Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/ed8c9b-734a-43fe-bcd7-44df75848c3d/1/b6KaEbtuZx8JhVgewHPbkvzmtqI.mft
File:                     b6KaEbtuZx8JhVgewHPbkvzmtqI.mft (raw, json)
Hash identifier:          UnRHrzGQqRuyM3wSYr99VTXGBM6/J4rDq31IPqDRSf8=
Subject key identifier:   6F:0E:A9:F1:F4:A8:00:A2:B5:EC:9B:76:1E:B3:B1:99:7F:4F:6A:75
Authority key identifier: 6F:A2:9A:11:BB:6E:67:1F:09:85:58:1E:C0:73:DB:92:FC:E6:B6:A2
Certificate issuer:       /CN=6fa29a11bb6e671f0985581ec073db92fce6b6a2
Certificate serial:       01870938D8EC72896EB131B38295D3C74868
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b6KaEbtuZx8JhVgewHPbkvzmtqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/ed8c9b-734a-43fe-bcd7-44df75848c3d/1/b6KaEbtuZx8JhVgewHPbkvzmtqI.mft
Manifest number:          067A
Signing time:             Wed 22 Mar 2023 12:08:52 +0000
Manifest this update:     Wed 22 Mar 2023 12:08:52 +0000
Manifest next update:     Thu 23 Mar 2023 12:08:52 +0000
Files and hashes:         1: DSWwy8kA5rpGHI1GB0jEey2k-tY.roa (hash: +biiU3qiFJvVR5adZb0nrTL6Sr9ufgfJg97FxPO0gQw=)
                          2: b6KaEbtuZx8JhVgewHPbkvzmtqI.crl (hash: VMB7AGP57ntWsEtNOYXwPhPmha00f9K8tg9z4jKkPWM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:09:38:d8:ec:72:89:6e:b1:31:b3:82:95:d3:c7:48:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fa29a11bb6e671f0985581ec073db92fce6b6a2
        Validity
            Not Before: Mar 22 12:08:52 2023 GMT
            Not After : Mar 23 12:08:52 2023 GMT
        Subject: CN=6f0ea9f1f4a800a2b5ec9b761eb3b1997f4f6a75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d8:4a:82:ae:03:dc:b2:73:77:44:37:d5:f5:
                    56:34:64:28:e9:14:25:b7:c1:4c:42:82:4f:97:4c:
                    4a:7e:a1:bf:41:42:62:15:7f:26:0c:57:28:9b:af:
                    4a:64:e8:2f:e4:ab:d4:20:3e:91:f0:d8:d4:05:40:
                    09:98:10:9e:9d:74:75:20:05:cd:f6:5e:99:15:87:
                    f8:01:4d:3a:08:40:ec:2e:73:5e:7d:24:f9:ad:70:
                    25:6f:32:69:b8:40:32:9b:e6:b8:cd:16:26:4c:5e:
                    da:9b:d3:66:c6:89:38:f2:30:48:17:10:4d:46:e5:
                    4b:bb:78:17:43:02:b2:36:ba:1b:7b:04:e6:3c:80:
                    b6:88:61:5d:25:79:45:e6:04:e7:7e:8c:dc:58:08:
                    e7:cb:cb:56:6f:d9:0f:e0:66:c4:d5:b7:bc:d7:c9:
                    1f:8a:e4:9a:8a:34:7b:9b:34:ff:6c:0a:47:84:5f:
                    6b:fb:d3:a6:ed:69:72:a1:73:40:e4:96:15:81:0d:
                    cd:3c:99:71:c0:92:8e:43:5c:6d:61:3b:26:82:a6:
                    ae:36:6e:95:15:46:9c:9f:6b:3c:4b:d8:1b:46:d4:
                    47:2b:80:fa:3d:34:e1:a8:72:8f:1f:eb:75:bc:66:
                    44:35:5b:2e:04:06:64:2e:f1:f8:a9:ef:f3:61:ae:
                    dc:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:0E:A9:F1:F4:A8:00:A2:B5:EC:9B:76:1E:B3:B1:99:7F:4F:6A:75
            X509v3 Authority Key Identifier:
                keyid:6F:A2:9A:11:BB:6E:67:1F:09:85:58:1E:C0:73:DB:92:FC:E6:B6:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6KaEbtuZx8JhVgewHPbkvzmtqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ed8c9b-734a-43fe-bcd7-44df75848c3d/1/b6KaEbtuZx8JhVgewHPbkvzmtqI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ed8c9b-734a-43fe-bcd7-44df75848c3d/1/b6KaEbtuZx8JhVgewHPbkvzmtqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:34:b2:39:36:8a:54:2d:3a:7c:ec:f1:22:05:25:c4:6d:ed:
         d2:1d:0f:24:fd:9e:6e:21:9d:74:f2:b2:ba:14:88:38:ea:a1:
         54:66:96:75:ee:16:cc:81:e7:90:63:6a:e5:91:e6:bd:39:61:
         4d:70:95:56:5b:56:63:11:ec:3a:0e:35:4e:d4:24:95:4f:cd:
         da:b2:bf:b2:59:00:a3:16:19:ef:56:b7:32:df:4d:bb:d8:62:
         60:3c:1d:16:c3:89:05:2c:ee:5e:24:6d:8d:d2:dd:8f:4e:33:
         94:4f:aa:8e:59:c6:01:21:1b:18:5b:fa:36:56:2d:8d:9c:8e:
         49:8b:bf:3d:7e:a0:06:6d:99:43:9e:8d:71:34:4f:2a:9f:5d:
         b2:f7:e1:d4:e2:13:4a:72:bb:db:65:02:6e:32:42:11:36:05:
         bc:e0:e4:b9:cd:49:91:f7:de:11:0b:63:a5:3f:ac:92:11:9f:
         59:72:17:e8:69:b0:d5:09:2e:68:5a:3a:1a:46:e3:94:27:24:
         57:00:c5:a0:f6:fb:d6:3d:42:56:bf:bd:e7:f7:20:60:82:b3:
         46:8b:bb:46:f2:15:74:27:eb:7a:78:51:12:92:f6:28:94:60:
         6e:c5:fc:92:5f:64:40:cb:fb:35:92:bb:96:26:b9:aa:bb:80:
         fd:bc:ec:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----