Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/fc9be6-6353-41ea-8032-69ae605aa5a7/1/GeaZ4lbsO-lHJnGbYPj_QU7-_-k.mft
File:                     GeaZ4lbsO-lHJnGbYPj_QU7-_-k.mft (raw, json)
Hash identifier:          GlD66OullFE4WxVSbkLr6LiRvcWkhbXO3YYEFX0oQj8=
Subject key identifier:   26:AD:F2:BD:F7:8E:7E:93:88:FB:BC:44:99:B5:DA:8F:43:84:61:4E
Authority key identifier: 19:E6:99:E2:56:EC:3B:E9:47:26:71:9B:60:F8:FF:41:4E:FE:FF:E9
Certificate issuer:       /CN=19e699e256ec3be94726719b60f8ff414efeffe9
Certificate serial:       0185625057CEED87B57DDEE4914D1F15DD0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GeaZ4lbsO-lHJnGbYPj_QU7-_-k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/fc9be6-6353-41ea-8032-69ae605aa5a7/1/GeaZ4lbsO-lHJnGbYPj_QU7-_-k.mft
Manifest number:          053D
Signing time:             Fri 30 Dec 2022 09:15:10 +0000
Manifest this update:     Fri 30 Dec 2022 09:15:10 +0000
Manifest next update:     Sat 31 Dec 2022 09:15:10 +0000
Files and hashes:         1: 0sd-lZp-e2SRhpQiJSFrM-Rt6ZE.roa (hash: q/pM6gsqJcqfDO4Osk+bcwo1zHlv0zZZ5aSxhBuMsN0=)
                          2: 64T4-clmiN8I6w_4lUvd0_MZ03Y.roa (hash: mX6uB+jHzjgf3aVNjEtgXcTgior8eviBFcvvyvQ2IS8=)
                          3: GeaZ4lbsO-lHJnGbYPj_QU7-_-k.crl (hash: +sgfP0csp/boR0dS72TypH1Nw5TOaXXPb5AT0FtMV+E=)
                          4: _ybqQKk_Z1tIXcs6CK7J4ty2xCs.roa (hash: cCuSmOWwFIGTNNKEql6JKlta7vYtKTBKG9BwxkIaJ0I=)
                          5: eChBboV5aRNOWs45wwN9IgkivcQ.roa (hash: LpH/f0x/Ds3s2UbeJ5li4+Nz8kMKbcYjTYcRNeZdsr8=)
                          6: ls6Pjw__nVNpBB_3O9ACxymzsII.roa (hash: a3ldp1WRmMH2z5+c0z2bJcbZPDQPq5it4oYYIcz2T50=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:62:50:57:ce:ed:87:b5:7d:de:e4:91:4d:1f:15:dd:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19e699e256ec3be94726719b60f8ff414efeffe9
        Validity
            Not Before: Dec 30 09:15:10 2022 GMT
            Not After : Dec 31 09:15:10 2022 GMT
        Subject: CN=26adf2bdf78e7e9388fbbc4499b5da8f4384614e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:5d:83:22:35:c8:8b:a7:f0:45:b4:38:f6:dc:
                    c2:d9:0a:4b:48:1a:d9:ce:42:ba:41:8f:52:7e:de:
                    ff:6a:48:a2:26:b8:53:60:fd:8a:fb:15:1d:b1:39:
                    1b:88:c9:29:8e:0b:2c:26:6a:e1:56:fe:d6:34:68:
                    e3:f4:47:63:35:af:da:5c:3b:3e:9f:5f:1c:fb:03:
                    d0:61:be:e1:58:9e:87:14:98:ca:94:40:9b:bf:3f:
                    c8:9b:a5:d6:96:73:ba:bf:8d:71:4a:bc:22:d9:f0:
                    eb:bc:a9:f6:45:b1:11:78:a2:62:63:47:a2:66:5d:
                    91:b5:00:b7:27:e5:2a:87:2a:78:57:9a:19:98:cf:
                    e1:6a:fd:13:33:94:77:98:f3:73:48:2f:e5:07:25:
                    7a:e5:41:fd:a5:fa:0b:50:a3:ce:8b:fc:7f:f4:b2:
                    c4:e1:3f:e8:1c:57:b1:c7:fe:b5:d0:83:48:13:07:
                    6c:4c:25:54:59:ec:20:4b:aa:04:d1:02:49:f9:b9:
                    fd:93:e6:de:80:e0:73:55:17:a3:6a:ac:75:2e:93:
                    f9:7c:49:8f:1d:7c:6c:23:87:4b:e3:2a:b4:6f:26:
                    43:f1:48:ce:5e:e2:82:90:2d:1e:61:bf:d9:05:c3:
                    3c:f9:ca:68:02:74:8e:1c:3a:69:ab:98:95:79:92:
                    8a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:AD:F2:BD:F7:8E:7E:93:88:FB:BC:44:99:B5:DA:8F:43:84:61:4E
            X509v3 Authority Key Identifier:
                keyid:19:E6:99:E2:56:EC:3B:E9:47:26:71:9B:60:F8:FF:41:4E:FE:FF:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GeaZ4lbsO-lHJnGbYPj_QU7-_-k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/fc9be6-6353-41ea-8032-69ae605aa5a7/1/GeaZ4lbsO-lHJnGbYPj_QU7-_-k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/fc9be6-6353-41ea-8032-69ae605aa5a7/1/GeaZ4lbsO-lHJnGbYPj_QU7-_-k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:38:81:b6:68:c9:bc:f2:e4:d6:01:0b:83:f5:aa:7b:6c:93:
         53:24:a8:7f:46:9f:80:6b:24:05:8d:8c:d3:c8:c0:d9:39:70:
         15:33:00:88:69:65:e4:25:b5:44:1b:f4:e1:d8:c8:e6:9f:fe:
         c2:82:20:e1:0c:13:69:82:ec:a8:90:94:c7:fa:be:de:f2:2f:
         79:77:5f:5b:3a:07:e6:f1:66:d9:36:64:f5:ac:5c:b8:7e:ef:
         ad:33:42:3c:e8:cf:b3:9c:af:b9:42:03:89:32:82:b5:47:dc:
         98:51:13:dc:05:02:ae:17:0e:09:b5:f8:8f:a7:67:80:f8:4d:
         75:45:b2:71:89:92:33:c2:18:64:64:dc:8c:77:8b:ad:6d:b2:
         67:e1:52:6f:9f:2d:9c:6e:c4:b5:92:01:55:ad:d7:28:64:fa:
         15:f0:01:0b:be:d7:f3:ee:a4:63:7a:98:cd:b1:4c:28:b8:58:
         16:ef:be:cd:7b:18:81:2f:d8:2b:24:6a:d2:bb:3c:a1:18:0a:
         47:3f:bc:26:ea:39:95:e2:49:4b:0b:ef:06:c6:83:71:c3:02:
         89:6f:dd:3f:a0:6f:23:61:1a:dc:a3:62:45:77:fb:86:2e:a5:
         33:05:aa:ba:b9:95:e5:19:c3:ba:1d:02:1c:8b:ea:de:2e:1b:
         a8:7a:e2:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----