Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/75c34e-d5b6-4d14-9568-5b590b8fe4f8/1/1ekn9FuGIRDmTBYmbL7cMpl7Q_U.mft
File:                     1ekn9FuGIRDmTBYmbL7cMpl7Q_U.mft (raw, json)
Hash identifier:          2JsEkHmkCsQDm7U5R6UXolep/rsLZPVSEyo5Jjg9cDY=
Subject key identifier:   E0:AD:29:8A:7B:F2:E8:54:CF:B9:1B:77:9E:D3:DA:FA:FD:E9:54:D7
Authority key identifier: D5:E9:27:F4:5B:86:21:10:E6:4C:16:26:6C:BE:DC:32:99:7B:43:F5
Certificate issuer:       /CN=d5e927f45b862110e64c16266cbedc32997b43f5
Certificate serial:       01855D977E7D70E7ABAB479E25E73F6F9E16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1ekn9FuGIRDmTBYmbL7cMpl7Q_U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/75c34e-d5b6-4d14-9568-5b590b8fe4f8/1/1ekn9FuGIRDmTBYmbL7cMpl7Q_U.mft
Manifest number:          0BF0
Signing time:             Thu 29 Dec 2022 11:14:47 +0000
Manifest this update:     Thu 29 Dec 2022 11:14:47 +0000
Manifest next update:     Fri 30 Dec 2022 11:14:47 +0000
Files and hashes:         1: 1ekn9FuGIRDmTBYmbL7cMpl7Q_U.crl (hash: G8a3cCI0czPvZJP/i6obhJHVm70B7cnWLziQ+0j6ZZ0=)
                          2: pNluUSHWYRhFVV-60SjQKaofOwk.roa (hash: 4rojl8vIYQY3uIX/SHQsW9n4+lXsmb2WwL1Op+QBGZM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:5d:97:7e:7d:70:e7:ab:ab:47:9e:25:e7:3f:6f:9e:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5e927f45b862110e64c16266cbedc32997b43f5
        Validity
            Not Before: Dec 29 11:14:47 2022 GMT
            Not After : Dec 30 11:14:47 2022 GMT
        Subject: CN=e0ad298a7bf2e854cfb91b779ed3dafafde954d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:de:99:8f:83:0a:9e:f5:bc:b3:cc:94:3d:04:
                    ea:50:5f:4f:95:73:54:13:06:ab:8b:ad:97:50:26:
                    9d:bf:f2:b0:db:81:3e:0d:e0:46:06:54:45:11:d1:
                    09:85:c9:27:2f:8a:66:35:c2:e4:23:f6:7f:c4:a2:
                    98:e3:10:2c:cd:ba:bb:1b:37:55:1c:8e:00:62:5e:
                    28:07:b6:ad:4d:e5:ad:a1:7c:d1:f4:f9:74:29:28:
                    3d:06:ea:c0:88:76:06:ab:73:92:a2:0d:77:ee:28:
                    44:dc:a2:03:34:82:92:6d:53:f1:4c:ef:32:bb:6a:
                    d1:84:11:23:d5:42:eb:c8:5a:83:0a:a3:48:54:21:
                    1b:fa:4e:12:e0:f6:bd:ca:3b:ae:e3:fe:1a:f0:ba:
                    9e:51:2e:11:08:85:03:04:3d:11:e6:28:0a:23:8d:
                    86:84:0e:a5:14:8c:69:d6:8c:f5:75:8f:0c:97:42:
                    78:17:98:a7:95:e7:06:89:bc:d4:e7:5d:cd:7e:0f:
                    83:39:e8:03:8e:0d:17:85:14:ba:f1:26:dc:89:63:
                    f2:bc:40:c2:a6:f1:ea:25:d2:0b:e1:f1:f8:d1:55:
                    8a:67:8d:fb:03:10:85:68:13:73:23:be:2b:c0:33:
                    fc:ae:48:2b:07:46:ca:6b:17:eb:1f:f8:f5:57:4d:
                    c8:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:AD:29:8A:7B:F2:E8:54:CF:B9:1B:77:9E:D3:DA:FA:FD:E9:54:D7
            X509v3 Authority Key Identifier:
                keyid:D5:E9:27:F4:5B:86:21:10:E6:4C:16:26:6C:BE:DC:32:99:7B:43:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ekn9FuGIRDmTBYmbL7cMpl7Q_U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/75c34e-d5b6-4d14-9568-5b590b8fe4f8/1/1ekn9FuGIRDmTBYmbL7cMpl7Q_U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/75c34e-d5b6-4d14-9568-5b590b8fe4f8/1/1ekn9FuGIRDmTBYmbL7cMpl7Q_U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:94:56:ba:cd:0f:64:31:07:5f:bb:1c:f9:29:03:f4:6a:ba:
         42:1b:a2:79:b4:67:db:2f:bd:0c:a2:2d:da:70:99:83:55:4d:
         59:65:d2:38:08:cb:d4:9e:78:41:01:cf:8d:5e:19:94:dd:2b:
         05:d7:cc:ed:c7:68:22:c1:88:1a:e4:ff:fd:9c:7c:cf:c8:a9:
         f0:2b:0b:99:50:72:c2:c5:8b:4b:ff:5f:1f:25:ab:29:64:39:
         dd:95:81:9e:8d:f9:6a:6f:c1:7c:36:c7:4f:1d:10:ec:ac:fd:
         b2:9f:f1:25:1a:e5:c4:7e:e7:9e:06:84:a1:60:cb:42:a1:91:
         0b:ec:2d:74:d1:fc:40:75:29:59:e6:4f:f9:60:f0:55:e1:af:
         a9:fc:7f:d8:a6:26:44:c2:2a:db:a6:e0:da:83:1e:4a:10:4c:
         86:46:28:79:94:c2:23:38:c5:3c:a1:7b:4e:71:86:fb:2f:a2:
         9c:bb:ee:8d:1f:d1:fb:2b:79:26:5a:90:c7:c4:78:6d:74:15:
         56:11:33:44:cb:fd:1f:43:64:6c:09:3d:a5:7b:ee:c8:a3:48:
         e7:d7:ab:04:e8:2d:f5:95:a7:d4:9a:ad:54:55:ef:c2:cb:6e:
         e5:67:05:81:ce:8d:4b:6a:ee:5c:98:44:4b:41:53:b2:5a:06:
         77:d5:f0:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----