Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/41f4c7-9668-4cf4-9e9d-e0e0468e69d7/1/Ofyts5uJwIBD1J_xBSk6KbpsQIc.mft
File:                     Ofyts5uJwIBD1J_xBSk6KbpsQIc.mft (raw, json)
Hash identifier:          DAG5qOV2zY0y/Mk3gXzbAsN188Gf+R8lf83K8BWhAs0=
Subject key identifier:   B8:3F:4C:98:CA:12:33:08:DA:28:99:F8:3B:E7:10:D4:0F:C1:FF:D4
Authority key identifier: 39:FC:AD:B3:9B:89:C0:80:43:D4:9F:F1:05:29:3A:29:BA:6C:40:87
Certificate issuer:       /CN=39fcadb39b89c08043d49ff105293a29ba6c4087
Certificate serial:       018A40ADF0FAA970395BCC06E5CE21E854D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ofyts5uJwIBD1J_xBSk6KbpsQIc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/41f4c7-9668-4cf4-9e9d-e0e0468e69d7/1/Ofyts5uJwIBD1J_xBSk6KbpsQIc.mft
Manifest number:          01
Signing time:             Tue 29 Aug 2023 09:44:15 +0000
Manifest this update:     Tue 29 Aug 2023 09:44:15 +0000
Manifest next update:     Wed 30 Aug 2023 09:44:15 +0000
Files and hashes:         1: Ofyts5uJwIBD1J_xBSk6KbpsQIc.crl (hash: bIgHzMCXdnKZco5kPH5KE5ctJ4W4ltSm9kl4dI8i7qo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:40:ad:f0:fa:a9:70:39:5b:cc:06:e5:ce:21:e8:54:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39fcadb39b89c08043d49ff105293a29ba6c4087
        Validity
            Not Before: Aug 29 09:44:15 2023 GMT
            Not After : Aug 30 09:44:15 2023 GMT
        Subject: CN=b83f4c98ca123308da2899f83be710d40fc1ffd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:20:bb:13:f9:85:33:62:f4:f8:66:42:4c:fc:
                    f7:10:3a:41:57:71:7e:1a:9e:63:ea:d6:46:46:0c:
                    e5:c9:52:9d:5e:c6:90:13:16:36:8c:6d:5c:89:c5:
                    26:bf:fb:f9:d8:a7:fb:ec:e7:0a:7a:81:c2:12:5f:
                    5e:a3:b8:52:22:62:0f:da:45:60:34:f7:58:9e:bf:
                    76:ae:9f:9a:1a:c5:72:47:66:df:c6:a4:30:fa:23:
                    6e:0a:66:e8:98:9b:49:df:25:8f:77:18:91:4f:25:
                    8e:bb:a7:96:44:d5:5c:bb:47:76:d0:3c:36:04:99:
                    fb:d9:f5:41:a9:5b:2f:c6:12:9c:c5:73:1e:60:d6:
                    a7:f0:37:d5:d4:3b:f0:ff:88:a8:1c:46:db:fc:3b:
                    23:bc:19:2a:27:08:9c:f6:1c:af:e1:b1:b3:5e:10:
                    29:a5:8d:0e:51:58:00:d5:d9:94:1c:06:1c:69:1c:
                    e8:5e:6b:00:52:66:d8:65:6e:55:c2:3c:95:ea:35:
                    52:57:df:49:50:d2:84:f1:c4:9e:25:d3:b6:89:56:
                    ff:f4:a5:d2:67:07:e4:fe:96:0c:df:ef:be:62:5e:
                    2c:3c:6e:3d:28:fa:b0:86:5b:90:66:9d:fe:da:77:
                    50:1a:24:2a:6d:55:96:b2:cd:3b:5f:99:c9:fd:82:
                    1c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:3F:4C:98:CA:12:33:08:DA:28:99:F8:3B:E7:10:D4:0F:C1:FF:D4
            X509v3 Authority Key Identifier:
                keyid:39:FC:AD:B3:9B:89:C0:80:43:D4:9F:F1:05:29:3A:29:BA:6C:40:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ofyts5uJwIBD1J_xBSk6KbpsQIc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/41f4c7-9668-4cf4-9e9d-e0e0468e69d7/1/Ofyts5uJwIBD1J_xBSk6KbpsQIc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/41f4c7-9668-4cf4-9e9d-e0e0468e69d7/1/Ofyts5uJwIBD1J_xBSk6KbpsQIc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:01:e7:04:74:0d:62:0c:0a:36:0d:2e:56:67:85:ee:94:86:
         90:eb:a4:3d:06:63:55:cd:a3:95:a8:5a:d9:00:91:5e:98:0e:
         3d:c2:88:cf:b4:b9:80:a4:87:20:7c:fe:27:8b:05:ab:c8:65:
         57:8f:97:cd:bb:84:90:74:9c:66:60:a9:0a:4b:de:a5:07:55:
         c2:dc:e7:68:eb:f5:40:6c:89:7a:00:a9:25:05:a9:ea:7f:b8:
         95:ec:26:a9:57:3b:49:45:ef:d0:27:4d:f6:91:00:f0:76:61:
         94:16:22:35:c2:a0:54:b3:ae:0b:9c:34:9e:24:4f:89:aa:d5:
         64:b0:33:2c:c9:34:c5:19:c3:94:48:63:b5:61:c4:45:2f:76:
         a8:9d:19:bf:fa:1b:56:2e:48:97:0b:7d:31:9b:3c:f0:2e:8f:
         cc:65:ae:be:dc:53:c4:2f:ab:b7:d7:5f:24:fb:ea:35:b6:03:
         3b:0f:24:d1:d7:45:f3:9d:e5:52:13:a1:b1:b4:fd:d3:4d:9b:
         e9:91:d7:94:a0:db:40:e3:e3:12:66:4e:51:0b:b9:63:15:03:
         cb:06:e5:2b:e2:85:ef:55:c3:2f:ea:a6:cd:b5:5e:ba:c2:ee:
         be:85:a7:0b:e4:b0:ac:17:57:f8:12:37:55:c7:55:f1:74:93:
         a7:a0:e5:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----