Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/62acce-e639-46df-be35-42ed5030f13c/1/V7gYM_NkvGQltCVbfuM94AciALM.mft
File:                     V7gYM_NkvGQltCVbfuM94AciALM.mft (raw, json)
Hash identifier:          iMa5cWCrx6XFRRqoMqH8GjmILFeNpyITPEuRbXIljbo=
Subject key identifier:   C6:FC:48:0D:5E:14:A7:A6:97:2F:9E:0D:B1:59:7E:6F:83:CC:26:99
Authority key identifier: 57:B8:18:33:F3:64:BC:64:25:B4:25:5B:7E:E3:3D:E0:07:22:00:B3
Certificate issuer:       /CN=57b81833f364bc6425b4255b7ee33de0072200b3
Certificate serial:       018C634392E816A48B019D6EC6E62EA31717
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V7gYM_NkvGQltCVbfuM94AciALM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/62acce-e639-46df-be35-42ed5030f13c/1/V7gYM_NkvGQltCVbfuM94AciALM.mft
Manifest number:          0911
Signing time:             Wed 13 Dec 2023 13:00:22 +0000
Manifest this update:     Wed 13 Dec 2023 13:00:22 +0000
Manifest next update:     Thu 14 Dec 2023 13:00:22 +0000
Files and hashes:         1: 9Yv6Nvxofzf9ndX8guiUd6KBt8E.roa (hash: Q29Cp4cZek4NH0X8xDsE73PzxPnKZKdhbPwbcRou/XQ=)
                          2: V7gYM_NkvGQltCVbfuM94AciALM.crl (hash: 8KooKOny9pfkowXLq84+TY9hTXm6u0REs9UePQ/rrfQ=)
                          3: sq_n4tBpC5-ZOVljsIRyiUepcJs.roa (hash: lFrSL0d0QiRvDO8G5Nuv/3xIP2/la0XFHktxJgTvg4M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:63:43:92:e8:16:a4:8b:01:9d:6e:c6:e6:2e:a3:17:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57b81833f364bc6425b4255b7ee33de0072200b3
        Validity
            Not Before: Dec 13 13:00:22 2023 GMT
            Not After : Dec 14 13:00:22 2023 GMT
        Subject: CN=c6fc480d5e14a7a6972f9e0db1597e6f83cc2699
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e4:01:b6:94:9e:18:eb:4e:d8:82:1d:3d:9a:
                    2d:1d:70:a2:70:94:73:85:a5:7f:6b:82:b0:36:3f:
                    46:4a:ea:5c:ce:ea:6b:a1:90:2d:e0:43:5b:b6:d7:
                    9d:ba:89:81:18:8d:f4:a8:da:13:96:29:a1:ae:13:
                    35:15:8e:9f:b9:e2:d7:4f:b6:e9:8c:c2:ad:80:33:
                    da:bf:b9:6d:32:18:62:1c:5d:a6:64:7a:c3:b6:5f:
                    65:27:52:05:18:41:f4:16:ca:31:25:c9:55:bb:d7:
                    46:3a:1f:87:fd:a2:bc:18:36:d4:33:98:82:af:7c:
                    82:f6:83:ca:2a:fd:b1:61:ba:0b:b4:ed:ab:5e:4d:
                    e3:30:8f:d7:5d:54:71:0b:db:a6:62:03:4a:9b:a5:
                    06:a3:88:d0:54:e4:03:2e:e6:08:13:a1:32:96:9f:
                    69:34:60:3d:2a:5b:29:83:1f:99:44:47:81:d3:3a:
                    55:77:96:d7:09:7d:04:1b:ef:06:d7:e2:61:eb:6e:
                    70:1c:ab:cf:2a:30:ba:6f:9f:b4:71:46:dc:00:37:
                    63:d7:d2:3b:2b:20:b5:fc:7b:0c:2c:45:66:4f:2c:
                    82:5a:8c:71:66:7c:ee:fb:cb:ce:3b:5f:19:64:81:
                    30:64:cb:3c:7f:7e:44:3b:48:4b:3f:ba:9d:fc:38:
                    8e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:FC:48:0D:5E:14:A7:A6:97:2F:9E:0D:B1:59:7E:6F:83:CC:26:99
            X509v3 Authority Key Identifier:
                keyid:57:B8:18:33:F3:64:BC:64:25:B4:25:5B:7E:E3:3D:E0:07:22:00:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V7gYM_NkvGQltCVbfuM94AciALM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/62acce-e639-46df-be35-42ed5030f13c/1/V7gYM_NkvGQltCVbfuM94AciALM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/62acce-e639-46df-be35-42ed5030f13c/1/V7gYM_NkvGQltCVbfuM94AciALM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:69:ac:85:db:cf:bc:8f:7c:63:7d:2d:e0:c4:a9:01:4c:47:
         b7:90:39:15:52:90:1c:5e:38:bc:f1:fd:82:91:42:48:a1:3f:
         b7:c9:f4:0d:cf:21:b7:34:31:7b:fb:10:18:1f:46:27:33:a9:
         c4:eb:7f:df:b1:31:42:04:c4:b4:12:b1:90:71:55:7a:d4:33:
         2e:f5:9e:2a:b9:2d:af:28:b6:13:43:40:c1:ab:7b:20:02:28:
         54:25:cf:9b:f3:a4:33:eb:b5:78:54:a2:40:c6:4e:62:0d:9b:
         22:87:27:c8:5c:91:a7:14:aa:d9:05:2d:30:3c:93:1a:d3:68:
         ce:7a:c4:86:a5:a1:c2:18:12:de:0d:a3:12:0f:5f:39:3d:ac:
         6c:48:10:50:06:39:37:a8:9b:ba:6e:f3:69:74:dc:32:6f:cb:
         ee:a1:b7:bc:98:9d:be:e4:03:53:0b:b5:39:5d:af:82:7d:25:
         27:1e:1f:ba:c6:d9:19:09:f8:58:d7:be:fc:e6:cd:fd:6c:5c:
         87:fe:60:68:dd:ec:e1:97:6c:25:34:26:c9:fc:f5:be:31:93:
         33:24:9a:fa:fe:27:4a:93:52:e5:2c:ce:9a:aa:d5:75:3d:a6:
         9c:8f:2c:ac:e6:1b:21:22:e1:4b:01:1f:fe:f8:33:a6:74:89:
         0b:f9:4c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----