Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/bc94aa-9615-4e33-9412-a3c0b89f1000/1/669uU4fJ2VuEwBB5Sp8MjbnX9T0.mft
File:                     669uU4fJ2VuEwBB5Sp8MjbnX9T0.mft (raw, json)
Hash identifier:          ANYmAj0mmQkIionIeYdHGQBJQz9XmWjh5V8gg+Y9kZo=
Subject key identifier:   27:C1:15:9E:D9:AB:A5:AB:9B:2A:88:C0:B2:82:7A:BD:9C:F4:F7:42
Authority key identifier: EB:AF:6E:53:87:C9:D9:5B:84:C0:10:79:4A:9F:0C:8D:B9:D7:F5:3D
Certificate issuer:       /CN=ebaf6e5387c9d95b84c010794a9f0c8db9d7f53d
Certificate serial:       018A6E045E0DB9CC7738451B3A932D74133A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/669uU4fJ2VuEwBB5Sp8MjbnX9T0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/bc94aa-9615-4e33-9412-a3c0b89f1000/1/669uU4fJ2VuEwBB5Sp8MjbnX9T0.mft
Manifest number:          0C0F
Signing time:             Thu 07 Sep 2023 05:01:34 +0000
Manifest this update:     Thu 07 Sep 2023 05:01:34 +0000
Manifest next update:     Fri 08 Sep 2023 05:01:34 +0000
Files and hashes:         1: 669uU4fJ2VuEwBB5Sp8MjbnX9T0.crl (hash: uvXW0kF3ajoMf0YouZ2xhLoLGb4usK4EGEp2DOtKsB0=)
                          2: RxveNgWu-a5IziEjetmZ3cJpWIE.roa (hash: CS0VFCsFMC26ZhdcDyCBeqlvBG/KmNNLqGNXhqp8A/k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:6e:04:5e:0d:b9:cc:77:38:45:1b:3a:93:2d:74:13:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebaf6e5387c9d95b84c010794a9f0c8db9d7f53d
        Validity
            Not Before: Sep  7 05:01:34 2023 GMT
            Not After : Sep  8 05:01:34 2023 GMT
        Subject: CN=27c1159ed9aba5ab9b2a88c0b2827abd9cf4f742
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c2:90:15:7f:05:37:93:8d:16:c8:b3:cf:65:
                    e4:11:1b:7b:16:da:dc:5e:0a:60:d4:1b:0d:95:39:
                    d8:e7:08:f0:72:8a:37:a2:8e:a7:6d:2b:a7:84:b6:
                    2c:aa:79:fb:43:e5:c6:03:8c:d5:c8:00:19:dd:ba:
                    1e:6f:5e:3d:83:0c:90:79:32:33:7c:9a:47:8a:53:
                    88:53:50:b3:25:1a:01:d7:45:52:3b:b7:df:ec:74:
                    ed:32:4d:24:9c:fa:15:01:ec:c7:d1:cd:b8:83:6f:
                    7f:83:c7:6d:7b:5e:56:70:42:ca:c5:de:07:fc:c8:
                    bc:2b:60:50:f0:1d:87:f0:65:8b:4f:38:eb:16:41:
                    a2:84:e2:a8:3d:4d:4b:f4:78:ec:27:12:89:bf:43:
                    3f:f0:fd:34:a9:d7:27:74:ee:2b:9f:40:32:dd:d6:
                    fd:12:70:4e:9a:89:e9:8f:fa:bf:50:22:14:68:f4:
                    15:fd:36:9f:ce:67:c5:d4:aa:b6:51:29:40:3c:32:
                    5e:7b:63:7e:1a:d9:ca:68:dc:e3:ef:c8:77:3f:ea:
                    fd:63:3f:01:94:f6:f5:c0:7c:89:92:d8:d5:cf:5c:
                    68:43:02:1f:e6:c2:53:9f:34:1e:29:16:04:63:a4:
                    86:15:86:a7:f0:93:f3:f5:ee:e1:0b:be:35:d9:b2:
                    e6:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:C1:15:9E:D9:AB:A5:AB:9B:2A:88:C0:B2:82:7A:BD:9C:F4:F7:42
            X509v3 Authority Key Identifier:
                keyid:EB:AF:6E:53:87:C9:D9:5B:84:C0:10:79:4A:9F:0C:8D:B9:D7:F5:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/669uU4fJ2VuEwBB5Sp8MjbnX9T0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bc94aa-9615-4e33-9412-a3c0b89f1000/1/669uU4fJ2VuEwBB5Sp8MjbnX9T0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bc94aa-9615-4e33-9412-a3c0b89f1000/1/669uU4fJ2VuEwBB5Sp8MjbnX9T0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:82:20:2b:80:e5:af:b5:0d:ce:97:9b:ca:5a:64:6a:94:2d:
         02:c6:5f:9b:53:d4:e3:be:4c:0a:43:fb:78:9e:27:e0:b6:82:
         27:a1:1c:d4:8e:fc:0f:45:3b:de:39:f3:ee:ea:0b:a6:a6:33:
         34:8b:a4:d2:3f:9b:58:b2:0b:ab:d6:fa:5f:e5:5f:0d:4b:a9:
         f0:fe:9c:b0:f2:b1:3a:fe:77:0e:37:c8:32:a5:b8:03:d6:03:
         e8:10:34:38:ab:f9:9c:84:77:31:3f:e8:ab:c0:07:b6:3b:15:
         45:09:0d:7e:39:35:58:ec:11:67:05:40:74:7d:cc:72:0c:12:
         a2:4d:5d:54:14:e7:f8:ae:23:3a:af:c1:29:aa:22:28:d3:f6:
         d3:6d:21:1b:0b:97:05:c9:22:49:f1:b0:13:07:6c:38:37:6d:
         9a:e1:c5:39:7f:30:24:a4:ab:54:fa:b8:fb:61:5f:ba:9f:56:
         55:bd:c6:5a:21:50:8c:77:59:81:22:ad:f2:57:9d:57:ad:3f:
         6e:8f:cd:29:fc:f8:af:11:be:84:96:54:c8:8f:c7:d0:47:20:
         9f:b4:b9:c8:ee:b7:99:3f:01:ee:b3:bb:dc:ce:9e:e8:fc:10:
         25:66:6b:29:a1:ad:5c:4f:ed:e9:7c:e2:d9:2c:33:53:3b:56:
         77:74:e8:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----