Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/84dd5d-4689-4172-bf42-7673ffa95b8d/1/7nSGWVJOyDj427oYr4MGq-RDKFs.mft
File:                     7nSGWVJOyDj427oYr4MGq-RDKFs.mft (raw, json)
Hash identifier:          xGcwJXZpP/hdsoRcH75R7LjPVGEVvWYgBB53P9rULX4=
Subject key identifier:   EA:4E:0F:83:9F:0C:1F:E1:5D:A7:1B:F9:70:37:CF:22:84:88:F7:35
Authority key identifier: EE:74:86:59:52:4E:C8:38:F8:DB:BA:18:AF:83:06:AB:E4:43:28:5B
Certificate issuer:       /CN=ee748659524ec838f8dbba18af8306abe443285b
Certificate serial:       01894E104E69B5EB0F954C30B270C1FDA565
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7nSGWVJOyDj427oYr4MGq-RDKFs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/84dd5d-4689-4172-bf42-7673ffa95b8d/1/7nSGWVJOyDj427oYr4MGq-RDKFs.mft
Manifest number:          0E2E
Signing time:             Thu 13 Jul 2023 07:03:58 +0000
Manifest this update:     Thu 13 Jul 2023 07:03:58 +0000
Manifest next update:     Fri 14 Jul 2023 07:03:58 +0000
Files and hashes:         1: 7nSGWVJOyDj427oYr4MGq-RDKFs.crl (hash: EzGX0ojukGgO6yrRsfUIdtNfclGaRs5cX8iVGs2EEHM=)
                          2: tsv28oUx8QVd_sXdUqjy4FTt-fw.roa (hash: ANvoP7Px/D7EXNmQbhWIOcuihUR8Nb4TU7td8IH9lFI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:4e:10:4e:69:b5:eb:0f:95:4c:30:b2:70:c1:fd:a5:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee748659524ec838f8dbba18af8306abe443285b
        Validity
            Not Before: Jul 13 07:03:58 2023 GMT
            Not After : Jul 14 07:03:58 2023 GMT
        Subject: CN=ea4e0f839f0c1fe15da71bf97037cf228488f735
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:24:cb:26:39:1b:73:98:88:c5:a1:81:4e:d4:
                    54:2c:c1:ca:27:ca:a8:1f:fe:10:35:f3:cf:2c:7b:
                    1f:69:de:2d:4f:2c:d6:92:9a:85:14:06:ca:05:b5:
                    94:b4:63:68:8f:ac:0b:99:9c:08:38:70:13:20:89:
                    de:0a:c6:3c:5f:59:0e:7a:48:8c:37:55:54:65:68:
                    9d:af:07:40:f4:7b:45:41:72:a3:96:95:d4:b9:e8:
                    a5:80:f4:0d:a7:93:10:e9:0c:f6:dc:ae:2d:4e:57:
                    1d:09:56:22:cb:3e:2a:36:d7:e9:5d:8f:2f:4e:5e:
                    c7:d7:a3:0d:86:07:7d:61:41:af:1f:53:de:7e:89:
                    8f:1f:48:b4:60:5a:21:8a:35:c5:f7:b3:76:9e:8b:
                    78:5b:52:21:48:03:e2:c5:22:de:54:f3:d2:de:7b:
                    92:8c:a3:20:4c:39:06:56:45:f1:33:bc:2e:97:c6:
                    a1:72:2a:c9:76:ae:73:7f:d2:ca:a5:ed:7c:2c:e6:
                    58:00:59:b4:1a:05:6e:8d:62:98:18:ef:60:1f:bf:
                    fd:a5:0f:d7:c2:2e:f9:97:0b:20:2c:42:95:98:17:
                    63:ab:1d:43:7d:a1:80:01:f6:15:bc:be:c6:a4:0b:
                    1a:fd:dd:11:4c:b7:4f:65:4e:0f:fb:d8:17:2e:c0:
                    23:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:4E:0F:83:9F:0C:1F:E1:5D:A7:1B:F9:70:37:CF:22:84:88:F7:35
            X509v3 Authority Key Identifier:
                keyid:EE:74:86:59:52:4E:C8:38:F8:DB:BA:18:AF:83:06:AB:E4:43:28:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7nSGWVJOyDj427oYr4MGq-RDKFs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/84dd5d-4689-4172-bf42-7673ffa95b8d/1/7nSGWVJOyDj427oYr4MGq-RDKFs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/84dd5d-4689-4172-bf42-7673ffa95b8d/1/7nSGWVJOyDj427oYr4MGq-RDKFs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:92:ce:8f:20:aa:ba:1a:da:57:01:91:34:25:75:e9:40:a2:
         8f:4e:b8:3c:99:4e:89:b7:5e:17:5b:1c:7f:83:ac:58:48:87:
         71:9d:56:2e:e9:12:a2:01:07:ff:75:da:a7:88:3f:24:e9:af:
         80:57:df:40:5d:4f:f4:b7:56:ff:da:03:77:7c:a9:7a:e8:50:
         44:79:01:7f:e4:e6:4f:2d:f7:87:9f:f1:49:3e:5a:68:e7:10:
         4f:a5:44:35:52:16:d9:b9:82:4e:12:9e:9a:46:1d:b2:27:80:
         1b:6e:f0:fb:29:83:99:f1:1c:cc:04:3d:d8:85:e3:ce:28:72:
         13:8f:fe:5b:c4:1a:85:6b:e4:9c:bf:a4:3b:29:c0:3b:aa:84:
         28:6a:5c:d1:b1:6b:1c:a4:53:62:76:dc:82:a7:b8:41:8e:e2:
         fa:2e:8d:58:c8:3d:fd:51:e2:de:20:35:a0:7b:5e:3b:59:ff:
         8f:38:35:a0:dd:db:24:eb:4b:de:b2:1b:c6:9e:a2:d5:34:e5:
         74:b3:ad:fe:c4:54:52:4d:69:a5:6f:26:14:b4:f0:0d:09:f6:
         02:c7:ef:f9:3e:24:b7:55:cb:d3:77:e5:bf:3f:1e:60:03:a7:
         36:99:33:e7:c4:20:48:fc:a6:85:3d:f7:81:d4:e9:53:d2:26:
         40:f0:68:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----