Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/3abc7e-1861-455f-a733-aa99f4e5029c/1/kjeSUZC_6mXpL4KeT2f3-KRtL_U.mft
File:                     kjeSUZC_6mXpL4KeT2f3-KRtL_U.mft (raw, json)
Hash identifier:          PsbwW4iqkPPfgMVRYBLsGdlXzhAyeoDiebHOef/GwM8=
Subject key identifier:   BE:20:67:CE:7D:BD:03:36:4D:83:C9:2A:77:0C:6F:D5:98:C4:06:65
Authority key identifier: 92:37:92:51:90:BF:EA:65:E9:2F:82:9E:4F:67:F7:F8:A4:6D:2F:F5
Certificate issuer:       /CN=9237925190bfea65e92f829e4f67f7f8a46d2ff5
Certificate serial:       0188E36409D2C631FC0E9CF52A524C9A3445
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kjeSUZC_6mXpL4KeT2f3-KRtL_U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/3abc7e-1861-455f-a733-aa99f4e5029c/1/kjeSUZC_6mXpL4KeT2f3-KRtL_U.mft
Manifest number:          0679
Signing time:             Thu 22 Jun 2023 13:56:04 +0000
Manifest this update:     Thu 22 Jun 2023 13:56:04 +0000
Manifest next update:     Fri 23 Jun 2023 13:56:04 +0000
Files and hashes:         1: 9BEiR56kAvjJSYvBWAEe9BSpE4c.roa (hash: qY4mS1/D3hiQYLmPodZVvPCQvdppwmHzAiPDsteLemE=)
                          2: kjeSUZC_6mXpL4KeT2f3-KRtL_U.crl (hash: LFRUggR8jrBzAJW+ZbeNyajtvY+90jcCNF561uJrOFo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:e3:64:09:d2:c6:31:fc:0e:9c:f5:2a:52:4c:9a:34:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9237925190bfea65e92f829e4f67f7f8a46d2ff5
        Validity
            Not Before: Jun 22 13:56:04 2023 GMT
            Not After : Jun 23 13:56:04 2023 GMT
        Subject: CN=be2067ce7dbd03364d83c92a770c6fd598c40665
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:fd:48:50:08:fd:d1:08:14:42:16:2b:50:50:
                    2b:37:b9:c1:8b:4b:3e:80:66:0b:09:0e:11:7a:50:
                    1e:7b:4b:55:dc:91:ba:c2:69:c3:cf:e0:e2:85:66:
                    2a:63:6f:53:f5:69:9e:79:8d:b9:8f:0e:b3:ab:5d:
                    0c:30:36:ac:8d:2f:42:04:af:06:f1:d1:58:a2:7e:
                    74:b3:2a:f7:b4:6e:ff:dd:2b:dd:a0:a5:1a:12:48:
                    67:75:f2:c9:77:a7:53:3f:69:25:88:f5:26:ce:5d:
                    c5:b1:57:5c:97:5a:7d:dc:19:28:1c:66:a9:30:40:
                    87:02:ef:38:5c:5a:48:1e:76:fd:7b:4d:e7:e0:50:
                    ac:34:ba:8e:7a:e7:06:ee:4d:ae:ab:93:7a:d7:91:
                    bf:f3:72:a0:e4:58:5b:e3:1b:59:7f:1d:ec:4b:a7:
                    2a:43:7a:b1:1f:cb:28:f6:03:11:35:86:b7:be:ea:
                    03:22:74:3b:a5:3f:73:08:b6:c7:76:49:37:ca:a2:
                    f4:5d:e0:f5:c0:aa:1c:17:f1:57:02:5c:7b:c6:b3:
                    0d:14:63:38:68:ed:e0:39:e0:be:39:a2:e3:62:6a:
                    53:11:58:c8:23:c4:19:c2:92:61:d8:d3:93:61:78:
                    32:b8:aa:20:a1:6a:ea:08:a8:2a:86:fe:93:3c:1f:
                    a5:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:20:67:CE:7D:BD:03:36:4D:83:C9:2A:77:0C:6F:D5:98:C4:06:65
            X509v3 Authority Key Identifier:
                keyid:92:37:92:51:90:BF:EA:65:E9:2F:82:9E:4F:67:F7:F8:A4:6D:2F:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kjeSUZC_6mXpL4KeT2f3-KRtL_U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3abc7e-1861-455f-a733-aa99f4e5029c/1/kjeSUZC_6mXpL4KeT2f3-KRtL_U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3abc7e-1861-455f-a733-aa99f4e5029c/1/kjeSUZC_6mXpL4KeT2f3-KRtL_U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:52:6d:cb:34:76:63:eb:8f:c5:bc:b3:5e:64:d7:28:b3:7f:
         65:60:d0:c3:8b:ef:ff:fc:a8:cb:69:4d:0f:c9:33:0b:30:c4:
         95:a3:83:f2:8c:9f:b6:c3:9d:74:da:f7:18:17:78:cf:f5:12:
         65:e9:5b:f5:ab:19:07:7b:99:da:19:3a:6a:0e:96:7e:61:3b:
         cc:d6:7c:e8:f9:9a:c4:3e:44:e8:7a:6a:6a:a5:f8:f9:7e:04:
         9d:52:74:a3:b9:85:df:b2:4e:5d:a1:28:03:e9:72:e8:24:e9:
         be:1f:95:73:d5:12:ed:e1:a3:68:29:a0:2e:97:04:ec:0d:4e:
         d1:5e:cc:7d:9e:d8:af:0d:59:cd:e0:21:b4:b4:00:bf:7c:1f:
         91:5b:53:1e:67:dd:10:0c:35:e6:88:23:0f:5d:52:74:38:62:
         b2:a2:f0:ab:40:76:b7:02:65:3f:f1:b5:4e:40:fe:9f:cc:ff:
         b5:5f:bb:3d:14:b7:6a:e6:7b:28:e7:6a:40:b3:c9:58:e9:67:
         39:dc:be:9b:4c:fc:e1:b2:62:ad:64:38:51:af:a2:ad:f7:91:
         ad:4a:ed:a8:e3:a5:f7:d2:60:31:94:e4:82:98:95:75:05:90:
         98:9a:29:9f:22:eb:cd:fb:9b:98:20:2e:cd:74:b9:2f:65:8b:
         5a:d6:d6:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----