Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/aa96d0-9721-4e38-9936-801d2c4ed494/1/KftkGg0aNsK2R499zzqFRkBfm0U.mft
File:                     KftkGg0aNsK2R499zzqFRkBfm0U.mft (raw, json)
Hash identifier:          v7YQCMRecOwfLtZkE5jfFAE02WYLSZ2IEM0xgXkogNI=
Subject key identifier:   13:63:57:DD:F1:11:AB:8E:5F:A7:A9:A9:4F:37:CE:64:65:67:59:E9
Authority key identifier: 29:FB:64:1A:0D:1A:36:C2:B6:47:8F:7D:CF:3A:85:46:40:5F:9B:45
Certificate issuer:       /CN=29fb641a0d1a36c2b6478f7dcf3a8546405f9b45
Certificate serial:       018B17F5C068C747CA1788590416EE8B420A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KftkGg0aNsK2R499zzqFRkBfm0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/aa96d0-9721-4e38-9936-801d2c4ed494/1/KftkGg0aNsK2R499zzqFRkBfm0U.mft
Manifest number:          0865
Signing time:             Tue 10 Oct 2023 05:01:03 +0000
Manifest this update:     Tue 10 Oct 2023 05:01:03 +0000
Manifest next update:     Wed 11 Oct 2023 05:01:03 +0000
Files and hashes:         1: KftkGg0aNsK2R499zzqFRkBfm0U.crl (hash: nBN4fs0B142XyDS9hxyc6/Sa6m+/hgj/palT9x6r+QM=)
                          2: pvbRI62dvmAS4X5FJbB4PIS2yvw.roa (hash: uFfCJLjzz+o3BGkdMD0hrpqMuwISyHNd3Gse1LhbJYU=)
                          3: vf4UTFdolzcX5hp3mu-Id9eJT_0.roa (hash: I8/fdScYysGb55tWpzal/u0plaSFB82SgZHIffEdidg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:17:f5:c0:68:c7:47:ca:17:88:59:04:16:ee:8b:42:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29fb641a0d1a36c2b6478f7dcf3a8546405f9b45
        Validity
            Not Before: Oct 10 05:01:03 2023 GMT
            Not After : Oct 11 05:01:03 2023 GMT
        Subject: CN=136357ddf111ab8e5fa7a9a94f37ce64656759e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:94:83:2a:c9:b3:04:d4:4f:b4:3f:29:96:6f:
                    5b:3a:57:6c:f0:01:27:7a:3b:d7:0a:0c:52:7f:94:
                    84:d3:28:03:bb:63:45:eb:f0:43:63:df:09:98:19:
                    a2:d8:14:86:57:e0:7e:31:a5:fc:b7:5a:67:0c:bf:
                    30:9d:d3:15:50:28:4d:71:0f:9e:34:e4:46:77:00:
                    2d:0d:1b:c2:41:36:35:b9:17:ef:63:63:d9:c6:58:
                    f2:84:b7:88:5c:90:ec:6b:ea:fa:2e:43:13:9c:4f:
                    b9:93:75:ea:c9:db:38:2f:88:77:72:6c:ca:b6:40:
                    a5:db:36:d4:f2:16:6d:e6:cf:b0:a9:18:88:18:83:
                    14:4b:92:9b:70:1d:65:99:b3:c3:e8:53:ca:e8:f8:
                    a8:95:b1:61:6b:56:cb:6b:8a:b8:96:4a:50:b0:54:
                    99:2f:94:54:a4:43:56:f9:72:83:1d:e4:f3:9c:28:
                    87:a6:bd:d2:a9:6d:a5:e2:8f:e5:37:42:8a:aa:bc:
                    47:16:ce:70:88:f3:0e:81:b2:d2:e8:15:dd:de:32:
                    17:01:41:bf:84:17:ff:2b:00:9d:ea:37:0a:8e:4a:
                    e3:16:dc:ec:25:f8:96:9f:61:b6:bf:c1:12:5f:c1:
                    80:47:0c:2d:f6:43:80:f4:ad:b7:d3:67:89:74:d6:
                    58:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:63:57:DD:F1:11:AB:8E:5F:A7:A9:A9:4F:37:CE:64:65:67:59:E9
            X509v3 Authority Key Identifier:
                keyid:29:FB:64:1A:0D:1A:36:C2:B6:47:8F:7D:CF:3A:85:46:40:5F:9B:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KftkGg0aNsK2R499zzqFRkBfm0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/aa96d0-9721-4e38-9936-801d2c4ed494/1/KftkGg0aNsK2R499zzqFRkBfm0U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/aa96d0-9721-4e38-9936-801d2c4ed494/1/KftkGg0aNsK2R499zzqFRkBfm0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:b2:81:2b:09:74:46:1d:f0:55:1a:03:b1:3b:e8:cb:e8:f6:
         85:99:87:0f:90:77:b0:f8:f8:db:c9:25:92:49:15:eb:ab:9b:
         4f:68:d4:50:a2:d2:df:a8:e3:91:75:89:57:c1:61:69:b8:37:
         24:82:7a:e0:45:73:5a:36:66:52:e8:f2:e2:a5:80:2e:a6:3c:
         be:72:7e:14:98:2a:2d:45:06:83:4d:67:95:d1:29:66:1e:88:
         86:f1:55:7d:75:e9:63:ee:ff:39:f7:5e:2d:e1:bc:c4:05:05:
         49:bf:4c:95:a5:fb:03:36:cb:1c:f6:59:81:25:be:66:92:bf:
         51:3f:6d:54:f0:e9:17:36:9d:ab:1f:6b:ec:a7:1e:c6:37:4c:
         ea:46:e0:e3:92:20:ed:94:30:ab:6a:76:e9:20:98:11:9b:26:
         80:09:a4:51:9c:d1:14:4b:98:d3:19:e2:52:ac:44:1a:0a:40:
         c6:54:65:0b:f3:8b:dc:0e:93:8c:e4:5c:dd:26:0d:dd:98:a8:
         1b:b9:91:f0:87:92:f3:fe:1f:a6:8e:28:27:97:26:ac:98:c2:
         52:69:b9:fe:dc:b4:04:06:46:3c:73:4f:c4:1f:70:5e:42:01:
         0f:76:9f:6a:2e:92:07:b1:f9:8d:b3:5d:89:4c:53:fa:a3:b2:
         77:47:11:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----