Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/c57c65-696f-4f86-9af7-a222fad7e25f/1/4Mp9Myha23QpUAh_LnZZIv8-384.mft
File:                     4Mp9Myha23QpUAh_LnZZIv8-384.mft (raw, json)
Hash identifier:          Syxtont1WSE5DyJwB79ipMehA3XeSd6isLU1+talteg=
Subject key identifier:   F5:FD:10:20:3E:CC:78:F2:49:35:37:1D:C6:27:75:C5:8F:E6:07:3C
Authority key identifier: E0:CA:7D:33:28:5A:DB:74:29:50:08:7F:2E:76:59:22:FF:3E:DF:CE
Certificate issuer:       /CN=e0ca7d33285adb742950087f2e765922ff3edfce
Certificate serial:       0188E2D1938BA46C4B4FF13A8A10A16FE965
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Mp9Myha23QpUAh_LnZZIv8-384.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/c57c65-696f-4f86-9af7-a222fad7e25f/1/4Mp9Myha23QpUAh_LnZZIv8-384.mft
Manifest number:          0D1A
Signing time:             Thu 22 Jun 2023 11:16:05 +0000
Manifest this update:     Thu 22 Jun 2023 11:16:05 +0000
Manifest next update:     Fri 23 Jun 2023 11:16:05 +0000
Files and hashes:         1: 4Mp9Myha23QpUAh_LnZZIv8-384.crl (hash: +EwM51xmBIEt+G/rWw78ttQCdsJH2eK4bfv3l6M8CmY=)
                          2: z7PPMfJz4b65Px83RQYVVBsvKQY.roa (hash: 6GCxxClABDCzmHmEnIschPALLpgSyPsdrbOkZaEGfgM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:e2:d1:93:8b:a4:6c:4b:4f:f1:3a:8a:10:a1:6f:e9:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0ca7d33285adb742950087f2e765922ff3edfce
        Validity
            Not Before: Jun 22 11:16:05 2023 GMT
            Not After : Jun 23 11:16:05 2023 GMT
        Subject: CN=f5fd10203ecc78f24935371dc62775c58fe6073c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:de:94:ac:2a:f4:5c:ce:04:93:1a:db:28:5e:
                    18:f1:4c:2e:79:bd:0c:32:bd:f9:15:86:8a:54:38:
                    b5:f8:48:94:fe:bc:27:b6:a3:5a:35:36:3b:b6:9f:
                    da:35:3b:69:05:57:7c:e5:c1:65:c1:b5:0f:25:f6:
                    c2:91:3a:63:1c:79:b5:e1:4b:82:fa:8f:4a:02:01:
                    22:7f:bb:45:2d:f9:bb:d1:e2:ee:9b:a8:06:d5:68:
                    f8:e6:dc:19:e6:cc:2f:51:61:cc:74:22:c2:4a:5f:
                    56:e7:ba:a4:e2:1a:ca:69:20:b8:a3:61:e1:d4:01:
                    3e:43:be:c5:b7:74:6d:01:86:9f:02:8c:7e:e8:34:
                    25:97:fd:dc:55:35:76:23:23:68:73:31:89:a0:6e:
                    d2:4f:ef:05:37:02:f1:0d:d5:f3:10:e7:56:ad:58:
                    08:98:dc:86:f5:94:aa:ce:c2:a0:d8:3e:0d:39:ff:
                    21:55:87:8a:6e:20:cf:1d:d0:a2:68:02:0b:fc:24:
                    48:6c:13:2e:a0:c5:51:24:d4:00:c6:be:f9:1d:16:
                    18:ff:f0:40:a2:66:a1:34:30:1e:51:33:29:68:bf:
                    68:78:40:66:da:fe:cf:3f:2d:55:11:59:7a:b3:67:
                    fd:cb:e3:a6:2e:e7:4f:33:68:8f:90:c2:a2:af:f1:
                    db:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:FD:10:20:3E:CC:78:F2:49:35:37:1D:C6:27:75:C5:8F:E6:07:3C
            X509v3 Authority Key Identifier:
                keyid:E0:CA:7D:33:28:5A:DB:74:29:50:08:7F:2E:76:59:22:FF:3E:DF:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Mp9Myha23QpUAh_LnZZIv8-384.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/c57c65-696f-4f86-9af7-a222fad7e25f/1/4Mp9Myha23QpUAh_LnZZIv8-384.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/c57c65-696f-4f86-9af7-a222fad7e25f/1/4Mp9Myha23QpUAh_LnZZIv8-384.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:3a:e6:ef:1f:09:d4:85:d0:20:ed:fb:9e:30:ed:a6:3c:6e:
         fa:82:57:29:7d:09:e4:ac:97:42:2f:7f:b0:dd:71:6b:68:8a:
         d6:1b:c3:20:19:78:e8:9b:bb:54:c4:d0:28:76:d5:36:a2:32:
         71:61:72:90:f1:15:fe:1c:73:f9:07:ed:80:98:f6:29:da:e7:
         14:b5:d6:dc:d9:f3:1f:a1:f3:7f:96:54:7a:db:2d:27:c2:06:
         79:3b:7d:3b:8d:ae:a1:5b:b7:4a:b5:8d:f4:2b:91:6a:6e:47:
         42:06:6f:80:ff:90:97:2f:24:7e:14:79:fe:9e:75:75:f0:46:
         2e:3d:d5:7e:6a:24:af:f2:9d:98:3b:a5:86:43:3c:23:54:73:
         db:0a:e8:2d:5d:d8:59:2c:d0:9b:21:2a:41:86:cd:fe:73:ba:
         1d:6d:25:15:7d:01:1c:49:9e:5a:53:c9:27:cb:93:6f:02:ab:
         a9:e0:d5:aa:55:19:89:13:b8:98:ee:57:69:fe:d8:65:ad:16:
         72:4d:56:20:ab:4d:0e:8b:b1:28:90:59:2f:67:da:39:4b:4b:
         4f:e5:1b:d1:23:ee:51:1c:cc:fd:2c:9b:7d:64:9e:98:51:95:
         21:57:08:03:3f:8b:2c:38:01:e2:63:36:df:4b:7c:13:e9:9b:
         3a:4f:67:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----