Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d706d5-1b71-42d4-b6d7-f533fe0d4c9d/1/_jHszVJvOQRysUI-TeEE_nreyuE.mft
File:                     _jHszVJvOQRysUI-TeEE_nreyuE.mft (raw, json)
Hash identifier:          1Pi3frL0L+TJayyu4cWSsoImgKOtHztdgbXd4y/dDWU=
Subject key identifier:   70:1C:7A:26:0C:82:89:FC:5F:E4:9E:8D:7E:8A:27:1A:1D:C4:7C:4E
Authority key identifier: FE:31:EC:CD:52:6F:39:04:72:B1:42:3E:4D:E1:04:FE:7A:DE:CA:E1
Certificate issuer:       /CN=fe31eccd526f390472b1423e4de104fe7adecae1
Certificate serial:       034F360B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_jHszVJvOQRysUI-TeEE_nreyuE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/d706d5-1b71-42d4-b6d7-f533fe0d4c9d/1/_jHszVJvOQRysUI-TeEE_nreyuE.mft
Manifest number:          0443
Signing time:             Fri 22 Apr 2022 15:00:50 +0000
Manifest this update:     Fri 22 Apr 2022 15:00:50 +0000
Manifest next update:     Sat 23 Apr 2022 15:00:50 +0000
Files and hashes:         1: _jHszVJvOQRysUI-TeEE_nreyuE.crl (hash: LOb7A5GSITA03J3GEnGwEXrAO+9oSIEIK7xuTCVOvN0=)
                          2: atNPLpniB_tVGbSuqcAQsfd0FRc.roa (hash: pIKvDc+8LjT8RPBdsUVkCjtdCmJiSnR+1cRhhTrVL/I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55522827 (0x34f360b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe31eccd526f390472b1423e4de104fe7adecae1
        Validity
            Not Before: Apr 22 15:00:50 2022 GMT
            Not After : Apr 23 15:00:50 2022 GMT
        Subject: CN=701c7a260c8289fc5fe49e8d7e8a271a1dc47c4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:54:0a:63:14:c3:70:e4:ab:68:2f:f8:ee:6d:
                    f0:96:c8:a8:e8:dc:04:5d:c2:ad:32:02:6c:63:85:
                    40:af:c5:9e:b3:29:41:3e:8a:b4:1e:d8:3f:dc:e4:
                    9f:ef:4e:e8:de:34:0b:2c:08:55:21:d7:2a:8d:53:
                    f6:b7:fa:6f:47:3c:59:de:a2:48:fe:ae:ed:0f:7f:
                    2a:50:1b:4d:15:63:52:c5:a2:bd:fd:c2:0d:76:e3:
                    98:12:0e:5f:7f:a2:d7:f1:b1:2e:24:9f:64:f8:ac:
                    3b:1c:eb:4a:42:94:e7:9b:42:e7:a3:29:53:dc:24:
                    3c:57:86:ec:56:32:23:d6:cd:4b:6f:fb:ec:6c:ce:
                    2f:bc:5d:ae:2c:e4:b2:31:6f:b9:50:e2:dc:e7:33:
                    92:4e:7e:bd:7a:6d:6e:b2:a6:ed:43:96:dd:67:a8:
                    72:76:6d:b8:e8:a6:d2:c5:98:41:b6:8b:82:8c:11:
                    fc:d2:1d:9f:bb:6c:09:24:45:77:89:e4:80:dd:00:
                    58:e6:54:aa:fd:78:33:07:e5:be:63:05:cd:2f:93:
                    b7:a6:a5:53:7d:9f:d2:23:80:ea:25:54:bd:40:87:
                    58:72:4f:43:ae:f6:59:e2:54:f5:ff:29:39:23:7d:
                    82:1d:0c:77:66:a3:52:4d:33:53:ba:9a:cd:32:33:
                    93:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:1C:7A:26:0C:82:89:FC:5F:E4:9E:8D:7E:8A:27:1A:1D:C4:7C:4E
            X509v3 Authority Key Identifier:
                keyid:FE:31:EC:CD:52:6F:39:04:72:B1:42:3E:4D:E1:04:FE:7A:DE:CA:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_jHszVJvOQRysUI-TeEE_nreyuE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d706d5-1b71-42d4-b6d7-f533fe0d4c9d/1/_jHszVJvOQRysUI-TeEE_nreyuE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d706d5-1b71-42d4-b6d7-f533fe0d4c9d/1/_jHszVJvOQRysUI-TeEE_nreyuE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:ce:e2:aa:74:1d:95:28:ee:f9:d5:b9:cb:e1:4a:ea:20:d5:
         a0:04:46:fc:aa:2c:72:2f:ee:da:4b:6f:5f:a9:79:7e:a0:c8:
         cb:13:ba:ac:8c:57:9e:ab:92:7f:69:58:33:72:01:ae:56:90:
         ff:19:0d:55:0a:ad:91:52:67:1a:9c:f2:4f:7b:8e:4f:78:d3:
         1c:96:45:26:70:12:2c:18:10:e4:66:c1:41:71:a0:41:3d:3a:
         3f:b3:ac:04:bc:4d:c1:6c:0e:60:7c:55:a9:6e:e4:45:22:eb:
         3a:ef:0f:fc:ae:4a:c1:96:ab:55:ba:ca:5e:31:f3:c6:83:13:
         48:84:5a:cd:f7:d9:c8:9a:74:6b:cd:ec:38:0c:bf:ad:bb:ea:
         b3:7c:d8:19:a5:12:b9:81:3f:d5:05:9a:c2:25:a1:9a:27:8f:
         e5:7c:b3:4a:79:a9:3b:28:93:15:04:6e:8e:ba:84:c5:37:32:
         ab:b1:cd:90:22:2e:ec:37:f2:93:1e:5a:70:78:6f:9e:cb:85:
         9e:0f:55:ef:e3:98:36:69:31:71:f9:00:da:ac:e4:89:0d:ef:
         3e:21:02:32:81:6e:00:92:9d:cb:e4:e9:7f:94:d4:d8:6d:fe:
         d5:03:63:af:27:ed:82:07:d1:b4:35:0f:a5:07:3f:62:a0:ed:
         f9:f4:9b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----