Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/573337-5cab-4452-9092-4b1a42ef51ce/1/M4eBxIK-8c9gxa2ipRsv3GolXqY.mft
File:                     M4eBxIK-8c9gxa2ipRsv3GolXqY.mft (raw, json)
Hash identifier:          6E+CGugDhH5QvBZ4Btex/XgrrGwLsoW85KHlg3uXBvA=
Subject key identifier:   C2:8D:94:C9:E0:EE:F0:D9:E2:2C:A4:05:2E:91:61:7E:F4:DB:A5:0E
Authority key identifier: 33:87:81:C4:82:BE:F1:CF:60:C5:AD:A2:A5:1B:2F:DC:6A:25:5E:A6
Certificate issuer:       /CN=338781c482bef1cf60c5ada2a51b2fdc6a255ea6
Certificate serial:       018962641BC822721E05365E5CEF1655F14F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M4eBxIK-8c9gxa2ipRsv3GolXqY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/573337-5cab-4452-9092-4b1a42ef51ce/1/M4eBxIK-8c9gxa2ipRsv3GolXqY.mft
Manifest number:          08FF
Signing time:             Mon 17 Jul 2023 05:47:54 +0000
Manifest this update:     Mon 17 Jul 2023 05:47:54 +0000
Manifest next update:     Tue 18 Jul 2023 05:47:54 +0000
Files and hashes:         1: ASzORbrYTbHbMqjNmRyXLZAw62A.roa (hash: k9R6YgPFE+6vgJu5foK+IqQQBEFqe3edc5vXPd46d3g=)
                          2: M4eBxIK-8c9gxa2ipRsv3GolXqY.crl (hash: eYQCYDSqwxnlpap1Y1GmWJ9OBbSBh19Woq+UYJCk10U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:62:64:1b:c8:22:72:1e:05:36:5e:5c:ef:16:55:f1:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=338781c482bef1cf60c5ada2a51b2fdc6a255ea6
        Validity
            Not Before: Jul 17 05:47:54 2023 GMT
            Not After : Jul 18 05:47:54 2023 GMT
        Subject: CN=c28d94c9e0eef0d9e22ca4052e91617ef4dba50e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d6:51:69:e6:6d:4e:ac:10:6d:f7:c4:40:b9:
                    f3:80:1c:c5:a2:b3:6c:d5:54:6f:c6:04:92:b2:20:
                    30:11:e9:28:cb:4f:91:03:df:08:93:dd:bf:03:e9:
                    f5:0c:ae:9d:3a:a8:56:aa:87:c9:d1:c7:ed:c3:9d:
                    1c:fb:b4:66:bd:f0:c3:5e:ac:99:60:d6:02:67:c3:
                    2c:dc:28:d6:9b:db:9a:f8:5a:a7:d1:c0:27:ae:b8:
                    40:26:17:9f:af:28:ec:31:25:0b:80:e3:bb:90:2c:
                    60:e6:8e:6b:27:f3:18:16:fe:29:f0:b2:f2:c6:f8:
                    05:44:a5:6e:5e:91:ff:9a:d1:b6:14:b2:c7:43:7c:
                    29:97:59:86:03:d1:31:8d:22:88:7b:21:07:ea:58:
                    5d:ea:80:be:b0:eb:fb:8a:9e:e5:1e:e7:ef:4c:d2:
                    9a:9b:cd:9c:50:76:51:45:b9:42:fa:27:80:5c:ac:
                    aa:00:3c:c1:60:c4:f2:83:76:ce:a4:21:ad:ad:ee:
                    d4:11:82:0c:e6:b2:8f:50:19:55:b6:37:71:7c:07:
                    79:50:df:3c:c9:a1:b6:8d:09:b7:af:00:c6:62:85:
                    de:26:26:50:d9:4a:0c:dc:ec:9e:a2:01:31:0d:57:
                    bd:7c:1c:8d:5c:c5:cd:d8:bc:60:47:bf:50:97:9e:
                    91:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:8D:94:C9:E0:EE:F0:D9:E2:2C:A4:05:2E:91:61:7E:F4:DB:A5:0E
            X509v3 Authority Key Identifier:
                keyid:33:87:81:C4:82:BE:F1:CF:60:C5:AD:A2:A5:1B:2F:DC:6A:25:5E:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M4eBxIK-8c9gxa2ipRsv3GolXqY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/573337-5cab-4452-9092-4b1a42ef51ce/1/M4eBxIK-8c9gxa2ipRsv3GolXqY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/573337-5cab-4452-9092-4b1a42ef51ce/1/M4eBxIK-8c9gxa2ipRsv3GolXqY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:76:e8:19:c0:a4:dc:a9:ef:5c:28:88:18:03:39:5a:37:07:
         08:e9:7a:b4:86:31:7d:36:0e:8b:51:32:a5:ae:01:03:72:a8:
         2b:44:c7:03:84:d6:01:ae:fb:14:f7:2f:15:11:2f:06:b4:dd:
         a7:03:7a:47:60:a5:91:8f:c2:36:68:fd:51:76:43:28:47:53:
         42:4e:3c:aa:2c:0f:90:f0:ef:56:1c:4b:93:80:fe:9d:a9:e9:
         92:42:65:8d:0f:36:af:39:1f:e8:cc:75:aa:67:c5:50:91:a9:
         87:21:44:7d:6b:d4:0c:ec:b5:d9:8c:ab:70:78:c8:cc:88:34:
         c5:bf:de:80:94:8e:8b:32:45:e5:ce:f7:9f:f6:83:a1:0e:5d:
         af:61:d3:2b:2a:6c:01:46:ec:64:c1:16:e8:cb:38:e4:6b:28:
         ca:a4:a8:64:38:a6:68:49:8c:1e:3a:12:3d:ac:83:6c:03:d0:
         3d:d0:5e:61:23:f8:12:ed:a0:77:a8:b5:ba:38:6e:75:35:bf:
         98:e7:09:eb:9d:35:be:2c:de:db:2a:26:66:67:8f:52:07:be:
         39:04:0e:a9:de:11:b5:36:df:3e:94:62:ee:7e:eb:ad:03:00:
         85:78:9d:8a:ad:54:ab:24:60:d5:36:3b:48:f3:f8:42:9c:57:
         a2:04:e8:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----