Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/3a0b14-8d17-449d-aa56-f1071e8b80d6/1/G4k8Ygm3qAGHdsXMrTDiQNLPLQc.mft
File:                     G4k8Ygm3qAGHdsXMrTDiQNLPLQc.mft (raw, json)
Hash identifier:          t6t4HCaJ8RUGKLRoiMgdTtScuK+f5vz4kQUrl99st7A=
Subject key identifier:   27:52:2C:5B:98:E5:7F:21:83:92:66:2F:5F:A3:17:EE:5C:99:18:F7
Authority key identifier: 1B:89:3C:62:09:B7:A8:01:87:76:C5:CC:AD:30:E2:40:D2:CF:2D:07
Certificate issuer:       /CN=1b893c6209b7a8018776c5ccad30e240d2cf2d07
Certificate serial:       018A63EDB62B5855D55CF0DE0275424243D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G4k8Ygm3qAGHdsXMrTDiQNLPLQc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/3a0b14-8d17-449d-aa56-f1071e8b80d6/1/G4k8Ygm3qAGHdsXMrTDiQNLPLQc.mft
Manifest number:          0880
Signing time:             Tue 05 Sep 2023 06:00:37 +0000
Manifest this update:     Tue 05 Sep 2023 06:00:37 +0000
Manifest next update:     Wed 06 Sep 2023 06:00:37 +0000
Files and hashes:         1: G4k8Ygm3qAGHdsXMrTDiQNLPLQc.crl (hash: 5bYUHoWc+hNFgJGxBbOJDGIagXngYFVhU4ywCTO1hp4=)
                          2: ff9PmIHj8QXHfqYZ8-EnFQSELnU.roa (hash: Uc9ap/AuI+GTHE4qFqgtJuKwVfXU47CX+1mOxR7t73w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:63:ed:b6:2b:58:55:d5:5c:f0:de:02:75:42:42:43:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b893c6209b7a8018776c5ccad30e240d2cf2d07
        Validity
            Not Before: Sep  5 06:00:37 2023 GMT
            Not After : Sep  6 06:00:37 2023 GMT
        Subject: CN=27522c5b98e57f218392662f5fa317ee5c9918f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:4c:f6:18:4a:95:8e:f5:94:9e:1a:36:ba:61:
                    f3:ee:75:f7:2d:a5:a1:42:6a:62:62:8e:86:1a:8c:
                    fd:8c:02:5e:1a:ca:21:6b:b1:a6:ef:ce:bd:e8:89:
                    19:14:5a:51:cc:4f:c0:8d:8d:ef:5b:c9:61:c9:45:
                    c8:6a:f8:5a:1d:71:61:16:86:b4:27:63:b4:af:22:
                    6c:91:c1:ec:e7:14:5b:1b:03:d8:35:67:98:ce:a1:
                    07:3c:a9:2b:85:9b:be:a6:02:bd:e8:a3:da:a6:67:
                    36:cb:d1:31:72:bb:37:80:b7:38:cf:9a:76:5a:30:
                    d5:f2:95:ed:4f:8a:0e:1d:60:6c:50:bd:53:b9:00:
                    39:33:06:bc:56:c1:2d:a3:3f:6d:7e:61:8c:3e:28:
                    ce:e0:9f:6d:31:10:d6:18:4b:ce:3f:4e:fd:40:0a:
                    dc:8b:dd:44:13:b8:7f:7f:98:d9:36:13:aa:8e:b2:
                    25:56:6d:73:41:1d:8c:7b:5e:8c:2c:bc:87:72:f4:
                    58:17:9d:6e:29:79:a6:c9:fb:ef:a3:66:38:e6:ca:
                    7c:c8:a4:ab:96:28:98:25:e5:e6:4f:b5:5f:64:43:
                    8b:07:92:11:3f:85:12:3c:cf:21:b2:8a:71:5b:ff:
                    58:2c:e7:a0:c1:83:e9:14:bd:ac:1c:d8:9e:be:e4:
                    6f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:52:2C:5B:98:E5:7F:21:83:92:66:2F:5F:A3:17:EE:5C:99:18:F7
            X509v3 Authority Key Identifier:
                keyid:1B:89:3C:62:09:B7:A8:01:87:76:C5:CC:AD:30:E2:40:D2:CF:2D:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G4k8Ygm3qAGHdsXMrTDiQNLPLQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/3a0b14-8d17-449d-aa56-f1071e8b80d6/1/G4k8Ygm3qAGHdsXMrTDiQNLPLQc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/3a0b14-8d17-449d-aa56-f1071e8b80d6/1/G4k8Ygm3qAGHdsXMrTDiQNLPLQc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:2f:36:3f:7b:cd:6c:d1:d5:b9:84:c4:a3:5f:12:29:ba:14:
         ba:ce:03:7c:ef:14:96:57:77:55:aa:e2:02:31:5d:15:ac:f3:
         75:81:b1:b3:ad:92:cc:1a:2b:63:30:7c:dd:a7:3d:94:d1:b3:
         b1:0c:cc:74:56:31:b9:89:f2:a5:c8:1b:df:e0:39:54:aa:cb:
         77:7d:7f:dd:c3:f9:00:3f:68:44:7b:37:54:41:cb:9f:97:2c:
         39:3d:93:e4:2e:f6:33:60:45:ef:49:68:36:e5:e2:dc:5a:68:
         12:6e:29:8c:9f:82:2a:90:74:fe:ae:33:74:37:10:32:0f:c3:
         7b:5a:bc:d5:23:41:05:d6:3b:b2:4f:e0:37:fc:e5:45:dc:9d:
         3a:84:6c:8a:1f:94:61:0c:7e:78:cf:b2:14:73:93:78:ed:b5:
         c2:de:60:2d:85:91:dd:f1:47:3c:0d:03:9a:cc:96:6b:ea:30:
         ae:79:f6:00:ea:4e:0d:1b:3c:aa:5e:4a:d6:58:e7:e3:af:b9:
         ff:4d:6d:5c:6b:2f:25:f5:bb:1d:e2:b9:58:5a:a9:fd:7e:0a:
         b2:9f:40:cf:23:bc:9c:76:8e:b9:cd:2f:c3:50:0b:c2:7a:bc:
         15:a1:c4:d6:c2:5d:d4:d2:58:73:40:2f:b5:86:15:df:04:53:
         dc:09:09:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----