Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/kmaXye_alVy6Pm-JcNcumWvzwWU.mft
File:                     kmaXye_alVy6Pm-JcNcumWvzwWU.mft (raw, json)
Hash identifier:          xAN9ei9b0OcTm39Ob9iFoVXM65GynnLWbxRpHTs0uVw=
Subject key identifier:   30:CA:B5:B1:91:F2:D1:15:18:12:CA:FC:8B:DE:07:45:E6:19:08:9A
Authority key identifier: 92:66:97:C9:EF:DA:95:5C:BA:3E:6F:89:70:D7:2E:99:6B:F3:C1:65
Certificate issuer:       /CN=926697c9efda955cba3e6f8970d72e996bf3c165
Certificate serial:       018702FF8E667629CE2F7BE87E9F99252537
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kmaXye_alVy6Pm-JcNcumWvzwWU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/kmaXye_alVy6Pm-JcNcumWvzwWU.mft
Manifest number:          0CF4
Signing time:             Tue 21 Mar 2023 07:08:35 +0000
Manifest this update:     Tue 21 Mar 2023 07:08:35 +0000
Manifest next update:     Wed 22 Mar 2023 07:08:35 +0000
Files and hashes:         1: 2bsJ1vau1naEAYIMi8zPF7x62-0.roa (hash: WjJhGFZ2sb0tk9sHrijROEg/4dmCw7Rtwtdz3XRmAp0=)
                          2: Nj7250tEVOw6TYelkLVVq12VBqI.roa (hash: 01iEU1grLI8nthLcaexV6Mmy0n4WnifMEByh3nYEusM=)
                          3: P1F8q64UgNmTHwvwwP_6_6BOxns.roa (hash: S0MQiKFNoV7imI0Vq8tuckkTViAYRtXQe7I2GqYl+iU=)
                          4: Pv8X3F1zPnpxxnBc5zXyerGYRJs.roa (hash: Ivls/nFiNxdDzsLDIQcZCvPxUvrC63TksV/NTdmGlHM=)
                          5: T6C7jI6g7H_vFEBzsE74xcoSUdU.roa (hash: gzCLPmiINggoyhYqcBdQYwCWFpnNgeV/cbE08OXVCbU=)
                          6: TmfXwvWF4_R0YlbOpvq6kgDGhw0.roa (hash: xV2nkP/XzFa3ZlaSaZkKkK0ZOGjITEnqmlr89kEd/Fs=)
                          7: U8Joxi8U3e1Usd5BP5t9YdRHq9g.roa (hash: uku7/+wyCrwgv9po1XRbDuPL9gV+ixJNp+Ghgnw851s=)
                          8: faVjT2bfGXvibZ9KGBnJmBdok7Y.roa (hash: RkinMIJfPxzXEN13+MuxpWx/rvRtWW7VnJzUdIXUwyc=)
                          9: kmaXye_alVy6Pm-JcNcumWvzwWU.crl (hash: xGC440n97R1rLqbdQZ8i0exBbWdQWBHR1dS3mcdKSxw=)
                          10: xOFta5JjDbeUQ7ALrdlifd1eVgw.roa (hash: cITw55lSfHF5QwXD8RD07pLUAc8NqlAnf3aeu0oLoqI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:02:ff:8e:66:76:29:ce:2f:7b:e8:7e:9f:99:25:25:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=926697c9efda955cba3e6f8970d72e996bf3c165
        Validity
            Not Before: Mar 21 07:08:35 2023 GMT
            Not After : Mar 22 07:08:35 2023 GMT
        Subject: CN=30cab5b191f2d1151812cafc8bde0745e619089a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:6f:04:ee:78:46:35:20:f7:ea:f9:b4:b6:e7:
                    7c:9b:49:d5:e0:d9:21:f2:17:b1:55:1a:f3:de:a2:
                    28:b0:17:3b:fa:8b:92:9b:6e:e5:7c:74:ad:38:58:
                    22:2c:94:7d:cb:2e:e6:18:f7:31:d8:a1:5c:c7:e8:
                    0d:08:36:ff:bb:a0:01:d3:cc:03:69:71:38:47:f7:
                    12:24:6a:2c:99:6c:87:da:de:ba:a3:33:d8:e2:5d:
                    5b:b8:48:44:e8:4a:af:33:14:12:10:ab:a9:fc:7d:
                    67:6e:c6:62:90:89:54:34:bd:61:1e:6a:52:c4:2a:
                    42:ad:ee:f6:79:72:59:23:6e:29:5f:65:9f:21:72:
                    a4:68:17:6c:14:47:17:f3:6b:68:a4:d9:a8:27:53:
                    fe:c2:b4:d8:42:db:4c:bd:69:b0:e1:c2:39:96:2c:
                    cf:64:89:e8:54:fd:0c:2b:6b:f9:d6:70:07:e6:f9:
                    0e:12:bb:ed:f0:70:be:c6:79:a2:4f:2d:08:c3:54:
                    8d:ef:f1:7d:67:ad:c3:36:9d:ff:e7:09:13:84:97:
                    8f:98:fa:1d:ec:88:1b:ca:b7:75:ef:f6:1f:fd:c8:
                    ab:88:66:5e:3b:38:32:cb:a5:f5:da:f2:94:5b:ba:
                    37:be:aa:4f:76:9a:5e:f7:ad:47:68:a7:64:6b:df:
                    ac:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:CA:B5:B1:91:F2:D1:15:18:12:CA:FC:8B:DE:07:45:E6:19:08:9A
            X509v3 Authority Key Identifier:
                keyid:92:66:97:C9:EF:DA:95:5C:BA:3E:6F:89:70:D7:2E:99:6B:F3:C1:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmaXye_alVy6Pm-JcNcumWvzwWU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/kmaXye_alVy6Pm-JcNcumWvzwWU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/kmaXye_alVy6Pm-JcNcumWvzwWU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:2e:de:aa:4f:51:e1:bc:b4:12:9c:76:5d:8f:f2:0b:61:28:
         ab:21:5d:64:77:a4:20:8e:9f:f2:1c:e8:fa:58:fd:2c:35:61:
         15:0a:6a:6f:a0:ad:de:3f:e4:69:39:43:88:83:b8:60:1c:18:
         51:d0:a0:15:48:1c:88:4b:8f:7a:bb:db:d6:c9:29:5f:4f:3d:
         0c:fe:52:ef:10:42:67:66:85:f2:78:04:26:7e:07:79:c3:c5:
         27:2c:c1:47:7e:9a:eb:67:c5:15:19:ba:78:1b:29:4c:75:8a:
         1f:83:49:8d:70:c3:99:85:ce:bc:09:bb:bd:04:d7:28:14:52:
         41:e0:30:f6:bc:54:64:65:59:1a:16:bd:95:a5:86:66:18:e1:
         45:34:3c:ef:be:64:f8:db:07:a3:2d:15:3b:74:a8:b9:d9:9a:
         ce:a1:63:02:53:17:73:80:aa:0e:d4:0c:d7:f5:40:e8:9c:4d:
         1b:b8:43:09:98:f0:62:6e:cc:ac:2f:75:04:8e:48:c9:b6:4c:
         89:af:b1:9e:37:f7:e6:da:2f:72:1b:4d:c0:16:aa:0d:b1:e1:
         5f:61:98:b4:78:58:10:46:05:ac:27:ca:6a:b0:6f:b1:a6:c8:
         9d:a4:9d:45:4c:01:b8:8d:ab:15:cb:a3:a5:5e:e0:40:07:4f:
         3c:08:19:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----