Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/6dc978-bfd6-41ec-8a3a-c03017e98c53/1/gOSEhc6bDkJWQIBO3A7SumuPS48.mft
File:                     gOSEhc6bDkJWQIBO3A7SumuPS48.mft (raw, json)
Hash identifier:          aSLU/O9dStvXKkYKcmzMgs3gtaSxSNuUx+0lROH2chc=
Subject key identifier:   D3:60:B6:0E:05:96:5C:03:ED:FC:0E:BF:72:AA:C8:0C:41:28:CA:56
Authority key identifier: 80:E4:84:85:CE:9B:0E:42:56:40:80:4E:DC:0E:D2:BA:6B:8F:4B:8F
Certificate issuer:       /CN=80e48485ce9b0e425640804edc0ed2ba6b8f4b8f
Certificate serial:       0189DCF524F8560F70E0F97C3E5B71BE5651
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gOSEhc6bDkJWQIBO3A7SumuPS48.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/6dc978-bfd6-41ec-8a3a-c03017e98c53/1/gOSEhc6bDkJWQIBO3A7SumuPS48.mft
Manifest number:          0878
Signing time:             Thu 10 Aug 2023 01:00:00 +0000
Manifest this update:     Thu 10 Aug 2023 01:00:00 +0000
Manifest next update:     Fri 11 Aug 2023 01:00:00 +0000
Files and hashes:         1: 5_y-c8lCXCvhvMDOsxkF3f__ZHs.roa (hash: r6ardMC5Au//Tulxi7wUJTsGmIGHqwUmvPpRQjdw+3o=)
                          2: 775_jDuHAPBlTgesl5TJo7BAzwQ.roa (hash: Ex1MyAtgwjKaiYVQkUv/kN79hcvbw6QVoXLjunOiroM=)
                          3: ArspMVX8GmE8naV8tcFp2e7Bei4.roa (hash: klZr+uxT5CLQjC7MokLTRg+OHFDxgNI+mt0rDWs7JNc=)
                          4: DDxzCMQt2wM7pMqK7c9l_KlYfwo.roa (hash: IAfgYME6Dvfn/7KQ23izFrPjI3oDepak01zkB0A3HTo=)
                          5: aOkAtyzukqc5sT0nQvmQAKo_GwE.roa (hash: tKmIh9us+SIC42/VyDOhHLc8ei7fu8+7cV0VEf+3jQ8=)
                          6: e0IBx7sUhIMKKb_XVgNn7fqZypo.roa (hash: VpDHfNK6SWsVj1vWQz4xWjF7Rt6/wo8sVIV6HhnKv3s=)
                          7: gOSEhc6bDkJWQIBO3A7SumuPS48.crl (hash: dxzSE2eB8EKnUamOgXt9dlpw8Vead2I7LE4XiQRfNKQ=)
                          8: kLZU9hk6Yk1-F_5G3c_P4wkthT8.roa (hash: BSS5bi6yjvvg7oWyitYCRQZ1xQt05+yzuU7Ru8Oac/8=)
                          9: oqwj811UcTDkXR5YmcKteh54sQk.roa (hash: oofjtLdQuKmwONlPZRkRje9kM443hejpVwX5Urv4PEM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:dc:f5:24:f8:56:0f:70:e0:f9:7c:3e:5b:71:be:56:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80e48485ce9b0e425640804edc0ed2ba6b8f4b8f
        Validity
            Not Before: Aug 10 01:00:00 2023 GMT
            Not After : Aug 11 01:00:00 2023 GMT
        Subject: CN=d360b60e05965c03edfc0ebf72aac80c4128ca56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:cd:38:d7:a6:f0:29:b8:7c:2d:05:10:d2:b9:
                    29:13:e1:92:ea:9e:6f:99:59:38:02:ee:80:74:9f:
                    f5:2d:28:de:81:35:01:ee:aa:87:23:67:c8:85:8d:
                    f1:40:e9:0f:73:71:b0:11:16:d2:64:67:52:b8:68:
                    12:09:0d:e1:7d:c6:55:fd:ae:7d:fd:95:35:0a:c4:
                    21:f4:0b:4e:a9:5c:31:4e:74:45:6c:d3:38:87:d3:
                    49:f6:cf:55:a5:41:98:c6:f6:09:d9:6e:93:73:f3:
                    d0:72:bb:68:05:22:b8:ad:5a:ae:3f:16:78:7d:78:
                    64:8f:14:6e:52:27:3e:e1:fd:65:b6:da:89:18:d7:
                    20:19:0f:10:9c:f0:a5:3b:17:51:0b:c8:f0:89:85:
                    71:54:f5:e0:b6:a1:11:9d:21:e9:fe:b0:63:64:ca:
                    7d:ca:b2:f8:d3:45:88:09:b4:65:89:ed:24:9b:51:
                    d7:95:69:5e:20:ed:80:83:a7:58:e5:07:0e:ea:d5:
                    27:57:47:e2:a0:32:ab:25:4f:ab:4d:b8:4f:5f:9c:
                    86:09:db:3b:ea:f3:b1:ad:ed:29:cb:71:3c:b3:e8:
                    a9:57:f5:06:1a:56:25:d0:0c:3f:b0:9b:4e:0d:d4:
                    7d:6d:dd:9b:84:bd:85:84:df:ce:76:80:f4:82:0e:
                    e1:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:60:B6:0E:05:96:5C:03:ED:FC:0E:BF:72:AA:C8:0C:41:28:CA:56
            X509v3 Authority Key Identifier:
                keyid:80:E4:84:85:CE:9B:0E:42:56:40:80:4E:DC:0E:D2:BA:6B:8F:4B:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gOSEhc6bDkJWQIBO3A7SumuPS48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/6dc978-bfd6-41ec-8a3a-c03017e98c53/1/gOSEhc6bDkJWQIBO3A7SumuPS48.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/6dc978-bfd6-41ec-8a3a-c03017e98c53/1/gOSEhc6bDkJWQIBO3A7SumuPS48.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:98:ab:64:01:5b:d2:d0:a7:75:65:ce:a9:10:67:44:6c:5a:
         83:ce:43:28:d2:3b:6a:81:fe:6d:b0:ac:1c:21:05:8b:53:1f:
         ef:94:9f:b1:46:db:2c:96:9d:c3:c4:9c:6c:ae:7a:14:90:f2:
         fd:72:e5:b1:cf:b4:a7:86:e2:79:65:da:e4:d9:4f:61:b9:49:
         d2:80:a5:82:09:5d:ad:f4:46:d9:8a:8e:0e:db:e3:99:d0:1e:
         5f:40:82:ec:1d:68:9c:32:2d:57:69:6a:0d:2c:3d:3b:b1:3e:
         c0:62:6a:61:2b:80:77:a1:46:0a:4f:4a:46:22:73:e1:14:d0:
         77:55:e4:a5:80:d0:b2:70:f4:ef:53:5b:40:36:4d:2d:7b:05:
         02:0d:75:52:e2:be:1a:3c:ff:c2:95:99:b1:ff:b5:5d:9e:02:
         3f:41:b9:23:a9:af:fc:e8:0c:76:bd:20:b4:38:3f:02:8f:ec:
         e3:d9:2f:20:66:e8:88:2d:c2:f0:0f:52:17:37:46:f7:4d:97:
         7c:b1:62:59:23:39:00:51:bb:6f:f3:b1:d6:33:c5:af:4c:22:
         fe:1c:58:23:29:aa:64:5c:01:2d:3b:db:a0:28:a4:dd:07:a7:
         2b:a4:db:44:61:ef:68:3a:90:18:58:3e:24:d1:01:e3:69:7c:
         dc:99:c8:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----