Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/ee9f74-f12a-46a6-8447-1cbe0cce11a7/1/vrIhkm91erBp_nUtOMBopIlk-Is.mft
File:                     vrIhkm91erBp_nUtOMBopIlk-Is.mft (raw, json)
Hash identifier:          o6mP1Tu5EqlL58YzNw9/0j6jVDLnVbyH5ncyOgj2KH8=
Subject key identifier:   F7:36:BF:8F:01:5E:EE:AA:B2:92:FA:5B:AD:53:90:F3:08:24:CC:E9
Authority key identifier: BE:B2:21:92:6F:75:7A:B0:69:FE:75:2D:38:C0:68:A4:89:64:F8:8B
Certificate issuer:       /CN=beb221926f757ab069fe752d38c068a48964f88b
Certificate serial:       018A17BF250CD656E57552E89D622AA183A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vrIhkm91erBp_nUtOMBopIlk-Is.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/ee9f74-f12a-46a6-8447-1cbe0cce11a7/1/vrIhkm91erBp_nUtOMBopIlk-Is.mft
Manifest number:          0EA6
Signing time:             Mon 21 Aug 2023 10:58:37 +0000
Manifest this update:     Mon 21 Aug 2023 10:58:37 +0000
Manifest next update:     Tue 22 Aug 2023 10:58:37 +0000
Files and hashes:         1: D0RZzGthvXEjRAitJnbjsnN-6z8.roa (hash: ZEVc68K8h83NNkeVYDeSs+pa2xCcdZT3lGM1pDTn5LY=)
                          2: vrIhkm91erBp_nUtOMBopIlk-Is.crl (hash: g1YTwheQUHq3tWpIfVXvzKpsXVhd4mJzqFpjPodm2zk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:17:bf:25:0c:d6:56:e5:75:52:e8:9d:62:2a:a1:83:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=beb221926f757ab069fe752d38c068a48964f88b
        Validity
            Not Before: Aug 21 10:58:37 2023 GMT
            Not After : Aug 22 10:58:37 2023 GMT
        Subject: CN=f736bf8f015eeeaab292fa5bad5390f30824cce9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9c:2e:8d:57:bb:f0:7a:d5:e5:9d:11:74:4c:
                    be:73:ef:cc:74:2f:7c:9b:61:06:42:0b:5d:ac:3b:
                    85:27:5b:38:d0:ef:3e:e6:be:20:93:97:dd:ec:48:
                    a0:79:d0:82:48:fb:9d:26:64:53:72:c9:46:7d:85:
                    78:40:28:6f:17:ab:20:69:9f:4e:d1:41:1d:70:fc:
                    57:28:ff:7f:dc:cd:b4:05:a5:99:9c:4d:7e:8a:02:
                    b0:bb:8d:dc:56:19:55:66:e7:8f:63:04:fd:be:b7:
                    57:70:e9:1b:be:24:5a:a5:26:a6:e5:98:8b:1d:cd:
                    00:ac:c1:58:87:6d:6e:1b:08:5e:30:b0:0e:81:e0:
                    14:33:b3:03:0a:14:c1:7e:cf:6c:f5:45:77:61:8f:
                    df:7a:bf:8f:f0:ec:f5:28:ca:93:42:00:d2:24:14:
                    98:01:ae:71:ff:37:29:8a:d7:42:81:6a:00:7e:16:
                    3f:d0:97:55:63:cc:ca:f6:ab:9c:d3:c3:cd:8f:c3:
                    a0:9f:56:e1:21:cc:ff:49:64:4b:62:43:1b:35:46:
                    a8:84:ed:a1:f7:78:30:2d:48:3b:73:92:8b:01:b4:
                    d6:90:2c:9e:80:57:c9:d8:7d:92:fb:c0:5e:35:93:
                    41:44:2d:1b:d4:84:f2:6e:ff:8f:f5:87:93:f2:18:
                    cd:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:36:BF:8F:01:5E:EE:AA:B2:92:FA:5B:AD:53:90:F3:08:24:CC:E9
            X509v3 Authority Key Identifier:
                keyid:BE:B2:21:92:6F:75:7A:B0:69:FE:75:2D:38:C0:68:A4:89:64:F8:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrIhkm91erBp_nUtOMBopIlk-Is.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ee9f74-f12a-46a6-8447-1cbe0cce11a7/1/vrIhkm91erBp_nUtOMBopIlk-Is.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ee9f74-f12a-46a6-8447-1cbe0cce11a7/1/vrIhkm91erBp_nUtOMBopIlk-Is.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:2c:c3:b8:e0:e5:4b:4f:ec:11:d0:e5:23:cf:65:8f:84:dd:
         7a:ad:08:be:bc:55:ab:93:d8:77:8f:0b:86:c0:45:26:16:38:
         44:6a:0a:0b:b8:ce:72:8b:cd:30:c3:02:4c:5b:f3:7e:50:44:
         37:97:91:d9:8b:cf:19:27:ae:4c:1d:b6:38:67:a2:24:3a:c9:
         7d:76:c6:2f:80:5c:8d:cf:6b:85:c4:09:55:a9:e6:58:fb:48:
         22:0f:d7:79:ba:e7:b5:17:c3:c6:75:93:49:c7:bf:64:11:cb:
         f8:0a:72:d8:10:ba:09:53:16:b5:89:63:f8:57:ea:82:4e:fe:
         9f:22:dc:bf:2b:df:bc:80:94:82:27:96:fc:b2:ce:a1:0c:ee:
         29:55:77:cf:3f:9e:1a:e7:01:aa:93:3e:69:18:a1:8c:65:07:
         f1:87:c6:5a:fd:39:58:21:d4:f0:87:54:72:41:84:e1:20:84:
         e0:b0:2d:a1:ba:42:b1:bb:7b:aa:28:82:a0:9f:fd:a2:2b:f8:
         cb:59:88:6f:b1:6c:11:52:c6:f6:aa:97:41:b8:83:f7:3b:1d:
         53:b8:2c:a1:93:07:a0:ea:85:a9:39:7e:e7:b9:d6:2b:30:ae:
         c9:cd:b7:fb:19:e2:71:98:ab:1a:d1:82:f6:b4:83:d7:e7:75:
         99:ba:77:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----