Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/bfa336-4e63-4da9-8063-e5f3d1a1751d/1/od17CslI1JsP4W6DkfIX3iGbfes.mft
File:                     od17CslI1JsP4W6DkfIX3iGbfes.mft (raw, json)
Hash identifier:          oYexvDx/PwnP5ckuW0yUAGl9OiUgZpYq43YUllyenrk=
Subject key identifier:   76:7B:17:B0:40:BE:CC:55:DD:58:37:29:CB:C5:F7:C2:6E:A3:33:9C
Authority key identifier: A1:DD:7B:0A:C9:48:D4:9B:0F:E1:6E:83:91:F2:17:DE:21:9B:7D:EB
Certificate issuer:       /CN=a1dd7b0ac948d49b0fe16e8391f217de219b7deb
Certificate serial:       02367073
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/od17CslI1JsP4W6DkfIX3iGbfes.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/bfa336-4e63-4da9-8063-e5f3d1a1751d/1/od17CslI1JsP4W6DkfIX3iGbfes.mft
Manifest number:          02EA
Signing time:             Tue 12 Apr 2022 01:16:23 +0000
Manifest this update:     Tue 12 Apr 2022 01:16:23 +0000
Manifest next update:     Wed 13 Apr 2022 01:16:23 +0000
Files and hashes:         1: UXLY--UISCvTcoSoMEIY5mT54t0.roa (hash: qP8L7WFbFuwHTnUibUVQ1k9ljEGOeWE54o9NWcPXi9Y=)
                          2: od17CslI1JsP4W6DkfIX3iGbfes.crl (hash: Ylt+3DFOFoKQE6fLqmgL3Bd+ceFa8oIV0UXVKfmCaww=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37122163 (0x2367073)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1dd7b0ac948d49b0fe16e8391f217de219b7deb
        Validity
            Not Before: Apr 12 01:16:23 2022 GMT
            Not After : Apr 13 01:16:23 2022 GMT
        Subject: CN=767b17b040becc55dd583729cbc5f7c26ea3339c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:79:aa:76:7e:8e:48:93:cb:7e:4a:87:da:37:
                    b9:13:13:d3:b9:cd:5c:47:74:d1:9b:d7:92:eb:b7:
                    fa:b2:78:9d:29:f8:3c:e2:43:a6:1d:32:11:fb:a7:
                    69:29:2f:e9:7b:2b:a2:fa:1c:43:25:c3:02:b2:2c:
                    b1:4c:9b:6f:3e:fa:0a:fc:9f:82:62:e1:0e:f3:f9:
                    ba:b9:38:da:9d:4e:cf:c4:46:f0:e3:95:b7:7a:8c:
                    76:ea:1b:46:f4:0e:bf:4d:33:1f:60:f5:0d:f4:e5:
                    f1:a7:9e:2d:ec:91:94:6c:b3:54:4b:b0:94:75:b8:
                    a8:09:05:b7:5f:da:97:ef:e3:ec:08:f5:e0:fa:11:
                    df:a8:87:cc:96:c3:55:3f:cb:5c:5c:74:f4:34:b4:
                    68:6b:53:cf:8c:1b:9b:e9:0b:4d:54:f8:f3:45:77:
                    e1:5c:e3:26:ba:bb:32:ba:f7:e4:f2:09:20:87:a2:
                    47:28:1e:b6:53:9b:e5:d1:2e:8d:35:64:07:9b:96:
                    09:82:8f:fb:34:6f:73:43:fe:b2:69:49:e8:19:88:
                    3e:a2:ff:37:a1:df:b5:66:36:1e:64:13:ac:02:e2:
                    a1:49:83:4a:0b:1b:6f:e2:4a:a5:a9:67:c0:43:91:
                    32:94:8e:5a:e0:d9:6c:8c:30:ca:4f:e1:44:5b:6c:
                    a9:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:7B:17:B0:40:BE:CC:55:DD:58:37:29:CB:C5:F7:C2:6E:A3:33:9C
            X509v3 Authority Key Identifier:
                keyid:A1:DD:7B:0A:C9:48:D4:9B:0F:E1:6E:83:91:F2:17:DE:21:9B:7D:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/od17CslI1JsP4W6DkfIX3iGbfes.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bfa336-4e63-4da9-8063-e5f3d1a1751d/1/od17CslI1JsP4W6DkfIX3iGbfes.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bfa336-4e63-4da9-8063-e5f3d1a1751d/1/od17CslI1JsP4W6DkfIX3iGbfes.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:a6:60:dc:ec:89:64:07:f4:5c:ad:f3:45:a4:3a:d2:c7:2d:
         81:48:ad:9b:a0:de:43:06:7d:a0:de:e1:0e:c3:6e:61:04:9e:
         d5:84:f3:ee:5e:3e:45:ee:98:ca:25:ff:6a:34:08:7a:ff:ce:
         67:a0:80:24:38:eb:a8:dc:15:a1:ca:da:66:6d:24:71:0d:2b:
         6f:cb:19:c8:52:b7:28:54:cf:e5:6a:d1:44:5a:1e:f6:34:72:
         50:a3:04:36:4b:2d:f3:2d:3c:13:7b:d5:16:23:b7:d2:9c:19:
         7f:d5:9e:8b:ae:3a:7b:e3:91:2a:fd:b2:42:3b:9c:41:45:c5:
         aa:99:fc:9f:44:cd:ec:c9:87:73:64:72:b9:7f:36:dd:78:46:
         73:a6:06:19:17:ce:5c:3c:09:ca:64:e2:aa:97:bf:c1:bc:80:
         49:09:83:80:e3:09:ff:ba:5c:ea:88:c6:e7:ca:1e:51:41:12:
         26:35:e6:af:52:39:aa:e8:ff:e8:dd:90:ad:9f:8e:5b:40:f6:
         b1:f6:b1:5a:00:5c:4c:92:34:64:91:7d:da:6f:a8:93:88:93:
         be:a8:a2:54:8d:7c:0e:5d:84:07:4a:bb:01:d4:49:41:71:8f:
         67:ef:88:5a:5d:65:f2:11:50:e7:0d:e2:15:68:52:4a:ca:90:
         0a:fe:6b:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----