Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/95c3d1-d7fa-49eb-8db6-e2608343a6c4/1/WpGE7EIEkB5t4kQ2DQrUF0A2Iss.mft
File:                     WpGE7EIEkB5t4kQ2DQrUF0A2Iss.mft (raw, json)
Hash identifier:          e4y8cMMni3dTkp7jCpPONyKI2A8N2B2jWlSbT/0FOWE=
Subject key identifier:   26:B1:B9:27:24:BE:D8:D2:79:9E:F8:25:E4:DD:3B:A1:88:F5:08:D8
Authority key identifier: 5A:91:84:EC:42:04:90:1E:6D:E2:44:36:0D:0A:D4:17:40:36:22:CB
Certificate issuer:       /CN=5a9184ec4204901e6de244360d0ad417403622cb
Certificate serial:       01866E97DB8E5C1745674086BACF52B3F6A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WpGE7EIEkB5t4kQ2DQrUF0A2Iss.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/95c3d1-d7fa-49eb-8db6-e2608343a6c4/1/WpGE7EIEkB5t4kQ2DQrUF0A2Iss.mft
Manifest number:          0C8C
Signing time:             Mon 20 Feb 2023 11:31:31 +0000
Manifest this update:     Mon 20 Feb 2023 11:31:31 +0000
Manifest next update:     Tue 21 Feb 2023 11:31:31 +0000
Files and hashes:         1: 4mqsuzSKDuRj5JuwNSkKTLJ9lgs.roa (hash: Vjgy3Od4rf8Hw4AjW1X6Wa3oRctVzU5rGNuwR6OS7yY=)
                          2: WpGE7EIEkB5t4kQ2DQrUF0A2Iss.crl (hash: 4eFDgQDqHB33u/bUR0gnozh/rzyblvycdY8aZeoprbk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:6e:97:db:8e:5c:17:45:67:40:86:ba:cf:52:b3:f6:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a9184ec4204901e6de244360d0ad417403622cb
        Validity
            Not Before: Feb 20 11:31:31 2023 GMT
            Not After : Feb 21 11:31:31 2023 GMT
        Subject: CN=26b1b92724bed8d2799ef825e4dd3ba188f508d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:f3:7d:04:6a:23:5d:c0:95:b6:4c:ea:c5:62:
                    18:6c:ef:f3:4b:83:58:62:9a:ff:fa:bc:66:65:eb:
                    da:c4:39:eb:94:d3:cc:8b:ef:25:69:ac:bc:7f:85:
                    87:ca:22:1d:15:16:be:05:04:0b:7f:8e:fa:7f:a3:
                    95:b3:fe:c4:0c:5e:ed:cd:d7:65:18:78:ff:aa:f6:
                    97:7e:c9:a9:2f:ab:d8:3f:80:4a:b7:d5:67:a6:d2:
                    22:12:cd:da:3d:85:d7:f8:77:c8:cf:17:8a:e9:cb:
                    a5:9f:36:a4:48:d7:f4:66:e5:62:4f:7e:2b:07:f0:
                    3f:ce:93:e2:c2:0a:5a:1c:6e:bd:b0:91:ae:b3:d3:
                    af:b5:ab:7b:2f:3e:85:9d:d7:dc:98:8c:2b:73:37:
                    7a:34:09:e4:69:79:85:e1:cc:39:32:8b:92:1c:ae:
                    3e:55:38:00:a8:41:e7:03:9e:f9:29:bf:18:82:51:
                    c7:93:d8:72:13:bc:15:72:a4:95:bd:e0:dc:2b:1b:
                    19:da:ed:95:e2:42:3e:8b:46:6f:70:26:ae:bb:db:
                    70:29:e5:a1:08:c1:a8:7f:82:cd:7a:bd:6f:59:d5:
                    7a:3f:ff:f3:b7:a9:6b:09:43:cb:0f:d7:7e:18:8d:
                    8e:39:9c:66:ef:bc:06:9e:be:ae:fa:07:bc:cf:64:
                    24:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:B1:B9:27:24:BE:D8:D2:79:9E:F8:25:E4:DD:3B:A1:88:F5:08:D8
            X509v3 Authority Key Identifier:
                keyid:5A:91:84:EC:42:04:90:1E:6D:E2:44:36:0D:0A:D4:17:40:36:22:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpGE7EIEkB5t4kQ2DQrUF0A2Iss.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/95c3d1-d7fa-49eb-8db6-e2608343a6c4/1/WpGE7EIEkB5t4kQ2DQrUF0A2Iss.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/95c3d1-d7fa-49eb-8db6-e2608343a6c4/1/WpGE7EIEkB5t4kQ2DQrUF0A2Iss.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:81:13:39:13:0f:a5:bf:4c:9b:a2:f6:c5:51:4d:34:56:05:
         97:3f:3e:32:4d:82:33:9e:48:36:7e:fa:c2:9d:ee:fc:58:01:
         9f:8e:c1:8c:ca:29:57:0d:e4:df:82:3c:e6:5b:61:26:05:5f:
         60:c5:ba:e3:c7:84:71:0c:10:94:ca:92:59:91:e7:87:66:f9:
         66:8d:c5:ee:52:f8:20:d7:fe:c0:47:76:96:0d:78:40:bf:5a:
         90:c4:08:87:bc:d0:a0:35:e7:b2:f2:fd:f0:d2:44:f7:48:36:
         44:97:ed:8d:06:ed:62:9d:8c:63:dd:96:47:59:99:7a:f5:b4:
         95:bc:dc:72:fa:46:cf:8e:99:64:d2:5c:ea:3d:85:b2:ed:6f:
         cd:2a:09:df:40:ff:2d:d8:ba:b7:4c:de:d4:7a:76:b7:5d:35:
         2d:e2:31:39:62:99:96:2b:09:64:40:2c:02:12:f7:a1:8f:e5:
         ed:5b:c6:05:3d:02:5e:07:da:1c:10:1b:22:fe:57:9a:cf:51:
         86:c7:67:e8:f0:ae:48:aa:41:2d:84:a5:a6:4d:16:f0:01:63:
         d4:5b:52:23:1c:10:a2:9c:5e:94:de:cf:66:b8:31:c2:be:f2:
         4f:7e:60:40:8c:3c:48:23:6c:d6:32:eb:de:91:8b:68:0a:38:
         c3:30:8e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----