Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/b9c561-756c-4963-bba5-c5d9c6ab043f/1/fQv-pokBa-z4mjY4ZnzOfd9w2dc.mft
File:                     fQv-pokBa-z4mjY4ZnzOfd9w2dc.mft (raw, json)
Hash identifier:          ndiVvGP+PFs2TbiIQ16Hda0hQA1PjTzqMvIvOnKpYl8=
Subject key identifier:   A3:EB:8E:E4:A8:B8:F2:1D:3B:E6:B0:27:76:C8:E9:55:A5:9D:B1:EA
Authority key identifier: 7D:0B:FE:A6:89:01:6B:EC:F8:9A:36:38:66:7C:CE:7D:DF:70:D9:D7
Certificate issuer:       /CN=7d0bfea689016becf89a3638667cce7ddf70d9d7
Certificate serial:       018B6A5B4DD74B2097D056743FD101C80738
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fQv-pokBa-z4mjY4ZnzOfd9w2dc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/b9c561-756c-4963-bba5-c5d9c6ab043f/1/fQv-pokBa-z4mjY4ZnzOfd9w2dc.mft
Manifest number:          01D0
Signing time:             Thu 26 Oct 2023 05:00:50 +0000
Manifest this update:     Thu 26 Oct 2023 05:00:50 +0000
Manifest next update:     Fri 27 Oct 2023 05:00:50 +0000
Files and hashes:         1: fQv-pokBa-z4mjY4ZnzOfd9w2dc.crl (hash: tsoFqvF432hjGnpD7K4vxyo4nVIIqLz83iOsk1D7W0A=)
                          2: klEEJjJwn3lRgFfyAsOwia2ztds.roa (hash: ze8ev3Ooi67/2Xkr7n30Mi+Fi0r4/9Z8vXAEkJhGMSk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:6a:5b:4d:d7:4b:20:97:d0:56:74:3f:d1:01:c8:07:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d0bfea689016becf89a3638667cce7ddf70d9d7
        Validity
            Not Before: Oct 26 05:00:50 2023 GMT
            Not After : Oct 27 05:00:50 2023 GMT
        Subject: CN=a3eb8ee4a8b8f21d3be6b02776c8e955a59db1ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d3:5e:03:81:6c:4e:68:19:84:4e:4f:ab:04:
                    fd:29:3b:3f:61:a0:40:58:c0:e0:e8:5b:3c:f2:ec:
                    e0:f7:6e:d3:89:2e:1c:09:6c:24:56:e6:87:39:55:
                    f6:e0:e5:5b:b0:60:ba:1b:1b:a5:51:53:97:14:4d:
                    15:70:2d:71:3e:3b:be:82:52:9d:77:c1:6b:98:f2:
                    1f:ff:2a:d5:14:67:a7:e5:a5:cd:96:61:7b:bc:b4:
                    9e:a5:e9:08:a2:1f:e7:00:d4:23:d4:0c:a3:7e:28:
                    3f:6d:3d:c2:0a:41:74:15:53:8d:9c:e1:bc:34:20:
                    3f:d7:b9:02:82:bf:8d:ca:06:dd:d3:81:47:43:79:
                    69:8e:81:12:ba:25:97:d1:8e:73:af:c5:8f:51:81:
                    23:bb:d0:44:27:88:3c:76:07:c1:50:40:68:d9:18:
                    41:d9:fe:68:96:d4:bb:f2:05:8c:2b:74:20:9f:f8:
                    4e:51:87:c3:13:1a:29:61:00:3e:32:6d:09:3a:84:
                    94:7c:5d:e0:b6:da:cf:89:57:77:cd:76:11:d9:b5:
                    a3:5e:d3:de:57:5e:e5:f4:0c:fe:12:e7:ca:96:0d:
                    4a:80:57:e8:3f:e3:b8:5c:12:c4:c8:18:ab:64:d1:
                    dc:f9:5f:b0:23:14:02:2c:a1:00:bf:2d:bc:79:9f:
                    93:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:EB:8E:E4:A8:B8:F2:1D:3B:E6:B0:27:76:C8:E9:55:A5:9D:B1:EA
            X509v3 Authority Key Identifier:
                keyid:7D:0B:FE:A6:89:01:6B:EC:F8:9A:36:38:66:7C:CE:7D:DF:70:D9:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQv-pokBa-z4mjY4ZnzOfd9w2dc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/b9c561-756c-4963-bba5-c5d9c6ab043f/1/fQv-pokBa-z4mjY4ZnzOfd9w2dc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/b9c561-756c-4963-bba5-c5d9c6ab043f/1/fQv-pokBa-z4mjY4ZnzOfd9w2dc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:35:22:1c:fe:78:71:e5:9e:71:e6:a4:b1:95:d4:5e:5b:b6:
         b7:1c:fe:41:ba:49:d4:89:19:c1:dc:29:28:6f:c2:73:a6:12:
         71:45:62:6d:9c:19:82:c8:cf:ae:8e:6c:04:a3:a8:88:31:9a:
         17:0b:7d:bb:c2:3c:12:6f:b2:9f:47:25:38:d5:e2:42:03:25:
         ce:bf:56:97:b3:a7:32:f8:27:90:a7:77:a9:f5:7a:ee:95:9f:
         fd:d2:4a:6d:ed:5d:8f:4c:d9:05:30:e5:ab:d1:b9:f4:51:fb:
         87:d0:b4:13:5e:7c:e9:ad:84:25:dd:a0:bc:23:d6:f4:29:a5:
         f2:c3:e3:87:0f:ba:33:92:1f:1b:35:8b:61:77:c1:38:82:1e:
         9d:68:41:49:3f:57:00:4c:9e:56:17:01:60:50:af:f5:63:a1:
         70:a7:16:33:42:7f:55:81:4c:b4:62:4e:21:a7:de:d1:49:00:
         04:6a:a2:31:1a:5f:43:b3:4c:6d:97:c3:21:90:94:11:42:8a:
         99:de:b5:ef:4c:ec:05:4e:8f:70:4b:c6:8e:4a:96:eb:b3:da:
         f2:32:a4:97:7a:c4:74:d0:ba:f6:72:52:71:7c:d3:89:85:c6:
         1b:f5:df:cd:b2:5b:5c:0a:a3:34:84:36:7d:6d:86:dc:05:75:
         fe:bb:3e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----