Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/61c951-ea02-46c0-b6a3-acb4271def7f/1/3xjF9mdTaHBrCMwnE5rt9yEPr0c.mft
File:                     3xjF9mdTaHBrCMwnE5rt9yEPr0c.mft (raw, json)
Hash identifier:          KDCBgDsCnet49X6BHYRh/CpIGjssrpANvZ0aELpjBS0=
Subject key identifier:   BD:5D:D1:67:01:B3:A5:57:03:99:27:5E:52:04:7B:A2:1D:2E:91:63
Authority key identifier: DF:18:C5:F6:67:53:68:70:6B:08:CC:27:13:9A:ED:F7:21:0F:AF:47
Certificate issuer:       /CN=df18c5f6675368706b08cc27139aedf7210faf47
Certificate serial:       3349A0B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3xjF9mdTaHBrCMwnE5rt9yEPr0c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/61c951-ea02-46c0-b6a3-acb4271def7f/1/3xjF9mdTaHBrCMwnE5rt9yEPr0c.mft
Manifest number:          08B9
Signing time:             Thu 24 Mar 2022 04:30:19 +0000
Manifest this update:     Thu 24 Mar 2022 04:30:19 +0000
Manifest next update:     Fri 25 Mar 2022 04:30:19 +0000
Files and hashes:         1: 3xjF9mdTaHBrCMwnE5rt9yEPr0c.crl (hash: z8q2I4Nn4w8bK+adZexCZycN3hNj6+Tduhth+FXJEKE=)
                          2: f39rWROd5Lj5FDHjgBs1DSqJcuY.roa (hash: sIUC40/w6nQD7cnhLXwQrVHTsDXINZbgc5LoO74nojg=)
                          3: sFxhm-wkh5Q4DCF7LD9REMoia7E.roa (hash: JBRrmNKqritZfN75VN/WrB1D7kWQFGsEpsgU25MMyK8=)
                          4: szAY6SeCjqjxrp5SQ6_todiVGKc.roa (hash: HSeeYEtq5WA4yVP3Wb+7umvoFDQkjrO+XRlEPyy80YI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 860463280 (0x3349a0b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df18c5f6675368706b08cc27139aedf7210faf47
        Validity
            Not Before: Mar 24 04:30:19 2022 GMT
            Not After : Mar 25 04:30:19 2022 GMT
        Subject: CN=bd5dd16701b3a5570399275e52047ba21d2e9163
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:71:5e:2e:98:14:74:14:f2:27:4d:e5:9d:66:
                    24:36:2c:fa:29:c2:26:c0:51:b9:ac:0b:38:70:3d:
                    3c:e7:43:5b:f0:7e:ef:28:71:6c:90:bc:1e:2f:95:
                    2c:f4:a1:0f:b4:85:d3:7c:c8:e5:d9:e1:cc:3e:ae:
                    d1:71:ef:f6:83:b4:5e:96:95:38:04:97:20:0e:37:
                    b7:97:4e:56:bb:7d:66:b8:97:2a:71:4a:ac:30:ba:
                    d0:ae:5a:00:8b:6d:8f:2d:22:ff:a1:41:1f:07:cb:
                    79:f5:f5:ee:d8:c7:d8:97:90:94:26:80:af:2e:03:
                    28:f9:4b:8d:49:b0:74:9f:5f:2b:b0:17:5b:8f:1a:
                    09:83:7f:07:90:86:6e:73:e4:7e:9d:44:b4:71:55:
                    9e:90:54:68:1d:23:37:04:52:c3:ed:b8:ee:07:01:
                    19:d3:a3:dc:36:9a:e1:d8:dd:e2:59:ac:04:fe:8f:
                    62:02:b9:6d:88:7f:fb:5c:f8:0a:16:b0:a9:56:db:
                    b4:e7:a8:42:36:31:97:e9:a7:8a:75:56:62:d9:af:
                    9a:c4:57:1c:49:cb:bd:7f:40:d7:96:ba:03:51:40:
                    85:ed:19:93:83:0a:9b:62:4b:6d:63:b5:21:d8:d1:
                    5a:9c:a7:c8:19:69:ab:d2:98:74:ce:6d:b7:46:8c:
                    2b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:5D:D1:67:01:B3:A5:57:03:99:27:5E:52:04:7B:A2:1D:2E:91:63
            X509v3 Authority Key Identifier:
                keyid:DF:18:C5:F6:67:53:68:70:6B:08:CC:27:13:9A:ED:F7:21:0F:AF:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3xjF9mdTaHBrCMwnE5rt9yEPr0c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/61c951-ea02-46c0-b6a3-acb4271def7f/1/3xjF9mdTaHBrCMwnE5rt9yEPr0c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/61c951-ea02-46c0-b6a3-acb4271def7f/1/3xjF9mdTaHBrCMwnE5rt9yEPr0c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:6d:e2:07:58:0f:a3:9f:b9:27:c3:1c:98:b1:11:be:50:18:
         fa:58:39:07:4f:4b:30:e2:84:f3:a2:1e:bd:31:9b:6a:6b:93:
         cf:4a:4e:06:90:84:08:14:a9:70:50:9b:9e:76:3a:43:4f:c4:
         3e:9f:ad:fb:e1:ac:19:d1:98:33:49:18:85:1f:90:0b:8f:a4:
         61:88:c6:e0:51:0b:9a:9d:a5:db:11:c6:ae:20:a0:97:0e:1b:
         fd:8a:60:15:dd:5b:7c:83:cf:bc:bf:e9:18:9c:59:ac:dc:41:
         90:24:ab:d1:23:cc:9c:9d:e6:c1:26:ac:f5:b8:61:92:8d:71:
         51:0c:d6:dd:0c:e0:a9:e1:a0:39:bf:1c:c6:21:9d:30:aa:84:
         61:45:ba:4b:ed:9f:58:d1:12:c9:18:a6:57:10:88:fe:10:52:
         fd:11:03:7e:0c:c5:ba:f1:db:0b:78:00:4f:28:ac:d1:b1:19:
         6f:82:a8:d3:56:5e:d9:4c:d9:7f:8c:89:7b:26:fe:a7:da:1c:
         b3:ab:9c:fd:20:37:7b:01:f3:55:bf:16:77:3f:b3:83:6e:e9:
         f5:04:e7:8b:b8:8a:5e:24:73:14:ed:a2:47:87:3e:7e:f0:7b:
         c3:a3:4c:64:4a:a7:70:90:11:9c:23:00:79:0f:7c:7b:f5:24:
         ba:b2:b4:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----