Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/de197f-a171-4ec3-b137-b47e7f393cee/1/Xd3JZcPpCoIgD0r7uSmRkE0GQiw.mft
File:                     Xd3JZcPpCoIgD0r7uSmRkE0GQiw.mft (raw, json)
Hash identifier:          1In9WqDcc9Vy5WkYYDhzeqDlglBGV7Rz45gh9wUY9Pg=
Subject key identifier:   12:53:2B:F0:40:B4:00:16:D3:C6:56:41:98:7A:00:8F:97:A5:27:1F
Authority key identifier: 5D:DD:C9:65:C3:E9:0A:82:20:0F:4A:FB:B9:29:91:90:4D:06:42:2C
Certificate issuer:       /CN=5dddc965c3e90a82200f4afbb92991904d06422c
Certificate serial:       018BD15AE0516770CD9B7168131F772376A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xd3JZcPpCoIgD0r7uSmRkE0GQiw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/de197f-a171-4ec3-b137-b47e7f393cee/1/Xd3JZcPpCoIgD0r7uSmRkE0GQiw.mft
Manifest number:          0863
Signing time:             Wed 15 Nov 2023 05:01:15 +0000
Manifest this update:     Wed 15 Nov 2023 05:01:15 +0000
Manifest next update:     Thu 16 Nov 2023 05:01:15 +0000
Files and hashes:         1: Xd3JZcPpCoIgD0r7uSmRkE0GQiw.crl (hash: nFsB9z3bBNMuJ124LxnX8zuvWMGByezdudJZjNrVtMY=)
                          2: a2kvnmoqm97alV25tqT3JKGoC-4.roa (hash: mC1qrjGIyZjvG1ahwIK2xZR8SXunhQRkRZbHsWedL+w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:d1:5a:e0:51:67:70:cd:9b:71:68:13:1f:77:23:76:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dddc965c3e90a82200f4afbb92991904d06422c
        Validity
            Not Before: Nov 15 05:01:15 2023 GMT
            Not After : Nov 16 05:01:15 2023 GMT
        Subject: CN=12532bf040b40016d3c65641987a008f97a5271f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:41:9b:27:57:60:b9:e2:db:9d:0f:53:ee:af:
                    d8:60:25:12:98:c2:f0:78:aa:8d:f4:28:64:c2:ec:
                    70:38:13:38:56:93:11:b9:f7:e6:ba:c5:94:16:ef:
                    82:d7:54:b4:44:f5:cb:e3:a8:05:c8:5f:95:8c:66:
                    ac:51:88:07:f3:b7:e7:10:42:85:17:97:27:9c:dc:
                    16:57:66:2f:a6:3a:08:94:bf:5f:6c:b6:e4:70:75:
                    52:d3:2c:a9:8f:7e:75:89:b9:eb:1b:1c:06:ed:91:
                    db:e7:04:43:c8:7b:d5:7c:21:20:10:c9:fe:27:15:
                    16:41:b2:75:8a:66:a3:1b:9b:5a:76:83:43:a3:3f:
                    3f:4b:e8:9d:29:d8:7a:6b:a9:4a:cb:76:5d:13:28:
                    9e:ff:9f:ed:6b:a3:7a:b2:84:ee:e9:36:d2:e7:3e:
                    09:89:51:66:84:9e:3f:28:2c:ab:19:f1:fe:75:13:
                    f4:b1:80:29:fc:1e:61:1c:98:24:37:ee:09:74:3e:
                    45:ce:86:60:04:27:ce:e3:58:8d:fe:db:70:87:f3:
                    26:79:70:f4:cb:52:3a:7f:b9:5c:4d:7b:68:8d:d0:
                    67:a4:7a:84:9b:32:78:18:da:41:34:bf:a7:85:40:
                    6c:eb:e3:b6:06:a1:c0:61:b5:3a:a1:1d:16:81:1d:
                    79:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:53:2B:F0:40:B4:00:16:D3:C6:56:41:98:7A:00:8F:97:A5:27:1F
            X509v3 Authority Key Identifier:
                keyid:5D:DD:C9:65:C3:E9:0A:82:20:0F:4A:FB:B9:29:91:90:4D:06:42:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xd3JZcPpCoIgD0r7uSmRkE0GQiw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/de197f-a171-4ec3-b137-b47e7f393cee/1/Xd3JZcPpCoIgD0r7uSmRkE0GQiw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/de197f-a171-4ec3-b137-b47e7f393cee/1/Xd3JZcPpCoIgD0r7uSmRkE0GQiw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:1a:9e:1c:69:06:f1:c8:8f:52:63:99:93:ee:c6:2f:36:e8:
         e2:b8:6f:04:3a:c0:79:63:da:c8:f3:42:15:4c:96:39:9c:06:
         e1:ae:1f:84:e2:8e:b4:27:e0:2d:a0:87:bd:24:6e:00:bb:0c:
         76:93:b4:8f:f9:d7:ba:43:53:47:c6:31:c3:b9:d3:b3:d8:d5:
         81:49:af:b7:3f:3c:65:2f:1a:28:c3:8a:98:32:fd:f0:77:2f:
         4e:3a:74:20:0e:30:f9:17:4d:e5:19:d0:75:64:74:05:28:a8:
         4a:e4:39:5a:93:82:82:e8:47:cc:e5:f5:e2:f6:73:02:a0:b9:
         e7:60:9d:4a:69:7e:bd:7a:36:ba:78:e3:51:2d:9a:bc:56:cc:
         79:c1:5c:d9:5a:19:b8:6a:34:6e:e6:a8:b8:0e:7d:64:d4:b4:
         e9:a4:56:19:67:c1:21:26:c9:e0:9a:ed:02:1d:a4:54:5b:aa:
         0c:e3:10:35:a2:8a:bb:02:d6:2c:7d:d1:ee:4d:a3:67:88:be:
         9d:04:04:35:11:2e:56:bc:2e:db:90:c3:ca:03:01:d2:ab:f4:
         54:6f:82:74:f6:05:94:6d:2a:41:73:77:75:1f:25:c8:ae:27:
         1a:fe:de:4c:5c:66:3d:bc:77:db:c3:53:1e:bc:af:61:1c:b2:
         e6:7a:62:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----