Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a5ecd4-6579-4b26-8f13-df4033502d88/1/DmZhpWKMRRKTIYK9vaf5JycCuOE.mft
File:                     DmZhpWKMRRKTIYK9vaf5JycCuOE.mft (raw, json)
Hash identifier:          o7VylHu1pAx6OnNUQJ06J3tFLIgUh0NY0aeLCb2yIpE=
Subject key identifier:   62:D3:3F:EF:6D:C7:65:47:0E:9C:80:A3:AE:94:C9:A5:94:91:C0:BA
Authority key identifier: 0E:66:61:A5:62:8C:45:12:93:21:82:BD:BD:A7:F9:27:27:02:B8:E1
Certificate issuer:       /CN=0e6661a5628c4512932182bdbda7f9272702b8e1
Certificate serial:       018C6D22B29680C7B046FDBF3D97D1D371D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DmZhpWKMRRKTIYK9vaf5JycCuOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/a5ecd4-6579-4b26-8f13-df4033502d88/1/DmZhpWKMRRKTIYK9vaf5JycCuOE.mft
Manifest number:          07F0
Signing time:             Fri 15 Dec 2023 11:00:39 +0000
Manifest this update:     Fri 15 Dec 2023 11:00:39 +0000
Manifest next update:     Sat 16 Dec 2023 11:00:39 +0000
Files and hashes:         1: DmZhpWKMRRKTIYK9vaf5JycCuOE.crl (hash: 3R3EiYQUgrpSmQc8Jbw4mpPeuObVPIkzyMXU77FgD5s=)
                          2: SCUronFWevb5DZEGOaW7DV55-2s.roa (hash: 9+WAYXqstoC9OWqaT047XTI3PaRh3ucIcQ2VzsZLOAk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:6d:22:b2:96:80:c7:b0:46:fd:bf:3d:97:d1:d3:71:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e6661a5628c4512932182bdbda7f9272702b8e1
        Validity
            Not Before: Dec 15 11:00:39 2023 GMT
            Not After : Dec 16 11:00:39 2023 GMT
        Subject: CN=62d33fef6dc765470e9c80a3ae94c9a59491c0ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f9:43:47:01:44:a6:00:28:25:54:3e:96:86:
                    5a:2f:32:36:be:3b:c6:da:7f:e2:9e:1c:38:95:3a:
                    53:24:64:bb:2c:cd:ad:fc:fa:5e:c7:15:e8:ee:9b:
                    8b:52:96:a3:3f:0f:d1:a4:79:29:ec:b5:d6:d4:75:
                    84:4b:2a:04:53:a2:d9:7c:d2:be:b8:d5:f0:d3:c0:
                    00:cd:40:c4:eb:ce:dc:42:b3:80:f8:f1:13:5d:9b:
                    91:75:75:e4:b1:31:9a:5f:f6:f3:19:bd:26:e3:61:
                    6c:2f:fd:94:61:f8:e6:bb:95:9e:b3:7a:57:8f:81:
                    1f:8e:c5:75:ed:8f:3e:cb:e0:92:19:ef:6f:5b:6c:
                    6e:26:61:1f:2b:a2:d4:5f:c0:12:cb:3c:e2:7f:50:
                    ca:2e:a0:5d:52:52:7d:be:cd:db:cd:c6:08:00:d9:
                    8f:dc:89:8b:21:96:bb:9b:a6:d4:25:d4:50:4f:90:
                    f2:0d:c3:9f:98:61:7c:ad:d0:78:5a:d4:dd:96:9e:
                    a8:1e:b2:db:6c:4e:a5:9f:f6:5c:1b:74:80:c7:b3:
                    c8:fd:9e:9a:c9:56:ee:ad:75:06:82:e8:35:6c:15:
                    c7:e8:94:cf:1e:a5:ab:61:da:a8:4f:32:42:bc:77:
                    75:19:27:eb:40:56:0d:75:30:0d:60:d2:2e:ce:66:
                    47:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:D3:3F:EF:6D:C7:65:47:0E:9C:80:A3:AE:94:C9:A5:94:91:C0:BA
            X509v3 Authority Key Identifier:
                keyid:0E:66:61:A5:62:8C:45:12:93:21:82:BD:BD:A7:F9:27:27:02:B8:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DmZhpWKMRRKTIYK9vaf5JycCuOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a5ecd4-6579-4b26-8f13-df4033502d88/1/DmZhpWKMRRKTIYK9vaf5JycCuOE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a5ecd4-6579-4b26-8f13-df4033502d88/1/DmZhpWKMRRKTIYK9vaf5JycCuOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:23:e9:9b:38:99:68:fd:f4:5f:c0:c2:21:06:fb:ab:e3:b0:
         41:bd:56:7f:f3:ba:b4:1a:ca:07:b8:55:a3:b0:71:14:43:1a:
         1a:7a:34:6d:e6:a2:96:c3:00:a9:25:d7:07:6e:b5:37:af:f3:
         15:77:c0:3f:9a:b8:5b:98:52:3a:17:3c:ca:5f:9e:00:f4:a6:
         8f:45:e2:03:a6:32:9e:95:c0:a0:41:de:93:0a:12:a0:4d:ec:
         e0:21:a4:77:9e:9b:af:92:de:df:b9:c9:b1:e3:69:6d:5b:90:
         68:5e:63:3a:89:49:92:22:ac:03:9c:28:bd:c1:72:0b:04:e7:
         19:c2:d8:12:97:a4:76:37:a1:b6:76:73:6e:74:1d:24:d2:ba:
         6e:2b:76:1e:db:d8:59:dd:9d:68:fa:90:58:44:0d:18:8d:a8:
         db:a4:58:e0:23:ee:ef:57:8a:52:2c:f3:0b:b7:dc:ef:9d:db:
         39:f8:1c:e9:24:eb:d6:eb:20:9b:da:22:7d:78:f0:b8:fa:a2:
         4f:a7:a7:91:08:c6:d5:91:12:e7:a3:a0:c5:7a:82:d4:85:65:
         86:f0:00:12:0c:09:cb:2b:b1:ff:2c:df:9d:5c:af:f6:b4:4f:
         df:7b:9e:cf:4e:6d:82:b0:62:db:99:7d:bc:89:a8:58:c9:71:
         f7:5f:69:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----