Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/efeccb-d35c-49a2-811a-c0b38212a65b/1/fdZT2dMsKV2ltzakqr4wTp_hOU8.mft
File:                     fdZT2dMsKV2ltzakqr4wTp_hOU8.mft (raw, json)
Hash identifier:          TM3uMPQ+IYwHHB1xu+pIr5RHEWeWSqhVr8lFrPYjwIU=
Subject key identifier:   90:96:BC:FD:66:5B:4E:47:47:F7:28:17:02:40:3A:A5:81:89:57:0A
Authority key identifier: 7D:D6:53:D9:D3:2C:29:5D:A5:B7:36:A4:AA:BE:30:4E:9F:E1:39:4F
Certificate issuer:       /CN=7dd653d9d32c295da5b736a4aabe304e9fe1394f
Certificate serial:       018533A63BC20B7868B1413CE22D84CD5877
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fdZT2dMsKV2ltzakqr4wTp_hOU8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/efeccb-d35c-49a2-811a-c0b38212a65b/1/fdZT2dMsKV2ltzakqr4wTp_hOU8.mft
Manifest number:          0435
Signing time:             Wed 21 Dec 2022 07:46:50 +0000
Manifest this update:     Wed 21 Dec 2022 07:46:50 +0000
Manifest next update:     Thu 22 Dec 2022 07:46:50 +0000
Files and hashes:         1: OeboHSnyyZwD77TOCZ0mBpYA_yk.roa (hash: 4msoBs357zr27dsxgmDN7spQ42sDIgsLyMt25Uw2ZeA=)
                          2: S7eqvQ9W1U1W5pqkMYas1z1y550.roa (hash: 7Fhf3dhXU0CkfyiL0y+Cl1peIrT5kYPt3VQfw0uQGqk=)
                          3: dGC6U0IZOnmAR45DVsqMOJpKGbc.roa (hash: 5tj0duTS24F3BCgMu78ejIWotF/s+qwHj0I7oY6w5k0=)
                          4: fdZT2dMsKV2ltzakqr4wTp_hOU8.crl (hash: Uo+r89b7kdR4+fFrJcqczwXEYMLg/KHsuhSq79g9Vf0=)
                          5: tsVeVfgT75j1hGWx6AzpLagdUms.roa (hash: y9JhSfFYvhumTRmFfmJeUO462yFv93e5UhfdRbUUNds=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:33:a6:3b:c2:0b:78:68:b1:41:3c:e2:2d:84:cd:58:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7dd653d9d32c295da5b736a4aabe304e9fe1394f
        Validity
            Not Before: Dec 21 07:46:50 2022 GMT
            Not After : Dec 22 07:46:50 2022 GMT
        Subject: CN=9096bcfd665b4e4747f7281702403aa58189570a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:33:14:3b:ad:95:6b:bb:30:a1:d2:66:51:91:
                    8c:e2:8e:fc:80:63:2d:3b:bc:b7:8e:0d:bb:a0:0e:
                    63:92:55:d3:b2:53:11:b1:4d:58:90:be:8e:e4:72:
                    b7:85:b8:87:60:f6:5b:52:eb:52:8c:4e:f8:26:f0:
                    c6:d1:00:7b:b1:74:c2:f0:56:1b:2b:61:7a:6e:e4:
                    c5:8a:5b:d1:4c:d9:80:f4:ee:37:fc:c3:4a:06:81:
                    80:ac:6e:c2:ed:d6:18:e2:2f:3b:3f:8e:e0:a4:9a:
                    4e:82:fc:02:2d:4b:10:0c:07:07:fa:b7:64:f1:20:
                    3d:89:8c:3e:57:db:96:59:99:16:3e:f5:09:02:e3:
                    e3:3a:b5:25:2a:7e:ec:d8:c0:b8:09:13:27:bf:30:
                    88:f1:a9:25:76:b8:fd:35:ef:16:27:3f:19:b5:c0:
                    fd:e1:01:04:06:49:24:7a:86:14:01:d1:5e:c0:9d:
                    ff:7d:0a:6f:fe:13:f5:77:29:1c:0c:d2:1c:32:53:
                    d7:db:01:64:50:19:1c:38:f2:6f:29:7a:31:5c:81:
                    45:65:8d:7f:0f:8f:32:ef:94:77:6d:c5:27:0d:c3:
                    1e:74:84:d6:7e:e1:04:14:8d:b5:e2:04:74:13:a4:
                    0f:3e:25:6e:7e:aa:fb:27:20:eb:f8:5e:e0:93:8f:
                    9f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:96:BC:FD:66:5B:4E:47:47:F7:28:17:02:40:3A:A5:81:89:57:0A
            X509v3 Authority Key Identifier:
                keyid:7D:D6:53:D9:D3:2C:29:5D:A5:B7:36:A4:AA:BE:30:4E:9F:E1:39:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fdZT2dMsKV2ltzakqr4wTp_hOU8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/efeccb-d35c-49a2-811a-c0b38212a65b/1/fdZT2dMsKV2ltzakqr4wTp_hOU8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/efeccb-d35c-49a2-811a-c0b38212a65b/1/fdZT2dMsKV2ltzakqr4wTp_hOU8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:db:28:df:c3:68:00:47:55:ae:d1:b9:c9:78:cb:4d:87:79:
         b5:12:02:61:0a:28:cc:c3:a2:36:67:41:ea:ff:65:67:d0:b1:
         09:d1:d1:8a:57:3d:34:02:09:00:5c:6e:ce:f4:52:f7:d1:92:
         8d:2b:f5:ba:be:0f:1f:1e:af:da:41:49:4d:97:03:eb:f9:b2:
         d7:1f:ca:1c:cb:e0:fd:cd:d4:2d:8e:97:d4:43:ab:00:e2:f2:
         b6:f7:e8:ea:4b:bb:75:bc:46:8e:eb:56:6d:76:75:de:af:75:
         5d:93:40:89:04:04:dc:f9:c3:59:26:1e:04:76:35:d8:25:cb:
         fd:e7:7c:03:1e:89:35:83:d2:18:60:a3:3a:4f:44:dd:00:55:
         28:2b:8f:db:3a:14:f4:6f:82:1f:34:5e:24:d8:f7:90:04:66:
         67:7d:14:b8:7e:33:de:b8:fd:51:39:3c:95:33:74:f4:9f:b1:
         d4:6b:5a:58:97:ee:4d:23:9a:87:70:89:80:8a:8d:37:96:e6:
         c9:82:39:24:91:a4:68:d2:1f:3a:bd:76:84:3c:a4:31:cd:97:
         3a:d4:54:f9:53:15:9b:b0:91:de:62:df:3d:a3:d8:a1:2a:ed:
         ec:94:b1:eb:19:9a:20:86:05:8c:c1:58:b3:9c:54:ad:ad:b5:
         13:74:24:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----