Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/efc26d-a835-469c-8a14-bc43b309e2c6/1/IqltP2kyPQi0zLmVKUrVC0Ieaw0.mft
File:                     IqltP2kyPQi0zLmVKUrVC0Ieaw0.mft (raw, json)
Hash identifier:          8IDBGXWeggWOnpAaJTwBXTBfwfHheTVuj0SRuj0bvGc=
Subject key identifier:   1E:18:EA:87:8D:AE:69:0E:64:56:E7:CE:AB:50:66:0F:DE:BA:EB:09
Authority key identifier: 22:A9:6D:3F:69:32:3D:08:B4:CC:B9:95:29:4A:D5:0B:42:1E:6B:0D
Certificate issuer:       /CN=22a96d3f69323d08b4ccb995294ad50b421e6b0d
Certificate serial:       018CEE86A69D492FBDF0AF7D8A5D0818374C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IqltP2kyPQi0zLmVKUrVC0Ieaw0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/efc26d-a835-469c-8a14-bc43b309e2c6/1/IqltP2kyPQi0zLmVKUrVC0Ieaw0.mft
Manifest number:          BA
Signing time:             Tue 09 Jan 2024 14:00:50 +0000
Manifest this update:     Tue 09 Jan 2024 14:00:50 +0000
Manifest next update:     Wed 10 Jan 2024 14:00:50 +0000
Files and hashes:         1: 1-jZhMz783i_SlcHXjpja44ifVcQ.roa (hash: YrbtOWXSHQv/A7zIkBh1zb8Zk2L0zWvWPksiEsKJOpA=)
                          2: FC3w5rLrHddsA2aesaaUGgl5a5s.roa (hash: SpeRCYDczSPJ3ICTbgMbnMQ9AAbzaK2Zx6aqokc6TRc=)
                          3: HnOQVTp8XO9LQpWwy1SgzzFu5gM.roa (hash: 4PCbNP+oJYxsJOmZ1KEbY2fQGNzc2ZH2QSA5JFgOUEs=)
                          4: IqltP2kyPQi0zLmVKUrVC0Ieaw0.crl (hash: v7AjMGJ4fS2idljvuHNRbVkqDQctXhDUjZPFUmwLqO4=)
                          5: eyY4ar9baW5tFh8rWpYIpveNKrE.roa (hash: AnaKbk34NBsXWqO/tDXMChhyfdwmMY2RBYjOKbFh8VI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ee:86:a6:9d:49:2f:bd:f0:af:7d:8a:5d:08:18:37:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22a96d3f69323d08b4ccb995294ad50b421e6b0d
        Validity
            Not Before: Jan  9 14:00:50 2024 GMT
            Not After : Jan 10 14:00:50 2024 GMT
        Subject: CN=1e18ea878dae690e6456e7ceab50660fdebaeb09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b4:30:f6:f6:fa:dd:ba:32:db:aa:cc:0d:43:
                    bc:9f:ca:50:09:d9:0e:88:24:c3:da:58:64:13:92:
                    ad:3e:8b:c0:1b:00:37:96:e0:4d:a2:4c:5e:95:5f:
                    47:a8:fc:1b:7d:02:7f:03:19:fd:24:d9:0c:0f:7a:
                    32:e6:a1:cb:86:fe:a1:64:cb:51:51:ac:6a:61:dc:
                    cd:10:ab:f2:52:60:cb:5d:79:1c:6c:94:0a:42:e0:
                    6d:88:f5:d0:58:f6:6f:a4:66:f7:0f:d6:bb:0d:00:
                    08:91:14:f3:95:57:b1:2d:c4:5f:db:d0:75:24:cd:
                    b3:b6:da:e8:42:5f:72:f9:93:08:4d:e4:cf:0c:49:
                    3a:85:60:55:73:67:30:c3:b2:c8:a7:e8:44:af:7a:
                    0a:74:68:bc:ba:c4:e3:e1:15:88:f2:82:6c:8f:3e:
                    83:27:02:de:a9:83:fb:a6:a0:2f:7e:da:ad:bd:bb:
                    86:18:95:7a:27:5a:a5:89:64:d0:2c:62:85:fc:0a:
                    c5:1a:4e:88:8c:fa:9e:c1:a0:46:b0:3c:8e:13:45:
                    10:e5:b5:f6:e8:8d:89:33:fa:95:cb:83:2b:1b:28:
                    ec:e5:10:97:7e:bf:af:c7:8e:e6:15:5c:ed:6f:d8:
                    d7:ee:03:f9:60:4c:3b:41:18:00:9d:71:81:6f:72:
                    28:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:18:EA:87:8D:AE:69:0E:64:56:E7:CE:AB:50:66:0F:DE:BA:EB:09
            X509v3 Authority Key Identifier:
                keyid:22:A9:6D:3F:69:32:3D:08:B4:CC:B9:95:29:4A:D5:0B:42:1E:6B:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqltP2kyPQi0zLmVKUrVC0Ieaw0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/efc26d-a835-469c-8a14-bc43b309e2c6/1/IqltP2kyPQi0zLmVKUrVC0Ieaw0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/efc26d-a835-469c-8a14-bc43b309e2c6/1/IqltP2kyPQi0zLmVKUrVC0Ieaw0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:c3:47:64:3c:2e:7d:02:a7:43:19:ac:f3:70:0e:bc:b5:4b:
         df:c2:15:1c:37:b5:a0:66:55:af:f2:a9:31:59:11:34:0d:bc:
         ce:00:01:a0:0e:31:8d:86:93:2e:69:60:5f:f1:6c:b8:6d:bc:
         43:c1:66:9a:ca:c9:9b:df:98:ad:fb:20:90:53:44:16:9a:c7:
         ac:7e:3d:d6:38:41:65:e3:ad:1f:c2:44:13:b7:34:6a:b8:e4:
         55:60:6d:3b:56:bf:e2:12:66:6a:8d:a4:ca:58:98:65:f3:c6:
         2b:21:82:8f:c3:f2:04:b6:17:c7:84:e2:2d:27:bd:e8:57:fe:
         bb:f2:5f:78:a1:6c:00:bb:1c:d7:78:38:72:9d:d3:aa:5b:08:
         a2:3d:2f:ee:eb:08:79:76:0a:60:7c:eb:8c:3d:8b:e3:f3:8f:
         89:da:df:0e:e7:00:a6:7c:82:ad:34:1f:3b:6f:7d:37:98:45:
         17:70:af:3f:d9:54:1d:0e:3b:27:04:88:01:bc:ff:82:81:1e:
         93:61:2d:40:c4:a2:23:c6:e1:ee:a5:56:17:bb:5a:c1:f1:a8:
         16:50:1a:88:69:76:a8:50:0e:a4:ad:d4:96:d7:dc:90:36:ee:
         ce:d7:11:78:b2:6c:5f:55:84:af:5d:7c:69:2e:9b:70:8f:7e:
         88:99:61:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----