Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/d4d68a-e7bd-4938-ad50-32fbf47781d3/1/XqVTFFFzSWH8TonO8_CcdqM_Qj8.mft
File:                     XqVTFFFzSWH8TonO8_CcdqM_Qj8.mft (raw, json)
Hash identifier:          dGGWgotcWGWKQOJ1QgVEazIr5j0hcWvNzvrkBSlGu50=
Subject key identifier:   A1:B5:EA:96:2D:85:E4:78:36:DD:DB:B4:40:C9:5F:D8:F0:D9:F6:58
Authority key identifier: 5E:A5:53:14:51:73:49:61:FC:4E:89:CE:F3:F0:9C:76:A3:3F:42:3F
Certificate issuer:       /CN=5ea5531451734961fc4e89cef3f09c76a33f423f
Certificate serial:       018BAC71E6FFDB34E7027EAD724D4DB0B184
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XqVTFFFzSWH8TonO8_CcdqM_Qj8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/d4d68a-e7bd-4938-ad50-32fbf47781d3/1/XqVTFFFzSWH8TonO8_CcdqM_Qj8.mft
Manifest number:          0865
Signing time:             Wed 08 Nov 2023 01:00:27 +0000
Manifest this update:     Wed 08 Nov 2023 01:00:27 +0000
Manifest next update:     Thu 09 Nov 2023 01:00:27 +0000
Files and hashes:         1: XqVTFFFzSWH8TonO8_CcdqM_Qj8.crl (hash: /S8KcfyEhAtePvF6kSlSQl4nU9GpjjXVhK1rjscjBZE=)
                          2: oRbUu1bK3dbruG2tW5kHZrQ4dMY.roa (hash: ubcnA1GeF1FtZ2wuCUMGUZhaMTK7fCZ7FOIPhtihutw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:ac:71:e6:ff:db:34:e7:02:7e:ad:72:4d:4d:b0:b1:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ea5531451734961fc4e89cef3f09c76a33f423f
        Validity
            Not Before: Nov  8 01:00:27 2023 GMT
            Not After : Nov  9 01:00:27 2023 GMT
        Subject: CN=a1b5ea962d85e47836dddbb440c95fd8f0d9f658
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:fb:61:8f:d8:87:7c:ca:e6:58:27:c6:11:5b:
                    83:f6:e4:d9:2e:60:98:5f:a5:23:3e:a9:70:05:77:
                    37:7a:f4:64:d2:b0:7e:fa:c5:30:96:1a:a3:50:cb:
                    a8:8f:4c:8a:81:ad:32:b5:92:e7:ed:ff:ed:02:59:
                    c6:08:9c:1f:49:0c:4c:7a:2c:39:3f:47:41:91:c9:
                    80:f8:86:09:e8:28:af:78:60:0c:bd:49:16:63:ba:
                    50:ec:06:95:71:e6:d9:10:ed:ff:af:2a:da:ba:44:
                    c8:c1:68:36:a9:3d:27:9a:f4:d2:9b:de:77:02:a0:
                    aa:32:a5:a5:4a:be:19:b6:3e:fa:86:cc:19:fd:e5:
                    2e:48:92:aa:84:df:7c:7e:fd:25:0b:7f:3d:0d:d3:
                    73:7c:69:4d:fc:87:88:dd:06:92:51:7b:37:99:89:
                    71:ba:06:1a:f7:7d:5e:70:b2:87:96:c4:88:59:e9:
                    44:ff:1a:89:65:fe:ff:79:29:55:bc:61:91:85:1c:
                    9f:cc:03:7f:15:af:cf:a0:f3:b8:4d:fb:a3:26:f8:
                    88:35:7c:18:1c:c8:b3:00:ac:81:58:e8:76:77:e9:
                    75:df:a8:58:88:1c:17:4f:e0:30:af:94:53:cc:7f:
                    b8:46:45:24:b7:91:7b:5a:96:1f:67:b0:ef:c4:9c:
                    60:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:B5:EA:96:2D:85:E4:78:36:DD:DB:B4:40:C9:5F:D8:F0:D9:F6:58
            X509v3 Authority Key Identifier:
                keyid:5E:A5:53:14:51:73:49:61:FC:4E:89:CE:F3:F0:9C:76:A3:3F:42:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XqVTFFFzSWH8TonO8_CcdqM_Qj8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d4d68a-e7bd-4938-ad50-32fbf47781d3/1/XqVTFFFzSWH8TonO8_CcdqM_Qj8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d4d68a-e7bd-4938-ad50-32fbf47781d3/1/XqVTFFFzSWH8TonO8_CcdqM_Qj8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:fa:b4:19:c0:9a:38:ea:76:da:27:dc:48:62:47:c2:82:ae:
         8f:59:c4:79:c0:8a:09:e1:65:82:14:d9:ad:07:d8:69:07:3f:
         2a:62:91:d4:24:4d:3c:00:fb:e6:23:79:7f:e8:0a:cb:e0:e0:
         a0:ef:22:56:3c:06:a9:e2:ce:cb:ca:19:72:1d:ea:65:ef:31:
         cd:1e:5a:1c:8d:0d:69:71:f6:87:fc:08:c3:be:53:1b:f2:0c:
         39:f4:72:9e:1f:57:72:7d:72:32:49:d2:b6:fb:6f:d9:e8:41:
         0b:2b:91:46:4c:30:7d:9b:21:41:64:af:cb:ac:3d:a7:f4:5b:
         1a:6b:3e:f5:7e:97:c0:ef:4c:70:5a:7a:3c:32:e5:ae:5f:51:
         50:58:fc:6a:c3:9d:66:74:b4:5f:44:eb:c5:81:05:21:f4:fb:
         cf:9f:00:95:82:cf:f6:bc:3e:fc:35:34:08:eb:32:0c:bf:2f:
         b2:51:45:7c:7f:60:39:da:ce:a5:99:ac:54:c4:73:c9:17:2a:
         83:e8:6c:e4:f9:70:55:25:73:54:b0:62:86:92:a1:a8:6e:65:
         49:8f:4d:3c:50:da:9f:fb:f0:4a:3a:67:b5:a9:74:d2:29:fb:
         f1:cd:29:5b:b3:a6:45:d3:a2:0e:ed:41:b9:20:3a:87:e6:03:
         ce:36:d5:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:03 2023 by rpki-client on console.sobornost.net