Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/42eb36-81a5-49cf-9b46-10c54f95a9d2/1/9Y8GUakK7PkaQsPMn8uVr5XtkXE.mft
File:                     9Y8GUakK7PkaQsPMn8uVr5XtkXE.mft (raw, json)
Hash identifier:          RpPxzv9b4/C3JHi0Om+1+oMfhCW8hRQydU8/4aeYz/Q=
Subject key identifier:   D3:CE:B5:BF:B7:FC:49:B7:CC:72:15:48:6A:25:07:8F:C4:AF:FD:B1
Authority key identifier: F5:8F:06:51:A9:0A:EC:F9:1A:42:C3:CC:9F:CB:95:AF:95:ED:91:71
Certificate issuer:       /CN=f58f0651a90aecf91a42c3cc9fcb95af95ed9171
Certificate serial:       018C62681A4DAA201F2AA4BC2636278A7E27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9Y8GUakK7PkaQsPMn8uVr5XtkXE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/42eb36-81a5-49cf-9b46-10c54f95a9d2/1/9Y8GUakK7PkaQsPMn8uVr5XtkXE.mft
Manifest number:          0910
Signing time:             Wed 13 Dec 2023 09:00:38 +0000
Manifest this update:     Wed 13 Dec 2023 09:00:38 +0000
Manifest next update:     Thu 14 Dec 2023 09:00:38 +0000
Files and hashes:         1: 9Y8GUakK7PkaQsPMn8uVr5XtkXE.crl (hash: 6SsD1Q4yQs5mLRDnp9y5qPMjPgTkCi0Tn9I5sdlcHtM=)
                          2: Gq2-jlk41YxEWOZ5owuXSs_CBaU.roa (hash: G1RuYwkiojfs+OHAAm3AtxzBqAAC1qPYe9bRbbW3p9I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:62:68:1a:4d:aa:20:1f:2a:a4:bc:26:36:27:8a:7e:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f58f0651a90aecf91a42c3cc9fcb95af95ed9171
        Validity
            Not Before: Dec 13 09:00:38 2023 GMT
            Not After : Dec 14 09:00:38 2023 GMT
        Subject: CN=d3ceb5bfb7fc49b7cc7215486a25078fc4affdb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d5:c4:47:7a:b8:83:68:63:b6:76:51:9a:b0:
                    59:94:e2:a8:ad:7c:2e:f2:f6:22:dc:9b:72:39:65:
                    7b:8d:7b:7d:64:65:51:dc:4c:b9:e4:5c:ae:0e:4a:
                    ad:e4:42:7c:ae:26:63:7a:15:d8:06:b9:2b:0a:84:
                    e6:3d:26:91:f4:fb:f9:7f:f6:eb:9f:af:ce:7b:87:
                    12:65:34:54:f0:60:52:f4:a9:da:e7:6f:5c:e0:d7:
                    8c:4e:55:01:a0:50:10:9a:f6:46:b6:12:16:16:dd:
                    0f:dc:62:c7:cf:fd:f2:70:59:7c:74:9c:ab:92:7b:
                    cb:74:d4:5b:e7:cf:64:e8:7f:a7:33:a9:a7:a3:3d:
                    59:fc:c8:c8:b9:35:ba:1e:65:0f:8e:07:20:aa:d6:
                    76:83:04:78:cf:25:c7:c6:bd:10:a5:b4:fd:0e:ed:
                    93:32:77:1f:93:ac:63:1b:36:51:d0:c2:d0:d2:a1:
                    ad:db:5c:25:a3:26:90:7e:33:b3:ff:95:99:2f:d7:
                    62:5f:d0:1d:cc:7a:2e:92:d8:f4:a5:0d:fc:c1:93:
                    c1:46:fd:fa:f3:9d:3d:a4:56:fb:73:87:d8:84:69:
                    c4:7d:f0:48:f7:b8:97:56:f6:67:87:6b:70:02:95:
                    4e:f3:48:14:24:89:47:28:65:33:ec:7d:f0:05:4e:
                    bf:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:CE:B5:BF:B7:FC:49:B7:CC:72:15:48:6A:25:07:8F:C4:AF:FD:B1
            X509v3 Authority Key Identifier:
                keyid:F5:8F:06:51:A9:0A:EC:F9:1A:42:C3:CC:9F:CB:95:AF:95:ED:91:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Y8GUakK7PkaQsPMn8uVr5XtkXE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/42eb36-81a5-49cf-9b46-10c54f95a9d2/1/9Y8GUakK7PkaQsPMn8uVr5XtkXE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/42eb36-81a5-49cf-9b46-10c54f95a9d2/1/9Y8GUakK7PkaQsPMn8uVr5XtkXE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:59:67:87:c1:07:96:06:e1:e5:ec:58:44:5c:22:41:03:10:
         8c:6a:12:40:07:2c:e3:42:11:ca:4a:42:69:88:b7:60:40:a8:
         32:79:89:c6:19:a8:88:66:87:95:b6:aa:da:a3:62:1b:52:09:
         b8:52:3f:96:86:6c:dd:8d:ad:e4:2b:2e:03:f9:ee:5d:f7:06:
         02:07:18:ed:13:c9:4b:67:da:90:8d:9b:b2:76:70:5e:76:b0:
         6a:1a:97:99:2f:ad:f2:f3:6e:90:76:7f:81:0b:bd:07:10:3d:
         dd:d4:fd:f9:47:81:00:b9:2b:bd:54:9c:08:1b:02:70:86:76:
         98:67:5b:28:f0:75:2c:f4:48:8f:92:3a:35:ff:0c:da:44:85:
         82:3e:78:18:6c:e9:70:3b:fa:91:2c:a7:32:c2:33:58:3e:81:
         d3:fb:de:ba:20:62:d8:81:83:79:cc:16:84:e0:ff:b4:26:b1:
         a9:b2:1b:ce:35:69:9d:12:9c:18:74:46:8d:67:ce:62:f3:fc:
         73:cb:9a:d3:96:4b:ad:0d:4c:8e:b4:64:52:f2:82:c1:a4:a4:
         b8:cb:1c:08:6f:9b:84:8e:96:8a:22:6d:3b:73:99:c5:90:b6:
         9d:9b:90:c5:d9:c1:4f:ea:32:b5:75:0c:2f:73:29:da:ed:ab:
         a0:0c:4c:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----