Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/86abd5-f998-4781-94b2-0824ab37a4b7/1/wn_-Y9ZnxHnPNNzAg7t9Ifusqbo.mft
File:                     wn_-Y9ZnxHnPNNzAg7t9Ifusqbo.mft (raw, json)
Hash identifier:          qfsaEm/uzS7r/JORwx4PZwKMatPDX0wbdvxmqGAWEsE=
Subject key identifier:   9F:FB:EE:66:8D:8B:4F:71:EB:57:C0:12:02:0F:04:13:99:2D:09:6C
Authority key identifier: C2:7F:FE:63:D6:67:C4:79:CF:34:DC:C0:83:BB:7D:21:FB:AC:A9:BA
Certificate issuer:       /CN=c27ffe63d667c479cf34dcc083bb7d21fbaca9ba
Certificate serial:       018BC6328928AFCE1CDFC4D25FBB1777405C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wn_-Y9ZnxHnPNNzAg7t9Ifusqbo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/86abd5-f998-4781-94b2-0824ab37a4b7/1/wn_-Y9ZnxHnPNNzAg7t9Ifusqbo.mft
Manifest number:          0EDE
Signing time:             Mon 13 Nov 2023 01:01:22 +0000
Manifest this update:     Mon 13 Nov 2023 01:01:22 +0000
Manifest next update:     Tue 14 Nov 2023 01:01:22 +0000
Files and hashes:         1: 5O_niBJomNM-_Xz4Ucv2waL_ktE.roa (hash: QRO9gbMoIivAS1pG/LLFoBJuYDJvTl1Bvrs5/XMLYP8=)
                          2: wn_-Y9ZnxHnPNNzAg7t9Ifusqbo.crl (hash: MBa61tD47DKKUa4xyT8olwSvRAXgqCj+enCtdJvKT9M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:c6:32:89:28:af:ce:1c:df:c4:d2:5f:bb:17:77:40:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c27ffe63d667c479cf34dcc083bb7d21fbaca9ba
        Validity
            Not Before: Nov 13 01:01:22 2023 GMT
            Not After : Nov 14 01:01:22 2023 GMT
        Subject: CN=9ffbee668d8b4f71eb57c012020f0413992d096c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:26:9b:d7:b7:53:16:cf:f9:af:02:ad:d2:8b:
                    94:19:af:47:12:b1:95:23:2d:92:62:9d:6e:52:03:
                    f4:76:92:c7:20:48:3a:a6:56:06:bc:93:88:e5:2c:
                    ff:b6:53:45:7b:6b:d7:46:c7:6d:ff:1c:3b:90:29:
                    d0:58:69:94:b4:72:77:99:65:d6:f9:0b:60:c0:a6:
                    c3:16:0d:0b:d6:3c:de:2c:b5:bb:3f:5b:16:23:45:
                    c2:4b:3e:2f:5a:2c:d3:e3:6a:6a:1c:09:ff:29:06:
                    d3:e3:d7:bb:b5:a4:b4:c0:b9:7d:34:32:e7:d4:f3:
                    97:2c:b2:fd:64:b4:eb:a0:71:c9:81:7e:c8:5b:80:
                    3a:de:98:cc:54:ea:e4:ef:af:d4:f9:02:0e:f9:16:
                    e1:bc:bc:ff:ee:39:f7:d8:dd:b3:0c:e5:d4:63:43:
                    8e:fe:bd:b6:5b:bb:5a:9c:43:89:e6:65:aa:34:ca:
                    9b:4c:a5:f1:30:9a:49:7d:82:57:bb:ae:b8:5d:d7:
                    2e:71:41:e1:38:74:90:10:62:07:38:fa:50:f7:1d:
                    2f:08:21:6d:39:8a:cc:ec:76:fc:c0:53:23:c9:81:
                    c3:08:49:42:5d:4b:5a:af:05:4f:c8:40:86:dc:fd:
                    e6:83:51:f0:4e:9f:b3:90:07:02:34:c6:a2:95:66:
                    bf:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:FB:EE:66:8D:8B:4F:71:EB:57:C0:12:02:0F:04:13:99:2D:09:6C
            X509v3 Authority Key Identifier:
                keyid:C2:7F:FE:63:D6:67:C4:79:CF:34:DC:C0:83:BB:7D:21:FB:AC:A9:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wn_-Y9ZnxHnPNNzAg7t9Ifusqbo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/86abd5-f998-4781-94b2-0824ab37a4b7/1/wn_-Y9ZnxHnPNNzAg7t9Ifusqbo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/86abd5-f998-4781-94b2-0824ab37a4b7/1/wn_-Y9ZnxHnPNNzAg7t9Ifusqbo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:bd:0d:63:cf:7c:42:69:d8:01:ff:83:0a:e3:bb:08:24:71:
         0f:86:04:f1:a9:61:27:6e:38:fc:5c:33:a4:b8:d8:cf:67:2b:
         b0:dc:b2:c5:04:8c:5f:ac:b8:55:07:6c:82:22:c6:75:90:bd:
         52:b1:a1:58:7d:c3:2f:c0:0e:48:02:0a:a7:4c:67:05:ca:13:
         36:70:8d:2d:45:57:5c:20:ac:eb:83:e2:05:a8:42:90:a0:4f:
         3a:60:a1:6e:27:5f:91:43:ec:10:f7:54:cf:5b:30:ba:04:ff:
         2c:ae:12:c4:5b:42:64:37:ef:6a:5b:56:fa:24:47:86:a2:f0:
         d7:99:b0:2d:30:d9:4a:92:74:79:d1:10:b2:eb:90:ef:71:9c:
         f3:72:34:f1:a8:5d:fc:3e:75:af:f2:d8:7f:82:b2:bc:7a:2f:
         10:c0:3c:d0:bc:d0:a7:0a:b0:0a:1b:f6:41:dc:75:a1:3f:a4:
         d4:69:3e:52:92:b6:0e:cb:f5:40:cd:b8:c5:1e:86:f9:43:c6:
         85:cc:9f:61:95:7d:24:a1:70:0b:b3:82:70:67:3d:96:59:5c:
         4b:3c:03:f6:6a:6a:c3:ed:53:62:73:68:b7:ef:4c:36:52:21:
         02:08:06:28:1e:2a:f1:29:83:d0:42:92:c0:42:45:c9:1b:d8:
         65:98:ca:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----