Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a5a23c-a6f1-4cce-92bf-6e821357563e/1/r-yzens6yw5U7eBjv1fXLMWdlN8.mft
File:                     r-yzens6yw5U7eBjv1fXLMWdlN8.mft (raw, json)
Hash identifier:          G9YcM2LIyz/SOTDmXszXHVFViXCz2NP8UT8cS+6yEMk=
Subject key identifier:   00:3F:0E:A8:7F:1A:CF:A8:F4:54:B7:75:52:A2:FB:8E:7D:06:08:7C
Authority key identifier: AF:EC:B3:7A:7B:3A:CB:0E:54:ED:E0:63:BF:57:D7:2C:C5:9D:94:DF
Certificate issuer:       /CN=afecb37a7b3acb0e54ede063bf57d72cc59d94df
Certificate serial:       01894872F0439AA48DEE3C3ED0570C5048FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r-yzens6yw5U7eBjv1fXLMWdlN8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/a5a23c-a6f1-4cce-92bf-6e821357563e/1/r-yzens6yw5U7eBjv1fXLMWdlN8.mft
Manifest number:          0943
Signing time:             Wed 12 Jul 2023 04:53:59 +0000
Manifest this update:     Wed 12 Jul 2023 04:53:59 +0000
Manifest next update:     Thu 13 Jul 2023 04:53:59 +0000
Files and hashes:         1: VsyvCMRZJt9Gergcl8ycZDwatc8.roa (hash: cm4Z0hML2FpVC8VHJuGq0T0pnrVi5hMBiPEU4iAHb4Q=)
                          2: majt_X6yjx1v-iTmhGFHsGumBVM.roa (hash: Z52exw3EQudoTlGo/au/rDAFSyNUY8GubUo9XkSJ1S0=)
                          3: r-yzens6yw5U7eBjv1fXLMWdlN8.crl (hash: 3wUQbQVIa3glB9SVp6x+WbpvwIveNp7Pswf6A8Ki9hw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:48:72:f0:43:9a:a4:8d:ee:3c:3e:d0:57:0c:50:48:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afecb37a7b3acb0e54ede063bf57d72cc59d94df
        Validity
            Not Before: Jul 12 04:53:59 2023 GMT
            Not After : Jul 13 04:53:59 2023 GMT
        Subject: CN=003f0ea87f1acfa8f454b77552a2fb8e7d06087c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:93:ba:d5:2e:a0:fd:c2:32:17:e3:3d:9b:7e:
                    9b:04:ba:3a:79:76:29:ad:4b:f0:4b:4c:23:ed:f4:
                    e1:1e:c0:0e:52:60:f5:2c:97:fb:49:22:82:3d:d6:
                    34:f9:8b:5d:c1:4d:29:82:23:54:1b:8c:a4:c9:d0:
                    35:12:2e:5d:68:ef:ab:59:69:80:f7:5a:e6:fa:0e:
                    57:43:59:3f:7c:6f:62:ac:ae:6b:4b:9c:4b:a3:66:
                    99:a6:09:82:be:f1:c5:38:0f:39:ba:3e:48:0a:26:
                    20:b5:9b:a1:db:fc:f6:cc:24:5d:55:f0:17:b1:a6:
                    af:b5:f3:8c:ce:9c:e8:d8:82:f0:97:56:46:e7:af:
                    dd:a5:60:bf:07:b3:d4:1b:4c:c4:89:8d:12:1d:c4:
                    1b:e9:ea:1b:75:a0:fb:fe:3e:34:c6:93:b5:18:11:
                    5b:3d:f8:ac:4b:f5:fc:3f:69:fd:66:2b:1b:ae:c7:
                    18:ae:66:eb:74:6f:0b:6a:0e:be:ff:3d:aa:c0:90:
                    ef:40:f6:85:c8:0f:a6:39:28:57:60:a6:6f:08:56:
                    fb:9a:e3:75:37:5a:d2:70:71:21:aa:45:38:0a:7f:
                    d9:62:15:0a:b5:70:a6:54:3f:1c:5d:6f:77:a9:39:
                    c3:78:30:1e:5a:04:e4:a8:60:62:f1:37:e6:34:4f:
                    2d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:3F:0E:A8:7F:1A:CF:A8:F4:54:B7:75:52:A2:FB:8E:7D:06:08:7C
            X509v3 Authority Key Identifier:
                keyid:AF:EC:B3:7A:7B:3A:CB:0E:54:ED:E0:63:BF:57:D7:2C:C5:9D:94:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-yzens6yw5U7eBjv1fXLMWdlN8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a5a23c-a6f1-4cce-92bf-6e821357563e/1/r-yzens6yw5U7eBjv1fXLMWdlN8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a5a23c-a6f1-4cce-92bf-6e821357563e/1/r-yzens6yw5U7eBjv1fXLMWdlN8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:55:93:a6:ab:99:ad:1e:e0:3b:2f:7f:a8:61:f4:a5:c2:ea:
         d4:e4:80:f5:45:68:6c:0b:d8:53:cc:63:9e:ed:fd:c9:26:a9:
         ae:78:42:22:e2:f8:0d:ee:a6:f6:a3:71:3e:65:0e:53:a3:c2:
         f9:6c:9c:2c:54:f9:07:6a:75:cc:f7:92:e8:8a:2c:8a:9f:18:
         4c:a5:24:36:a7:6d:df:c5:52:7f:48:b3:63:33:f8:66:d5:fd:
         9f:9a:9b:c5:b9:6a:ab:0d:2e:c7:13:c0:95:b9:87:84:04:22:
         d8:4e:f2:57:f1:9f:17:02:60:f4:96:d8:30:88:73:5b:df:81:
         a3:54:42:55:64:c4:1f:aa:0f:33:3b:80:4b:38:76:a9:d2:58:
         dd:6e:bb:de:a1:4a:ef:f7:0d:14:88:b4:b7:27:a2:4e:d9:fc:
         f5:4f:0b:f7:ca:f7:45:49:5a:44:58:dc:0d:d7:ea:2d:c1:dd:
         24:cb:e7:75:ed:ef:3f:1e:dd:f0:91:f6:1e:3e:0c:46:20:20:
         ec:23:26:ab:92:95:34:d8:8c:f0:ba:0a:26:e4:bf:d7:5b:b1:
         97:57:64:ee:5b:15:39:48:d9:d5:e7:6c:0f:b9:de:3f:b1:eb:
         d2:aa:4e:0e:65:fe:12:a2:e3:24:2b:0b:da:79:84:de:db:be:
         cb:4c:de:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----