Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b4bd5a-9d66-471c-9a0a-4361c8c37d29/1/VtserxeSos1Sidx_xSQuo1JFE04.mft
File:                     VtserxeSos1Sidx_xSQuo1JFE04.mft (raw, json)
Hash identifier:          4gqa0xGrlSrPsy4e6emUJtviMYTZ3LwCJfSzm70C5Ko=
Subject key identifier:   9B:A6:F5:36:A8:E5:E4:64:34:BA:05:05:97:B0:1D:7E:0A:D2:15:64
Authority key identifier: 56:DB:1E:AF:17:92:A2:CD:52:89:DC:7F:C5:24:2E:A3:52:45:13:4E
Certificate issuer:       /CN=56db1eaf1792a2cd5289dc7fc5242ea35245134e
Certificate serial:       0187084A91ED2A3B6A6B1D0E99C0144AE228
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VtserxeSos1Sidx_xSQuo1JFE04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/b4bd5a-9d66-471c-9a0a-4361c8c37d29/1/VtserxeSos1Sidx_xSQuo1JFE04.mft
Manifest number:          0CE6
Signing time:             Wed 22 Mar 2023 07:48:37 +0000
Manifest this update:     Wed 22 Mar 2023 07:48:37 +0000
Manifest next update:     Thu 23 Mar 2023 07:48:37 +0000
Files and hashes:         1: 764YEmOdAdIZyLCRGAtNHDbuiso.roa (hash: 5nFCA3ELM6lb7fQ73iF8f2jVhgeg+sYkuNbQ5aLDsy4=)
                          2: E0XZj9nq5-EmsQwMTEq2tYXRySk.roa (hash: aQ1tRuQX7qhk/BYCy+SEYG/MJudZfxNOIudRy366GlA=)
                          3: VtserxeSos1Sidx_xSQuo1JFE04.crl (hash: D0BtfbiyHl94C1CdDNQ46HUSI6Q2nwzziyK4AL+XdVs=)
                          4: nWw60G7Se-pcpMQhW-vb2mvkzSM.roa (hash: 6UFClJYiknZqp9evpC+yskLDprtV3n/QiOWbj3ByRNc=)
                          5: wU2VPEJIRYTVJHkvoJzD61zoNwY.roa (hash: 0MKXkk103l0bYP0Do0k5soTvEMFCtUbhu7+IZQS5Ewg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:08:4a:91:ed:2a:3b:6a:6b:1d:0e:99:c0:14:4a:e2:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56db1eaf1792a2cd5289dc7fc5242ea35245134e
        Validity
            Not Before: Mar 22 07:48:37 2023 GMT
            Not After : Mar 23 07:48:37 2023 GMT
        Subject: CN=9ba6f536a8e5e46434ba050597b01d7e0ad21564
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:90:d2:98:ce:e5:89:cf:a5:75:f6:a5:22:a2:
                    ec:3d:62:e8:7e:34:24:a3:ba:d6:35:b5:f6:71:e4:
                    59:06:7d:55:01:ad:b0:9a:72:63:5e:f4:08:71:cb:
                    d1:98:ba:04:65:cc:03:5a:10:60:0d:c3:82:4a:28:
                    be:31:24:58:81:7b:60:23:17:9c:59:da:4f:e7:b4:
                    50:dd:88:b1:cc:b3:0a:9d:b6:6f:78:ee:b1:11:b5:
                    85:08:60:99:e3:ff:82:48:2e:3e:5f:d4:ed:e0:6f:
                    02:38:e3:f4:2d:87:1b:7c:75:80:31:68:71:0b:05:
                    a1:7a:1e:d9:e6:3f:75:cd:ec:64:a1:22:c3:ee:c4:
                    0e:1c:ad:83:72:e6:3c:5f:78:1b:7b:e6:0b:58:d6:
                    ff:9e:af:86:34:63:c1:cf:25:2c:e8:b7:61:98:65:
                    bc:f5:95:0b:af:38:da:82:4a:be:d1:9e:c4:e2:a6:
                    a5:a7:06:2a:23:c1:a1:ff:48:9b:19:8e:3d:10:8a:
                    83:f6:ca:c5:f4:a0:ba:69:db:20:9e:d4:98:a9:a0:
                    ac:11:8b:4c:cf:ed:80:c0:53:b3:8b:8f:01:eb:ad:
                    d8:d1:1d:3f:38:d0:6d:a3:b3:68:71:cd:94:24:9b:
                    38:97:48:36:07:82:19:e3:cc:1a:f9:4d:88:a1:19:
                    55:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:A6:F5:36:A8:E5:E4:64:34:BA:05:05:97:B0:1D:7E:0A:D2:15:64
            X509v3 Authority Key Identifier:
                keyid:56:DB:1E:AF:17:92:A2:CD:52:89:DC:7F:C5:24:2E:A3:52:45:13:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VtserxeSos1Sidx_xSQuo1JFE04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b4bd5a-9d66-471c-9a0a-4361c8c37d29/1/VtserxeSos1Sidx_xSQuo1JFE04.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b4bd5a-9d66-471c-9a0a-4361c8c37d29/1/VtserxeSos1Sidx_xSQuo1JFE04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:db:14:b4:49:1a:5a:7a:c8:16:1e:58:e0:78:4d:3b:88:d7:
         1a:ef:6e:06:43:4f:29:8f:50:55:45:0f:da:4c:a5:07:27:b6:
         43:64:9c:dd:bd:1c:51:c7:af:a5:eb:ab:25:0c:28:42:5b:d7:
         96:46:52:0c:f2:21:32:e8:ae:07:08:db:2c:6e:1d:74:87:04:
         c0:0c:f3:67:91:18:8f:f9:7a:45:79:7a:c3:77:90:74:d7:0d:
         f0:c0:98:ef:9e:45:3d:99:71:df:95:02:f7:84:8f:26:4c:1e:
         50:a0:87:44:ca:6c:ec:41:57:c9:51:29:cd:27:e1:59:22:f7:
         13:0d:ca:1a:ce:dc:35:1b:17:61:52:3e:05:60:00:65:da:fa:
         2e:fd:4a:4b:45:ad:4e:0e:6d:63:b2:18:d5:e7:38:c4:fc:2e:
         7f:48:c7:e0:9c:c8:35:80:b5:49:9b:a5:10:96:d7:c5:7b:9e:
         00:35:f3:30:83:a6:0c:6f:27:b6:70:24:3c:56:46:24:2f:87:
         dd:84:24:00:20:3f:a1:5a:fb:81:a3:63:2d:d5:a2:55:ce:e7:
         46:02:24:bd:14:ad:38:c6:fc:11:c9:ee:18:a3:8f:8c:b0:db:
         01:30:db:92:2a:5b:e1:dc:b7:0a:90:59:e0:5f:5f:74:fd:ff:
         8a:79:96:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----