Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/908b7e-81b9-478f-9543-b1f3eaa15212/1/OIPJVHClukqHxQW2g7gWV2Nx48g.mft
File:                     OIPJVHClukqHxQW2g7gWV2Nx48g.mft (raw, json)
Hash identifier:          TxK9TW7oe6pXP7UQnzLYhAKmY9C5QLDmOBtZyOo77+I=
Subject key identifier:   8B:43:6A:A9:A9:89:BA:AF:56:7B:90:C4:AD:2C:B9:C3:F9:FC:DC:A5
Authority key identifier: 38:83:C9:54:70:A5:BA:4A:87:C5:05:B6:83:B8:16:57:63:71:E3:C8
Certificate issuer:       /CN=3883c95470a5ba4a87c505b683b816576371e3c8
Certificate serial:       018BD3127C52F734DEC575B6DE300E6BD172
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OIPJVHClukqHxQW2g7gWV2Nx48g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/908b7e-81b9-478f-9543-b1f3eaa15212/1/OIPJVHClukqHxQW2g7gWV2Nx48g.mft
Manifest number:          088E
Signing time:             Wed 15 Nov 2023 13:01:25 +0000
Manifest this update:     Wed 15 Nov 2023 13:01:25 +0000
Manifest next update:     Thu 16 Nov 2023 13:01:25 +0000
Files and hashes:         1: IaekO2oCBc3g9mW5K-F9OYerIUk.roa (hash: iRwL6OkS81sE24Gf5aLxUDmZGjaGIY3LJoNO/6tJ6dk=)
                          2: OIPJVHClukqHxQW2g7gWV2Nx48g.crl (hash: V3KWcyRE5qIUO9LrVSdjatNTkQCJh7m476LoL2TxpiU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:d3:12:7c:52:f7:34:de:c5:75:b6:de:30:0e:6b:d1:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3883c95470a5ba4a87c505b683b816576371e3c8
        Validity
            Not Before: Nov 15 13:01:25 2023 GMT
            Not After : Nov 16 13:01:25 2023 GMT
        Subject: CN=8b436aa9a989baaf567b90c4ad2cb9c3f9fcdca5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:80:4e:ed:c9:8a:ef:ab:cb:03:47:c3:ec:03:
                    a8:f9:b1:db:59:cc:18:73:53:c0:cc:b1:04:4b:dc:
                    c4:aa:fa:a0:88:e6:af:6f:6f:c9:01:17:30:d9:ff:
                    6e:08:ee:18:52:f7:81:f8:b4:94:3b:20:79:29:ca:
                    e9:a8:c5:84:1b:8e:04:71:a7:e5:f3:5e:f7:a9:0d:
                    57:a4:bf:3c:8a:26:3e:5d:63:ab:a2:8b:e5:ff:e1:
                    f6:91:9c:c5:1c:cf:82:99:b0:a3:a8:84:bf:79:87:
                    7c:ee:73:1f:51:bb:de:fb:fe:5c:ec:96:cc:07:23:
                    f8:fd:1f:06:49:a5:90:b2:5a:3e:40:f7:42:16:a9:
                    f5:a3:9c:a0:97:02:e1:e4:c0:cc:6c:32:29:dc:fb:
                    a3:85:e2:e0:f3:d6:f9:71:58:0e:5d:61:1c:e7:31:
                    ec:a9:35:e0:b1:0d:e1:d1:f1:53:70:51:1c:01:20:
                    41:39:6c:02:2d:bb:9f:dd:58:fc:2c:da:f1:9b:32:
                    17:89:da:04:2c:dc:41:4c:66:9d:40:61:e4:d9:07:
                    78:03:14:12:92:f6:41:a2:74:7c:a3:72:1a:cc:ba:
                    cc:46:73:5b:92:e2:0d:03:a5:eb:7f:05:f1:c5:f8:
                    7d:76:14:39:9d:93:c0:80:13:c9:05:96:f5:37:92:
                    0f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:43:6A:A9:A9:89:BA:AF:56:7B:90:C4:AD:2C:B9:C3:F9:FC:DC:A5
            X509v3 Authority Key Identifier:
                keyid:38:83:C9:54:70:A5:BA:4A:87:C5:05:B6:83:B8:16:57:63:71:E3:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OIPJVHClukqHxQW2g7gWV2Nx48g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/908b7e-81b9-478f-9543-b1f3eaa15212/1/OIPJVHClukqHxQW2g7gWV2Nx48g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/908b7e-81b9-478f-9543-b1f3eaa15212/1/OIPJVHClukqHxQW2g7gWV2Nx48g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:3b:5c:81:40:74:c3:62:22:9f:73:d8:25:a4:db:1f:e3:36:
         bb:6f:38:cf:7c:dd:f6:9b:7e:9a:76:4c:fc:c0:ae:cd:40:d7:
         fd:27:04:a1:73:11:5f:19:89:8e:a4:1e:ba:49:01:88:5c:cb:
         38:13:1d:2e:9c:d3:16:cf:6f:bd:96:ff:6d:13:8c:55:9f:6d:
         06:a3:9b:40:95:0f:ce:81:06:91:a0:7f:88:79:21:14:ea:62:
         08:3b:2e:1a:4c:2b:6a:a8:6c:dc:c3:98:35:32:09:85:86:62:
         5e:1d:fd:81:48:a4:12:80:9d:ec:a9:c5:d2:fb:e1:4c:6b:05:
         f3:f9:2a:7c:3e:ff:8a:37:d3:d0:be:62:70:14:d2:07:5d:8e:
         ba:03:62:6a:05:77:7c:e8:fe:0c:7b:29:5f:35:7b:e2:db:a1:
         c7:43:f7:29:9d:6f:8f:08:2f:16:76:6c:23:cc:a2:1d:69:34:
         67:74:de:08:e3:35:08:48:51:eb:50:42:2a:d8:1c:ce:44:58:
         36:32:9e:49:79:22:6a:1c:34:4d:e4:b6:77:77:46:d4:56:1d:
         b7:cb:f4:21:e1:a8:4a:ea:92:e5:5e:3d:26:81:ee:fb:6e:5b:
         78:25:9b:95:e6:be:21:f8:07:06:06:16:e2:ac:4e:1f:d0:08:
         ce:c1:82:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----