Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/08688d-2071-42a6-9ea5-fdf014e57f20/1/OHeiWlMfTIffpIswdfEHP1a6SNU.mft
File:                     OHeiWlMfTIffpIswdfEHP1a6SNU.mft (raw, json)
Hash identifier:          cnItJZ08P0+20GALoH6UMgR+VIheAcBm9l1iYrhfv0s=
Subject key identifier:   2F:A4:8F:74:78:79:39:F6:2B:EC:69:0B:26:57:5F:36:A8:2D:5A:77
Authority key identifier: 38:77:A2:5A:53:1F:4C:87:DF:A4:8B:30:75:F1:07:3F:56:BA:48:D5
Certificate issuer:       /CN=3877a25a531f4c87dfa48b3075f1073f56ba48d5
Certificate serial:       018C0F94AECAF48CCC8BFD2C628ABD809DC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OHeiWlMfTIffpIswdfEHP1a6SNU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/08688d-2071-42a6-9ea5-fdf014e57f20/1/OHeiWlMfTIffpIswdfEHP1a6SNU.mft
Manifest number:          0884
Signing time:             Mon 27 Nov 2023 07:00:51 +0000
Manifest this update:     Mon 27 Nov 2023 07:00:51 +0000
Manifest next update:     Tue 28 Nov 2023 07:00:51 +0000
Files and hashes:         1: OHeiWlMfTIffpIswdfEHP1a6SNU.crl (hash: RznlDgpVlmu0T7O9PYkqHlY6SCrrBLRCxnpMX4QOwNc=)
                          2: ULzp4y1wXDrSZaanjlIwW4r0s94.roa (hash: MgnXFyzvmr/ouo50WmyaoMBs7ZfM2bzTp+ylCShUNcc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:0f:94:ae:ca:f4:8c:cc:8b:fd:2c:62:8a:bd:80:9d:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3877a25a531f4c87dfa48b3075f1073f56ba48d5
        Validity
            Not Before: Nov 27 07:00:51 2023 GMT
            Not After : Nov 28 07:00:51 2023 GMT
        Subject: CN=2fa48f74787939f62bec690b26575f36a82d5a77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:dd:9e:70:90:a4:03:7f:da:0e:17:b7:14:d2:
                    bb:e1:66:2c:50:8a:22:e4:83:10:bc:8c:31:58:6b:
                    82:4a:72:58:df:ba:69:e9:47:32:69:4b:dc:71:d0:
                    03:6a:1f:f0:b9:a2:91:09:0a:8b:09:1c:42:4e:5c:
                    77:09:96:b6:3f:19:cb:86:a0:03:08:dc:ad:cd:92:
                    6c:6a:84:5d:3d:9e:d0:9b:ad:95:3c:5d:ac:cf:ff:
                    6b:58:58:f8:a9:06:5c:38:43:4f:aa:f5:f9:96:d6:
                    8b:31:d4:30:2a:e2:47:0e:db:2b:15:a3:84:bc:08:
                    d7:eb:c8:b7:76:60:45:0d:33:2e:57:36:56:c4:cb:
                    e6:ba:6f:d5:1f:8e:51:b2:97:64:3b:b9:5d:98:45:
                    9d:ba:e1:c8:7c:f2:0b:20:3b:91:f6:bd:15:22:05:
                    3e:92:24:fc:00:a5:a8:aa:e1:5a:ed:3c:95:7d:5c:
                    56:37:0c:44:7e:41:c5:a4:a7:6d:66:f6:b3:f4:b9:
                    cb:5b:5f:0d:5b:7a:fd:b1:94:15:12:52:c3:6e:b1:
                    a8:c1:12:1d:d9:cc:a5:d9:71:9e:5e:b3:a4:d8:91:
                    67:30:ee:c0:2d:75:8e:8a:4e:7a:05:71:6a:c7:0d:
                    c2:4b:39:6f:36:65:91:3c:98:87:c9:69:d2:51:fc:
                    e9:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:A4:8F:74:78:79:39:F6:2B:EC:69:0B:26:57:5F:36:A8:2D:5A:77
            X509v3 Authority Key Identifier:
                keyid:38:77:A2:5A:53:1F:4C:87:DF:A4:8B:30:75:F1:07:3F:56:BA:48:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OHeiWlMfTIffpIswdfEHP1a6SNU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/08688d-2071-42a6-9ea5-fdf014e57f20/1/OHeiWlMfTIffpIswdfEHP1a6SNU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/08688d-2071-42a6-9ea5-fdf014e57f20/1/OHeiWlMfTIffpIswdfEHP1a6SNU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:0e:c2:aa:7e:ed:9b:c3:4d:fe:a6:25:5b:99:6d:e6:9e:7e:
         d6:ae:5d:b1:2d:65:be:8f:58:51:93:b6:79:1c:24:41:1e:2e:
         d3:68:60:d6:e3:28:3f:1a:25:0f:4e:92:1d:7a:e2:ca:52:6c:
         24:0a:3e:65:0b:3a:1f:f0:c9:4e:89:43:3f:6d:98:9b:94:7c:
         27:fa:57:ad:d0:9c:99:8f:b4:1a:fb:53:30:c9:3f:c8:2e:bb:
         c2:f4:8f:df:c0:56:63:a3:29:8b:cd:e4:30:df:f3:7b:42:f6:
         df:3b:bf:e2:d5:1e:29:2c:69:ae:57:66:0a:60:c7:0f:88:b4:
         91:c5:05:e7:05:a6:53:98:96:1e:1c:06:66:fa:89:6a:bf:46:
         5c:de:25:da:37:dd:27:76:54:4a:7b:bc:bc:52:08:6f:68:73:
         3f:58:15:be:1e:25:e8:19:fe:ad:d5:39:96:38:f0:88:68:b7:
         db:c5:cc:04:fb:f3:1a:4a:92:7b:a1:6e:dc:c1:60:cc:4a:d2:
         68:be:82:2d:a9:80:a3:23:6b:cc:73:50:2d:2d:d7:70:a8:63:
         2d:b0:64:64:b2:4d:0e:60:6c:03:9e:ae:b4:81:52:21:c3:21:
         8e:1f:7c:f1:10:0c:a3:f3:d0:7b:55:2a:de:f4:18:40:bf:98:
         42:da:02:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----