Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/99ab94-eca0-4c62-9e11-7933121f64d8/1/ytqHDb97pd-R_ZCe09Y4AxZlYlQ.mft
File:                     ytqHDb97pd-R_ZCe09Y4AxZlYlQ.mft (raw, json)
Hash identifier:          8y6bd/JGMGx9uWs9i1fbmBLAGS7nSpm0qDkFV4tBN/U=
Subject key identifier:   2E:EA:E4:84:E8:56:E4:58:16:84:73:1F:DB:BF:75:D1:81:FA:3E:0E
Authority key identifier: CA:DA:87:0D:BF:7B:A5:DF:91:FD:90:9E:D3:D6:38:03:16:65:62:54
Certificate issuer:       /CN=cada870dbf7ba5df91fd909ed3d6380316656254
Certificate serial:       018A01FADD555FD3BC5DA75A495A4D8EBE5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ytqHDb97pd-R_ZCe09Y4AxZlYlQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/99ab94-eca0-4c62-9e11-7933121f64d8/1/ytqHDb97pd-R_ZCe09Y4AxZlYlQ.mft
Manifest number:          0E98
Signing time:             Thu 17 Aug 2023 05:32:12 +0000
Manifest this update:     Thu 17 Aug 2023 05:32:12 +0000
Manifest next update:     Fri 18 Aug 2023 05:32:12 +0000
Files and hashes:         1: RvNBf5zimOwPlDjnGn-7VjRc9LA.roa (hash: yawy0bQE3fpTxGKv2jVzBgw4Vuv7wXI7ASz/7zGMXk8=)
                          2: ytqHDb97pd-R_ZCe09Y4AxZlYlQ.crl (hash: gJaetxFCrFnngyeY0YfSNy0QWjRn3pvg6Wv2I7KlSGs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:01:fa:dd:55:5f:d3:bc:5d:a7:5a:49:5a:4d:8e:be:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cada870dbf7ba5df91fd909ed3d6380316656254
        Validity
            Not Before: Aug 17 05:32:12 2023 GMT
            Not After : Aug 18 05:32:12 2023 GMT
        Subject: CN=2eeae484e856e4581684731fdbbf75d181fa3e0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:aa:b5:da:54:35:54:ac:3c:c5:cf:68:58:f6:
                    d4:c6:b0:6f:a5:5f:08:e5:4a:44:74:db:34:bd:5a:
                    93:ca:80:0d:45:71:49:88:a1:36:a0:ad:ba:c2:80:
                    34:18:04:7e:25:fd:c2:ee:84:b5:c3:53:30:e4:45:
                    6f:8c:c3:36:14:d8:6e:4c:5f:0d:d3:37:1e:ec:1d:
                    a8:42:a5:e0:6e:cd:2f:02:19:bf:00:8e:32:83:b4:
                    b3:df:a8:15:3f:ad:8c:4e:96:a5:e7:64:b5:8f:1f:
                    78:4d:4b:a5:aa:85:c3:c6:96:1a:21:f7:3c:b3:eb:
                    5b:74:51:40:71:9c:e1:13:c6:91:f1:73:8e:7e:09:
                    4c:de:e1:3f:b1:c6:c3:25:a3:0f:62:81:07:2a:a4:
                    7b:df:a4:7e:67:11:1f:90:1b:27:51:c1:f8:db:3a:
                    af:0b:de:19:9a:bc:fd:d9:c6:75:a5:3e:d1:71:f3:
                    13:6a:c6:36:5d:6b:fd:bb:85:86:8e:8d:ca:a9:d0:
                    a9:f2:7c:cd:23:05:10:f0:b1:f1:03:8f:85:e6:18:
                    94:1b:a0:c6:31:ce:c5:a3:8d:1c:9a:3f:ad:89:a5:
                    27:d4:d8:5f:48:ca:71:fc:f0:d7:d0:5f:c1:6f:06:
                    df:55:de:5c:ef:fd:bb:5f:a6:b8:db:e7:c4:da:89:
                    65:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:EA:E4:84:E8:56:E4:58:16:84:73:1F:DB:BF:75:D1:81:FA:3E:0E
            X509v3 Authority Key Identifier:
                keyid:CA:DA:87:0D:BF:7B:A5:DF:91:FD:90:9E:D3:D6:38:03:16:65:62:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ytqHDb97pd-R_ZCe09Y4AxZlYlQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/99ab94-eca0-4c62-9e11-7933121f64d8/1/ytqHDb97pd-R_ZCe09Y4AxZlYlQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/99ab94-eca0-4c62-9e11-7933121f64d8/1/ytqHDb97pd-R_ZCe09Y4AxZlYlQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:6a:64:d9:91:4d:ff:f2:ec:58:c6:b6:d3:2b:27:84:64:2c:
         94:73:98:ca:d8:6e:be:28:44:09:66:9d:49:b1:00:51:91:b3:
         e3:2e:27:7b:99:21:eb:c4:73:fe:f8:a6:95:34:07:bf:2a:74:
         86:79:65:7f:a9:97:84:6c:55:7a:8f:d0:7d:1f:fb:b2:e8:3d:
         59:cc:fc:90:d8:6b:fd:0c:06:ef:c8:38:60:e1:ea:2d:38:0c:
         07:77:f2:55:5c:bb:87:74:a0:31:99:9e:53:6e:5a:b0:6f:17:
         bf:5e:bf:5c:f7:0c:f9:9e:f2:27:a4:6a:54:34:b6:08:6e:11:
         ab:e0:fa:11:32:82:04:6b:75:20:ff:fd:47:9a:be:76:04:91:
         2a:57:76:16:d9:e3:f0:fb:41:88:61:0f:54:67:da:f4:a3:d8:
         db:56:44:08:87:79:1e:9d:61:cf:92:53:4b:67:20:fd:bf:c7:
         85:28:32:f8:f7:76:71:de:d3:0d:1e:f4:e5:53:b4:d6:ef:4e:
         72:f4:54:4b:b5:01:61:3d:f2:2a:25:2b:9f:55:ba:11:7b:ce:
         fb:8a:1a:85:13:80:97:97:86:06:60:76:10:ff:27:ab:35:c8:
         25:08:f7:49:62:85:75:77:a5:2c:8d:e2:1e:a9:f1:46:f1:d5:
         f7:d2:3f:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----