Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/167b5f-2d68-46c8-90f5-9ed2f166feae/1/tw5BThm3o1QYozoa-ezK0W4j6N8.mft
File:                     tw5BThm3o1QYozoa-ezK0W4j6N8.mft (raw, json)
Hash identifier:          WvrJQifAqsJtDoq6wIa+ldFYD4kJG0t0NZNAs5m2PIc=
Subject key identifier:   F5:47:90:25:47:98:ED:A4:40:E2:58:CD:3F:A7:2B:66:B2:6C:91:5D
Authority key identifier: B7:0E:41:4E:19:B7:A3:54:18:A3:3A:1A:F9:EC:CA:D1:6E:23:E8:DF
Certificate issuer:       /CN=b70e414e19b7a35418a33a1af9eccad16e23e8df
Certificate serial:       01837E8EB177B3DCD6FC61817382EF0F8965
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tw5BThm3o1QYozoa-ezK0W4j6N8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/167b5f-2d68-46c8-90f5-9ed2f166feae/1/tw5BThm3o1QYozoa-ezK0W4j6N8.mft
Manifest number:          0ADF
Signing time:             Tue 27 Sep 2022 10:47:04 +0000
Manifest this update:     Tue 27 Sep 2022 10:47:04 +0000
Manifest next update:     Wed 28 Sep 2022 10:47:04 +0000
Files and hashes:         1: AEqFs_aQKlX_kxxiyZKI-l4UqEk.roa (hash: 9hHqIwtjZjDzayJWN1RY+ldmF7450K9V3vk48QxkhAM=)
                          2: i5of9DupE20K7vZlmLT6LR25zZE.roa (hash: 4lPsh5UozUCLf0Hu/r2U5HIiOC3qPfNhG42HzepYlfg=)
                          3: j473BAOiu0F0Y_ja-vAcH11dBos.roa (hash: UMsd6f9mrV2GV9CAmijqX8wHyMmXR8FMiw45TEqjsXk=)
                          4: p8uKJqNq2TseJe9wsAreR1gmDhs.roa (hash: GpujA7As6/XULwgdAEODPVk2xQnaHSERbbpm7PBAtlM=)
                          5: tw5BThm3o1QYozoa-ezK0W4j6N8.crl (hash: seCAsmM6ddVGttlHkF+S311KD3rhPnI8VvnaPLAlK10=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:7e:8e:b1:77:b3:dc:d6:fc:61:81:73:82:ef:0f:89:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b70e414e19b7a35418a33a1af9eccad16e23e8df
        Validity
            Not Before: Sep 27 10:47:04 2022 GMT
            Not After : Sep 28 10:47:04 2022 GMT
        Subject: CN=f54790254798eda440e258cd3fa72b66b26c915d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:21:b3:d2:69:e5:94:78:b3:a7:3e:e8:1b:4b:
                    74:e0:60:df:b8:03:c9:f8:12:af:ec:bc:b0:ef:f0:
                    8e:cd:85:38:41:e3:ec:5d:07:e0:1a:ae:2d:01:92:
                    ed:80:08:70:3f:a3:da:66:95:78:fb:a7:8f:30:be:
                    a1:64:ea:69:ea:ee:96:79:91:06:8a:ef:be:3a:38:
                    ca:32:85:0f:b0:c7:79:3a:d9:26:d1:bc:79:3a:27:
                    f6:a8:f8:93:e7:0a:66:e9:1f:eb:e0:53:49:f4:ad:
                    b9:6d:6c:b5:eb:8c:80:da:cc:43:f6:98:9c:61:93:
                    96:fb:7d:8d:ba:51:c4:ab:a3:da:70:14:ff:03:97:
                    2e:29:af:08:41:ce:d0:a0:fc:04:33:fa:16:cf:33:
                    3b:ff:38:3e:ce:21:20:77:87:40:f2:9a:eb:f4:cf:
                    c9:d9:98:50:d1:37:af:f6:79:bc:89:3f:d6:a2:59:
                    8a:95:82:97:33:be:45:10:d3:31:b8:a3:24:35:fe:
                    90:b2:1e:4a:07:a2:3c:8b:67:75:b9:1f:a2:2e:f8:
                    8c:90:59:08:d3:c1:f9:35:91:db:61:39:30:0c:cd:
                    2b:b7:21:ae:c8:99:c6:2a:cb:cb:30:67:94:c9:13:
                    b7:db:ce:e8:ba:16:ea:79:c1:1c:a3:6a:fc:27:88:
                    b8:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:47:90:25:47:98:ED:A4:40:E2:58:CD:3F:A7:2B:66:B2:6C:91:5D
            X509v3 Authority Key Identifier:
                keyid:B7:0E:41:4E:19:B7:A3:54:18:A3:3A:1A:F9:EC:CA:D1:6E:23:E8:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tw5BThm3o1QYozoa-ezK0W4j6N8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/167b5f-2d68-46c8-90f5-9ed2f166feae/1/tw5BThm3o1QYozoa-ezK0W4j6N8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/167b5f-2d68-46c8-90f5-9ed2f166feae/1/tw5BThm3o1QYozoa-ezK0W4j6N8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:08:44:ab:8f:f8:e6:24:77:2a:3b:bb:cc:95:32:07:25:1e:
         a0:63:c6:82:52:68:12:dd:ab:62:01:5b:1c:69:e0:26:04:7b:
         cb:96:2b:95:74:f4:f4:fc:7f:9a:c5:d3:d7:ee:1c:a1:96:be:
         33:b1:a1:76:fa:f2:24:15:6c:87:fd:ee:a8:d6:9b:cf:9b:f9:
         e1:70:15:a1:cb:b6:f9:e6:15:f7:9d:d9:56:67:2c:30:38:7f:
         3c:76:8c:e9:5d:81:70:04:77:b4:c8:de:fa:f5:57:8c:9e:7f:
         d3:27:a9:0d:7f:25:e0:4f:50:af:ec:c4:d8:aa:2b:8d:38:4c:
         24:08:d6:7f:bf:84:2c:12:c9:68:0e:17:4f:4f:93:4d:c9:b0:
         94:ca:d7:76:32:ab:21:66:21:af:58:a3:c2:f0:b0:32:b7:52:
         d3:19:61:ad:67:b5:17:d8:a5:a9:6e:b6:e7:e3:09:17:e8:8e:
         68:f9:e8:f6:c1:af:f2:64:65:db:a9:75:ac:e3:24:aa:c5:bf:
         c2:d4:b8:33:61:31:ca:4a:b9:5f:f6:46:44:b8:03:a2:06:2f:
         ad:9f:ae:aa:f0:b0:29:b7:86:54:15:95:79:f4:12:97:9b:ee:
         89:55:e1:dc:1b:9e:b7:f1:88:0d:f4:68:03:13:cf:c3:09:4b:
         64:e0:7f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----