Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/d5b62d-c2ef-4997-842f-c1d10cf08488/1/Jt5EK4Hges2fVqGU-qIzBAkzyqI.mft
File:                     Jt5EK4Hges2fVqGU-qIzBAkzyqI.mft (raw, json)
Hash identifier:          FB4WIfx10eSpE9w4fjYekgyaquf+bZ594Hlwf24c2ZY=
Subject key identifier:   FB:C5:B5:68:03:59:38:B2:4D:39:95:5C:49:05:1A:45:BB:1A:1E:50
Authority key identifier: 26:DE:44:2B:81:E0:7A:CD:9F:56:A1:94:FA:A2:33:04:09:33:CA:A2
Certificate issuer:       /CN=26de442b81e07acd9f56a194faa233040933caa2
Certificate serial:       018C5852772024DA26569550634B721038A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jt5EK4Hges2fVqGU-qIzBAkzyqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/d5b62d-c2ef-4997-842f-c1d10cf08488/1/Jt5EK4Hges2fVqGU-qIzBAkzyqI.mft
Manifest number:          0830
Signing time:             Mon 11 Dec 2023 10:00:48 +0000
Manifest this update:     Mon 11 Dec 2023 10:00:48 +0000
Manifest next update:     Tue 12 Dec 2023 10:00:48 +0000
Files and hashes:         1: 0p-X3AUH3_SZVT6E4n4TtDVN__k.roa (hash: rno342+2JWhf7BgedaGm/PGX0bGea73mU77oSnI/oJg=)
                          2: Jt5EK4Hges2fVqGU-qIzBAkzyqI.crl (hash: GPEZuZLttcZRaWoISmrRj/jsWud6k+bvaaw9qjbIutA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:58:52:77:20:24:da:26:56:95:50:63:4b:72:10:38:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26de442b81e07acd9f56a194faa233040933caa2
        Validity
            Not Before: Dec 11 10:00:48 2023 GMT
            Not After : Dec 12 10:00:48 2023 GMT
        Subject: CN=fbc5b568035938b24d39955c49051a45bb1a1e50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:13:26:a6:47:4f:c7:f2:c7:63:e5:78:45:03:
                    31:d9:11:4b:4c:c2:2f:5e:d7:4e:bb:75:a3:9c:8e:
                    a1:b2:2d:61:20:89:ae:22:2e:e9:1d:5a:08:75:c2:
                    23:2a:9a:e0:0c:9f:e7:dd:fa:12:d7:d0:fe:5d:35:
                    4a:18:fa:02:67:cb:33:84:bf:e4:62:cd:00:34:a7:
                    64:91:d0:f5:a5:42:ae:23:34:49:80:ea:90:a9:d3:
                    a6:51:c7:48:60:22:83:89:ab:a3:83:bd:1b:22:cf:
                    48:90:64:e5:d3:75:6b:2f:39:cc:fe:9d:78:ea:85:
                    9b:c2:07:33:fd:a2:4d:34:e8:c0:0d:60:2d:b3:7c:
                    e6:5e:df:9a:73:b4:2b:5f:46:7b:f6:b0:38:14:2e:
                    e8:e6:2e:78:26:d7:1f:b2:2e:88:ca:8d:d7:86:c1:
                    86:e7:f6:66:24:cc:a9:c3:f4:43:f9:ef:3f:4a:55:
                    a9:91:6e:6e:91:cd:ad:63:1d:1e:9c:b7:03:6c:53:
                    b9:a7:1f:15:17:9a:3f:cf:fb:e7:d8:0a:9e:33:61:
                    75:b3:8e:62:90:84:65:2d:e3:56:ef:ba:92:05:3f:
                    31:82:23:8b:b4:40:8b:50:fc:94:72:62:f9:87:b7:
                    32:2c:eb:eb:3d:48:a7:40:6a:43:18:2e:87:83:1b:
                    b1:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:C5:B5:68:03:59:38:B2:4D:39:95:5C:49:05:1A:45:BB:1A:1E:50
            X509v3 Authority Key Identifier:
                keyid:26:DE:44:2B:81:E0:7A:CD:9F:56:A1:94:FA:A2:33:04:09:33:CA:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jt5EK4Hges2fVqGU-qIzBAkzyqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/d5b62d-c2ef-4997-842f-c1d10cf08488/1/Jt5EK4Hges2fVqGU-qIzBAkzyqI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/d5b62d-c2ef-4997-842f-c1d10cf08488/1/Jt5EK4Hges2fVqGU-qIzBAkzyqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:60:dc:43:41:b1:de:4c:46:b1:5c:04:3c:b0:d5:2e:96:95:
         99:68:29:fe:fb:12:60:60:22:2f:bd:93:a3:a9:91:8f:fd:d3:
         ae:b7:c8:db:35:bc:7b:38:4c:ed:51:8f:af:2c:e5:bd:51:90:
         90:7a:a8:33:53:62:9f:79:48:26:0b:14:7e:78:2f:3d:9a:d7:
         73:e1:d1:79:a2:b7:5a:fa:cf:ce:97:c6:2c:04:f8:59:e7:35:
         84:40:17:34:7d:c1:93:8a:73:cd:18:8a:9d:31:94:91:8a:87:
         7a:28:dd:e5:26:8d:69:db:61:92:89:c1:1b:eb:d8:2a:b8:38:
         fc:63:f8:fd:ed:3c:0e:1f:21:4a:0f:ea:0e:5c:df:fd:7b:9d:
         04:83:5c:f1:80:77:af:58:83:08:43:01:3f:aa:d8:86:83:a0:
         fe:68:d1:81:30:1b:17:c0:00:0a:f5:c6:e6:8f:65:c1:80:fa:
         b1:4f:8e:c1:57:54:81:c9:b8:f5:da:fd:f9:08:d4:34:7b:9d:
         aa:fb:15:f0:75:65:b8:9b:a9:61:f5:53:6c:51:f4:e7:40:aa:
         56:15:ab:3d:a2:4d:69:3d:b0:70:47:b7:b4:c2:30:c5:d3:5d:
         73:9a:7e:f7:5b:7f:36:3b:d4:50:2f:02:30:df:e5:c7:db:a7:
         4e:08:5a:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----