Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fa9032-45e1-44c2-98ce-ac29676e91f0/1/q8uoJhP47OrOp5-7JmAIyBu7Kzo.mft
File:                     q8uoJhP47OrOp5-7JmAIyBu7Kzo.mft (raw, json)
Hash identifier:          K7w8z6VDkfB73XMKa1M7Nlm1SX1mMTVLLB9q+/61fS0=
Subject key identifier:   CC:24:99:79:1F:B1:87:6E:9D:08:75:F0:DF:FA:B5:66:B4:C8:B3:E8
Authority key identifier: AB:CB:A8:26:13:F8:EC:EA:CE:A7:9F:BB:26:60:08:C8:1B:BB:2B:3A
Certificate issuer:       /CN=abcba82613f8eceacea79fbb266008c81bbb2b3a
Certificate serial:       018C8A527F4989ECB77DB624247AF234CCCF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q8uoJhP47OrOp5-7JmAIyBu7Kzo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/fa9032-45e1-44c2-98ce-ac29676e91f0/1/q8uoJhP47OrOp5-7JmAIyBu7Kzo.mft
Manifest number:          0FEC
Signing time:             Thu 21 Dec 2023 03:01:51 +0000
Manifest this update:     Thu 21 Dec 2023 03:01:51 +0000
Manifest next update:     Fri 22 Dec 2023 03:01:51 +0000
Files and hashes:         1: IbzFN6GlsnVjPNhCz6rFpvHvJ70.roa (hash: 78Wad+xVSbRoHoV1WBAqCz09nv75Ebq1n43uvKhUZYA=)
                          2: q8uoJhP47OrOp5-7JmAIyBu7Kzo.crl (hash: GQp09RX4rBbypXwFgJIJ42u6mrRolXRZYZmlrrlObF4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:8a:52:7f:49:89:ec:b7:7d:b6:24:24:7a:f2:34:cc:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abcba82613f8eceacea79fbb266008c81bbb2b3a
        Validity
            Not Before: Dec 21 03:01:51 2023 GMT
            Not After : Dec 22 03:01:51 2023 GMT
        Subject: CN=cc2499791fb1876e9d0875f0dffab566b4c8b3e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:eb:fb:22:a9:54:0f:d8:73:c2:52:0f:73:58:
                    c3:3a:56:fd:42:71:21:4f:fd:94:65:82:54:1f:98:
                    56:2f:b4:7f:ec:51:01:27:f9:11:44:09:50:b8:93:
                    1f:36:05:8c:a9:c7:64:4a:ef:5f:09:bc:71:bb:38:
                    dc:91:d9:6e:b6:77:37:51:fe:a5:c0:2a:d7:b1:ad:
                    be:3a:44:d6:d9:a0:69:ba:f5:03:d7:c9:f7:fe:7b:
                    a6:ff:db:7b:10:ec:24:7d:b2:8b:30:75:1d:2f:a2:
                    d5:e3:19:d1:7f:8e:04:c1:55:e8:05:29:36:67:00:
                    c8:ea:18:40:54:3f:1a:9f:5d:d0:cd:ae:ee:83:ca:
                    d9:16:7b:11:4d:4d:3c:81:3f:55:bc:96:6c:bb:69:
                    65:d2:c4:61:95:a7:81:5a:be:30:43:32:58:92:b9:
                    26:ac:50:d0:8e:29:1d:c5:71:f0:10:00:c2:ac:8d:
                    ff:e5:6a:42:53:42:89:85:d2:83:11:9a:82:3f:14:
                    53:35:04:d3:a4:fa:e4:27:01:73:5c:29:19:c9:1d:
                    42:99:33:13:7b:b5:fa:99:b0:cc:24:54:a0:f2:c5:
                    61:22:43:0e:5c:77:2c:91:ba:44:57:04:02:99:b8:
                    c9:06:0b:d0:cf:2f:45:c3:dd:9a:50:76:69:67:71:
                    ad:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:24:99:79:1F:B1:87:6E:9D:08:75:F0:DF:FA:B5:66:B4:C8:B3:E8
            X509v3 Authority Key Identifier:
                keyid:AB:CB:A8:26:13:F8:EC:EA:CE:A7:9F:BB:26:60:08:C8:1B:BB:2B:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8uoJhP47OrOp5-7JmAIyBu7Kzo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fa9032-45e1-44c2-98ce-ac29676e91f0/1/q8uoJhP47OrOp5-7JmAIyBu7Kzo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fa9032-45e1-44c2-98ce-ac29676e91f0/1/q8uoJhP47OrOp5-7JmAIyBu7Kzo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:2c:a1:c9:17:32:58:b6:6d:14:85:1d:11:7a:27:74:38:2a:
         c5:49:99:8c:83:43:01:0f:36:c7:15:8c:32:67:50:b6:61:df:
         2c:fa:9e:61:b6:c9:ac:f8:85:fc:52:67:48:44:f4:0f:35:71:
         32:cf:a7:ff:21:0f:98:70:25:34:b1:38:05:94:93:29:b9:e9:
         ca:9e:d2:26:d7:83:28:f5:4a:fa:ab:65:cd:90:32:85:3a:82:
         6a:48:ca:55:3e:53:0b:56:5b:d0:04:4a:32:71:9b:ae:e3:8b:
         af:bf:1f:fa:5a:92:a7:f3:41:a5:98:48:1c:a5:a1:78:c0:a0:
         28:9e:be:f4:31:77:eb:e9:c5:61:cb:bc:b7:1b:36:61:eb:f7:
         4e:26:e3:b5:a5:5f:71:ed:18:59:e1:86:a1:1b:13:1d:7f:e5:
         0f:2b:a1:7c:e0:fe:d1:46:7b:6f:77:b0:0d:fa:09:71:8d:b4:
         9b:e2:1e:0d:2c:ec:e1:48:df:e8:50:ea:7e:cc:c5:4e:6f:52:
         e7:38:de:b5:8f:75:8b:56:ee:83:1c:51:4a:31:27:3f:cb:7b:
         49:15:bc:4e:26:55:8f:b4:17:41:bd:ea:fe:47:74:fb:90:bf:
         f7:87:72:b7:61:db:67:d7:39:85:f9:fb:6d:b5:e9:d7:01:cc:
         0d:70:f3:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----