Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/86b908-255d-475b-ae55-9e4cd6cc33d0/1/7t0Uxqqw6KTJwkEdkPzhBWjCXsE.mft
File:                     7t0Uxqqw6KTJwkEdkPzhBWjCXsE.mft (raw, json)
Hash identifier:          l8RO/23LjQ6iA0IQaPwp7HwDjPE6P9nGRKZgRYIkESE=
Subject key identifier:   47:09:10:6A:A3:49:B1:70:9A:16:90:CB:74:B4:72:8E:2C:96:E6:1D
Authority key identifier: EE:DD:14:C6:AA:B0:E8:A4:C9:C2:41:1D:90:FC:E1:05:68:C2:5E:C1
Certificate issuer:       /CN=eedd14c6aab0e8a4c9c2411d90fce10568c25ec1
Certificate serial:       018972929B1F997AE03F4B1ED88A19B1D529
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7t0Uxqqw6KTJwkEdkPzhBWjCXsE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/86b908-255d-475b-ae55-9e4cd6cc33d0/1/7t0Uxqqw6KTJwkEdkPzhBWjCXsE.mft
Manifest number:          04DB
Signing time:             Thu 20 Jul 2023 09:12:37 +0000
Manifest this update:     Thu 20 Jul 2023 09:12:37 +0000
Manifest next update:     Fri 21 Jul 2023 09:12:37 +0000
Files and hashes:         1: 7t0Uxqqw6KTJwkEdkPzhBWjCXsE.crl (hash: 3DDIbGHPCdJYwLtbYo00DHai0TfhX6d8PS621Uj3kzk=)
                          2: YazeUzhja8--oHAzJHErrGJ25Ak.roa (hash: N82MOKVDB2ZCdFtabUaTiPMNLjqAiqhXLOfCLw4WlKQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:72:92:9b:1f:99:7a:e0:3f:4b:1e:d8:8a:19:b1:d5:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eedd14c6aab0e8a4c9c2411d90fce10568c25ec1
        Validity
            Not Before: Jul 20 09:12:37 2023 GMT
            Not After : Jul 21 09:12:37 2023 GMT
        Subject: CN=4709106aa349b1709a1690cb74b4728e2c96e61d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:af:9a:7d:f0:d5:8d:c6:1d:5f:e8:b2:6b:2b:
                    c6:63:ea:c0:27:17:d1:a5:31:b0:2b:3d:d8:c1:72:
                    7a:fe:9b:5c:d9:5c:82:d2:ed:6f:e8:45:7b:77:97:
                    d9:59:c7:d7:98:fc:26:5d:de:47:98:37:48:6f:b1:
                    66:4a:ab:1c:09:4f:41:a9:5c:94:af:af:fb:fb:80:
                    79:5a:36:2f:2e:f8:f2:52:4f:6f:11:a8:6e:65:7a:
                    8d:bc:b2:27:ad:3b:4d:1a:c1:3a:cd:10:3b:5d:84:
                    73:02:17:3d:ae:34:75:26:e4:6a:37:d2:30:4a:ac:
                    21:ed:3d:c1:8d:b7:3b:f1:d0:05:87:34:b4:96:a4:
                    e9:5a:2f:6c:f6:cb:10:5b:0e:af:76:55:61:23:10:
                    ac:28:47:87:49:f9:79:be:7e:cb:78:28:43:1d:1f:
                    36:a0:9e:db:57:55:72:b4:1b:f7:0c:14:89:12:9d:
                    53:36:a4:98:9a:1a:74:b6:b8:2b:66:74:4a:fc:d7:
                    6d:12:c6:7d:a2:0a:24:20:94:c5:9d:7e:73:90:42:
                    ae:fd:79:66:15:6e:4e:25:b2:db:b8:f3:9f:cc:31:
                    c3:6f:cd:50:f3:7c:12:d7:af:66:5c:8f:b2:23:a7:
                    35:72:83:af:13:b6:39:74:21:d8:01:ab:72:5e:d6:
                    74:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:09:10:6A:A3:49:B1:70:9A:16:90:CB:74:B4:72:8E:2C:96:E6:1D
            X509v3 Authority Key Identifier:
                keyid:EE:DD:14:C6:AA:B0:E8:A4:C9:C2:41:1D:90:FC:E1:05:68:C2:5E:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7t0Uxqqw6KTJwkEdkPzhBWjCXsE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/86b908-255d-475b-ae55-9e4cd6cc33d0/1/7t0Uxqqw6KTJwkEdkPzhBWjCXsE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/86b908-255d-475b-ae55-9e4cd6cc33d0/1/7t0Uxqqw6KTJwkEdkPzhBWjCXsE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:d6:5f:33:c3:d9:19:fa:56:13:e8:8d:09:09:cf:80:b6:1b:
         2a:41:9a:79:03:9f:f9:c2:a2:8d:8a:6e:41:71:00:2c:db:77:
         0c:63:dd:7d:5c:32:90:b2:03:32:94:40:0a:96:ee:ab:bf:a6:
         0b:a0:b7:d2:5c:81:a4:ec:96:aa:41:f8:27:68:38:63:6b:77:
         00:2f:f6:32:df:6b:da:19:89:f3:da:15:fb:63:9f:ca:77:92:
         92:0b:9d:2c:ae:03:69:c6:5b:5d:9e:94:67:8b:47:ce:68:3a:
         6b:da:8b:1b:35:d3:35:4b:5b:96:71:5a:9b:55:76:f6:f5:3b:
         3f:1d:ec:18:6e:11:84:78:5d:40:96:1e:9a:48:7c:12:f5:f3:
         c0:4f:27:ec:0a:00:5a:56:a8:07:5d:a7:3a:60:e0:44:43:a7:
         b3:30:5d:55:f8:42:e8:4d:a9:a1:36:de:07:18:e3:82:45:bd:
         68:06:bf:14:5d:6f:5e:72:e3:fc:80:60:aa:13:09:55:2f:5a:
         d5:6f:ef:e5:6f:04:88:03:00:a8:30:15:14:c4:c5:cf:13:50:
         d0:0f:80:d6:81:b2:00:59:66:c5:e7:ba:54:c2:f5:b4:bc:37:
         81:b1:ea:80:d4:72:c2:ec:b7:0b:8b:05:5f:04:d8:1a:dd:8a:
         72:6d:44:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----