Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/b9e9fa-accd-461f-b183-eda63010b77f/1/3Hc0gOtB_byBdNSK8JxrfwidE0k.mft
File:                     3Hc0gOtB_byBdNSK8JxrfwidE0k.mft (raw, json)
Hash identifier:          cWvaVINEpFLKqwHXQRDEWavqam0Ia5cjc8bf3z5Kiwk=
Subject key identifier:   BA:FD:1A:BD:1A:D2:45:81:66:DE:76:CD:2C:AC:0F:93:5E:CC:43:D4
Authority key identifier: DC:77:34:80:EB:41:FD:BC:81:74:D4:8A:F0:9C:6B:7F:08:9D:13:49
Certificate issuer:       /CN=dc773480eb41fdbc8174d48af09c6b7f089d1349
Certificate serial:       018AF8DBB6D9697626D8F9E9A1EBC431D40D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3Hc0gOtB_byBdNSK8JxrfwidE0k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/b9e9fa-accd-461f-b183-eda63010b77f/1/3Hc0gOtB_byBdNSK8JxrfwidE0k.mft
Manifest number:          0873
Signing time:             Wed 04 Oct 2023 04:04:23 +0000
Manifest this update:     Wed 04 Oct 2023 04:04:23 +0000
Manifest next update:     Thu 05 Oct 2023 04:04:23 +0000
Files and hashes:         1: 3Hc0gOtB_byBdNSK8JxrfwidE0k.crl (hash: zgbdjcUDaTVeP6AOIGreFmBKR1PPhi1oiE+cjzf00f4=)
                          2: AKbP2HcxqVs2Z-vJgjPkmxKLSwU.roa (hash: azj9Jep849gmn/mxVMXnVVgPzcpJeYk0MQEk6I0U4sw=)
                          3: IVng_teJpnxqGfTt6HkbpWolaws.roa (hash: Yv+LCQgKNeQk+bqh6Q/S33IbKdH0dj905Svsfqq4g6s=)
                          4: NolNnVGmbM0HSpUIHhqtmtgEaiM.roa (hash: KKKd5ekMcXMzK0qe7/xH1dBcIUmu2Ses/QfBH37mXi4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:f8:db:b6:d9:69:76:26:d8:f9:e9:a1:eb:c4:31:d4:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc773480eb41fdbc8174d48af09c6b7f089d1349
        Validity
            Not Before: Oct  4 04:04:23 2023 GMT
            Not After : Oct  5 04:04:23 2023 GMT
        Subject: CN=bafd1abd1ad2458166de76cd2cac0f935ecc43d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:c4:11:27:27:07:21:b8:36:b1:9c:e2:4c:5b:
                    34:4b:5c:e4:e7:bc:7a:f8:ea:4a:7a:4d:d8:b2:80:
                    b4:0a:3f:69:6b:df:2a:36:4d:98:5e:34:df:6d:3b:
                    9b:fe:2a:71:c6:61:72:55:16:e5:ac:d1:2e:e0:3f:
                    94:5f:93:9a:fd:8a:95:78:c9:24:16:da:74:99:17:
                    1d:fb:2a:42:c7:76:64:83:00:bc:bc:b5:6c:d2:51:
                    f3:4e:6c:71:28:cb:75:8c:9f:39:a5:ae:d2:01:2e:
                    eb:58:76:6b:cd:23:dc:d0:8e:36:b3:a7:90:04:a2:
                    95:0c:a7:e4:51:fb:8c:a7:95:a6:dd:eb:d5:c6:fc:
                    cb:23:19:82:80:15:f3:ee:2c:62:0b:01:b5:01:18:
                    c5:06:8b:da:52:00:0f:e1:e2:67:b7:ec:4e:a3:07:
                    80:ec:4a:d5:d6:85:7d:6d:42:d5:36:d5:84:05:22:
                    53:fc:c2:73:8e:ef:9a:cc:82:45:01:c2:ff:30:34:
                    56:4a:29:e0:b7:21:4d:cc:59:5c:85:86:f4:42:79:
                    6c:6e:7d:c3:3f:6c:e9:d7:f6:a0:ca:1b:f2:cc:8e:
                    b8:6c:e0:34:72:8f:ab:28:60:89:ee:94:d8:f0:ed:
                    ca:4e:23:64:c2:19:d1:09:e2:83:b1:17:6e:fb:f5:
                    7e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:FD:1A:BD:1A:D2:45:81:66:DE:76:CD:2C:AC:0F:93:5E:CC:43:D4
            X509v3 Authority Key Identifier:
                keyid:DC:77:34:80:EB:41:FD:BC:81:74:D4:8A:F0:9C:6B:7F:08:9D:13:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Hc0gOtB_byBdNSK8JxrfwidE0k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b9e9fa-accd-461f-b183-eda63010b77f/1/3Hc0gOtB_byBdNSK8JxrfwidE0k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b9e9fa-accd-461f-b183-eda63010b77f/1/3Hc0gOtB_byBdNSK8JxrfwidE0k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:d7:78:39:02:58:bf:9c:98:a4:08:70:c7:91:95:3b:3a:1a:
         87:88:8d:dc:9c:50:7f:9a:c9:20:fb:22:a2:ce:19:1d:79:6e:
         11:db:b9:13:49:8f:af:22:cb:6b:b2:68:90:7e:12:73:77:42:
         02:4b:97:74:10:cc:bd:39:d3:56:66:16:cd:94:85:ed:a9:db:
         6b:d3:15:33:dc:24:a4:af:e3:59:a0:67:15:88:71:ec:f8:c2:
         45:f7:f1:6d:65:90:28:b0:b8:6f:f4:7c:1b:fc:fa:2b:25:92:
         62:65:54:cb:c2:26:f8:6b:93:fb:67:25:b0:f0:9f:de:6e:d0:
         40:eb:d9:61:dd:bd:6a:0e:31:41:39:30:ba:7c:5b:d7:f1:40:
         b9:75:5a:e1:33:ba:56:60:30:cf:8f:76:62:3c:9c:f7:11:cd:
         90:fa:7b:9b:49:0f:8b:31:57:ca:bb:bd:00:92:70:5f:30:34:
         5c:85:12:8a:b9:a4:3c:c2:05:32:4f:4f:e8:23:44:30:b6:d1:
         30:2e:a5:53:79:89:8b:13:63:05:96:75:db:a3:4d:12:4d:a4:
         6b:cc:08:45:d3:95:d2:2c:3a:95:d9:c1:19:42:36:10:0a:66:
         a6:c8:f4:36:d5:0a:70:94:98:66:d1:45:e6:d9:be:12:fa:44:
         59:94:fc:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----