Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/6788f7-d58f-4835-8522-984a08898459/1/ABK53JdtfOgH5G_qSTbHJrDEogY.mft
File:                     ABK53JdtfOgH5G_qSTbHJrDEogY.mft (raw, json)
Hash identifier:          CblPGQuxmPtGFR9nXgmihjxOSXTfMIZEDRpBK54MspI=
Subject key identifier:   CA:85:8C:80:63:A1:79:8A:F1:28:B7:E5:A0:78:E6:8E:8B:61:ED:4D
Authority key identifier: 00:12:B9:DC:97:6D:7C:E8:07:E4:6F:EA:49:36:C7:26:B0:C4:A2:06
Certificate issuer:       /CN=0012b9dc976d7ce807e46fea4936c726b0c4a206
Certificate serial:       018EE321ECBB398AA06D49BFD7D3A2C3306A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ABK53JdtfOgH5G_qSTbHJrDEogY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/6788f7-d58f-4835-8522-984a08898459/1/ABK53JdtfOgH5G_qSTbHJrDEogY.mft
Manifest number:          0835
Signing time:             Mon 15 Apr 2024 19:00:34 +0000
Manifest this update:     Mon 15 Apr 2024 19:00:34 +0000
Manifest next update:     Tue 16 Apr 2024 19:00:34 +0000
Files and hashes:         1: ABK53JdtfOgH5G_qSTbHJrDEogY.crl (hash: 7yvpOFjPMCbN/zcvqQP1XYJ2bIqCoYn7KTYutfyiZbs=)
                          2: P2IpL9kLtUFlK-a6_ah5es0kxjw.roa (hash: a+HCjUCtrmnqzraUTwwkfnKzgVw0VR/L6zrUQD38oyU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:e3:21:ec:bb:39:8a:a0:6d:49:bf:d7:d3:a2:c3:30:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0012b9dc976d7ce807e46fea4936c726b0c4a206
        Validity
            Not Before: Apr 15 19:00:34 2024 GMT
            Not After : Apr 16 19:00:34 2024 GMT
        Subject: CN=ca858c8063a1798af128b7e5a078e68e8b61ed4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:60:d8:03:40:be:43:29:d7:fe:73:27:5b:f0:
                    b4:ef:47:60:81:bb:a6:34:31:94:9e:dc:70:52:5c:
                    88:1b:0a:21:1a:1c:9c:ca:ac:cc:d7:d6:06:f8:fc:
                    ca:d3:dd:c9:a8:ad:a9:81:d2:39:a9:0e:e9:ae:fe:
                    01:7a:13:c4:4b:26:a3:15:03:14:e2:b9:39:4c:2d:
                    d3:68:b8:a6:e6:1f:11:33:08:b4:67:f4:7a:65:c8:
                    11:91:b8:53:6e:34:91:2b:c5:2c:6c:0c:33:44:ad:
                    27:f8:2c:05:00:2c:d8:f6:a6:35:bb:80:03:fa:91:
                    7d:f6:53:1c:67:8b:81:32:78:0c:bd:9c:43:61:69:
                    bb:55:db:37:c4:22:12:f0:b7:e0:87:3c:40:45:7a:
                    a7:3f:dd:8b:4e:92:ff:c6:a6:4d:6d:cb:25:8c:fc:
                    03:2f:14:e4:eb:80:76:2f:d6:77:cc:6f:11:7b:02:
                    95:fe:81:58:a5:b5:99:dc:55:10:37:2d:17:4e:5b:
                    17:74:f9:a8:17:c8:17:6e:c7:58:fb:2f:b4:df:1a:
                    dc:e3:69:aa:47:22:d5:7c:75:87:31:c2:04:1d:f7:
                    c8:dc:84:72:26:d3:47:60:df:ae:7f:8f:0c:03:96:
                    eb:a8:d1:b7:5f:c4:16:e2:a3:59:04:ba:a4:db:ae:
                    cb:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:85:8C:80:63:A1:79:8A:F1:28:B7:E5:A0:78:E6:8E:8B:61:ED:4D
            X509v3 Authority Key Identifier:
                keyid:00:12:B9:DC:97:6D:7C:E8:07:E4:6F:EA:49:36:C7:26:B0:C4:A2:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ABK53JdtfOgH5G_qSTbHJrDEogY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/6788f7-d58f-4835-8522-984a08898459/1/ABK53JdtfOgH5G_qSTbHJrDEogY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/6788f7-d58f-4835-8522-984a08898459/1/ABK53JdtfOgH5G_qSTbHJrDEogY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:20:88:7e:38:17:17:ac:95:f6:83:a2:78:8f:21:6f:73:1d:
         0e:36:a0:fb:fb:15:bb:a5:d1:53:75:e2:83:6f:bb:cf:6b:a4:
         da:10:25:a7:09:22:1d:f0:06:80:50:d5:c1:77:62:00:92:57:
         26:80:77:bf:9f:86:c8:b4:b0:6c:92:f6:b1:49:99:d9:2a:4f:
         18:be:55:0b:8b:2d:71:14:bf:d7:78:5c:d9:65:6b:38:56:c8:
         85:85:c1:45:20:e0:5c:d4:04:11:e4:8d:ab:99:99:d7:b2:e6:
         b4:16:ec:fc:c3:7b:3b:69:05:6d:9c:ac:1a:85:21:72:e9:7c:
         01:8b:b1:da:44:3f:b8:0b:88:09:cc:23:3d:f7:e0:55:a9:67:
         a3:61:34:2d:0c:dc:45:20:5e:8f:d1:4e:25:51:17:c8:dc:38:
         ed:6c:a2:a8:f6:68:a0:31:5c:c7:3c:21:43:98:99:b0:b0:b2:
         04:d1:83:7f:38:18:cb:01:53:32:77:34:ae:85:a1:c0:64:55:
         7e:44:c2:50:63:6b:a5:f7:ea:d6:1b:db:50:89:fd:9d:ab:e1:
         4b:4b:d7:2f:58:52:d4:13:86:15:08:d3:6a:55:6c:1f:da:83:
         43:cc:86:9c:4e:ef:96:6c:31:3c:f9:b8:fa:bb:b7:b2:27:9e:
         49:4c:a4:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----