Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/598642-e36f-4c5c-a8e0-a0b514249c06/1/1BvKOYYfnDDHV2FIAfhtF-XqHks.mft
File:                     1BvKOYYfnDDHV2FIAfhtF-XqHks.mft (raw, json)
Hash identifier:          AQKnBuL0WZVar3U+p0JwMZlsVrGU4qL6xlg2ZdBnSSQ=
Subject key identifier:   C2:96:56:9C:74:31:84:1F:E6:E6:51:A3:10:BA:0E:A7:93:F3:57:76
Authority key identifier: D4:1B:CA:39:86:1F:9C:30:C7:57:61:48:01:F8:6D:17:E5:EA:1E:4B
Certificate issuer:       /CN=d41bca39861f9c30c757614801f86d17e5ea1e4b
Certificate serial:       018514E747BEF8C956385B04FA37A32B198C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1BvKOYYfnDDHV2FIAfhtF-XqHks.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/598642-e36f-4c5c-a8e0-a0b514249c06/1/1BvKOYYfnDDHV2FIAfhtF-XqHks.mft
Manifest number:          058D
Signing time:             Thu 15 Dec 2022 08:29:39 +0000
Manifest this update:     Thu 15 Dec 2022 08:29:39 +0000
Manifest next update:     Fri 16 Dec 2022 08:29:39 +0000
Files and hashes:         1: 1-yxHf6p6xdvx4Tini2ueVcJPi3E.roa (hash: poBUyZtdLVYWjJU6fTkrsZeds5El71yzTdGJljXrFfc=)
                          2: 1BvKOYYfnDDHV2FIAfhtF-XqHks.crl (hash: N7dmnm+IrfdAZ4uxC4RPFFm3y3gNp9157FcO3IM1TXM=)
                          3: Xmgtgv0HIRQBjgmrjdN9PgW-u2I.roa (hash: 2A/x/reVzIfQ2EZi8AcqtutxSgZhM21R/530HadbkeE=)
                          4: gjXmvffFX1LjzeAP2NtVw2FnKtc.roa (hash: uEf6q8/oacI5f6+kghXBJTAjNjdJWYgimNgrMyMEd1w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:14:e7:47:be:f8:c9:56:38:5b:04:fa:37:a3:2b:19:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d41bca39861f9c30c757614801f86d17e5ea1e4b
        Validity
            Not Before: Dec 15 08:29:39 2022 GMT
            Not After : Dec 16 08:29:39 2022 GMT
        Subject: CN=c296569c7431841fe6e651a310ba0ea793f35776
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:25:75:e2:68:82:e8:64:af:e4:e2:02:7c:cb:
                    96:40:dd:bd:2f:3f:2e:f7:1c:61:5d:93:db:19:10:
                    8c:64:2b:18:f9:8b:99:4a:4a:50:02:66:e2:e2:0a:
                    c5:81:7a:14:7f:0e:24:62:1f:8a:fe:cb:ea:cd:60:
                    33:50:29:94:ad:7b:5d:8b:05:85:5f:a5:fc:2d:c2:
                    e5:a0:ce:3d:b6:21:b7:07:aa:3a:9a:26:05:bd:b9:
                    59:95:fc:2d:19:b5:18:f9:70:b6:bd:24:92:89:46:
                    e9:95:84:a9:0c:05:92:31:5c:73:8e:25:16:97:fd:
                    3f:ee:df:2d:0f:53:80:df:92:f1:d3:8a:97:9c:31:
                    02:2a:d9:3b:e6:de:ea:61:62:4b:db:da:19:f5:4a:
                    6e:28:04:23:99:42:c3:cf:23:05:d5:86:09:fb:33:
                    a3:a1:28:6f:5a:7d:9d:9d:6c:56:35:d1:b6:1e:ec:
                    54:81:fe:4b:c6:e7:31:43:d3:1d:68:2d:42:59:7f:
                    f4:83:21:68:d2:e7:ee:05:60:9b:d4:c0:cc:11:e4:
                    a1:b2:c8:ef:e0:03:1a:35:be:9c:b7:ab:46:16:d3:
                    a9:4d:4c:fd:95:15:88:ba:f3:46:d1:63:77:ab:fd:
                    3e:70:1d:23:8f:92:e7:23:e1:22:a5:1d:7b:4e:80:
                    68:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:96:56:9C:74:31:84:1F:E6:E6:51:A3:10:BA:0E:A7:93:F3:57:76
            X509v3 Authority Key Identifier:
                keyid:D4:1B:CA:39:86:1F:9C:30:C7:57:61:48:01:F8:6D:17:E5:EA:1E:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BvKOYYfnDDHV2FIAfhtF-XqHks.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/598642-e36f-4c5c-a8e0-a0b514249c06/1/1BvKOYYfnDDHV2FIAfhtF-XqHks.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/598642-e36f-4c5c-a8e0-a0b514249c06/1/1BvKOYYfnDDHV2FIAfhtF-XqHks.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:63:44:94:d8:96:fd:1e:3a:9d:2d:54:4d:f7:cd:0a:4b:52:
         e1:ba:ea:c3:fb:d3:d7:08:2b:4b:7d:88:6e:fe:8b:23:c5:a1:
         af:69:75:70:2d:73:62:42:69:3d:cc:a1:11:b8:d1:d5:23:a9:
         01:fa:db:58:7f:24:77:21:a9:dd:f5:7d:16:d0:17:bf:b2:d4:
         ba:28:df:55:39:f4:ac:b1:be:c0:d9:cb:f2:a6:91:8e:79:16:
         b4:98:3c:c7:84:a4:53:f7:d4:0b:a4:35:aa:08:ac:a1:e0:e6:
         db:27:49:8f:6d:a2:e2:57:01:84:fa:76:f4:a5:ee:6a:10:3b:
         10:5b:6c:7f:48:a1:d4:43:c9:45:59:c8:1d:bd:25:20:26:a6:
         12:65:05:ca:3f:6d:a3:ec:0c:08:74:54:f1:67:d0:94:fa:8a:
         df:f0:49:72:85:15:14:20:ea:12:be:b3:41:ce:d7:51:49:df:
         f1:be:70:37:bf:9b:1c:a3:2e:9a:2d:c0:28:04:57:a8:36:81:
         c5:b2:1b:ce:46:0e:b3:46:07:65:7a:bd:9f:d2:7a:c4:10:41:
         96:cb:dd:36:80:f3:d0:a9:61:0e:06:df:1d:37:ad:dd:aa:57:
         55:67:86:57:40:f5:14:13:18:a2:7f:74:e6:28:94:64:5c:b9:
         b0:c9:60:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----