Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/8c0c82-1959-41aa-a827-06e864dfe253/1/C_J1r2mKIHB52bfX_PMoFaP2GS0.mft
File:                     C_J1r2mKIHB52bfX_PMoFaP2GS0.mft (raw, json)
Hash identifier:          oDg8SBODY0ics2LLF8Q+OnjZxnF5z0fChCRRIt4EZcQ=
Subject key identifier:   9B:13:AF:0D:5D:97:2B:AB:2B:9F:C0:B3:C5:18:73:75:ED:7D:98:74
Authority key identifier: 0B:F2:75:AF:69:8A:20:70:79:D9:B7:D7:FC:F3:28:15:A3:F6:19:2D
Certificate issuer:       /CN=0bf275af698a207079d9b7d7fcf32815a3f6192d
Certificate serial:       018BB9F7A8BBBDE627C690166C313B8CB153
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C_J1r2mKIHB52bfX_PMoFaP2GS0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/8c0c82-1959-41aa-a827-06e864dfe253/1/C_J1r2mKIHB52bfX_PMoFaP2GS0.mft
Manifest number:          098A
Signing time:             Fri 10 Nov 2023 16:01:37 +0000
Manifest this update:     Fri 10 Nov 2023 16:01:37 +0000
Manifest next update:     Sat 11 Nov 2023 16:01:37 +0000
Files and hashes:         1: C_J1r2mKIHB52bfX_PMoFaP2GS0.crl (hash: eNfnEYQ6fmk9DX00m5CaE3skHgFxQiVjzR08Prel7x0=)
                          2: OUIkOeoVEyVDwylHK8vqusv5PEo.roa (hash: htXOI41RJHqrxpfFWM2XPbLPMCqYj4mllUXc37WHQ+8=)
                          3: rnKeBfFZAzXnoX483gBeMLhR_io.roa (hash: LUFMzUPA7FS+Ym9fkyARWucxcvNGMLSTDzKkrhnwUIU=)
                          4: zThAS1GNgJJd_L2EO4ip6P-j49g.roa (hash: fgy0XrH+PJDooKbCWT3Fvr1MoBuv9c4f1fqkJV24JBI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:b9:f7:a8:bb:bd:e6:27:c6:90:16:6c:31:3b:8c:b1:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bf275af698a207079d9b7d7fcf32815a3f6192d
        Validity
            Not Before: Nov 10 16:01:37 2023 GMT
            Not After : Nov 11 16:01:37 2023 GMT
        Subject: CN=9b13af0d5d972bab2b9fc0b3c5187375ed7d9874
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:db:73:67:55:f1:71:87:22:05:2b:d9:12:88:
                    e2:6e:9d:72:1a:fe:50:a8:5d:08:29:21:5a:25:aa:
                    82:55:4b:8f:7c:3b:7d:16:33:0f:26:94:7e:82:84:
                    50:22:4e:c0:9a:8b:2c:a1:30:dc:5b:81:1f:ab:70:
                    6f:a1:e8:7e:c4:12:ea:6f:72:da:b5:61:cc:ec:73:
                    5f:ea:5a:d5:75:8c:6c:7c:ab:0f:1f:42:8b:a8:75:
                    f2:62:a5:a8:43:7f:bb:3e:65:34:b0:31:c5:95:27:
                    af:65:e9:c7:74:58:65:90:ca:36:24:67:02:73:ac:
                    d5:a0:5f:b5:32:36:a0:15:a1:1a:35:41:6d:02:1a:
                    17:95:a2:19:94:bf:e5:22:5f:10:9c:e2:0f:00:ec:
                    2d:e4:be:2c:67:6c:41:47:22:c5:a7:86:6a:6d:ae:
                    cc:e2:08:3b:90:e9:cf:80:45:d9:b2:15:c3:f2:f5:
                    80:fe:fb:d2:b2:79:9b:3e:7e:9a:91:d1:c7:78:24:
                    e8:b7:c1:7d:ad:01:14:ab:dc:57:0b:79:22:dd:74:
                    9c:27:a7:b5:db:82:d7:e3:11:c6:5a:d2:de:58:a8:
                    9c:00:a0:87:1f:ca:23:de:47:a8:f0:d5:99:27:6d:
                    58:d4:3b:b3:f9:0c:e1:96:52:6f:82:47:85:f2:26:
                    f6:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:13:AF:0D:5D:97:2B:AB:2B:9F:C0:B3:C5:18:73:75:ED:7D:98:74
            X509v3 Authority Key Identifier:
                keyid:0B:F2:75:AF:69:8A:20:70:79:D9:B7:D7:FC:F3:28:15:A3:F6:19:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_J1r2mKIHB52bfX_PMoFaP2GS0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/8c0c82-1959-41aa-a827-06e864dfe253/1/C_J1r2mKIHB52bfX_PMoFaP2GS0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/8c0c82-1959-41aa-a827-06e864dfe253/1/C_J1r2mKIHB52bfX_PMoFaP2GS0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:20:e0:07:1d:b3:65:82:5e:5a:17:1a:2a:f9:8f:07:48:48:
         29:33:a6:c0:16:64:5d:db:e1:ea:9a:16:d2:38:ba:8f:3c:59:
         a1:5a:b7:20:ef:60:1c:fc:37:47:9e:77:bc:80:2e:4a:cb:52:
         09:03:35:71:47:57:4b:2f:e1:36:c2:fd:cb:fa:11:e5:59:3c:
         56:e7:bb:7a:fe:8c:0f:32:b0:07:bf:c0:fa:ed:c3:6d:38:3a:
         7e:3f:2e:b8:aa:4d:3d:01:01:2f:09:ee:fe:8a:77:62:6f:e1:
         b4:8b:e8:e7:31:60:e2:f4:75:0e:28:b4:c9:cb:1f:1e:de:ad:
         6d:4d:b6:af:9e:16:89:1d:43:60:c8:92:43:a6:9a:2d:5b:31:
         15:58:e4:47:e1:50:0e:41:ca:54:e5:de:8e:25:2a:dc:d9:10:
         7b:87:d5:7c:16:d5:7f:e0:c3:d4:8c:e4:63:07:f5:03:f0:75:
         4a:aa:a0:10:89:44:ff:a1:86:82:70:21:f5:0a:be:35:b7:e6:
         af:c4:74:09:24:c7:a6:5f:f7:93:69:ca:a5:b6:ff:3b:3d:4c:
         43:8d:35:66:07:4f:50:cf:8f:61:02:e8:b6:12:73:c9:e1:f1:
         37:5e:49:be:a7:c0:d9:fb:ed:d2:a6:a3:e4:bb:39:19:71:4b:
         c9:72:c3:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----