Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/62a55a-e565-4214-99ae-5bd34c959d05/1/1HTqj6kxF3Hrjwfo5fXammmMA0s.mft
File:                     1HTqj6kxF3Hrjwfo5fXammmMA0s.mft (raw, json)
Hash identifier:          nUj2YHAqsWIITbdTzkS+75tiHyhqkq7651Y+y8ocbEI=
Subject key identifier:   CE:2D:0E:F4:49:2D:FE:59:5C:FA:64:6D:4E:A7:86:79:4D:7A:1F:5F
Authority key identifier: D4:74:EA:8F:A9:31:17:71:EB:8F:07:E8:E5:F5:DA:9A:69:8C:03:4B
Certificate issuer:       /CN=d474ea8fa9311771eb8f07e8e5f5da9a698c034b
Certificate serial:       018639EBBB04153A0C4F125C672E0AFCD179
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1HTqj6kxF3Hrjwfo5fXammmMA0s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/62a55a-e565-4214-99ae-5bd34c959d05/1/1HTqj6kxF3Hrjwfo5fXammmMA0s.mft
Manifest number:          0C70
Signing time:             Fri 10 Feb 2023 06:03:15 +0000
Manifest this update:     Fri 10 Feb 2023 06:03:15 +0000
Manifest next update:     Sat 11 Feb 2023 06:03:15 +0000
Files and hashes:         1: 1HTqj6kxF3Hrjwfo5fXammmMA0s.crl (hash: 4g7RmY0rIb8FGqHYwPBql0PTjEX8+f92GO0w8S941jE=)
                          2: G0-0TvToYaGsukNnJC5WYsBuhqc.roa (hash: DPfgqcwzYa92CDWPYM7xAlnMZ2jB56SsvRJY137HbIU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:39:eb:bb:04:15:3a:0c:4f:12:5c:67:2e:0a:fc:d1:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d474ea8fa9311771eb8f07e8e5f5da9a698c034b
        Validity
            Not Before: Feb 10 06:03:15 2023 GMT
            Not After : Feb 11 06:03:15 2023 GMT
        Subject: CN=ce2d0ef4492dfe595cfa646d4ea786794d7a1f5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:24:de:1f:90:77:c2:1d:58:1c:8c:9d:ae:46:
                    75:92:a9:d9:17:b8:54:94:0e:76:d0:fc:29:35:64:
                    ce:83:10:98:c7:c3:65:9e:c1:d8:a0:b5:5f:10:e6:
                    62:d7:66:91:6f:01:78:10:44:9e:db:b0:1d:1c:71:
                    27:c0:ee:1d:4e:ad:4a:ee:23:c8:c3:3d:67:f0:5c:
                    58:bc:09:29:a5:45:e4:80:ed:fc:dc:ec:f1:62:53:
                    74:49:17:13:65:23:1f:2d:15:fa:53:e0:3c:89:42:
                    37:95:ca:a5:4b:dd:0f:a5:5f:08:e5:d2:ab:d7:a1:
                    dd:88:19:fb:d1:3e:c6:d6:d5:b1:c0:7a:62:16:3e:
                    f5:c6:8e:f5:6c:8f:bd:24:bc:3a:7d:da:9f:1e:76:
                    ce:81:84:65:e9:fe:86:9c:1e:12:5f:bb:c6:76:4f:
                    93:29:22:96:8b:c9:ff:da:85:10:61:55:4d:7b:b0:
                    ea:fa:40:17:c7:8a:b7:37:b3:66:26:4f:2f:9e:d1:
                    b0:b8:89:e9:c5:3a:1b:f4:0a:5b:c9:2a:c3:1e:fb:
                    a3:38:90:f9:16:91:1b:66:36:5f:6d:5d:43:e3:84:
                    31:2f:42:11:5f:2e:e7:f0:01:dc:80:ac:53:81:5e:
                    bc:d9:44:5c:95:33:8a:68:44:1c:24:ab:9f:64:5b:
                    48:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:2D:0E:F4:49:2D:FE:59:5C:FA:64:6D:4E:A7:86:79:4D:7A:1F:5F
            X509v3 Authority Key Identifier:
                keyid:D4:74:EA:8F:A9:31:17:71:EB:8F:07:E8:E5:F5:DA:9A:69:8C:03:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HTqj6kxF3Hrjwfo5fXammmMA0s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/62a55a-e565-4214-99ae-5bd34c959d05/1/1HTqj6kxF3Hrjwfo5fXammmMA0s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/62a55a-e565-4214-99ae-5bd34c959d05/1/1HTqj6kxF3Hrjwfo5fXammmMA0s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:d2:4a:4c:3d:07:dd:b8:23:63:a7:f6:1c:cf:56:af:83:e4:
         ed:c1:5f:36:d7:a2:59:6a:d9:42:24:54:a7:24:4f:30:9d:9b:
         26:b6:e5:15:2c:50:24:34:00:9a:b2:13:13:07:da:11:a5:a7:
         48:01:c7:96:c7:3e:b6:3a:71:4b:98:5c:10:76:16:17:75:c4:
         bc:52:dd:62:48:d2:15:69:e6:55:59:7a:03:29:5e:de:22:11:
         0f:26:9a:44:9f:31:2c:25:39:52:c6:4d:d9:2c:90:76:fe:7a:
         e0:fe:e9:d0:27:cc:71:2a:21:c1:67:51:65:ef:01:e2:42:98:
         dc:e0:20:0d:00:fb:3e:8b:02:81:8c:10:dc:7d:71:4f:ad:1a:
         55:58:d4:73:ff:50:5c:4e:94:ff:a4:61:50:67:9a:3a:fc:fa:
         ca:42:fa:77:5a:f6:fc:05:f6:05:37:3a:3c:ce:43:5d:c0:17:
         c3:c2:22:5f:c8:c3:69:10:9b:1b:39:19:8c:63:6d:ee:09:ac:
         a0:22:9b:2c:c1:07:58:11:05:ef:e4:f4:ba:9b:36:ba:4e:ea:
         c7:de:7b:fa:6e:06:2b:ca:23:6a:e4:a8:d4:1c:13:75:9f:81:
         b6:12:89:0c:c5:37:58:5f:29:9b:8e:78:39:49:32:36:b1:94:
         bc:f7:aa:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----