Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/fa78bd-03bb-434c-a714-10ad5a8bfd08/1/AreYvxthGNs_OP5pudiqAnfASgs.mft
File:                     AreYvxthGNs_OP5pudiqAnfASgs.mft (raw, json)
Hash identifier:          gJs+mpuFr+sBDKO98EK+0Sdj3vgS4Es0i0eA0Fg7u8Q=
Subject key identifier:   15:50:28:A9:DE:6B:9A:8D:04:66:15:3A:29:88:B5:74:96:DE:6B:69
Authority key identifier: 02:B7:98:BF:1B:61:18:DB:3F:38:FE:69:B9:D8:AA:02:77:C0:4A:0B
Certificate issuer:       /CN=02b798bf1b6118db3f38fe69b9d8aa0277c04a0b
Certificate serial:       018AA7BD33F94B95852EB974AF2EF8A7E80F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AreYvxthGNs_OP5pudiqAnfASgs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/fa78bd-03bb-434c-a714-10ad5a8bfd08/1/AreYvxthGNs_OP5pudiqAnfASgs.mft
Manifest number:          04BC
Signing time:             Mon 18 Sep 2023 10:01:49 +0000
Manifest this update:     Mon 18 Sep 2023 10:01:49 +0000
Manifest next update:     Tue 19 Sep 2023 10:01:49 +0000
Files and hashes:         1: AreYvxthGNs_OP5pudiqAnfASgs.crl (hash: XvjdKetcCz+m6kS0ny0zYDFpUYS17DjDwFYOUbA7VZ8=)
                          2: M61-cf3jYcoMGjnwLOaQhDxywwM.roa (hash: tCvi3hug8z2lNOEKEFV68UcfenPoWi7yLR7elPH2L1Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:a7:bd:33:f9:4b:95:85:2e:b9:74:af:2e:f8:a7:e8:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02b798bf1b6118db3f38fe69b9d8aa0277c04a0b
        Validity
            Not Before: Sep 18 10:01:49 2023 GMT
            Not After : Sep 19 10:01:49 2023 GMT
        Subject: CN=155028a9de6b9a8d0466153a2988b57496de6b69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:58:bc:fd:c2:d3:ef:06:27:5e:ea:a8:d1:2e:
                    c7:a6:16:96:15:c9:e8:32:94:5f:f6:20:e3:5d:50:
                    6e:ca:9c:14:48:8f:fc:f0:57:8a:2e:92:08:45:08:
                    a4:24:02:ee:62:d7:8f:f0:57:3b:a6:f2:8d:21:57:
                    14:4f:8b:ac:5b:cf:64:35:cd:4b:00:83:be:72:5f:
                    7e:4c:0c:32:18:f0:4a:a3:ac:d3:b9:a4:5e:a1:9d:
                    0c:cb:a4:af:26:98:ca:8c:d5:34:65:17:5a:e1:41:
                    8f:7f:a8:67:eb:ec:a1:3c:d4:33:18:44:db:90:46:
                    80:d7:4d:6e:65:15:a8:31:dd:2e:60:2b:a0:0a:c7:
                    70:3d:03:68:e3:ae:3f:13:a1:47:a7:cc:4e:51:fc:
                    c1:c2:05:36:36:3e:22:a9:02:6b:31:44:3a:63:e8:
                    03:05:17:bb:9a:7c:fb:c8:5a:13:ff:fe:c8:b5:ed:
                    09:73:fb:f4:34:58:2d:89:ae:f7:9d:3e:73:13:be:
                    2d:1a:92:28:d3:5c:f6:13:60:4d:d8:c9:7d:02:f2:
                    ef:b8:a0:6f:cf:03:c9:1f:21:5a:ea:cf:22:65:51:
                    37:9a:d5:91:aa:0d:f5:05:04:32:9f:b5:32:81:72:
                    b6:0c:fb:32:71:3a:56:67:97:cc:33:d3:52:af:f3:
                    a4:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:50:28:A9:DE:6B:9A:8D:04:66:15:3A:29:88:B5:74:96:DE:6B:69
            X509v3 Authority Key Identifier:
                keyid:02:B7:98:BF:1B:61:18:DB:3F:38:FE:69:B9:D8:AA:02:77:C0:4A:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AreYvxthGNs_OP5pudiqAnfASgs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/fa78bd-03bb-434c-a714-10ad5a8bfd08/1/AreYvxthGNs_OP5pudiqAnfASgs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/fa78bd-03bb-434c-a714-10ad5a8bfd08/1/AreYvxthGNs_OP5pudiqAnfASgs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:8a:52:04:79:0a:ed:0f:76:de:87:00:68:ef:46:01:a4:46:
         61:de:72:a1:bc:e7:29:94:3f:1f:aa:07:7d:2e:c8:5b:1b:81:
         cc:71:72:87:fe:fb:da:d6:30:fb:cb:e3:05:c9:d2:db:e8:48:
         94:cb:b9:a2:bc:d9:83:bd:7f:c6:9e:8d:6a:50:0f:52:e5:89:
         5e:5f:87:d0:67:0a:57:f6:90:82:33:a6:5c:23:e7:b7:54:5d:
         aa:0d:34:55:d4:bf:29:55:b4:f8:44:b6:be:e2:4c:07:62:ca:
         3b:de:ba:81:79:14:18:ed:d8:f6:58:33:5b:b5:80:b7:18:06:
         f6:a2:fe:27:f8:55:f1:f1:17:b0:2c:41:27:fd:95:dd:3c:9b:
         65:b5:0c:9f:85:ea:be:3b:dc:44:86:0f:fb:c5:da:68:8e:1d:
         5d:ec:bc:27:0c:ec:3f:1a:6d:9a:18:eb:ef:2a:3e:af:23:ee:
         97:bd:15:94:28:41:20:0a:51:17:90:6d:7c:1d:75:af:b2:8f:
         f7:d2:9e:a5:fd:7d:a4:12:12:64:d4:34:41:c5:02:0f:8a:56:
         d9:2f:6f:b9:ad:9a:3e:15:f6:8c:da:f5:6e:58:92:6e:dc:1d:
         25:be:44:4e:d8:1f:72:85:04:af:8d:b4:d6:a0:5b:f8:ad:77:
         e6:ad:62:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----