Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/2d299c-170f-46c2-8248-aec2f27205d4/1/eIpy9BKomocGSjbRTAlM99nuogQ.mft
File:                     eIpy9BKomocGSjbRTAlM99nuogQ.mft (raw, json)
Hash identifier:          VhX4T2xVFnDhnSuOQI5XZQK2lracgenCIHQx/G1pqpI=
Subject key identifier:   3E:02:24:F0:3D:E3:E0:57:DA:23:50:66:F1:C8:27:3D:92:3A:5A:06
Authority key identifier: 78:8A:72:F4:12:A8:9A:87:06:4A:36:D1:4C:09:4C:F7:D9:EE:A2:04
Certificate issuer:       /CN=788a72f412a89a87064a36d14c094cf7d9eea204
Certificate serial:       018AAC0729D00A547F0E774A7CB2BB5B32F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eIpy9BKomocGSjbRTAlM99nuogQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/2d299c-170f-46c2-8248-aec2f27205d4/1/eIpy9BKomocGSjbRTAlM99nuogQ.mft
Manifest number:          0EF5
Signing time:             Tue 19 Sep 2023 06:01:05 +0000
Manifest this update:     Tue 19 Sep 2023 06:01:05 +0000
Manifest next update:     Wed 20 Sep 2023 06:01:05 +0000
Files and hashes:         1: 7RKeRpSJq70_S2y1zcmtpJwO564.roa (hash: l5s2kVUVMtnR8XgUIR08jaQ2ID8KFkg7pipTSbsrCBA=)
                          2: eIpy9BKomocGSjbRTAlM99nuogQ.crl (hash: FKzvPmYZ2jI9S2TtWcZc8jZs6mVClm8tgCBK9stxkCg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:ac:07:29:d0:0a:54:7f:0e:77:4a:7c:b2:bb:5b:32:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788a72f412a89a87064a36d14c094cf7d9eea204
        Validity
            Not Before: Sep 19 06:01:05 2023 GMT
            Not After : Sep 20 06:01:05 2023 GMT
        Subject: CN=3e0224f03de3e057da235066f1c8273d923a5a06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:1f:32:44:fe:01:c5:11:b7:27:b5:84:0e:16:
                    88:32:36:b8:3e:3a:72:60:bd:93:78:38:09:7a:72:
                    0d:bb:bb:67:40:dc:37:04:a7:0b:38:ab:9f:b3:74:
                    f5:e1:b7:83:1f:64:99:ae:d7:f6:a1:59:c5:e7:49:
                    3c:dc:ce:66:df:18:48:94:83:87:dc:a2:db:d9:dd:
                    a3:7f:13:90:fd:ca:ba:6e:84:83:61:66:42:76:67:
                    bc:5f:0b:51:bb:23:21:50:21:35:9d:e5:33:37:3c:
                    9a:70:26:81:95:c7:1d:1e:99:cb:f8:15:1a:49:3f:
                    af:04:da:34:05:f6:a5:c3:32:59:73:e9:c6:a5:fe:
                    51:33:de:5b:cf:0a:b9:f4:e3:65:47:c7:f6:71:8a:
                    fb:62:51:eb:9f:ae:ab:69:e6:43:05:77:60:9c:b1:
                    97:3a:43:a4:4d:52:47:0b:48:6a:df:12:8d:64:69:
                    85:4e:ef:1e:da:32:16:d1:3b:ad:3e:b6:50:90:0e:
                    43:2a:95:1b:30:7c:20:a6:d9:49:32:06:cb:36:59:
                    06:75:3d:68:19:23:33:65:53:f2:7f:37:25:ad:77:
                    8d:3c:58:41:92:40:ab:99:7b:58:bf:ec:ba:1c:bf:
                    e1:c4:c6:b4:55:65:6a:40:0a:ff:ce:39:cc:db:df:
                    cb:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:02:24:F0:3D:E3:E0:57:DA:23:50:66:F1:C8:27:3D:92:3A:5A:06
            X509v3 Authority Key Identifier:
                keyid:78:8A:72:F4:12:A8:9A:87:06:4A:36:D1:4C:09:4C:F7:D9:EE:A2:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eIpy9BKomocGSjbRTAlM99nuogQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/2d299c-170f-46c2-8248-aec2f27205d4/1/eIpy9BKomocGSjbRTAlM99nuogQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/2d299c-170f-46c2-8248-aec2f27205d4/1/eIpy9BKomocGSjbRTAlM99nuogQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:4c:39:f6:1a:61:8e:04:8c:fa:db:01:c1:84:c1:2a:72:c9:
         91:da:95:76:4b:5e:c8:6d:69:45:df:fd:36:31:76:05:51:92:
         de:aa:11:d0:e7:24:df:19:b2:a2:a5:fd:80:0a:31:ad:5e:33:
         57:1c:cc:38:1e:a9:cf:e2:36:cf:93:6f:07:e5:d5:9f:d0:b7:
         96:79:5c:2a:15:10:f2:a5:a5:5e:f1:68:e9:7f:7b:d6:44:fd:
         f5:40:f2:22:93:ca:1b:68:f5:80:dc:6b:29:c6:c8:d5:a2:28:
         3a:71:c5:3f:b5:fa:8d:4f:3a:f0:cf:90:ec:df:e7:8a:74:81:
         a0:a0:78:0e:82:19:a1:6d:aa:31:25:52:e9:86:a4:b4:7f:9a:
         9d:a9:69:18:79:13:03:8f:fe:41:cd:88:94:c0:31:e4:e9:2a:
         02:5b:79:e3:e2:54:21:b4:c3:46:e4:87:be:76:22:37:9e:cf:
         6d:65:cd:33:ce:76:b9:34:4a:d8:61:80:40:b1:78:5c:78:60:
         b6:de:38:d5:db:43:39:10:35:2e:2c:ad:d8:fd:4e:85:57:52:
         74:34:5f:ee:a1:16:d4:ce:91:af:9c:3c:f6:15:6d:1e:43:f5:
         d2:02:96:aa:46:ca:e3:5d:47:96:6d:9f:e1:95:49:f0:b9:a4:
         6b:d1:75:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 19 12:53:25 2023 by rpki-client on console-fra.rpki-client.org