Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/09e16e-3b3e-4ccb-886e-9891b328ed4a/1/pefGynNw2Q15JKZdhg7JJG9NOKk.mft
File:                     pefGynNw2Q15JKZdhg7JJG9NOKk.mft (raw, json)
Hash identifier:          KwwIXWlO4Z0DhGkGTYrYIu/b8A+mQ3221W9x5p+x7hk=
Subject key identifier:   D2:57:82:50:D7:47:1B:04:D1:BA:65:2A:C3:B0:5A:45:10:23:3C:02
Authority key identifier: A5:E7:C6:CA:73:70:D9:0D:79:24:A6:5D:86:0E:C9:24:6F:4D:38:A9
Certificate issuer:       /CN=a5e7c6ca7370d90d7924a65d860ec9246f4d38a9
Certificate serial:       0189D4447982757DEDBAC36398923E7FFBE8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pefGynNw2Q15JKZdhg7JJG9NOKk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/09e16e-3b3e-4ccb-886e-9891b328ed4a/1/pefGynNw2Q15JKZdhg7JJG9NOKk.mft
Manifest number:          0852
Signing time:             Tue 08 Aug 2023 08:30:04 +0000
Manifest this update:     Tue 08 Aug 2023 08:30:04 +0000
Manifest next update:     Wed 09 Aug 2023 08:30:04 +0000
Files and hashes:         1: pefGynNw2Q15JKZdhg7JJG9NOKk.crl (hash: 8/hXuN3cdCC6SCQcF+drASrjgFKnMUpPxwZBlBOOCNI=)
                          2: xJmu2u3zCWDOti2-AMycGrvyjgA.roa (hash: AI7qG6BiNkOr3FHYZZWbqBrxTJyad4O+2CQI0bUHB9s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:d4:44:79:82:75:7d:ed:ba:c3:63:98:92:3e:7f:fb:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5e7c6ca7370d90d7924a65d860ec9246f4d38a9
        Validity
            Not Before: Aug  8 08:30:04 2023 GMT
            Not After : Aug  9 08:30:04 2023 GMT
        Subject: CN=d2578250d7471b04d1ba652ac3b05a4510233c02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:92:6e:46:35:36:cb:03:97:ec:0f:ee:65:5d:
                    f8:ee:f8:ae:0f:50:13:df:b7:ce:61:06:5b:9c:28:
                    21:28:cc:22:52:94:ed:01:05:85:de:84:47:7b:ab:
                    46:35:0c:5c:74:76:e7:6b:34:d0:52:e6:d5:17:d9:
                    5b:1c:e4:ab:b7:70:74:98:55:c5:db:98:f4:da:1f:
                    c4:07:16:e9:e7:f3:69:22:d6:31:c8:9d:a0:68:f5:
                    27:b5:4d:0e:2c:36:fc:9f:e7:76:a3:0d:7c:aa:a2:
                    43:90:0b:09:3b:36:a5:29:80:b7:a7:a4:ed:f7:33:
                    16:8e:aa:78:b0:8e:0f:39:76:5f:e5:32:34:1c:28:
                    59:70:6b:14:d1:97:9d:aa:87:d9:26:68:4f:c2:57:
                    52:4e:a1:72:75:af:d5:e4:4c:d1:af:ff:26:19:35:
                    20:12:bd:f3:ae:79:48:25:55:d0:ce:d5:9c:e5:ff:
                    3c:1b:29:ef:41:b8:7f:f8:4f:7d:40:f4:5f:4a:59:
                    e9:96:f8:70:95:b8:bd:9a:13:71:96:e2:a4:e9:3e:
                    21:57:dc:ff:04:87:96:db:be:96:e9:7d:80:15:b5:
                    de:30:66:74:f8:76:07:29:c1:54:44:e3:00:ee:9b:
                    3d:e6:3c:bd:99:66:7c:16:a4:3a:57:ec:4a:f3:ca:
                    24:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:57:82:50:D7:47:1B:04:D1:BA:65:2A:C3:B0:5A:45:10:23:3C:02
            X509v3 Authority Key Identifier:
                keyid:A5:E7:C6:CA:73:70:D9:0D:79:24:A6:5D:86:0E:C9:24:6F:4D:38:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pefGynNw2Q15JKZdhg7JJG9NOKk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/09e16e-3b3e-4ccb-886e-9891b328ed4a/1/pefGynNw2Q15JKZdhg7JJG9NOKk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/09e16e-3b3e-4ccb-886e-9891b328ed4a/1/pefGynNw2Q15JKZdhg7JJG9NOKk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:85:a1:e8:dd:42:6d:df:45:ac:91:f6:fa:31:f3:9c:4f:8e:
         a1:0a:7e:99:6d:b3:13:d3:ce:e1:cb:91:09:b1:80:68:12:6f:
         ac:25:cc:5a:12:da:84:c3:cd:b9:bd:cc:b9:9e:5a:14:f1:94:
         ea:f3:8b:e7:0f:75:13:2b:7e:b7:5f:7a:aa:f7:59:4a:7b:f0:
         31:ab:58:ba:e0:7a:58:71:79:af:48:b0:8d:c5:8b:b5:55:bf:
         42:65:fd:ad:fb:5d:6d:19:b7:51:03:55:ac:0a:d7:3d:95:50:
         f4:cf:ab:cd:9d:41:e5:4f:66:42:e2:55:37:e9:b8:2e:a1:14:
         5c:e1:0e:be:23:7e:2d:eb:4c:bd:db:96:8f:cf:3a:e5:2e:fd:
         5b:18:d4:1b:57:7d:97:97:c1:ec:33:f6:3b:39:0d:b3:18:06:
         c5:d4:aa:c9:8c:a1:1a:2b:07:b2:2c:4a:9b:84:66:a6:09:c8:
         eb:1c:82:91:0d:cd:0a:0b:91:55:33:95:44:94:2c:e6:a1:f9:
         a5:e3:f4:30:1a:95:a2:5d:b9:f3:19:f3:1d:2c:a6:57:0a:03:
         1d:7b:2d:33:cf:8e:90:d7:6d:a3:51:dc:f7:b4:57:eb:9b:3d:
         d7:b1:4b:f6:b9:4a:c0:94:4f:a5:7b:aa:b6:e2:06:90:89:24:
         aa:5c:bd:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 8 10:43:31 2023 by rpki-client on console-fra.rpki-client.org