Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/806274-feed-4ce5-a459-fa8225846d27/1/Hpdi4GrDOknlSzjSfGtLUsOZUWU.mft
File:                     Hpdi4GrDOknlSzjSfGtLUsOZUWU.mft (raw, json)
Hash identifier:          teAv/nLNeL/K44nW2yH5dsqZ+VHYzM5nfYVrAprWgEI=
Subject key identifier:   F7:30:3D:87:C5:6F:D4:F7:55:AB:BD:95:98:97:61:6C:02:77:C2:F6
Authority key identifier: 1E:97:62:E0:6A:C3:3A:49:E5:4B:38:D2:7C:6B:4B:52:C3:99:51:65
Certificate issuer:       /CN=1e9762e06ac33a49e54b38d27c6b4b52c3995165
Certificate serial:       018359BF0E42196942CAB08F8163472B78A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hpdi4GrDOknlSzjSfGtLUsOZUWU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/806274-feed-4ce5-a459-fa8225846d27/1/Hpdi4GrDOknlSzjSfGtLUsOZUWU.mft
Manifest number:          0682
Signing time:             Tue 20 Sep 2022 07:13:56 +0000
Manifest this update:     Tue 20 Sep 2022 07:13:56 +0000
Manifest next update:     Wed 21 Sep 2022 07:13:56 +0000
Files and hashes:         1: Hpdi4GrDOknlSzjSfGtLUsOZUWU.crl (hash: xmk2ySKdJIa9bB3Qo+JJYY1Nl9I6ffh8zhoDgDabQe8=)
                          2: i7C-gtBL6R1wzLoQLYsrEg7RmV8.roa (hash: ySe+GJMCevO1QNe+o3pxixDGm1j67sze2iv5jcLFyog=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:59:bf:0e:42:19:69:42:ca:b0:8f:81:63:47:2b:78:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e9762e06ac33a49e54b38d27c6b4b52c3995165
        Validity
            Not Before: Sep 20 07:13:56 2022 GMT
            Not After : Sep 21 07:13:56 2022 GMT
        Subject: CN=f7303d87c56fd4f755abbd959897616c0277c2f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:6a:7c:a5:78:83:88:cf:91:52:ee:f9:6d:56:
                    99:c4:19:14:aa:c6:be:88:12:7c:05:cf:25:6e:ae:
                    17:e5:5b:49:dc:23:b8:42:c7:72:37:67:e2:d9:50:
                    fa:d5:4a:10:33:94:34:a9:87:b8:64:98:fd:48:9c:
                    a4:16:c0:a1:7c:54:ad:89:5c:d2:4e:84:ec:39:66:
                    25:92:7f:10:8d:1a:a7:44:ae:66:74:9e:5b:da:5f:
                    6c:aa:2e:ae:a7:c0:3a:3f:0c:9b:d0:01:f2:8a:d2:
                    f0:fe:04:11:51:f9:6a:69:a5:48:36:1e:fa:26:7b:
                    04:a2:b5:12:39:63:ba:96:4e:30:14:19:27:67:6f:
                    d8:01:97:53:cd:c9:77:60:20:45:aa:b5:c5:2d:94:
                    bf:eb:aa:e3:a8:9f:09:34:c9:a5:b5:96:6e:e4:ab:
                    bb:8c:8f:a3:0b:93:4c:28:fb:4f:64:3e:55:e4:86:
                    f4:7b:a9:6e:f0:b2:03:d9:19:b1:7d:59:d2:23:a5:
                    43:ca:20:01:d5:37:4c:70:46:49:f4:c1:64:4c:5b:
                    6f:f2:fe:b6:a4:b5:02:5e:2d:86:7c:fe:d7:5f:01:
                    08:08:31:de:6a:b3:da:23:1b:b9:97:c0:b6:14:94:
                    97:b0:eb:04:34:e6:5e:02:1a:c0:34:59:82:c1:3f:
                    5f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:30:3D:87:C5:6F:D4:F7:55:AB:BD:95:98:97:61:6C:02:77:C2:F6
            X509v3 Authority Key Identifier:
                keyid:1E:97:62:E0:6A:C3:3A:49:E5:4B:38:D2:7C:6B:4B:52:C3:99:51:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hpdi4GrDOknlSzjSfGtLUsOZUWU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/806274-feed-4ce5-a459-fa8225846d27/1/Hpdi4GrDOknlSzjSfGtLUsOZUWU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/806274-feed-4ce5-a459-fa8225846d27/1/Hpdi4GrDOknlSzjSfGtLUsOZUWU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:a5:da:ad:ab:0a:82:c7:60:17:9d:92:49:93:45:0e:e1:13:
         4a:1f:d3:30:a4:ca:a9:03:e6:ae:0a:64:43:60:78:71:b2:ae:
         38:69:c6:db:b3:0a:c4:f6:9a:28:89:18:a0:14:d8:19:71:a0:
         b9:1a:14:cd:e1:e0:c5:16:e0:a3:1e:9f:72:09:47:8f:84:09:
         ee:42:99:0a:e4:56:f5:72:3e:56:80:d1:c9:e8:63:67:ed:9d:
         6a:b8:a9:8d:ad:6a:4d:d4:4e:d2:44:05:3c:d0:b8:d8:0e:58:
         89:5b:4c:5e:bc:1a:c2:67:21:64:84:ae:86:01:88:6b:66:69:
         3d:94:1a:d8:4c:69:e9:05:09:f1:04:13:f0:8e:31:ac:d1:0d:
         a2:78:ad:4f:28:0b:ef:0c:b3:cd:7a:d3:6c:0d:eb:18:9e:80:
         53:1e:99:b8:80:b7:37:15:2d:00:66:c9:fb:4a:1b:dc:dc:be:
         d2:30:7f:a7:30:41:ba:6f:59:d1:f2:2b:94:49:d4:6e:e5:e2:
         37:dc:27:cc:d8:77:58:4c:cf:2f:00:47:c0:ff:aa:68:aa:73:
         49:3e:e4:7b:55:19:cd:cb:5b:85:59:bf:8b:bd:1c:92:9a:3d:
         3d:9d:c3:1a:8d:95:8e:5c:6e:fc:8f:0a:a8:b4:d4:63:75:b0:
         b0:2c:ab:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----