Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/dc64a5-d7c4-4caf-875f-b2951d389fce/1/4pX03QzsvtxpFt0fhoNSTAiL72M.mft
File:                     4pX03QzsvtxpFt0fhoNSTAiL72M.mft (raw, json)
Hash identifier:          TrV2WvK4rTv0hvf41lietUu6ucjQgNt3X+8Tqg93HBo=
Subject key identifier:   52:27:8B:6B:90:5E:D5:60:29:9C:CE:D0:8F:34:64:67:7D:18:6E:EB
Authority key identifier: E2:95:F4:DD:0C:EC:BE:DC:69:16:DD:1F:86:83:52:4C:08:8B:EF:63
Certificate issuer:       /CN=e295f4dd0cecbedc6916dd1f8683524c088bef63
Certificate serial:       0186B76E0A54799A4B764DB386F4764C1D34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4pX03QzsvtxpFt0fhoNSTAiL72M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/dc64a5-d7c4-4caf-875f-b2951d389fce/1/4pX03QzsvtxpFt0fhoNSTAiL72M.mft
Manifest number:          082E
Signing time:             Mon 06 Mar 2023 14:58:07 +0000
Manifest this update:     Mon 06 Mar 2023 14:58:07 +0000
Manifest next update:     Tue 07 Mar 2023 14:58:07 +0000
Files and hashes:         1: 1QgRN-9zFzb_vsZZkgLgT7kHDY8.roa (hash: qLBbpscSuekOGZZXGiQEXJ7tDfHG6NUz0+wNVcK54IE=)
                          2: 4pX03QzsvtxpFt0fhoNSTAiL72M.crl (hash: szGOYfe0UF1gxUvB6/Wxe+MMzmfl5na6Gyuil8qe00A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:b7:6e:0a:54:79:9a:4b:76:4d:b3:86:f4:76:4c:1d:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e295f4dd0cecbedc6916dd1f8683524c088bef63
        Validity
            Not Before: Mar  6 14:58:07 2023 GMT
            Not After : Mar  7 14:58:07 2023 GMT
        Subject: CN=52278b6b905ed560299cced08f3464677d186eeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:21:e4:a0:5b:f2:fa:7c:54:0b:86:1b:02:da:
                    8c:e5:6f:7d:70:0e:36:88:88:90:d2:74:d0:89:3a:
                    60:85:3d:2a:6f:41:5c:88:be:87:5e:5c:dd:95:0d:
                    87:99:db:86:ed:92:ec:ee:34:62:cb:08:63:71:85:
                    d3:f6:fc:da:c7:5c:84:fc:ac:17:3f:54:e9:19:88:
                    e3:cb:0c:3f:91:86:11:c6:03:4f:9e:f5:c7:84:94:
                    41:b6:3a:55:0f:e0:82:d7:c2:11:4e:8a:3e:9d:33:
                    8e:7e:07:42:82:1e:1a:12:f8:e0:51:b5:d8:72:63:
                    fd:2a:ba:8a:de:80:75:8b:f8:e3:02:b2:da:ba:af:
                    83:96:ae:89:a1:d5:62:53:71:54:be:21:4a:53:a8:
                    8b:36:00:ea:f0:ae:6e:ba:d0:5b:8a:31:c7:38:b2:
                    85:88:56:5c:66:b2:c0:59:88:66:c8:63:96:31:e2:
                    ec:78:e7:66:2f:38:89:92:0b:d2:21:4a:95:c1:3d:
                    d8:b3:ef:ed:23:da:e0:0f:a3:06:75:58:02:c6:72:
                    41:29:6c:a3:e9:00:e7:7a:78:d4:6f:4d:b3:c8:f5:
                    c0:fd:cb:38:6e:ee:f9:e0:97:89:57:ef:bf:66:3d:
                    f4:06:60:08:19:93:bd:e0:54:76:a2:4f:5b:b4:35:
                    4a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:27:8B:6B:90:5E:D5:60:29:9C:CE:D0:8F:34:64:67:7D:18:6E:EB
            X509v3 Authority Key Identifier:
                keyid:E2:95:F4:DD:0C:EC:BE:DC:69:16:DD:1F:86:83:52:4C:08:8B:EF:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4pX03QzsvtxpFt0fhoNSTAiL72M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/dc64a5-d7c4-4caf-875f-b2951d389fce/1/4pX03QzsvtxpFt0fhoNSTAiL72M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/dc64a5-d7c4-4caf-875f-b2951d389fce/1/4pX03QzsvtxpFt0fhoNSTAiL72M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:b7:33:2d:2a:33:81:6f:f5:a1:84:ef:a6:a7:ca:c8:08:84:
         93:69:94:27:e2:6e:ce:9d:30:04:e7:7e:13:2d:9a:42:f2:35:
         47:ab:fe:03:29:82:3e:52:37:62:87:da:09:1f:89:17:64:0c:
         df:6e:01:7b:b9:4a:b1:b8:fa:f1:1f:0b:a0:8d:e2:0d:10:4b:
         73:c9:7f:59:18:aa:51:54:85:56:45:f0:82:6d:74:1d:21:09:
         64:78:38:d8:78:aa:6e:da:e2:bd:ad:c3:2b:3c:5d:14:ba:63:
         ab:8d:b7:a8:1e:2e:8f:c2:5d:49:b6:99:42:1c:ae:14:b4:f3:
         02:16:34:6f:c4:35:49:2b:a9:bc:e9:ac:93:29:a9:4d:d4:03:
         20:f3:69:d9:a7:31:59:4f:31:94:d4:59:73:84:10:7d:e4:08:
         c9:3a:0a:2f:bc:5d:b3:c2:96:ee:00:2f:6b:22:b3:b3:d9:e4:
         92:ea:12:53:52:f9:a8:a2:da:4f:63:9f:84:8b:1e:de:9e:d0:
         df:a4:e3:02:03:3f:82:09:6c:cd:ae:59:9e:c1:0d:01:2c:7c:
         dd:c8:14:c1:01:7b:8d:b7:2e:e9:4d:04:5d:a5:5b:6a:24:55:
         09:e5:1f:dc:b5:96:66:4c:7e:bd:28:fa:75:f7:25:97:63:e5:
         6d:72:f1:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----