Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/994fa5-627e-4312-adc9-aecbdad80f27/1/G01cezPWZpowrCuaTeL_z2THEas.mft
File:                     G01cezPWZpowrCuaTeL_z2THEas.mft (raw, json)
Hash identifier:          6K7OehjOiEhIOu75ost/hKpFX1wZAYiwJGAN+i0WPU8=
Subject key identifier:   B4:CF:A2:E4:E8:A9:50:EC:43:89:34:A3:BF:5F:AA:48:E9:0A:D8:26
Authority key identifier: 1B:4D:5C:7B:33:D6:66:9A:30:AC:2B:9A:4D:E2:FF:CF:64:C7:11:AB
Certificate issuer:       /CN=1b4d5c7b33d6669a30ac2b9a4de2ffcf64c711ab
Certificate serial:       018B423AC7E4C45762484633C99EC397F807
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G01cezPWZpowrCuaTeL_z2THEas.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/994fa5-627e-4312-adc9-aecbdad80f27/1/G01cezPWZpowrCuaTeL_z2THEas.mft
Manifest number:          0877
Signing time:             Wed 18 Oct 2023 10:00:30 +0000
Manifest this update:     Wed 18 Oct 2023 10:00:30 +0000
Manifest next update:     Thu 19 Oct 2023 10:00:30 +0000
Files and hashes:         1: G01cezPWZpowrCuaTeL_z2THEas.crl (hash: sbWmpkdohcFY7fXtamk7psz7L0+HpEgg2DJqGaI1zLw=)
                          2: a9A7_rnixRU9dk3H-CXsqX4_-gI.roa (hash: AWsY571Pm4N1lcinGvn4JjzqN0F2uoo6lfah55BtwS0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:42:3a:c7:e4:c4:57:62:48:46:33:c9:9e:c3:97:f8:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b4d5c7b33d6669a30ac2b9a4de2ffcf64c711ab
        Validity
            Not Before: Oct 18 10:00:30 2023 GMT
            Not After : Oct 19 10:00:30 2023 GMT
        Subject: CN=b4cfa2e4e8a950ec438934a3bf5faa48e90ad826
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:fd:61:09:64:63:9d:ef:e3:7b:9a:7d:fa:77:
                    15:2e:af:c3:15:30:9b:d0:a0:24:ca:4e:39:c8:79:
                    71:cf:d5:69:73:b1:d3:1e:61:a0:7c:1a:b7:12:03:
                    d2:c1:4f:fa:16:3a:c9:f4:eb:b5:bf:f7:c4:bf:ff:
                    b1:f2:09:bc:4d:a9:53:1d:23:8f:59:c5:d0:ec:74:
                    6d:ce:d0:be:37:57:54:97:e8:59:13:74:e9:27:7b:
                    2e:85:43:3b:52:e8:9f:8c:b9:43:f4:2b:e7:79:6e:
                    76:64:d6:45:50:d2:37:95:78:a4:da:ad:a9:d5:71:
                    1c:72:7a:97:96:e0:f9:15:17:70:f4:b6:b6:66:eb:
                    da:20:ab:bd:e6:4a:d9:72:43:5f:a6:99:de:f3:01:
                    70:16:5c:e9:b5:20:08:94:58:b5:59:ce:91:c5:c7:
                    b5:41:95:a6:cf:c5:5b:ac:28:c0:04:63:c3:85:6e:
                    e1:7b:fd:5b:fd:05:61:f6:b5:19:40:44:ca:02:37:
                    2d:76:d3:54:d2:57:21:c2:93:a5:e4:b6:c5:e3:72:
                    a0:ba:51:9a:ca:b5:62:a1:37:d3:39:4f:ee:e7:0a:
                    f0:1c:55:a2:97:43:6f:50:ef:45:98:98:18:62:ec:
                    b6:d6:2c:8d:b6:df:5f:38:ec:22:8c:4a:1d:af:c1:
                    09:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:CF:A2:E4:E8:A9:50:EC:43:89:34:A3:BF:5F:AA:48:E9:0A:D8:26
            X509v3 Authority Key Identifier:
                keyid:1B:4D:5C:7B:33:D6:66:9A:30:AC:2B:9A:4D:E2:FF:CF:64:C7:11:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G01cezPWZpowrCuaTeL_z2THEas.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/994fa5-627e-4312-adc9-aecbdad80f27/1/G01cezPWZpowrCuaTeL_z2THEas.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/994fa5-627e-4312-adc9-aecbdad80f27/1/G01cezPWZpowrCuaTeL_z2THEas.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:a1:c9:9a:bf:e1:3f:c5:d4:50:9c:d1:31:b5:2c:16:ca:27:
         ae:10:2f:d8:49:e4:82:cd:53:f3:53:b2:7e:ab:7a:f8:67:0c:
         7e:96:b1:85:60:02:0e:f0:54:7b:89:24:78:8a:cc:84:2a:70:
         db:13:b9:15:38:4e:07:14:d3:3f:01:97:24:dc:62:b0:e0:83:
         dd:6e:05:0b:d3:ae:42:f8:59:87:52:41:49:85:f8:e4:dc:77:
         09:fd:77:e4:1d:c0:04:57:d0:db:85:5f:a8:f5:5f:83:9a:6e:
         40:10:91:79:56:8b:38:e3:73:85:79:9d:b1:75:34:fe:dd:c8:
         4f:3d:6d:1e:5c:69:24:1f:4d:48:02:0b:de:58:34:68:9d:2c:
         2c:b7:8a:4a:56:64:60:47:b0:33:85:f6:79:25:d6:55:1c:13:
         57:16:d4:d6:b6:a3:6d:fa:2d:45:64:cb:1e:3e:8e:11:7d:13:
         d6:a3:d5:10:72:85:2d:78:c3:ed:58:4a:61:f2:2a:0e:20:ca:
         30:fa:a5:e3:24:fb:3c:f6:f4:3e:fc:81:4e:cf:b9:5f:a9:f9:
         ee:81:52:97:af:09:67:f9:32:5e:31:83:22:33:76:97:f5:e2:
         f3:3e:2c:04:ad:80:6f:c7:b8:10:14:d3:c7:38:91:80:d3:69:
         78:ff:77:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----