Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/18bd82-37c8-4f57-975c-a4896d5a3887/1/oqyTBEcJC_mDoZHgp2MXq_QMc-M.mft
File:                     oqyTBEcJC_mDoZHgp2MXq_QMc-M.mft (raw, json)
Hash identifier:          iv7/fQm4W+1IM3NyKI/Bge/Vhp42bkLqE2I+smugay0=
Subject key identifier:   81:B4:01:6C:83:63:DF:9E:21:25:F6:80:B7:BC:11:9B:2C:62:1D:76
Authority key identifier: A2:AC:93:04:47:09:0B:F9:83:A1:91:E0:A7:63:17:AB:F4:0C:73:E3
Certificate issuer:       /CN=a2ac930447090bf983a191e0a76317abf40c73e3
Certificate serial:       018C8ABFF6D40A988ECAA87B0A045909B7F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oqyTBEcJC_mDoZHgp2MXq_QMc-M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/18bd82-37c8-4f57-975c-a4896d5a3887/1/oqyTBEcJC_mDoZHgp2MXq_QMc-M.mft
Manifest number:          0FEB
Signing time:             Thu 21 Dec 2023 05:01:25 +0000
Manifest this update:     Thu 21 Dec 2023 05:01:25 +0000
Manifest next update:     Fri 22 Dec 2023 05:01:25 +0000
Files and hashes:         1: TBGcTtg-S3ES1kYrpfjUKSrugzg.roa (hash: vsa5Dgijnd7bLynbXL+borN2ma8DDZBYZcHmI6E36fQ=)
                          2: oqyTBEcJC_mDoZHgp2MXq_QMc-M.crl (hash: /XTSLU8dFI8x+DoamazRQ1nV+z62M5dOoO97ElfA6QI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:8a:bf:f6:d4:0a:98:8e:ca:a8:7b:0a:04:59:09:b7:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2ac930447090bf983a191e0a76317abf40c73e3
        Validity
            Not Before: Dec 21 05:01:25 2023 GMT
            Not After : Dec 22 05:01:25 2023 GMT
        Subject: CN=81b4016c8363df9e2125f680b7bc119b2c621d76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c1:d5:57:4e:a0:1f:c7:fe:fb:1c:df:a3:74:
                    cb:7a:c0:82:fc:f8:6d:48:a7:27:18:58:ea:28:45:
                    89:99:9a:26:fc:a0:ca:1c:15:f8:e4:55:d7:9d:63:
                    f8:b7:e8:b3:28:f7:56:3b:12:39:ec:14:f7:4f:24:
                    0f:b6:11:af:e4:30:ce:33:83:eb:90:7a:57:62:c3:
                    37:f5:ce:8c:e4:7b:34:ff:2c:29:e4:83:52:76:43:
                    82:68:8d:36:37:29:04:53:7a:df:0d:34:f0:5a:70:
                    63:04:d9:b6:45:6e:a7:2c:d9:b2:01:ea:4e:63:3a:
                    23:b8:19:9a:41:83:91:2e:54:23:60:74:eb:5b:40:
                    59:3c:23:1e:7a:e0:d9:d2:e5:b6:62:68:fe:82:10:
                    3d:27:c6:21:01:06:07:e3:c9:dc:32:2b:43:6e:84:
                    14:3a:8a:7f:ec:ae:b4:66:18:c3:fd:2b:e1:c2:15:
                    4e:99:89:65:df:0c:f3:cd:85:29:84:df:df:93:f2:
                    33:96:f6:10:84:9b:ba:6f:36:26:b7:33:98:c1:2b:
                    c8:ba:f3:71:da:e5:c4:ae:0b:fc:f3:d4:b2:b0:b6:
                    5c:de:47:70:f6:49:0d:78:b8:25:78:00:d7:f6:5f:
                    97:8b:bd:c3:e8:9d:20:41:8c:82:f5:6a:8a:89:0c:
                    b7:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:B4:01:6C:83:63:DF:9E:21:25:F6:80:B7:BC:11:9B:2C:62:1D:76
            X509v3 Authority Key Identifier:
                keyid:A2:AC:93:04:47:09:0B:F9:83:A1:91:E0:A7:63:17:AB:F4:0C:73:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oqyTBEcJC_mDoZHgp2MXq_QMc-M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/18bd82-37c8-4f57-975c-a4896d5a3887/1/oqyTBEcJC_mDoZHgp2MXq_QMc-M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/18bd82-37c8-4f57-975c-a4896d5a3887/1/oqyTBEcJC_mDoZHgp2MXq_QMc-M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:9c:9b:bd:54:ec:2e:ec:50:77:7e:34:b6:fe:56:e7:be:a3:
         63:13:5c:16:f3:47:fd:57:0b:a5:ad:3f:bc:44:19:09:6c:0a:
         53:cc:22:8c:36:3d:a1:10:cb:24:01:a4:83:77:95:71:9e:51:
         22:7b:93:b7:38:7a:62:c3:e9:d2:df:95:db:11:47:98:61:02:
         19:9d:6b:0b:8d:6c:1b:f3:f0:85:9d:68:44:c2:be:35:5f:8a:
         99:29:1b:c2:58:b5:24:5f:ef:05:35:31:6c:b5:0a:78:b5:fe:
         1e:cb:fe:da:7f:81:8a:77:d1:a6:f3:70:2a:d0:a9:a4:6b:a5:
         be:d3:e1:4a:94:cc:b9:01:f7:30:89:47:3c:6e:03:f4:62:9a:
         bb:02:30:3d:d1:38:7f:52:d8:c3:b6:60:1e:fb:1c:d7:94:08:
         17:08:97:aa:21:2c:44:8b:e1:74:a0:c9:35:da:18:4e:40:9a:
         29:0b:fe:80:af:16:19:ac:16:32:e6:d0:e3:e5:2e:aa:29:4e:
         f5:19:78:ee:2c:ae:bb:07:17:23:5f:ed:a9:8d:0d:e7:e1:c0:
         5a:08:13:6d:f9:28:1f:25:2d:83:c4:e1:6b:50:48:4b:53:de:
         f8:bc:9d:92:c4:27:98:24:c6:81:eb:e3:45:d5:ba:c7:26:34:
         90:cb:c8:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----