Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/ce5c4a-f572-4b6f-a3a5-80e1be66bb0e/1/1-1hWbRVumXo0sW_JwHwge35z-1M.mft
File:                     1-1hWbRVumXo0sW_JwHwge35z-1M.mft (raw, json)
Hash identifier:          e+IaHLDGaV6rj0nzwinyEz0laLZx98oy9l4Puw1VH4Q=
Subject key identifier:   C2:1F:C8:32:04:C3:44:DA:50:E9:CC:4A:96:AF:F1:66:27:A4:9D:BC
Authority key identifier: FB:58:56:6D:15:6E:99:7A:34:B1:6F:C9:C0:7C:20:7B:7E:73:FB:53
Certificate issuer:       /CN=fb58566d156e997a34b16fc9c07c207b7e73fb53
Certificate serial:       0185718C45100A39F12D3DA25E025518BEB1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-1hWbRVumXo0sW_JwHwge35z-1M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/ce5c4a-f572-4b6f-a3a5-80e1be66bb0e/1/1-1hWbRVumXo0sW_JwHwge35z-1M.mft
Manifest number:          08CB
Signing time:             Mon 02 Jan 2023 08:14:56 +0000
Manifest this update:     Mon 02 Jan 2023 08:14:56 +0000
Manifest next update:     Tue 03 Jan 2023 08:14:56 +0000
Files and hashes:         1: 1-1hWbRVumXo0sW_JwHwge35z-1M.crl (hash: buSUdBbun8CcpKJ4z3QZIrUsHQ2C0shYxZETmqb+vUE=)
                          2: Tget-0g-wxD0v-i2Bft95s28dls.roa (hash: yi2OK+xt8A7xd4lSEFWspsEh9Lzz/2NCBam07KKnky0=)
                          3: XebjzSuP5aVhI4OCwx4lrj3s3EY.roa (hash: DB2Jfp0qmRCvhmgmA1OtLgOiZVuPouz5WgI89a6c2pI=)
                          4: ZxFfcRXMBduRzV79WIQtmaUxn64.roa (hash: VdR4A0ds2kkh0+qBqOk4AdpVe4g9KV6y061vAE2sOgY=)
                          5: x8iQhlz54b7XeyG181yJ3SIW6Hk.roa (hash: VpUzNEq6+AXulwhZ1gsI1ankAM6o7IQhpust/er6rSA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:8c:45:10:0a:39:f1:2d:3d:a2:5e:02:55:18:be:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb58566d156e997a34b16fc9c07c207b7e73fb53
        Validity
            Not Before: Jan  2 08:14:56 2023 GMT
            Not After : Jan  3 08:14:56 2023 GMT
        Subject: CN=c21fc83204c344da50e9cc4a96aff16627a49dbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:54:51:cf:e7:0d:08:91:05:92:50:c1:9d:5f:
                    17:02:c0:f2:ff:0a:3e:90:c3:fc:12:34:90:1f:e2:
                    ca:2c:80:50:72:c3:c4:3d:79:85:be:0f:0d:8f:f9:
                    0d:b5:3a:22:93:57:1d:7e:15:f9:3c:f9:a4:0b:36:
                    02:e3:12:ea:06:bb:4a:32:7f:09:93:d2:a3:67:a4:
                    8f:12:3a:06:db:9f:7d:fa:60:50:eb:d4:c4:23:27:
                    64:3f:a6:da:9a:0e:93:d5:30:23:83:18:5b:e2:0b:
                    96:eb:c8:b9:c3:06:f0:cf:ff:2e:92:38:5a:94:d2:
                    a2:51:a8:fe:3b:fe:46:73:42:b3:8b:5b:8c:04:1b:
                    6e:54:9b:b8:60:2a:e0:88:26:1b:9a:a5:c7:f9:3a:
                    8a:27:61:1b:c6:27:5a:c9:96:7c:b7:c9:a0:a7:4f:
                    04:f0:c1:6d:55:0c:ae:2b:a9:af:b4:f0:c9:4d:8c:
                    b8:16:93:bc:d3:bf:bf:e7:6d:68:87:71:c4:de:43:
                    a7:2d:b2:39:78:c3:93:4c:fd:26:70:58:61:04:70:
                    68:9a:80:56:34:01:ea:cf:9c:67:55:ea:c0:1b:f6:
                    62:4e:e8:35:cd:7a:81:57:cb:58:90:73:d2:2f:ec:
                    76:f9:18:90:79:20:65:52:3c:5f:99:96:10:9e:07:
                    b1:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:1F:C8:32:04:C3:44:DA:50:E9:CC:4A:96:AF:F1:66:27:A4:9D:BC
            X509v3 Authority Key Identifier:
                keyid:FB:58:56:6D:15:6E:99:7A:34:B1:6F:C9:C0:7C:20:7B:7E:73:FB:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-1hWbRVumXo0sW_JwHwge35z-1M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ce5c4a-f572-4b6f-a3a5-80e1be66bb0e/1/1-1hWbRVumXo0sW_JwHwge35z-1M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ce5c4a-f572-4b6f-a3a5-80e1be66bb0e/1/1-1hWbRVumXo0sW_JwHwge35z-1M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:63:ea:40:7a:53:9b:70:7f:0d:11:df:49:c2:e3:9d:1a:e5:
         22:45:c3:53:82:53:01:ab:1b:8d:f6:7d:d8:89:dd:80:4d:3b:
         e9:a5:a2:21:52:7c:20:01:f9:09:59:fa:13:80:f1:91:ce:c0:
         cc:bf:8c:a8:78:c5:4f:4b:e8:43:44:8e:f9:c6:eb:0a:ca:57:
         a4:5f:00:ee:96:79:49:e6:0b:1f:f0:13:73:e2:79:1c:9b:cb:
         27:1d:de:cf:7f:05:71:4a:24:2b:11:90:2e:42:4a:a3:d2:87:
         2f:13:99:1a:35:74:48:3c:c6:d5:f5:3a:0b:34:05:7e:7c:8e:
         51:b3:87:0e:b9:66:00:68:92:1a:f2:1f:02:78:75:8b:34:07:
         c6:bb:37:d7:06:b7:9b:93:3b:18:31:c4:31:a1:94:b8:ce:18:
         51:f6:bc:90:2a:f0:7a:49:a7:74:96:12:6d:fe:d5:7e:b8:3b:
         9d:3e:0e:fd:65:33:cd:bc:cb:8f:a7:99:8d:f1:27:84:3b:6f:
         a5:1e:a3:79:94:96:8b:ef:c0:4d:35:e0:8b:9a:a1:e9:52:3e:
         b8:57:c5:fa:50:e8:1a:1a:24:a3:82:40:03:03:86:48:a5:d5:
         8f:3c:5b:b2:11:4c:38:e8:c4:02:79:53:0e:7f:a9:24:21:30:
         3a:2e:90:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----