Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/66dae3-7e17-4eaa-bc10-20b503cf8cac/1/2XHUszkkcj3WTucXJVU1PK0tIfQ.mft
File:                     2XHUszkkcj3WTucXJVU1PK0tIfQ.mft (raw, json)
Hash identifier:          2nmHQUfwb7VnTBXq4pEx+gi540t8nTe0pd+lT24opG8=
Subject key identifier:   3B:AC:55:64:1D:83:71:68:E7:8D:88:24:84:06:46:CD:65:55:80:5D
Authority key identifier: D9:71:D4:B3:39:24:72:3D:D6:4E:E7:17:25:55:35:3C:AD:2D:21:F4
Certificate issuer:       /CN=d971d4b33924723dd64ee7172555353cad2d21f4
Certificate serial:       0184799A13AE3FB73DC87074E483C5D25AF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2XHUszkkcj3WTucXJVU1PK0tIfQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/66dae3-7e17-4eaa-bc10-20b503cf8cac/1/2XHUszkkcj3WTucXJVU1PK0tIfQ.mft
Manifest number:          02A6
Signing time:             Tue 15 Nov 2022 04:44:11 +0000
Manifest this update:     Tue 15 Nov 2022 04:44:11 +0000
Manifest next update:     Wed 16 Nov 2022 04:44:11 +0000
Files and hashes:         1: 2XHUszkkcj3WTucXJVU1PK0tIfQ.crl (hash: 5v6OIHooVpiqH/Fvw4hBeZotwsE1tq4InwOMBcjNAKw=)
                          2: AtHw8em0EddZ28RmoeSL4Z85UrI.roa (hash: VYWSx4QwLzPpH67a0McHBPPY9d0qb89y1k+bMRyj6dQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:79:9a:13:ae:3f:b7:3d:c8:70:74:e4:83:c5:d2:5a:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d971d4b33924723dd64ee7172555353cad2d21f4
        Validity
            Not Before: Nov 15 04:44:11 2022 GMT
            Not After : Nov 16 04:44:11 2022 GMT
        Subject: CN=3bac55641d837168e78d8824840646cd6555805d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:35:6c:dd:b2:cd:96:b6:7a:97:34:67:7c:4b:
                    70:66:6b:bb:fc:86:c4:90:e1:c0:0a:8b:c5:1a:a6:
                    7a:be:82:66:9e:8d:58:38:13:85:9a:7d:4b:a4:ab:
                    fc:e6:b7:df:9d:22:85:cb:5a:02:a8:fe:95:60:d5:
                    cd:a3:93:19:da:8c:d8:b9:97:54:95:3a:f6:5c:32:
                    6b:e0:06:8f:c0:f3:56:07:ba:43:b3:b4:48:3c:75:
                    01:29:2b:a1:8c:89:1a:4b:3c:08:2c:4a:3b:87:19:
                    e8:ca:36:b5:d7:85:10:fc:64:d7:0f:0e:b5:fa:e5:
                    b7:d0:43:87:21:99:16:21:c2:ed:91:23:8d:89:4d:
                    5f:a1:d3:c6:43:5f:7b:85:ae:c6:b1:e2:c8:0b:1c:
                    92:0b:ee:85:8f:b9:5b:f3:19:47:65:87:92:b0:8e:
                    b3:87:01:a6:bd:69:1a:1c:20:d1:49:bd:b9:a2:ed:
                    95:da:3a:17:69:bb:ee:cc:9d:bc:a8:24:b2:a2:65:
                    aa:54:36:09:67:e8:62:0b:0d:96:1f:ff:a8:c1:c0:
                    5e:4c:6f:73:22:8b:e6:79:65:17:f1:7b:15:23:56:
                    be:83:ba:fc:da:df:ee:ba:bc:ec:52:6c:0d:0c:db:
                    e2:b0:03:19:d4:2b:c0:77:1a:0d:43:a7:f2:c7:2c:
                    3c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:AC:55:64:1D:83:71:68:E7:8D:88:24:84:06:46:CD:65:55:80:5D
            X509v3 Authority Key Identifier:
                keyid:D9:71:D4:B3:39:24:72:3D:D6:4E:E7:17:25:55:35:3C:AD:2D:21:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2XHUszkkcj3WTucXJVU1PK0tIfQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/66dae3-7e17-4eaa-bc10-20b503cf8cac/1/2XHUszkkcj3WTucXJVU1PK0tIfQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/66dae3-7e17-4eaa-bc10-20b503cf8cac/1/2XHUszkkcj3WTucXJVU1PK0tIfQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:69:78:8c:f8:fa:0d:22:8e:67:0f:34:9a:04:3d:f9:51:d4:
         a5:44:03:11:24:c7:ed:ae:58:b6:be:0a:d8:ba:84:3f:d4:13:
         13:7b:e5:d3:aa:71:20:6c:a6:5b:a5:cd:88:84:79:7a:16:84:
         ce:21:cc:33:9e:3c:a4:db:ca:8c:ac:f1:80:c9:6a:a2:63:0b:
         00:fd:7f:4c:6f:c6:d4:7d:b7:c7:cf:ab:54:f7:c4:06:a0:cf:
         17:fc:6f:9f:19:9f:12:95:1f:74:bf:dc:65:a1:9d:bb:35:1a:
         32:5c:19:cc:2c:5c:51:43:24:b3:91:1f:4f:cd:17:22:69:e4:
         f2:1c:a1:de:70:9a:5e:12:6a:40:9b:4a:77:4f:5a:19:1f:1a:
         b9:f7:95:4e:ea:cd:31:ac:82:fc:05:4f:f3:7a:14:2c:ac:37:
         ee:e6:2e:b1:73:4b:34:f6:15:af:68:29:2d:18:75:f4:5b:59:
         7d:3d:24:f4:89:0c:10:08:e1:6b:dd:ed:59:05:75:5a:25:84:
         fc:38:4f:35:9e:46:dd:8e:de:47:8b:50:98:36:46:06:f7:1d:
         55:07:f0:17:b7:af:90:b8:02:24:43:e3:56:08:e4:a6:02:ed:
         28:52:8d:ac:f8:31:b6:99:75:2d:b9:40:01:f8:5e:72:32:3f:
         47:ac:b4:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----