Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/4e4222-048d-4fe5-9921-41bbfc4fe607/1/UXg8beKTOjB1q6oti60j8D6nnBA.mft
File:                     UXg8beKTOjB1q6oti60j8D6nnBA.mft (raw, json)
Hash identifier:          EIEnWKbXV12Hu0dluaYH1xsRNHa2msQY/qDLXcYdZV0=
Subject key identifier:   EC:5B:F7:57:DC:FE:BF:DC:0B:2F:1A:91:12:FE:2E:72:6F:76:57:83
Authority key identifier: 51:78:3C:6D:E2:93:3A:30:75:AB:AA:2D:8B:AD:23:F0:3E:A7:9C:10
Certificate issuer:       /CN=51783c6de2933a3075abaa2d8bad23f03ea79c10
Certificate serial:       018513B93D94FE87CFAFA5BEBD49A9A1F71D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UXg8beKTOjB1q6oti60j8D6nnBA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/4e4222-048d-4fe5-9921-41bbfc4fe607/1/UXg8beKTOjB1q6oti60j8D6nnBA.mft
Manifest number:          058C
Signing time:             Thu 15 Dec 2022 02:59:44 +0000
Manifest this update:     Thu 15 Dec 2022 02:59:44 +0000
Manifest next update:     Fri 16 Dec 2022 02:59:44 +0000
Files and hashes:         1: 1IdhMyG1lRI-6muzRY4aIj2IKSs.roa (hash: hA/qd2c1/eHQyYyEyM2hhNSVBfcezBgHYMbfS9rkAjA=)
                          2: UXg8beKTOjB1q6oti60j8D6nnBA.crl (hash: BwCul15v9nA1kQIrUcGGwDeQynMP0/O3POE8bqAn5cE=)
                          3: lELiFczPNbwTYzdq6m9FfjLCFU0.roa (hash: uim5rZR00wklciNSoGpPr8NHGS/NhnzwCMl1rMfcafU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:13:b9:3d:94:fe:87:cf:af:a5:be:bd:49:a9:a1:f7:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51783c6de2933a3075abaa2d8bad23f03ea79c10
        Validity
            Not Before: Dec 15 02:59:44 2022 GMT
            Not After : Dec 16 02:59:44 2022 GMT
        Subject: CN=ec5bf757dcfebfdc0b2f1a9112fe2e726f765783
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c7:41:16:76:76:20:7c:37:16:6d:ae:2a:8d:
                    aa:20:c5:a0:c8:fa:05:12:2c:9c:6b:75:68:6d:07:
                    0c:0b:65:3d:0b:4b:f4:47:78:7f:9c:09:55:25:aa:
                    60:04:21:1c:31:16:78:5d:4b:5e:e1:85:58:86:54:
                    ea:68:84:b5:45:51:a7:a6:ed:2e:91:88:f8:e1:6c:
                    e2:8d:79:65:dd:9d:5e:e8:fb:32:be:0a:c3:40:cd:
                    b7:50:1c:b5:fa:27:57:00:f9:95:01:5a:dd:42:d6:
                    92:93:00:a3:75:3b:5e:3e:2f:9c:8d:08:85:12:cf:
                    a7:e3:c3:af:c5:41:5c:c5:e2:a9:0a:b6:03:91:10:
                    6c:1f:91:e4:e9:c8:9d:68:cf:a3:9f:4e:aa:a9:8b:
                    54:1d:0b:3d:7b:ed:2c:30:5a:97:13:3e:92:f1:57:
                    51:3f:e4:2d:8c:89:28:07:e5:dd:58:c7:94:df:14:
                    6d:d5:db:35:6e:82:50:27:81:d0:f3:b8:0d:df:dd:
                    77:a2:0c:24:dd:c7:18:97:30:13:e6:7c:26:4b:ea:
                    27:7b:13:f4:a7:58:ec:2c:32:4d:09:dd:ec:27:39:
                    67:8a:7f:63:e2:7c:8e:ea:4e:bc:90:95:5e:04:1e:
                    a3:a8:b1:f7:24:32:75:59:4b:7a:ae:3e:02:98:3e:
                    11:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:5B:F7:57:DC:FE:BF:DC:0B:2F:1A:91:12:FE:2E:72:6F:76:57:83
            X509v3 Authority Key Identifier:
                keyid:51:78:3C:6D:E2:93:3A:30:75:AB:AA:2D:8B:AD:23:F0:3E:A7:9C:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UXg8beKTOjB1q6oti60j8D6nnBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4e4222-048d-4fe5-9921-41bbfc4fe607/1/UXg8beKTOjB1q6oti60j8D6nnBA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4e4222-048d-4fe5-9921-41bbfc4fe607/1/UXg8beKTOjB1q6oti60j8D6nnBA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:dd:04:a9:36:f2:86:8f:98:9a:62:35:11:dd:ab:ad:6f:76:
         4d:1f:0d:f7:13:92:23:5e:55:45:f9:91:7e:4c:a4:a3:54:da:
         19:d5:40:25:0f:15:4c:92:a0:3c:d3:9f:2c:38:7b:99:c9:89:
         21:11:df:46:74:75:14:5b:4f:2c:ee:5b:46:75:1e:ba:4c:7d:
         e7:1f:ed:93:04:f2:ac:55:23:9a:8b:a0:af:87:d7:2c:1f:ae:
         7b:6c:99:b8:ad:e8:df:79:ae:23:dd:df:0a:07:db:64:90:b1:
         e7:4b:55:f6:f7:2f:a5:86:46:db:3c:c4:e0:2a:d9:8e:cf:7b:
         f6:2a:90:f6:01:95:3b:32:c7:f4:a5:b3:2f:4c:b0:33:a8:9d:
         f0:c4:e6:95:dd:67:d7:d0:dc:c1:30:f9:20:cb:62:04:4e:c6:
         50:df:ae:29:36:54:93:75:13:a8:10:d6:2c:dc:8a:3c:1d:6d:
         e3:09:d9:72:c5:2b:40:b3:f3:75:77:0a:a4:27:25:26:ca:66:
         06:d6:4f:75:83:90:5f:c4:0c:4a:52:50:4b:5f:db:05:95:11:
         ba:e8:73:ef:96:53:af:89:de:69:28:e5:83:92:a2:d4:06:50:
         d2:6f:56:99:0c:db:65:a0:7e:b4:95:94:31:e8:98:3e:a5:10:
         06:f5:1a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----