Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/996db4-27f3-4b55-a9e7-26412591a06e/1/xJy1uF98Xal-tHQaa7dZl4EZBAU.mft
File:                     xJy1uF98Xal-tHQaa7dZl4EZBAU.mft (raw, json)
Hash identifier:          iues6FrsrCvRPT/XYW3ZYhWVibaEL2yUlFI8o8x75wY=
Subject key identifier:   9E:57:B5:A4:27:9C:8B:CA:0E:8A:BB:D0:12:6D:7B:F5:C9:3D:E4:6A
Authority key identifier: C4:9C:B5:B8:5F:7C:5D:A9:7E:B4:74:1A:6B:B7:59:97:81:19:04:05
Certificate issuer:       /CN=c49cb5b85f7c5da97eb4741a6bb7599781190405
Certificate serial:       018A3FB5FD5F642070A4AAE6F48F19F746D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xJy1uF98Xal-tHQaa7dZl4EZBAU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/996db4-27f3-4b55-a9e7-26412591a06e/1/xJy1uF98Xal-tHQaa7dZl4EZBAU.mft
Manifest number:          0EBC
Signing time:             Tue 29 Aug 2023 05:13:25 +0000
Manifest this update:     Tue 29 Aug 2023 05:13:25 +0000
Manifest next update:     Wed 30 Aug 2023 05:13:25 +0000
Files and hashes:         1: AT7ErVu02eGkYfXCQO-r1NweIEY.roa (hash: Ol/j1ZLaz5sByyguaS6WbOhXhwpTW4/HteTvhGj47fM=)
                          2: xJy1uF98Xal-tHQaa7dZl4EZBAU.crl (hash: tBVCFG7+JqT2A9cuHvCL8vnOm9ldLPtY6rXOCxCmv/o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:3f:b5:fd:5f:64:20:70:a4:aa:e6:f4:8f:19:f7:46:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c49cb5b85f7c5da97eb4741a6bb7599781190405
        Validity
            Not Before: Aug 29 05:13:25 2023 GMT
            Not After : Aug 30 05:13:25 2023 GMT
        Subject: CN=9e57b5a4279c8bca0e8abbd0126d7bf5c93de46a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a8:7e:ce:c5:86:0d:63:81:4f:b4:fe:ad:92:
                    ea:bc:f2:bb:6e:57:b2:dc:59:71:18:de:04:a9:c1:
                    1a:b4:d1:29:d7:01:af:89:33:48:7d:b3:74:c8:75:
                    87:4f:7e:3d:86:8f:b7:6d:29:44:05:49:b3:e3:9d:
                    98:76:3f:ea:d7:19:54:b9:b6:78:d0:47:e8:0e:ae:
                    07:f1:b8:76:0b:82:ec:21:2c:47:08:7e:d4:2a:ca:
                    df:32:2a:1b:74:22:b4:65:9f:98:b4:3e:1b:31:6d:
                    0f:5c:3a:2d:4a:47:9e:9a:7e:38:71:49:e5:4f:38:
                    65:02:2b:4c:34:f4:e2:00:2e:d0:46:64:5a:c9:0f:
                    08:bc:ba:bc:3d:68:d5:a6:95:00:da:85:aa:b0:6f:
                    eb:da:9e:50:25:00:44:d7:d0:6c:d8:f2:5b:c6:51:
                    72:0c:10:34:da:70:d9:d9:d0:ff:9f:aa:68:08:52:
                    38:8f:6e:03:bf:4f:d6:33:f7:31:bb:57:b0:9f:9a:
                    36:29:07:75:30:a6:c9:d8:1a:57:d2:76:64:2b:37:
                    17:69:e6:8e:69:2b:e9:bd:92:38:25:68:7e:cd:f0:
                    3d:a3:e8:94:38:8c:4f:33:3c:b4:83:04:b6:11:c1:
                    2d:95:12:b5:3c:9e:e3:94:18:c5:32:b7:bf:a8:b3:
                    80:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:57:B5:A4:27:9C:8B:CA:0E:8A:BB:D0:12:6D:7B:F5:C9:3D:E4:6A
            X509v3 Authority Key Identifier:
                keyid:C4:9C:B5:B8:5F:7C:5D:A9:7E:B4:74:1A:6B:B7:59:97:81:19:04:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJy1uF98Xal-tHQaa7dZl4EZBAU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/996db4-27f3-4b55-a9e7-26412591a06e/1/xJy1uF98Xal-tHQaa7dZl4EZBAU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/996db4-27f3-4b55-a9e7-26412591a06e/1/xJy1uF98Xal-tHQaa7dZl4EZBAU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:08:2c:89:10:dd:e1:1d:51:ef:fa:6b:a2:ea:84:f3:61:a5:
         b9:48:7a:fe:b0:0a:5a:6c:ee:5e:f1:c3:74:14:ed:58:ab:b6:
         51:e0:01:d4:1c:db:cc:e7:d7:5c:fc:7b:ac:98:36:92:4b:00:
         9e:e9:6e:97:35:76:6c:bf:b0:4e:b8:88:b4:19:61:62:89:05:
         45:f3:05:52:72:d5:0b:8a:4b:d5:99:3a:39:6d:b5:d1:e1:7c:
         7c:06:e2:01:9f:be:b8:87:45:0c:88:20:82:07:fc:23:e0:dc:
         19:4d:d3:55:1c:0f:36:b4:d3:1e:49:a8:ef:ed:ed:fb:1e:f2:
         bf:bc:15:f4:2d:78:a3:0c:80:e2:09:7b:c1:c9:f9:e5:58:10:
         8c:5f:07:8b:94:aa:b9:0c:b2:a7:07:4f:cb:0a:16:33:cd:2f:
         20:df:f6:a5:f4:ae:89:50:1a:a4:0b:08:a6:cb:8e:f4:83:8e:
         0b:8c:9b:ee:3c:46:53:62:a9:9c:53:e6:d4:cf:9e:76:a6:fe:
         e7:ed:26:be:18:9b:aa:f1:0a:af:e8:cd:2d:ec:b3:3b:a1:94:
         fd:ce:11:5b:e5:c5:e8:be:3a:a1:a1:d5:0a:65:71:a5:bb:fb:
         6c:4f:3b:49:a4:2b:27:6c:bf:6e:e5:08:a5:bf:b2:86:7c:09:
         a9:2e:4f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----