Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/97484a-f001-46f2-b64b-b67abd87a24a/1/koroBjF8TIIk7UL5vvBM7p-IwOA.mft
File:                     koroBjF8TIIk7UL5vvBM7p-IwOA.mft (raw, json)
Hash identifier:          okhjHE7KFi8NqUeUzzn50Exssgiv2lVQ6SV5Cili+LU=
Subject key identifier:   1A:A5:F2:7D:BC:27:22:4D:11:13:72:8D:48:D2:0F:36:5B:1E:2A:C0
Authority key identifier: 92:8A:E8:06:31:7C:4C:82:24:ED:42:F9:BE:F0:4C:EE:9F:88:C0:E0
Certificate issuer:       /CN=928ae806317c4c8224ed42f9bef04cee9f88c0e0
Certificate serial:       018C5D0AAA812181A374E0B357A288BA98C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/koroBjF8TIIk7UL5vvBM7p-IwOA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/97484a-f001-46f2-b64b-b67abd87a24a/1/koroBjF8TIIk7UL5vvBM7p-IwOA.mft
Manifest number:          03AD
Signing time:             Tue 12 Dec 2023 08:00:29 +0000
Manifest this update:     Tue 12 Dec 2023 08:00:29 +0000
Manifest next update:     Wed 13 Dec 2023 08:00:29 +0000
Files and hashes:         1: Cvcxm7Q5YwDT_XSR85e8Mu3sc-s.roa (hash: c+bhTRYMgJ9Bp3AntxJjbf+B2keDhIz737EcjeGdTaw=)
                          2: koroBjF8TIIk7UL5vvBM7p-IwOA.crl (hash: L+6csXjyj5akf6XpILdAG51B+z7y5QQk9Uz3RGC+6Y8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:5d:0a:aa:81:21:81:a3:74:e0:b3:57:a2:88:ba:98:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=928ae806317c4c8224ed42f9bef04cee9f88c0e0
        Validity
            Not Before: Dec 12 08:00:29 2023 GMT
            Not After : Dec 13 08:00:29 2023 GMT
        Subject: CN=1aa5f27dbc27224d1113728d48d20f365b1e2ac0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:79:c8:df:a9:b0:46:72:f8:91:73:73:8d:2a:
                    f6:8e:43:2d:93:be:97:07:7c:43:e9:31:6e:a1:0a:
                    20:7d:33:b9:11:63:af:bf:07:15:bd:4b:c4:fe:72:
                    ea:bf:97:6d:51:1d:d3:6b:50:55:35:0f:f1:8e:52:
                    9f:b4:38:5e:1b:a8:55:ca:f0:fd:fa:65:14:08:db:
                    b9:63:3b:f3:a5:9b:de:c5:8e:17:ea:7c:23:8b:ce:
                    b8:73:cf:70:e2:1a:3c:ff:40:52:03:2b:1f:e6:21:
                    9e:1b:bf:33:32:a0:4a:e8:27:49:5a:1b:20:8e:fe:
                    c7:df:b1:71:ae:54:1b:a2:b1:8c:63:7b:ff:9b:ad:
                    47:d8:63:c7:e5:84:88:d1:4d:3d:21:5f:6e:60:95:
                    ed:65:2f:73:d2:30:36:0a:f7:47:1f:44:c2:7c:b8:
                    f2:d4:de:8b:26:18:7e:fb:db:32:86:84:cf:54:27:
                    f1:a4:e7:af:1c:3a:13:30:5a:37:cc:17:40:f9:48:
                    d5:68:1b:cd:5d:ec:a5:07:fd:78:6f:8d:18:ea:4a:
                    3c:f4:31:d7:ba:17:d9:47:36:4b:e2:12:ea:64:93:
                    46:02:a8:58:b7:ec:76:2a:5f:5c:42:ba:f3:d8:20:
                    c3:92:32:d0:f0:b9:a2:26:d6:9b:df:67:e0:ff:d4:
                    53:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:A5:F2:7D:BC:27:22:4D:11:13:72:8D:48:D2:0F:36:5B:1E:2A:C0
            X509v3 Authority Key Identifier:
                keyid:92:8A:E8:06:31:7C:4C:82:24:ED:42:F9:BE:F0:4C:EE:9F:88:C0:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/koroBjF8TIIk7UL5vvBM7p-IwOA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/97484a-f001-46f2-b64b-b67abd87a24a/1/koroBjF8TIIk7UL5vvBM7p-IwOA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/97484a-f001-46f2-b64b-b67abd87a24a/1/koroBjF8TIIk7UL5vvBM7p-IwOA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:31:f4:bb:3d:18:52:ce:7d:95:a8:19:4d:82:b9:44:71:ef:
         02:97:ed:02:22:39:87:56:06:e7:cf:40:d6:79:7a:ba:2d:8b:
         be:b5:c1:d5:af:ea:c3:76:29:fa:98:36:4f:a3:81:52:a8:ea:
         69:4d:d9:d5:63:a1:4c:e8:79:18:e3:ec:60:7e:a8:94:7d:6c:
         c5:9c:ca:12:78:18:7b:68:24:e4:39:1e:b1:51:69:06:91:90:
         8b:a0:9e:96:ff:27:95:fd:f4:16:4e:d1:42:50:ae:ab:60:43:
         74:9a:97:ae:c5:68:10:44:50:e3:f6:22:1e:2e:c5:35:33:8c:
         bb:01:1a:33:d8:f7:66:5a:3c:f4:2f:f2:9c:a0:49:76:2a:6d:
         00:23:ce:3f:33:2c:45:d3:27:a8:e9:31:cc:7d:a8:7e:b0:5d:
         ae:0d:52:1f:07:fa:4e:b3:a1:7c:5b:1b:41:ea:20:31:40:e7:
         87:e4:fb:6f:4f:08:4d:14:3c:bc:a8:61:a6:52:39:7d:de:27:
         fd:36:10:43:b9:0d:11:cb:31:e4:8c:db:ab:da:9a:ba:55:63:
         87:9e:3a:83:3e:a0:33:58:bf:6b:80:ae:fc:78:9d:9d:64:de:
         0b:dc:23:ab:36:af:33:9c:63:fe:48:6c:f0:f6:5f:1c:e8:75:
         b9:04:6b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----