Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/2b96a1-3973-4cb4-b01d-24a54fbe1c6f/1/1-4N_UlFCFUBcWBDtLGNqkXIjxUo.mft
File:                     1-4N_UlFCFUBcWBDtLGNqkXIjxUo.mft (raw, json)
Hash identifier:          lbDOC1YFbp4yaE6lf8CoiXx1CHShpeGOd5qoB3HNFtI=
Subject key identifier:   69:06:29:35:CE:3B:0E:EF:6A:DF:F5:E2:1F:31:94:B0:6E:23:B2:07
Authority key identifier: FB:83:7F:52:51:42:15:40:5C:58:10:ED:2C:63:6A:91:72:23:C5:4A
Certificate issuer:       /CN=fb837f52514215405c5810ed2c636a917223c54a
Certificate serial:       018505EB35962006FE13C40FE0F955268F96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-4N_UlFCFUBcWBDtLGNqkXIjxUo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/2b96a1-3973-4cb4-b01d-24a54fbe1c6f/1/1-4N_UlFCFUBcWBDtLGNqkXIjxUo.mft
Manifest number:          0968
Signing time:             Mon 12 Dec 2022 10:39:38 +0000
Manifest this update:     Mon 12 Dec 2022 10:39:38 +0000
Manifest next update:     Tue 13 Dec 2022 10:39:38 +0000
Files and hashes:         1: 1-4N_UlFCFUBcWBDtLGNqkXIjxUo.crl (hash: WaFF86Myn+6wmnUUdOzlCcGQIMaQBTOtjDc7PiAIUNc=)
                          2: 6Jk0vSd3BywIQPeJHBLgQ1mbnPw.roa (hash: AGp4qbq6pO01CE9g02xOlwc6FsgSm8YRyPo5/SFeW6s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:05:eb:35:96:20:06:fe:13:c4:0f:e0:f9:55:26:8f:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb837f52514215405c5810ed2c636a917223c54a
        Validity
            Not Before: Dec 12 10:39:38 2022 GMT
            Not After : Dec 13 10:39:38 2022 GMT
        Subject: CN=69062935ce3b0eef6adff5e21f3194b06e23b207
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:7d:ed:78:d1:fc:a7:ff:50:2f:0f:11:b6:04:
                    4e:96:cf:d2:3c:0a:85:35:ac:ea:8b:82:2a:56:6b:
                    9b:64:bb:27:a0:a2:28:84:e5:8f:53:be:be:fa:0e:
                    cc:4d:5e:a8:05:48:bd:79:85:45:f4:51:01:66:54:
                    3c:5b:e6:4e:3f:ce:65:72:d2:5b:14:10:51:ef:97:
                    c1:e7:86:98:a0:c4:f7:0f:e4:49:55:0d:19:41:5e:
                    19:65:1e:27:6d:ee:40:f8:cc:c0:8e:5c:43:79:57:
                    55:f2:e6:2e:98:d7:4a:cf:f7:c3:10:cb:3a:19:33:
                    d8:f2:5f:06:85:18:32:f1:3b:fb:05:cc:d4:cc:da:
                    c1:c3:78:9d:2f:5c:84:91:7f:09:25:97:f1:ea:87:
                    2b:4a:50:f5:a4:49:9b:98:e9:3e:a4:db:84:05:84:
                    de:0e:08:31:8f:6d:af:2a:8e:81:59:2c:87:72:30:
                    0f:de:e5:08:93:27:b3:d5:77:89:99:5e:4b:1c:17:
                    0a:67:50:ad:4d:28:21:84:d9:32:e7:ef:7b:dc:40:
                    1d:ab:a6:70:35:35:80:c4:b7:01:4e:91:f4:a8:20:
                    3d:d4:a1:70:c3:c6:01:0c:09:59:1e:c3:ab:96:4d:
                    78:cb:84:6e:67:14:84:17:81:1f:3e:4a:ac:34:c6:
                    f6:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:06:29:35:CE:3B:0E:EF:6A:DF:F5:E2:1F:31:94:B0:6E:23:B2:07
            X509v3 Authority Key Identifier:
                keyid:FB:83:7F:52:51:42:15:40:5C:58:10:ED:2C:63:6A:91:72:23:C5:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-4N_UlFCFUBcWBDtLGNqkXIjxUo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/2b96a1-3973-4cb4-b01d-24a54fbe1c6f/1/1-4N_UlFCFUBcWBDtLGNqkXIjxUo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/2b96a1-3973-4cb4-b01d-24a54fbe1c6f/1/1-4N_UlFCFUBcWBDtLGNqkXIjxUo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:17:43:29:fc:b3:03:bc:a1:99:85:4e:db:fd:46:65:c0:3f:
         82:be:d4:7a:57:6b:56:61:23:5a:39:55:36:85:e8:ab:c3:1f:
         6b:ad:20:82:f4:1b:0e:35:4d:d6:9f:d9:7e:73:3a:5d:b5:dc:
         5d:50:1b:8e:c7:d2:37:12:36:fa:86:58:ea:3e:d6:49:fc:4b:
         a6:09:85:df:2d:82:9b:48:66:45:e2:06:4d:d0:ab:11:1b:27:
         7f:a6:6c:a6:a0:df:c1:ec:ff:57:bb:b8:2b:36:93:7b:e2:82:
         89:3e:a0:14:10:59:7c:8b:90:c8:b0:e5:80:6c:f8:cc:79:49:
         35:97:87:8b:d6:4d:b1:e8:f3:14:1c:de:b4:fa:3c:b5:f9:ac:
         20:b7:8a:91:07:cd:40:dc:9f:a7:3a:a0:39:c4:c7:70:fb:c7:
         ab:65:21:d9:65:d6:34:cf:1b:de:8d:fc:0f:af:9e:9a:18:60:
         af:fa:a9:b8:fe:0b:86:ec:ae:cc:0d:0d:8c:5a:2d:7e:34:33:
         10:24:cb:6a:fd:c4:93:57:06:78:af:9d:45:f3:17:fe:58:e0:
         d9:2e:4b:f5:53:f9:9f:1b:a2:10:fd:fb:24:b2:14:a9:94:38:
         0c:a7:cb:1d:61:20:47:9a:72:54:f7:51:a4:56:2f:5b:08:d5:
         d5:19:88:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----