:cd:84:fd:8a:df:7d:50:d9:e0:cb:
         a0:99:e9:54:9a:43:25:91:48:29:c9:56:57:6e:3e:2b:85:97:
         64:cf:1f:b7:44:83:49:92:20:e2:3b:65:2e:64:79:80:47:ba:
         a5:f9:06:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----