Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/e64400-09c9-4135-8a80-187e99dcd66b/1/SSnCDXq0i2Dz2P4SdeyAywEolAQ.mft
File:                     SSnCDXq0i2Dz2P4SdeyAywEolAQ.mft (raw, json)
Hash identifier:          4fVbafV63LdupPSNU/E3ZBP/KoedhDV8T1Jj25oeRmM=
Subject key identifier:   57:6A:13:FE:68:7D:FB:C1:78:B8:5C:89:4B:C7:E0:01:7D:08:69:F9
Authority key identifier: 49:29:C2:0D:7A:B4:8B:60:F3:D8:FE:12:75:EC:80:CB:01:28:94:04
Certificate issuer:       /CN=4929c20d7ab48b60f3d8fe1275ec80cb01289404
Certificate serial:       0188B797B1A3ACC01461BF959F9841F38D6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SSnCDXq0i2Dz2P4SdeyAywEolAQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/e64400-09c9-4135-8a80-187e99dcd66b/1/SSnCDXq0i2Dz2P4SdeyAywEolAQ.mft
Manifest number:          0703
Signing time:             Wed 14 Jun 2023 01:49:11 +0000
Manifest this update:     Wed 14 Jun 2023 01:49:11 +0000
Manifest next update:     Thu 15 Jun 2023 01:49:11 +0000
Files and hashes:         1: SSnCDXq0i2Dz2P4SdeyAywEolAQ.crl (hash: CgfuDOXkpNF42b7lwlwyEav/XbVh2DAjije74bMZ5wI=)
                          2: uJOFR4Z3q3_DFzG0T3NBy2X9RVo.roa (hash: urhXiGBK8FXT19h6byx5QcFgJ5XrnRuOQkDh8BvfVCI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:b7:97:b1:a3:ac:c0:14:61:bf:95:9f:98:41:f3:8d:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4929c20d7ab48b60f3d8fe1275ec80cb01289404
        Validity
            Not Before: Jun 14 01:49:11 2023 GMT
            Not After : Jun 15 01:49:11 2023 GMT
        Subject: CN=576a13fe687dfbc178b85c894bc7e0017d0869f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:51:09:25:92:c5:8e:37:36:9e:b3:0e:1d:43:
                    d9:d3:ed:bd:4f:ff:a1:d5:f8:ea:b3:d1:67:4f:ae:
                    00:d3:b9:2b:83:4e:77:c5:84:38:6f:19:fe:78:99:
                    5c:b8:3b:78:5e:f3:8a:ab:a2:0d:db:af:b7:6b:04:
                    bc:43:de:03:29:32:e8:8d:84:58:39:b2:85:9e:9b:
                    f2:6e:59:2b:b3:bc:36:ec:ea:81:6a:b1:36:5f:a5:
                    eb:67:f2:0e:97:bb:a9:97:06:16:4c:00:d2:73:d0:
                    54:1d:96:8b:21:77:d0:75:a4:f7:fe:36:ca:7f:4d:
                    cc:b3:42:b8:a4:5a:9f:b0:43:4e:97:3b:7f:8a:d8:
                    7f:3c:c3:f4:58:0e:58:c1:4a:af:8c:40:e3:30:8a:
                    60:50:b2:ad:f8:c0:59:2c:86:88:e3:74:91:39:c5:
                    2b:7d:03:1a:60:be:90:ff:4f:74:23:9d:12:7e:b5:
                    38:cb:02:b3:12:3d:c2:49:f8:b8:b6:ac:36:35:80:
                    76:29:7f:f2:4d:c1:12:d2:22:5c:55:e3:ec:cd:a4:
                    d5:b2:36:ac:b7:98:f8:cd:cf:86:cc:cc:93:3c:e0:
                    16:5a:24:1d:c8:4e:21:86:f0:23:b4:bf:de:ab:67:
                    0d:ba:95:19:7e:34:83:99:93:43:60:12:b0:55:4b:
                    1f:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:6A:13:FE:68:7D:FB:C1:78:B8:5C:89:4B:C7:E0:01:7D:08:69:F9
            X509v3 Authority Key Identifier:
                keyid:49:29:C2:0D:7A:B4:8B:60:F3:D8:FE:12:75:EC:80:CB:01:28:94:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSnCDXq0i2Dz2P4SdeyAywEolAQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/e64400-09c9-4135-8a80-187e99dcd66b/1/SSnCDXq0i2Dz2P4SdeyAywEolAQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/e64400-09c9-4135-8a80-187e99dcd66b/1/SSnCDXq0i2Dz2P4SdeyAywEolAQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:21:75:a9:f5:16:ff:46:f8:2f:4d:6f:c4:7a:e6:54:f4:a6:
         2b:17:aa:b8:96:c5:11:43:65:97:54:30:42:6c:fb:91:c4:10:
         a9:52:0c:2c:d7:0c:d6:f7:d6:ce:39:fa:ad:33:98:3b:ca:a6:
         db:b9:e2:1b:f7:92:a3:6c:d1:d1:1d:cb:a6:b2:e2:ed:40:af:
         f9:88:6a:68:c3:4f:9c:2c:6c:a3:09:43:bc:6f:75:3a:2b:50:
         6d:ed:cf:6c:e5:9a:8e:c2:06:d7:c8:67:20:1a:a1:09:72:7b:
         72:2a:36:fc:84:d8:e9:3e:7c:77:22:37:b5:74:30:28:b2:ce:
         39:fb:11:90:30:b0:de:f9:10:39:e2:bd:df:a6:00:30:4c:8b:
         08:79:6f:09:eb:77:c0:bb:90:82:a3:dc:63:b0:e4:12:c9:00:
         6e:1b:00:67:e3:6d:c3:96:8e:4b:18:fb:6f:31:b9:ba:28:b8:
         a2:df:6f:e7:73:1b:bf:35:af:77:cf:c2:2d:8b:6e:23:b8:69:
         30:cb:23:ba:23:8b:96:e4:a3:61:25:cc:5b:28:19:34:ee:f5:
         17:08:01:55:4a:47:8c:d2:c3:6d:c5:28:1f:80:1d:5d:54:2f:
         be:3a:c7:66:4a:45:93:59:e5:0d:21:57:61:c2:e7:02:5b:a4:
         e3:f9:04:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----