Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/03598f-2a33-455c-8599-e0d7a53adfa5/1/wQHh6vnQpQHNSMPrsOFdqWIwhQQ.mft
File:                     wQHh6vnQpQHNSMPrsOFdqWIwhQQ.mft (raw, json)
Hash identifier:          1CHxzYYQ2/knl89GttoLaWLT0NLImGMhPt9MpSM+96I=
Subject key identifier:   B1:E3:7E:41:A1:36:A1:84:53:D8:DF:DD:24:5A:1A:2C:EC:90:EE:6D
Authority key identifier: C1:01:E1:EA:F9:D0:A5:01:CD:48:C3:EB:B0:E1:5D:A9:62:30:85:04
Certificate issuer:       /CN=c101e1eaf9d0a501cd48c3ebb0e15da962308504
Certificate serial:       018B3C701A27B978F1E2507E90A8A347A612
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wQHh6vnQpQHNSMPrsOFdqWIwhQQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/03598f-2a33-455c-8599-e0d7a53adfa5/1/wQHh6vnQpQHNSMPrsOFdqWIwhQQ.mft
Manifest number:          0850
Signing time:             Tue 17 Oct 2023 07:01:01 +0000
Manifest this update:     Tue 17 Oct 2023 07:01:01 +0000
Manifest next update:     Wed 18 Oct 2023 07:01:01 +0000
Files and hashes:         1: TciWkypV3a5IoIlFOMROQVqINKg.roa (hash: QPKxJVC/8KR4dLf/gDoPSWhHo3Bae1aB1Ic0vMXN408=)
                          2: wQHh6vnQpQHNSMPrsOFdqWIwhQQ.crl (hash: Pnp87nHHZqU2l7rekCg+NgsUkfsRZtAzZ9jq0mu9k0g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:3c:70:1a:27:b9:78:f1:e2:50:7e:90:a8:a3:47:a6:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c101e1eaf9d0a501cd48c3ebb0e15da962308504
        Validity
            Not Before: Oct 17 07:01:01 2023 GMT
            Not After : Oct 18 07:01:01 2023 GMT
        Subject: CN=b1e37e41a136a18453d8dfdd245a1a2cec90ee6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:78:5e:1e:36:34:04:c8:1f:cc:84:e8:aa:11:
                    8d:72:cf:c1:c7:a0:2c:19:5d:f7:85:27:18:ad:52:
                    75:df:91:a9:74:c3:4c:6d:59:5e:e5:81:fe:aa:8d:
                    b1:50:44:1d:b7:ce:ee:6b:ff:23:b0:53:99:4f:cb:
                    17:ec:0d:8b:e4:3e:aa:cd:84:35:b3:00:22:05:9c:
                    0c:0c:1c:ab:04:32:64:4a:11:d2:25:78:6f:44:0a:
                    ca:9f:9c:2c:97:00:c3:13:0f:c7:73:e8:83:a3:ae:
                    df:a2:e4:a9:a4:3b:4a:be:ab:68:7d:33:a9:8e:9d:
                    d3:26:07:f4:67:29:ad:b3:e8:b5:9b:1c:4d:e9:81:
                    38:b0:e0:9d:f1:e1:a2:13:d5:b1:d7:5f:50:82:9c:
                    6f:ff:70:56:73:f8:8b:50:a8:d2:b4:2b:30:50:10:
                    ae:bb:f7:9a:0c:a4:5c:f0:b2:1f:04:46:04:6d:cf:
                    4e:76:02:32:dd:00:08:9f:42:85:53:f7:08:b4:49:
                    e6:df:b8:3b:62:ae:0a:9e:ea:dd:8e:71:21:6b:c1:
                    f1:06:25:b2:1f:3e:13:d2:05:7a:36:bf:57:29:30:
                    30:09:85:6c:e9:38:73:27:26:4b:a3:e4:df:eb:5d:
                    18:06:ca:94:e3:72:72:fa:9e:a0:a3:14:05:3f:59:
                    c5:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:E3:7E:41:A1:36:A1:84:53:D8:DF:DD:24:5A:1A:2C:EC:90:EE:6D
            X509v3 Authority Key Identifier:
                keyid:C1:01:E1:EA:F9:D0:A5:01:CD:48:C3:EB:B0:E1:5D:A9:62:30:85:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQHh6vnQpQHNSMPrsOFdqWIwhQQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/03598f-2a33-455c-8599-e0d7a53adfa5/1/wQHh6vnQpQHNSMPrsOFdqWIwhQQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/03598f-2a33-455c-8599-e0d7a53adfa5/1/wQHh6vnQpQHNSMPrsOFdqWIwhQQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:68:99:15:96:d8:5c:ad:39:d5:98:53:3c:0a:d3:93:00:14:
         b1:fb:fb:54:ba:34:8f:45:b8:08:a9:3b:33:30:bc:8a:58:c6:
         cb:0a:c3:2f:c4:ef:f4:c8:77:6e:b0:ac:54:2d:f7:1a:cd:8b:
         ff:80:a7:63:a2:e6:69:36:5e:63:e8:4a:0c:37:8f:83:9e:5a:
         f1:48:c4:59:a8:cc:72:61:21:09:ce:ce:95:d3:a2:e3:e4:61:
         3b:5e:28:1c:e5:1d:1e:79:4c:98:e9:cd:d2:be:72:60:9e:ab:
         6c:f6:35:13:37:be:42:2b:94:e3:d2:93:7b:ac:9b:2b:67:16:
         6e:12:a3:76:07:6f:db:e9:df:68:93:88:52:1a:fb:35:b1:e1:
         ad:75:8f:f2:92:cf:67:97:f0:9b:64:46:3c:94:1e:28:9d:c8:
         b0:37:9c:e7:92:56:7e:4c:74:66:ce:d2:e0:ec:e5:c7:59:91:
         e4:3f:d5:69:6c:89:85:74:2c:7e:b9:44:eb:d6:0d:f5:b3:e3:
         2f:ed:32:f9:3f:a0:da:ff:be:ad:76:a8:9f:b9:e6:10:7a:af:
         c5:a7:95:c4:83:6f:bb:f6:50:9c:d2:29:57:27:ce:37:e5:a3:
         12:33:ba:f2:31:6b:60:13:ef:4d:36:ed:14:5f:c5:c6:0f:2e:
         b1:02:82:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----