Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/da43f3-8c2f-485a-ab9e-1cd2e2d14597/1/lezPi0Z0W8JWghUp5YcDuY5rZWc.mft
File:                     lezPi0Z0W8JWghUp5YcDuY5rZWc.mft (raw, json)
Hash identifier:          7AHVfvLKTNIUhGCB1QVbNoWOpqfr6zSPl10Gjeq385w=
Subject key identifier:   17:E1:1E:27:A9:72:78:AF:91:99:86:B2:BF:2B:D9:E5:76:9A:77:6C
Authority key identifier: 95:EC:CF:8B:46:74:5B:C2:56:82:15:29:E5:87:03:B9:8E:6B:65:67
Certificate issuer:       /CN=95eccf8b46745bc256821529e58703b98e6b6567
Certificate serial:       018A81544E507FF7EFBE810FE2F581665781
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lezPi0Z0W8JWghUp5YcDuY5rZWc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/da43f3-8c2f-485a-ab9e-1cd2e2d14597/1/lezPi0Z0W8JWghUp5YcDuY5rZWc.mft
Manifest number:          0882
Signing time:             Sun 10 Sep 2023 23:01:40 +0000
Manifest this update:     Sun 10 Sep 2023 23:01:40 +0000
Manifest next update:     Mon 11 Sep 2023 23:01:40 +0000
Files and hashes:         1: GBEma5NGE8hCn4rw99LM7W8tmKo.roa (hash: 1wl38q5eiA6/4XBUzBCob+IABIxzeYDejhSJRkQLPaI=)
                          2: lezPi0Z0W8JWghUp5YcDuY5rZWc.crl (hash: qUjk4mgoDIYWdhr5HHlDUQS2V7dOTkbwQRYNsS+YOuo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:81:54:4e:50:7f:f7:ef:be:81:0f:e2:f5:81:66:57:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95eccf8b46745bc256821529e58703b98e6b6567
        Validity
            Not Before: Sep 10 23:01:40 2023 GMT
            Not After : Sep 11 23:01:40 2023 GMT
        Subject: CN=17e11e27a97278af919986b2bf2bd9e5769a776c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:96:d5:55:6e:56:e1:d7:74:3a:7d:2d:0f:fc:
                    d4:3b:ae:af:e5:8b:96:ef:41:e5:44:89:8e:a9:26:
                    f3:e9:f5:af:5d:3e:67:e6:44:63:9b:39:ba:50:03:
                    65:14:c0:67:15:f4:b4:0c:29:6c:e3:d9:53:d5:34:
                    5e:97:ac:33:7a:7b:c1:6a:38:b8:a4:83:b2:1d:01:
                    a0:30:ef:93:70:93:67:f8:0c:70:9e:1b:e1:a5:60:
                    5e:0b:41:1c:8f:10:64:80:e4:00:6d:86:4a:bd:e8:
                    29:11:aa:85:1e:90:5c:00:bd:47:33:ee:f7:40:b2:
                    ba:92:a8:c0:97:e5:f0:1b:91:cc:00:ec:a2:20:2f:
                    61:b0:c6:4b:f1:f9:24:9a:69:17:e0:66:96:dd:87:
                    04:52:78:89:b8:5c:ab:e5:66:1f:5a:d3:fe:e2:8d:
                    87:92:04:03:43:10:ca:70:5c:40:34:c5:26:6f:0f:
                    57:3d:09:5d:9b:90:87:2f:0a:0e:c9:c0:6c:73:19:
                    2f:da:08:2f:22:aa:b9:8f:48:45:25:69:05:a9:ee:
                    ff:a9:2c:de:b2:dd:c0:9e:62:6e:f4:a2:9c:af:cc:
                    a9:7a:d9:3d:ad:07:62:89:75:1e:a0:35:d8:d2:c7:
                    27:e3:ff:ee:17:6b:67:0d:25:fc:ab:2d:8f:5c:e6:
                    fb:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:E1:1E:27:A9:72:78:AF:91:99:86:B2:BF:2B:D9:E5:76:9A:77:6C
            X509v3 Authority Key Identifier:
                keyid:95:EC:CF:8B:46:74:5B:C2:56:82:15:29:E5:87:03:B9:8E:6B:65:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lezPi0Z0W8JWghUp5YcDuY5rZWc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/da43f3-8c2f-485a-ab9e-1cd2e2d14597/1/lezPi0Z0W8JWghUp5YcDuY5rZWc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/da43f3-8c2f-485a-ab9e-1cd2e2d14597/1/lezPi0Z0W8JWghUp5YcDuY5rZWc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:f8:b0:5b:a0:2d:89:9b:94:e7:ab:0e:e0:ce:de:77:bd:e1:
         90:55:e9:29:be:a7:54:27:58:fa:a8:57:d2:7e:98:e7:04:d4:
         fd:83:ca:9d:b7:f5:5f:13:83:73:65:93:a8:58:78:a3:62:24:
         ea:54:9c:83:7d:3c:62:d5:82:3d:b8:e4:b6:92:f1:0f:54:f9:
         e6:64:22:fc:72:0c:23:2f:02:ff:3b:c5:30:f9:66:0f:15:02:
         22:21:35:a8:31:b3:4a:66:b5:bd:fe:49:ec:39:32:9e:00:d9:
         42:0f:bc:53:4d:a9:49:4a:5f:99:a5:e3:8f:52:56:fe:b2:74:
         ee:2e:4e:63:48:09:d3:09:8e:bd:41:97:f5:4e:69:53:fa:cc:
         60:2a:3e:be:24:50:2c:b9:b5:e9:36:cb:00:9f:d2:5a:bd:12:
         8f:18:e5:3f:be:73:71:31:9b:cc:34:9d:dd:f0:ee:51:53:08:
         9a:83:4c:44:22:e5:47:55:ec:d1:bc:49:8d:04:15:64:64:f6:
         dd:c0:68:a1:1a:17:62:b0:7e:e4:fa:6e:98:3e:e1:ce:2c:b4:
         d3:91:98:eb:e9:b1:de:0f:49:29:de:99:c6:83:df:1a:1d:cc:
         78:7e:d8:56:f4:0a:9d:61:26:9e:57:25:5c:25:f6:16:15:e6:
         f2:5e:d3:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----