Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/49c802-d942-478f-86b5-fe84ade5b686/1/vcdiqvWtwATa043IAm1gPaI1eNw.mft
File:                     vcdiqvWtwATa043IAm1gPaI1eNw.mft (raw, json)
Hash identifier:          pK1rqIUVGYMLT7a8T6hWHnany2GmHW7Lyj51oDCQIkU=
Subject key identifier:   F0:46:61:98:01:0B:44:C9:AD:1C:13:63:D5:11:9B:28:9A:41:0D:41
Authority key identifier: BD:C7:62:AA:F5:AD:C0:04:DA:D3:8D:C8:02:6D:60:3D:A2:35:78:DC
Certificate issuer:       /CN=bdc762aaf5adc004dad38dc8026d603da23578dc
Certificate serial:       018C7B4BBE0B18A021E4C6E3882F18B5B17E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vcdiqvWtwATa043IAm1gPaI1eNw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/49c802-d942-478f-86b5-fe84ade5b686/1/vcdiqvWtwATa043IAm1gPaI1eNw.mft
Manifest number:          05F7
Signing time:             Mon 18 Dec 2023 05:00:10 +0000
Manifest this update:     Mon 18 Dec 2023 05:00:10 +0000
Manifest next update:     Tue 19 Dec 2023 05:00:10 +0000
Files and hashes:         1: Y3hJiIAtjbLbe3vGug-D9uGy3-c.roa (hash: 9eVaskJy/QkbpORk7/Y53MPZJxZCdIUZhm8nkDQslM0=)
                          2: vcdiqvWtwATa043IAm1gPaI1eNw.crl (hash: QEpoSVCrLfuc9a9vFdwdu1IZdPD74sk3lZWbeEFpDnY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:7b:4b:be:0b:18:a0:21:e4:c6:e3:88:2f:18:b5:b1:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdc762aaf5adc004dad38dc8026d603da23578dc
        Validity
            Not Before: Dec 18 05:00:10 2023 GMT
            Not After : Dec 19 05:00:10 2023 GMT
        Subject: CN=f0466198010b44c9ad1c1363d5119b289a410d41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3b:ed:71:2e:8b:ea:ab:25:d6:4d:73:89:0f:
                    78:57:63:57:65:db:24:2f:b8:e8:b7:46:25:ec:ed:
                    65:ee:9c:8e:cd:d2:1f:e7:4f:dd:af:4b:9d:42:60:
                    65:82:40:77:62:5f:6f:90:cc:44:0a:ff:92:2d:6a:
                    b2:36:9c:53:12:e0:f3:84:53:3f:35:57:71:89:06:
                    4c:d7:ae:85:bd:ce:d9:c8:7e:bd:43:3e:73:40:bf:
                    ea:05:dd:0d:df:25:6e:49:a1:12:9d:17:11:4e:13:
                    dd:fd:c1:83:f0:59:3d:18:4a:7f:49:92:9f:75:ae:
                    8f:29:e4:78:91:55:2f:5e:99:48:b9:33:e1:09:51:
                    2b:98:d7:40:cb:74:04:11:b4:cb:c3:f7:5e:97:cd:
                    59:26:82:a0:01:b8:47:f3:01:c6:3d:ef:fe:a3:8e:
                    e5:5c:b7:60:96:9b:8c:7d:69:54:56:d4:0f:81:53:
                    77:be:8e:e9:e2:86:25:78:b2:6f:cc:62:44:20:32:
                    b6:9b:f1:59:80:1a:04:fd:49:67:8b:d4:13:89:a9:
                    36:2f:37:af:1f:29:50:3f:08:4f:2c:ab:c0:56:d0:
                    ae:f2:6c:be:97:98:21:ce:1e:d5:f5:3a:f4:6c:5e:
                    b3:3f:63:c3:89:c6:01:b4:85:6a:b2:82:30:93:1f:
                    70:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:46:61:98:01:0B:44:C9:AD:1C:13:63:D5:11:9B:28:9A:41:0D:41
            X509v3 Authority Key Identifier:
                keyid:BD:C7:62:AA:F5:AD:C0:04:DA:D3:8D:C8:02:6D:60:3D:A2:35:78:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vcdiqvWtwATa043IAm1gPaI1eNw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/49c802-d942-478f-86b5-fe84ade5b686/1/vcdiqvWtwATa043IAm1gPaI1eNw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/49c802-d942-478f-86b5-fe84ade5b686/1/vcdiqvWtwATa043IAm1gPaI1eNw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:fe:8e:a8:9a:c7:29:24:e8:9d:83:e2:ce:e6:0a:50:61:49:
         21:96:1c:55:35:7e:d3:fe:7e:ba:7f:c7:11:7b:dc:ca:c6:e2:
         5a:28:67:8d:7a:15:34:8b:07:99:c8:2c:a2:9e:c9:4e:bc:cd:
         b0:bb:bd:8c:8c:3e:8b:61:4e:e7:3a:18:aa:70:f6:a0:68:57:
         f2:bb:42:22:a6:4b:8f:3c:b4:5e:5d:5c:3e:8c:f7:5a:01:e3:
         45:21:43:43:b4:1c:a1:db:95:c5:28:c6:7c:4c:4d:ef:46:a1:
         06:cb:f7:6d:cf:dd:e1:42:21:6f:12:18:be:61:a8:42:1a:28:
         2d:59:23:2c:81:62:9a:70:3e:5a:f7:34:27:e6:ea:62:a3:c0:
         08:a2:33:eb:bb:ec:93:c1:f8:5e:30:8f:b1:ed:4b:5a:ac:58:
         e1:02:67:94:c3:fc:42:41:9c:e6:00:af:33:a8:22:9c:8a:63:
         7a:8f:9d:3d:f1:e1:b5:c8:69:11:d8:57:09:37:0d:84:31:0d:
         a1:31:13:ae:0e:e0:d6:bb:6a:f6:2f:bc:86:da:50:40:58:92:
         60:ca:89:50:96:ad:70:22:2c:98:70:79:44:40:32:5a:da:95:
         92:11:32:ee:c5:e6:9e:54:36:5e:61:bc:b1:5c:a1:12:b2:98:
         b5:ab:54:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----