Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/9cae3a-08ba-466a-9a9a-c730c4916879/1/tLWHIRAJB7808Nk_pUlz_S9N9wc.mft
File:                     tLWHIRAJB7808Nk_pUlz_S9N9wc.mft (raw, json)
Hash identifier:          53VGiYk93CIfrEPP75+mbMMRQOU1wrMoWQVomrWQsQ0=
Subject key identifier:   68:EB:50:92:0E:0A:7F:89:5B:83:62:D0:6F:BD:88:FC:61:7C:E4:9D
Authority key identifier: B4:B5:87:21:10:09:07:BF:34:F0:D9:3F:A5:49:73:FD:2F:4D:F7:07
Certificate issuer:       /CN=b4b58721100907bf34f0d93fa54973fd2f4df707
Certificate serial:       0186E4C74576EF518AB49B87621D49B8A65D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tLWHIRAJB7808Nk_pUlz_S9N9wc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/9cae3a-08ba-466a-9a9a-c730c4916879/1/tLWHIRAJB7808Nk_pUlz_S9N9wc.mft
Manifest number:          0CCF
Signing time:             Wed 15 Mar 2023 10:18:29 +0000
Manifest this update:     Wed 15 Mar 2023 10:18:29 +0000
Manifest next update:     Thu 16 Mar 2023 10:18:29 +0000
Files and hashes:         1: Z8QQUlwEpZ-qY6e7FH6R1OSW_9M.roa (hash: 3zUboCbwUG5SRt6sjqRoIfCQyLf+K1QYvLAycF2QCZk=)
                          2: tLWHIRAJB7808Nk_pUlz_S9N9wc.crl (hash: BOltGeVn2maz8TSJvjPRlYeMCVP7TeqF+HA1KGHiI3k=)
                          3: xM_xcu1l8Kcm7h8CMMhT9QfnFeM.roa (hash: d09mZMP9BklB9H/icDFpVuD8fF/AEL7Yj/a0EzlQGjs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:e4:c7:45:76:ef:51:8a:b4:9b:87:62:1d:49:b8:a6:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4b58721100907bf34f0d93fa54973fd2f4df707
        Validity
            Not Before: Mar 15 10:18:29 2023 GMT
            Not After : Mar 16 10:18:29 2023 GMT
        Subject: CN=68eb50920e0a7f895b8362d06fbd88fc617ce49d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:d2:f5:f9:f2:fb:ef:75:b2:3d:e1:55:7e:d1:
                    b0:70:c2:fe:51:22:ea:b5:a3:9e:9e:12:8c:f4:89:
                    48:50:8a:d1:a1:dc:8c:9b:04:3f:e2:75:b4:12:23:
                    58:d1:88:50:54:7a:70:db:5d:18:f7:8e:60:b1:fc:
                    40:3c:9c:90:79:cb:f8:bb:6a:7a:df:e4:9e:f2:b7:
                    1a:36:73:79:a3:91:5e:c2:bf:fc:65:f8:b8:40:11:
                    93:48:3f:ae:0b:fe:39:73:62:c5:2d:c7:42:3a:c8:
                    20:2d:e0:3d:fd:99:23:fa:4f:a2:a2:ce:40:9a:5d:
                    b4:bf:e9:4f:1c:a5:1b:e9:9b:3b:fe:18:79:8a:ac:
                    91:34:67:2e:c5:cf:6d:11:8e:41:9e:39:d4:fa:59:
                    7c:53:e4:db:55:4b:e5:e9:d0:96:04:7a:31:c2:8a:
                    76:68:93:25:54:df:64:22:f9:3b:9d:c8:7a:aa:a9:
                    97:b1:eb:3b:96:89:cd:3d:c0:a1:3f:aa:f2:70:65:
                    73:03:52:d7:f0:88:18:a3:5e:52:70:15:30:dd:04:
                    a0:22:51:ce:b6:dc:9b:ef:0a:4d:f9:89:d8:38:78:
                    ba:9c:05:2f:e4:30:3c:f0:7d:c5:8a:5a:3b:02:29:
                    35:fd:ed:22:29:8c:cb:a9:6c:f2:41:85:84:22:b0:
                    13:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:EB:50:92:0E:0A:7F:89:5B:83:62:D0:6F:BD:88:FC:61:7C:E4:9D
            X509v3 Authority Key Identifier:
                keyid:B4:B5:87:21:10:09:07:BF:34:F0:D9:3F:A5:49:73:FD:2F:4D:F7:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tLWHIRAJB7808Nk_pUlz_S9N9wc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/9cae3a-08ba-466a-9a9a-c730c4916879/1/tLWHIRAJB7808Nk_pUlz_S9N9wc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/9cae3a-08ba-466a-9a9a-c730c4916879/1/tLWHIRAJB7808Nk_pUlz_S9N9wc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:9c:3f:f6:06:24:fd:cf:d9:73:b9:39:7d:04:1f:15:5b:44:
         5a:ca:ad:cd:14:01:0e:f0:dd:b3:2d:a6:51:47:80:9a:92:ff:
         66:33:e9:1d:50:39:db:f9:44:1b:db:42:a4:e4:38:45:3f:56:
         86:52:2f:26:3d:db:ca:41:dd:cc:c5:d9:90:06:3b:32:84:83:
         2f:94:8b:d2:c8:ef:bc:43:95:d9:0a:7b:52:51:e3:b9:6c:b8:
         0d:5b:c3:6c:5f:e5:dd:3b:41:39:6f:19:8d:3f:41:35:36:87:
         4a:ec:c5:ff:b6:21:3c:e2:aa:28:91:80:c8:f4:6c:fb:d1:02:
         42:ad:6f:1b:fd:a0:d7:94:72:4d:69:59:6a:9c:da:1c:70:bf:
         75:1a:43:24:c9:55:07:3a:d1:ce:be:d7:c8:37:1e:14:b3:d6:
         9e:58:65:02:3a:da:d9:36:88:77:c8:24:26:9b:db:37:d8:83:
         d5:e9:69:1a:fe:2f:a5:f7:f5:0d:0d:78:fd:2f:4c:8a:dd:2d:
         b8:43:e1:e4:94:23:18:d2:d4:90:a3:4a:56:ca:a8:fb:1d:c2:
         34:56:80:78:00:55:72:6a:44:79:43:3f:bb:4d:72:92:2b:83:
         8a:37:ea:72:63:b1:6c:cf:b8:af:10:e2:8c:5a:e8:2b:2d:42:
         0b:a9:84:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----