Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/2096e5-479f-46e2-ba65-3d6602890783/1/0YXHxgQUodCIigHXSir1EmCUum8.mft
File:                     0YXHxgQUodCIigHXSir1EmCUum8.mft (raw, json)
Hash identifier:          AukT3BYYVjnztqH9R6S4+2Q4cACQs3Db0WtxZHxcfkg=
Subject key identifier:   BA:61:CF:D5:56:09:72:53:56:82:E3:02:6D:F4:EC:87:9E:8D:50:C1
Authority key identifier: D1:85:C7:C6:04:14:A1:D0:88:8A:01:D7:4A:2A:F5:12:60:94:BA:6F
Certificate issuer:       /CN=d185c7c60414a1d0888a01d74a2af5126094ba6f
Certificate serial:       0184D16083C047D82BE77A93084164BB1597
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0YXHxgQUodCIigHXSir1EmCUum8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/2096e5-479f-46e2-ba65-3d6602890783/1/0YXHxgQUodCIigHXSir1EmCUum8.mft
Manifest number:          0BA0
Signing time:             Fri 02 Dec 2022 05:47:53 +0000
Manifest this update:     Fri 02 Dec 2022 05:47:53 +0000
Manifest next update:     Sat 03 Dec 2022 05:47:53 +0000
Files and hashes:         1: 0YXHxgQUodCIigHXSir1EmCUum8.crl (hash: P+DxAdCOOridRjLFqNFJMVc30x1Ew06Eer2xFVaVgME=)
                          2: KEAIy_yJ3xpgN0t3ma0zRlL__lw.roa (hash: vO75a3zUPKoeyzv3VDYCFJP20cc7mnlLR7FyZPus02E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:d1:60:83:c0:47:d8:2b:e7:7a:93:08:41:64:bb:15:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d185c7c60414a1d0888a01d74a2af5126094ba6f
        Validity
            Not Before: Dec  2 05:47:53 2022 GMT
            Not After : Dec  3 05:47:53 2022 GMT
        Subject: CN=ba61cfd5560972535682e3026df4ec879e8d50c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ad:f3:70:7d:de:25:51:e5:e1:f1:4c:c3:3c:
                    c0:a4:22:f1:0e:60:9c:26:38:d4:5f:dd:a9:66:be:
                    7d:3a:a6:3e:a9:fe:a3:3a:cc:59:f7:a1:32:31:aa:
                    fd:da:31:33:ae:e4:98:20:d7:89:b3:00:54:79:9e:
                    cc:f9:5a:33:dc:72:96:38:ba:b0:eb:7d:ae:64:6b:
                    a3:bb:f0:aa:d3:c6:30:24:33:5e:9f:3e:af:d8:0d:
                    34:79:a4:01:7d:a0:b1:13:c0:22:07:ba:87:98:9f:
                    7b:da:b4:cb:09:39:d8:14:85:50:5d:de:7e:fb:30:
                    4f:6c:28:f9:15:62:7b:1f:a1:fd:80:6d:4f:a9:0e:
                    c4:c9:e5:57:e3:27:89:a2:84:53:98:ed:90:d4:db:
                    56:11:00:d6:b2:ec:83:2e:40:2d:fa:5d:60:5f:e8:
                    9c:d9:99:cb:70:36:7f:43:e6:e9:e6:fe:5a:62:7e:
                    7c:2d:27:b2:5f:4c:30:89:94:b8:74:d8:06:77:a1:
                    f3:93:36:0c:7c:98:6b:1a:7f:be:e4:d7:37:b7:31:
                    f9:8f:4f:fc:32:82:ae:83:9a:4e:1c:5f:2a:f3:9b:
                    66:40:91:17:07:24:65:79:ca:15:b8:f9:c4:35:11:
                    ee:36:2f:8d:62:55:de:ba:9a:8c:a6:a5:01:8f:fb:
                    ae:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:61:CF:D5:56:09:72:53:56:82:E3:02:6D:F4:EC:87:9E:8D:50:C1
            X509v3 Authority Key Identifier:
                keyid:D1:85:C7:C6:04:14:A1:D0:88:8A:01:D7:4A:2A:F5:12:60:94:BA:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YXHxgQUodCIigHXSir1EmCUum8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2096e5-479f-46e2-ba65-3d6602890783/1/0YXHxgQUodCIigHXSir1EmCUum8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2096e5-479f-46e2-ba65-3d6602890783/1/0YXHxgQUodCIigHXSir1EmCUum8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:15:b1:c8:af:d2:b7:2c:79:fc:bd:c3:f3:5e:9a:f3:46:01:
         f6:d6:4d:6b:25:0b:88:27:92:c6:4b:37:f4:3e:fb:97:ed:47:
         51:f9:64:18:6b:33:e9:11:32:a1:90:26:c6:27:53:00:a0:bc:
         5e:55:d7:6e:9d:32:85:10:16:d1:33:97:4d:7b:bd:d5:9b:74:
         52:23:14:de:b5:2f:b6:92:30:a8:09:6f:24:0c:fe:98:fb:89:
         36:49:55:a3:a0:4d:4a:fb:14:62:9e:36:32:f1:20:d1:27:ff:
         64:92:88:98:b0:e1:4f:c6:15:32:bb:89:92:5d:c5:17:ba:9c:
         ea:7f:72:2f:bc:b6:33:e0:a2:e7:e5:f7:ca:22:98:a6:32:c8:
         4f:be:36:87:10:64:68:b4:45:3e:f8:27:88:62:7c:9c:99:b4:
         1a:63:e6:53:6b:9c:16:d9:c5:17:f3:40:a4:a6:e6:a5:6c:7c:
         5f:55:b6:5b:a5:c8:ba:a8:95:b4:82:55:3b:77:b4:da:50:50:
         81:3c:33:34:0a:8a:7f:39:f8:ee:f8:94:4e:7f:e1:db:24:aa:
         92:64:88:22:56:4d:10:46:59:f2:75:8c:06:b6:0c:6d:59:e1:
         50:cb:4e:a6:11:5a:60:1c:8a:65:1c:ae:4c:54:c6:70:01:1d:
         2a:20:f5:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----