Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/f4f2bd-9621-4624-89de-e8858fd8b4ca/1/pl5hWRhXBz17h2anNMm1ZqqrPpU.mft
File:                     pl5hWRhXBz17h2anNMm1ZqqrPpU.mft (raw, json)
Hash identifier:          BNalBR2zV0DqkUeflLzC/pr5FJCA17tNYBLWaNV9ThI=
Subject key identifier:   FA:A9:65:1E:B6:88:8A:A4:60:C5:A9:6D:9B:AD:94:EB:05:16:11:35
Authority key identifier: A6:5E:61:59:18:57:07:3D:7B:87:66:A7:34:C9:B5:66:AA:AB:3E:95
Certificate issuer:       /CN=a65e61591857073d7b8766a734c9b566aaab3e95
Certificate serial:       01855903B8A31B0FF1E2CC4C09C1C8749439
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pl5hWRhXBz17h2anNMm1ZqqrPpU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/f4f2bd-9621-4624-89de-e8858fd8b4ca/1/pl5hWRhXBz17h2anNMm1ZqqrPpU.mft
Manifest number:          0618
Signing time:             Wed 28 Dec 2022 13:54:54 +0000
Manifest this update:     Wed 28 Dec 2022 13:54:54 +0000
Manifest next update:     Thu 29 Dec 2022 13:54:54 +0000
Files and hashes:         1: ILS7_ILDjn4M6vFlY6TS6myGhII.roa (hash: P6iZR21DMn6g4zaaWhkUWN785YPOXCxnW+v1jzAS3m8=)
                          2: KV75AqMzmpzWkiEhF15aTT6nwhc.roa (hash: N1PdxWB8+m0M7Bg0k2OeU8lxR5/cfbEXSzTV7+Wjml8=)
                          3: hDqTfo_ojBFG5ngYFxDB8_w7vwM.roa (hash: pH1EdNzUfwvJV8bulbgjUmazNRK8u8N81Bk4EFbGpAw=)
                          4: pl5hWRhXBz17h2anNMm1ZqqrPpU.crl (hash: cYLah6iQwk7IeuZ4ZreLDy7Fep7T+UndQJsFEH6ivjY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:59:03:b8:a3:1b:0f:f1:e2:cc:4c:09:c1:c8:74:94:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a65e61591857073d7b8766a734c9b566aaab3e95
        Validity
            Not Before: Dec 28 13:54:54 2022 GMT
            Not After : Dec 29 13:54:54 2022 GMT
        Subject: CN=faa9651eb6888aa460c5a96d9bad94eb05161135
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:ea:0b:38:d7:df:0b:6b:b3:fc:57:54:13:62:
                    15:b7:2a:cb:8c:4d:18:05:5a:f6:51:58:dd:01:9d:
                    bf:33:8b:69:05:4e:5e:b4:f3:e9:11:fe:bd:ba:e8:
                    21:c3:15:3e:48:67:8d:8c:ed:6d:2c:47:56:2a:ae:
                    37:fe:58:93:8a:e6:4c:ec:6d:01:43:83:17:78:a0:
                    32:ea:ad:c8:e7:ac:be:d0:4f:28:b5:10:63:f6:d6:
                    ef:a9:d5:0e:70:ac:d7:a1:68:d3:f3:f9:8f:06:ac:
                    f0:ec:4f:3c:9e:cd:5b:13:fd:f0:c4:e0:b5:1d:d3:
                    02:c8:67:06:7e:49:a8:38:fa:28:91:e9:d8:06:51:
                    c1:fd:39:09:d3:dc:e8:88:55:8b:dd:2a:8a:fa:c6:
                    4e:d5:02:62:ed:5a:65:0e:21:40:3a:b5:a3:ea:97:
                    86:15:33:a6:b9:78:5a:ff:79:46:55:91:e8:84:b3:
                    3b:68:84:c0:d7:54:3b:12:ca:f6:13:1b:fc:bd:d0:
                    d5:a2:67:07:e6:87:ce:5d:50:bb:d7:f7:1d:5a:37:
                    c5:50:78:25:9f:43:a7:bc:62:b2:d3:bc:f2:18:d1:
                    37:a2:0c:0f:c1:9d:61:4e:a5:d4:06:9f:05:84:2e:
                    ef:17:d3:0e:77:7a:d3:0f:d1:51:dc:02:7c:04:ed:
                    dd:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:A9:65:1E:B6:88:8A:A4:60:C5:A9:6D:9B:AD:94:EB:05:16:11:35
            X509v3 Authority Key Identifier:
                keyid:A6:5E:61:59:18:57:07:3D:7B:87:66:A7:34:C9:B5:66:AA:AB:3E:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pl5hWRhXBz17h2anNMm1ZqqrPpU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f4f2bd-9621-4624-89de-e8858fd8b4ca/1/pl5hWRhXBz17h2anNMm1ZqqrPpU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f4f2bd-9621-4624-89de-e8858fd8b4ca/1/pl5hWRhXBz17h2anNMm1ZqqrPpU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:c8:ee:7b:72:bd:b1:95:a2:96:8b:0b:b2:4c:41:b6:6e:b1:
         ac:f5:83:13:5b:78:e0:b3:6f:0c:fa:7b:d1:1b:28:c3:a3:7f:
         fb:53:e8:35:a3:1d:ff:c7:48:31:e1:48:6e:da:92:42:07:79:
         18:7b:8d:e4:a1:67:92:5c:8d:11:b2:3d:c6:b1:d8:43:77:44:
         01:45:a8:37:21:c3:8a:61:b0:0f:76:11:46:70:9e:dd:ee:16:
         bf:7d:a6:fc:8f:f7:5b:f8:df:6c:0a:21:a6:cc:59:2d:53:9a:
         03:e8:dd:95:bc:da:66:ad:ee:bc:9f:be:9a:80:59:57:f0:0c:
         db:14:21:f2:38:75:03:5e:c7:d8:69:29:b2:0a:a5:f6:21:f9:
         8d:ff:ee:5d:5a:f3:e0:ba:8a:77:da:5a:14:ec:f6:62:77:cf:
         64:d0:22:f5:7b:33:b7:74:a5:a7:af:03:ef:a7:7f:c9:19:98:
         d4:02:0e:97:e8:b6:31:93:5e:7e:b8:80:7e:c3:f1:24:e2:d7:
         f0:18:f3:8f:c7:9d:82:01:4b:4a:01:a5:98:40:47:bc:23:f0:
         b2:03:1f:ad:a4:23:10:76:ec:d3:f5:84:22:11:4a:de:88:69:
         55:3c:36:29:8f:4a:a3:18:1a:9f:7d:bb:95:c4:74:7a:9e:d0:
         ab:bf:7a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----