Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/360b82-ca22-4533-9a65-95510913998c/1/KYsWbs5J-pOUdu-iLI2SSPntyDM.mft
File:                     KYsWbs5J-pOUdu-iLI2SSPntyDM.mft (raw, json)
Hash identifier:          XufZgHNP8b+Un+9YyDsfX1AEN789aALmbs17nRTvWnY=
Subject key identifier:   38:60:F4:4A:C2:BF:70:BD:61:49:5F:74:60:C4:15:A2:D8:D3:40:A8
Authority key identifier: 29:8B:16:6E:CE:49:FA:93:94:76:EF:A2:2C:8D:92:48:F9:ED:C8:33
Certificate issuer:       /CN=298b166ece49fa939476efa22c8d9248f9edc833
Certificate serial:       0188AD42056774EF0EA724D792EEE0C7CA3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KYsWbs5J-pOUdu-iLI2SSPntyDM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/360b82-ca22-4533-9a65-95510913998c/1/KYsWbs5J-pOUdu-iLI2SSPntyDM.mft
Manifest number:          0E21
Signing time:             Mon 12 Jun 2023 01:39:25 +0000
Manifest this update:     Mon 12 Jun 2023 01:39:25 +0000
Manifest next update:     Tue 13 Jun 2023 01:39:25 +0000
Files and hashes:         1: 1nnvEDsoqJDqhT2YdMt8bEkITmU.roa (hash: AasdaKxLbSqTTI22QCTyTNT9dQHmJVgm4hlJAxqQ1Ro=)
                          2: JwFZmGSUalcbHdaR_gMi595fBOM.roa (hash: klL89KWb3/y6h134evtrvPce9Wp8nJsATLNazB2/OiU=)
                          3: KYsWbs5J-pOUdu-iLI2SSPntyDM.crl (hash: rAtvp29A72m/rDhoUrckPEw2lEysBxYGMOlMypfY554=)
                          4: SPbW7G1cDg9vyXG1d_E2vogzBeA.roa (hash: mBkFDJAdgZEpxt5LBvo4nlRJyJf5LRC8XRj/wpqbFKs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:ad:42:05:67:74:ef:0e:a7:24:d7:92:ee:e0:c7:ca:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=298b166ece49fa939476efa22c8d9248f9edc833
        Validity
            Not Before: Jun 12 01:39:25 2023 GMT
            Not After : Jun 13 01:39:25 2023 GMT
        Subject: CN=3860f44ac2bf70bd61495f7460c415a2d8d340a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:46:7b:50:a7:f3:34:b5:08:70:43:3b:8c:02:
                    2a:22:a6:a2:78:2f:84:90:5b:b8:8e:94:a1:4c:ab:
                    18:17:a9:cb:49:b5:db:4f:6d:51:cc:86:85:16:21:
                    bd:f9:a5:a5:92:e2:88:24:9a:43:3b:5b:7c:61:b7:
                    cf:79:49:33:7c:ed:a5:55:1a:35:be:08:20:ec:c0:
                    97:57:ca:48:25:eb:1f:4c:37:f9:a0:3f:e5:6b:d4:
                    94:54:a1:50:e4:33:30:a8:f1:b3:c4:0c:15:db:c5:
                    2e:ee:1d:8f:23:4e:c2:cf:3d:09:25:41:aa:59:c0:
                    8e:40:10:9b:9d:3c:55:a0:f6:d8:4f:cb:d9:54:b3:
                    67:7c:33:32:f8:f8:81:e5:4a:d3:5c:d7:c8:7d:ac:
                    cd:9c:60:e0:dc:31:35:fb:4e:5d:a3:44:96:af:e7:
                    b0:b9:b3:95:ef:e8:61:7b:84:4c:bb:a1:28:d2:dd:
                    f1:c8:cd:6a:a4:a4:1b:60:50:4a:69:3f:ec:51:bc:
                    91:95:b0:cc:b8:96:85:cc:b3:b2:22:78:79:b7:f7:
                    c4:3b:72:03:ff:e4:02:bb:ff:6f:ba:de:41:9c:04:
                    13:a5:95:dd:f0:c6:35:9a:c7:90:16:d7:53:ff:31:
                    67:f5:d8:41:02:7e:1a:2d:45:bf:a1:8e:8f:3a:7c:
                    0e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:60:F4:4A:C2:BF:70:BD:61:49:5F:74:60:C4:15:A2:D8:D3:40:A8
            X509v3 Authority Key Identifier:
                keyid:29:8B:16:6E:CE:49:FA:93:94:76:EF:A2:2C:8D:92:48:F9:ED:C8:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYsWbs5J-pOUdu-iLI2SSPntyDM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/360b82-ca22-4533-9a65-95510913998c/1/KYsWbs5J-pOUdu-iLI2SSPntyDM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/360b82-ca22-4533-9a65-95510913998c/1/KYsWbs5J-pOUdu-iLI2SSPntyDM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:5d:53:2f:2a:49:ad:71:c7:87:f6:6b:fd:66:ab:72:b7:e4:
         57:4d:18:91:d2:ae:20:1c:3d:64:3e:14:60:46:38:83:27:62:
         c0:2d:dc:40:de:f5:aa:5c:d2:b9:11:07:97:c7:53:c2:cd:c2:
         92:81:77:8e:23:2c:6c:b0:bd:13:75:9a:d4:4f:b6:8e:4d:b8:
         8b:84:da:4c:dd:32:a1:d4:d4:de:c2:8f:68:be:7d:2c:13:ca:
         1b:b7:c2:f1:b0:f7:c7:40:98:48:22:8d:87:c0:ef:fa:94:af:
         7f:6f:e8:ac:32:ac:de:55:95:eb:8f:18:66:22:94:0d:e3:08:
         84:e5:aa:a2:77:d5:ad:db:87:03:e2:45:bd:43:82:97:51:ef:
         2f:8c:3f:6d:f9:73:3f:5b:67:af:12:b0:6f:6d:60:7c:3d:c8:
         36:48:42:8e:9d:9b:fc:24:fc:ca:6f:99:cc:23:f8:dc:db:d0:
         12:e6:df:8d:e6:8f:da:0a:4c:ae:51:54:16:71:bd:68:e9:4a:
         c4:d8:d8:99:05:a6:94:b4:9b:1d:ff:b1:bf:7c:1d:0f:ca:3e:
         41:7c:bb:d3:6e:57:77:7c:4e:2b:99:e0:38:8f:28:d1:71:46:
         09:ee:c3:54:c6:48:33:4e:f3:15:78:c3:a5:cf:25:ae:97:3b:
         fa:e4:2e:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----