Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/97e6ab-0f17-4a9a-b887-30c259cb4464/1/AdMZ42kFR0YdmNfvsIxmH5Envd4.mft
File:                     AdMZ42kFR0YdmNfvsIxmH5Envd4.mft (raw, json)
Hash identifier:          6OvdHMbSX9QzgKUVA1Mxlq8NdplEx1O30e9JZUGE6lI=
Subject key identifier:   8F:D8:70:50:D2:53:8A:96:2E:6E:32:6E:5B:BD:C9:C8:EF:51:D3:98
Authority key identifier: 01:D3:19:E3:69:05:47:46:1D:98:D7:EF:B0:8C:66:1F:91:27:BD:DE
Certificate issuer:       /CN=01d319e3690547461d98d7efb08c661f9127bdde
Certificate serial:       01852E48E36AA1C597CCB869185F6E70EFD6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AdMZ42kFR0YdmNfvsIxmH5Envd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/97e6ab-0f17-4a9a-b887-30c259cb4464/1/AdMZ42kFR0YdmNfvsIxmH5Envd4.mft
Manifest number:          05D0
Signing time:             Tue 20 Dec 2022 06:46:46 +0000
Manifest this update:     Tue 20 Dec 2022 06:46:46 +0000
Manifest next update:     Wed 21 Dec 2022 06:46:46 +0000
Files and hashes:         1: 9Z_4cYUSidt5WEPWdI0msz98i-Y.roa (hash: 0SJO87KjXKYGtsryd2oXucS6KUhxf5nPXGivkar5k28=)
                          2: AdMZ42kFR0YdmNfvsIxmH5Envd4.crl (hash: Kb+/DVjP24UfOY7jSRSbOIixQQi/Hkf3sublpzEiClI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:2e:48:e3:6a:a1:c5:97:cc:b8:69:18:5f:6e:70:ef:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01d319e3690547461d98d7efb08c661f9127bdde
        Validity
            Not Before: Dec 20 06:46:46 2022 GMT
            Not After : Dec 21 06:46:46 2022 GMT
        Subject: CN=8fd87050d2538a962e6e326e5bbdc9c8ef51d398
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:20:8b:96:2b:04:08:87:20:71:06:66:ec:cb:
                    0a:ce:21:6c:e1:c1:43:f3:ff:db:0a:d7:6e:52:89:
                    96:9d:96:8b:ce:73:b7:15:c8:a0:85:45:1a:77:bb:
                    d0:ae:3a:fb:c1:50:13:d8:57:d5:eb:9c:78:81:10:
                    b9:b4:1c:49:b5:c3:72:5b:61:1d:f6:5d:2a:e2:26:
                    16:b8:55:25:e0:e5:1a:68:2a:7b:f5:fa:f4:f3:0c:
                    9b:a7:b3:0c:84:1a:0c:1b:cd:1c:a5:1e:1b:57:62:
                    d1:67:41:ab:6e:f0:55:90:8b:87:0f:e6:95:21:5f:
                    a8:97:2c:40:81:fe:26:d1:bb:2b:01:81:ce:4b:68:
                    77:5c:90:e2:da:9e:e3:15:23:d4:6b:b6:6f:dd:53:
                    04:39:03:56:b7:4c:fb:d1:dc:08:fc:ce:ea:e0:af:
                    ab:0a:75:dd:f2:f8:1e:12:38:a7:8c:4b:88:5a:7d:
                    3f:d4:b8:94:b2:c3:81:d5:05:83:f5:e7:46:f1:85:
                    c0:2e:cf:d1:43:05:46:37:42:e5:1a:34:74:ea:f6:
                    8c:e3:fc:66:2c:89:3a:d3:c6:6d:15:e1:f6:6d:ad:
                    51:a8:af:4c:5f:5e:93:f7:44:ca:0c:5d:3d:fe:47:
                    8d:99:6d:a1:d1:e0:bf:fd:d8:d8:af:58:24:ad:6a:
                    14:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:D8:70:50:D2:53:8A:96:2E:6E:32:6E:5B:BD:C9:C8:EF:51:D3:98
            X509v3 Authority Key Identifier:
                keyid:01:D3:19:E3:69:05:47:46:1D:98:D7:EF:B0:8C:66:1F:91:27:BD:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdMZ42kFR0YdmNfvsIxmH5Envd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/97e6ab-0f17-4a9a-b887-30c259cb4464/1/AdMZ42kFR0YdmNfvsIxmH5Envd4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/97e6ab-0f17-4a9a-b887-30c259cb4464/1/AdMZ42kFR0YdmNfvsIxmH5Envd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:48:bd:06:f3:31:3b:bd:48:ae:47:4e:3d:b2:6a:4d:d6:52:
         2d:d1:e0:18:77:25:0d:04:03:86:50:16:79:9c:74:f4:40:71:
         ff:fc:d5:6a:3d:f3:c3:a4:f4:33:c7:88:73:55:9f:c6:ca:09:
         f8:e4:32:4c:63:2f:ac:b8:68:04:da:10:2e:34:99:b8:03:50:
         f4:46:6f:38:f0:e5:67:9c:4a:28:53:86:8d:ad:04:e0:94:fb:
         c1:6a:b1:b3:1e:70:dd:a6:43:64:62:2e:d4:5a:f8:b7:2e:d8:
         07:69:42:18:6d:14:43:c3:fa:b2:a9:ef:bf:9e:14:02:23:3f:
         95:2f:99:13:b4:72:c5:a0:25:50:87:3a:dc:3c:1b:e0:48:70:
         d7:c0:86:f1:0e:cf:ac:f6:1e:21:05:bb:e8:1a:65:5c:10:22:
         6c:f5:bc:81:e7:60:29:79:8f:5d:92:39:24:f3:be:82:df:58:
         c9:98:e9:99:24:0c:40:cb:da:5a:44:3c:38:75:18:99:4b:26:
         f5:20:be:1e:16:8c:d0:c2:76:82:6b:2e:8d:cd:aa:fb:8c:f2:
         d6:6e:d0:54:53:0d:5c:00:de:d3:e3:93:a0:f7:e9:96:03:90:
         2d:29:ed:53:c6:58:3b:8a:7f:c9:d2:c2:ab:07:31:0f:a4:4d:
         14:46:bf:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----