Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c95480-2e26-4662-a7c4-70c8a4bcab0d/1/n9EVj540ARwyoBAlYaMx1k3YqpY.mft
File:                     n9EVj540ARwyoBAlYaMx1k3YqpY.mft (raw, json)
Hash identifier:          ENQYn3rYYYogmKZAi0b4a7xjtt+iUXEgGSYbagfO1eU=
Subject key identifier:   00:00:10:E3:FF:54:96:4F:FB:FD:5F:E2:5B:78:08:5B:63:79:E4:23
Authority key identifier: 9F:D1:15:8F:9E:34:01:1C:32:A0:10:25:61:A3:31:D6:4D:D8:AA:96
Certificate issuer:       /CN=9fd1158f9e34011c32a0102561a331d64dd8aa96
Certificate serial:       018C14BAB7A807823B0087190574E8DBE560
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n9EVj540ARwyoBAlYaMx1k3YqpY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/c95480-2e26-4662-a7c4-70c8a4bcab0d/1/n9EVj540ARwyoBAlYaMx1k3YqpY.mft
Manifest number:          08F0
Signing time:             Tue 28 Nov 2023 07:00:30 +0000
Manifest this update:     Tue 28 Nov 2023 07:00:30 +0000
Manifest next update:     Wed 29 Nov 2023 07:00:30 +0000
Files and hashes:         1: QjpPWmk9AG5jaVTUqp1VpAGdzxg.roa (hash: 5lpwS0YJgnwBLBnMtcTEnVmQwwfN4alk/G0zyKFydfo=)
                          2: n9EVj540ARwyoBAlYaMx1k3YqpY.crl (hash: Ccs33+774WO96TrihrUtyLuxH2uhDLuRsH+/s9mdDzc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:14:ba:b7:a8:07:82:3b:00:87:19:05:74:e8:db:e5:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fd1158f9e34011c32a0102561a331d64dd8aa96
        Validity
            Not Before: Nov 28 07:00:30 2023 GMT
            Not After : Nov 29 07:00:30 2023 GMT
        Subject: CN=000010e3ff54964ffbfd5fe25b78085b6379e423
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7b:bf:80:2e:01:10:a8:07:55:e7:b6:76:6c:
                    87:ac:51:49:06:02:2c:52:06:53:c1:2a:13:67:ab:
                    9c:07:9f:79:15:11:77:54:fe:df:77:46:84:d8:13:
                    73:8a:87:e0:d0:0f:dd:0f:50:49:c1:f7:9a:81:d8:
                    68:b9:c6:ba:ef:58:31:ab:76:4f:bd:25:93:53:dd:
                    f5:74:f7:7d:52:0e:ad:77:de:8e:fc:30:e6:ad:8b:
                    70:e7:8c:d5:3b:22:dd:36:21:bc:96:56:20:f8:99:
                    38:58:47:f1:8f:b5:31:68:09:c9:b5:e5:16:7f:fa:
                    39:0c:1a:6f:d8:82:bb:21:32:76:eb:f0:b1:fc:0c:
                    cb:f4:cf:5a:c2:6f:29:98:d7:1a:96:7e:23:df:81:
                    f8:fe:2b:58:29:33:32:11:6d:4c:ed:f7:6f:8a:98:
                    82:06:11:67:c0:24:60:d3:6b:54:52:78:fd:d0:91:
                    63:6a:0e:54:94:99:70:bb:9d:34:d3:74:d8:1a:cc:
                    ef:65:25:ce:5c:93:af:74:25:d7:af:bf:b6:ee:ae:
                    a6:db:f1:77:cc:7e:c6:ca:c1:90:fe:bc:8b:4c:9a:
                    b4:81:d3:b7:12:21:18:d4:3e:2f:00:61:82:e0:29:
                    b6:76:0d:b9:e9:e6:b4:e9:1f:70:4d:b8:b0:12:70:
                    4c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:00:10:E3:FF:54:96:4F:FB:FD:5F:E2:5B:78:08:5B:63:79:E4:23
            X509v3 Authority Key Identifier:
                keyid:9F:D1:15:8F:9E:34:01:1C:32:A0:10:25:61:A3:31:D6:4D:D8:AA:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n9EVj540ARwyoBAlYaMx1k3YqpY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c95480-2e26-4662-a7c4-70c8a4bcab0d/1/n9EVj540ARwyoBAlYaMx1k3YqpY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c95480-2e26-4662-a7c4-70c8a4bcab0d/1/n9EVj540ARwyoBAlYaMx1k3YqpY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:4e:ef:f3:67:b4:bb:d0:aa:95:c6:bb:f8:0d:07:c5:c7:da:
         d3:72:7a:88:15:1e:73:88:f5:0b:b8:35:ca:49:43:47:50:4b:
         df:72:a7:7c:a0:bf:b2:55:f3:a6:c6:06:b7:55:81:91:e3:01:
         9c:c0:99:45:8c:ad:17:a1:4e:3c:ad:65:5d:84:12:a6:28:02:
         55:40:42:47:12:26:23:de:e1:43:ef:64:51:bc:8c:25:3b:b9:
         67:f2:86:6e:3c:42:43:18:a7:07:95:50:ed:64:12:6a:93:9e:
         3d:21:d9:ac:01:b5:f8:5a:da:cb:fe:46:52:40:66:db:8e:84:
         7e:11:e0:a4:8b:ee:20:0f:aa:12:2c:2d:4e:3f:1b:a4:97:40:
         7b:85:1b:4b:c9:5d:5f:cb:0a:15:49:92:87:6b:f9:f4:cd:d0:
         f2:db:7b:a6:df:ff:32:45:35:ec:59:59:07:95:cb:db:06:dc:
         75:e5:f5:70:db:18:ce:c6:f9:fd:0d:c3:1d:e7:57:10:c5:bc:
         8d:ea:33:9a:9c:60:cb:43:ee:fa:1d:db:6b:e0:06:f1:a6:a2:
         94:55:20:59:33:cf:92:8f:91:f5:a4:07:c1:1b:35:03:10:3f:
         1c:c7:0b:a8:a6:45:7f:b5:64:a0:c7:83:c8:61:ea:11:77:d1:
         de:55:70:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----