Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/b23591-aeda-476a-b20a-b9fea1189dce/1/GRAjUY09BVHQU-gotwsYIh6J_ow.mft
File:                     GRAjUY09BVHQU-gotwsYIh6J_ow.mft (raw, json)
Hash identifier:          3BLkau/t+1AdZ9k/mMXshDWflHBHLXM9W7OwPldeNug=
Subject key identifier:   54:4F:75:2B:8B:CF:92:60:A0:A4:29:E8:46:25:5C:DD:A7:01:3C:FE
Authority key identifier: 19:10:23:51:8D:3D:05:51:D0:53:E8:28:B7:0B:18:22:1E:89:FE:8C
Certificate issuer:       /CN=191023518d3d0551d053e828b70b18221e89fe8c
Certificate serial:       0184BE076BD19E6DBEA5956122599F2C79CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GRAjUY09BVHQU-gotwsYIh6J_ow.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/b23591-aeda-476a-b20a-b9fea1189dce/1/GRAjUY09BVHQU-gotwsYIh6J_ow.mft
Manifest number:          0591
Signing time:             Mon 28 Nov 2022 11:37:48 +0000
Manifest this update:     Mon 28 Nov 2022 11:37:48 +0000
Manifest next update:     Tue 29 Nov 2022 11:37:48 +0000
Files and hashes:         1: GRAjUY09BVHQU-gotwsYIh6J_ow.crl (hash: 85eh6XNvPygjyza/mvEa3Rdg4D9ZkUIFoq4PPAsG9oM=)
                          2: Xl9DaTVCCTb-Kgwvh5ikx9r1Alw.roa (hash: wZahqEIbjAT8se8t+Naxrccjq/TnJqHjqRlX1XnHcOM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:be:07:6b:d1:9e:6d:be:a5:95:61:22:59:9f:2c:79:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=191023518d3d0551d053e828b70b18221e89fe8c
        Validity
            Not Before: Nov 28 11:37:48 2022 GMT
            Not After : Nov 29 11:37:48 2022 GMT
        Subject: CN=544f752b8bcf9260a0a429e846255cdda7013cfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c3:a6:a8:49:df:0f:80:61:f6:82:0d:57:39:
                    50:b8:62:e2:3e:38:c0:07:3f:76:00:63:3e:e0:9d:
                    ad:95:96:0f:3f:fe:db:be:a4:77:37:7b:78:b2:bb:
                    0e:e5:4b:11:8a:fb:2d:ba:a8:1b:4e:b7:ee:e1:7a:
                    17:2a:f8:58:82:39:00:6d:3a:0a:95:0b:ea:5f:cb:
                    c2:c1:08:c4:9a:6c:92:f5:81:3a:72:67:84:28:e8:
                    89:4b:33:ea:83:9e:77:46:a2:a9:a9:42:d0:8f:b7:
                    cf:5b:04:8e:60:3f:2a:3f:a2:c4:76:da:09:e5:39:
                    22:d6:f6:c5:09:1e:31:99:62:39:d2:4d:d0:b6:34:
                    98:1d:2d:cc:49:05:25:dc:0c:36:de:7c:91:07:9c:
                    97:91:44:bb:a3:82:a7:ce:0d:ee:61:9d:0b:d5:cc:
                    62:52:8a:e4:91:74:54:0a:b4:31:9d:2e:2d:8b:74:
                    a9:cc:49:b0:05:43:a6:8e:c7:bf:74:9a:e0:9f:ae:
                    0c:4a:60:46:01:d6:ce:d7:a7:bd:fd:b9:f0:ea:d3:
                    78:67:8e:5f:78:c8:44:2b:5f:8c:fe:8c:d7:35:6f:
                    b9:84:af:3a:d5:51:50:7c:f9:29:53:01:62:fb:cc:
                    3d:7f:6b:16:73:41:d8:41:7b:8e:2c:e9:b6:e9:9b:
                    19:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:4F:75:2B:8B:CF:92:60:A0:A4:29:E8:46:25:5C:DD:A7:01:3C:FE
            X509v3 Authority Key Identifier:
                keyid:19:10:23:51:8D:3D:05:51:D0:53:E8:28:B7:0B:18:22:1E:89:FE:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GRAjUY09BVHQU-gotwsYIh6J_ow.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/b23591-aeda-476a-b20a-b9fea1189dce/1/GRAjUY09BVHQU-gotwsYIh6J_ow.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/b23591-aeda-476a-b20a-b9fea1189dce/1/GRAjUY09BVHQU-gotwsYIh6J_ow.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:4e:7b:b7:dd:1c:9c:95:f6:41:59:05:dc:b6:83:9f:be:87:
         d8:5a:aa:d9:a2:ae:4c:e6:ad:2b:98:d9:a5:19:0a:56:2a:e5:
         f7:cb:67:c7:67:c5:ae:32:74:b6:30:9d:06:40:d5:9c:fb:b1:
         68:2f:6d:63:59:a7:8c:d8:28:c8:9d:7b:6d:92:21:fa:a8:37:
         f1:76:a8:16:32:cb:5f:82:d0:a0:6e:25:50:3e:ff:72:9a:1d:
         c4:33:3c:00:fe:50:a3:5f:62:3b:bb:13:3b:b4:38:da:f2:ce:
         79:71:65:28:21:a9:06:cc:b5:83:49:fd:1c:9d:69:b1:36:f2:
         92:ca:20:4b:df:38:e1:d4:70:12:4b:af:11:6a:77:bb:76:46:
         31:82:79:cb:46:26:40:5f:81:38:68:66:73:ff:f2:07:b9:8d:
         5d:13:9a:3c:83:41:f1:f5:84:84:76:e2:4b:36:89:cf:3a:94:
         b4:c8:c4:54:2c:8c:6e:13:94:d9:b7:01:aa:02:80:fe:da:aa:
         5d:4c:ee:14:2f:7f:ba:27:36:34:cc:35:e8:36:2e:a0:c5:19:
         2f:4a:da:a1:a4:77:8d:60:1e:f6:3f:ac:56:2a:02:63:90:27:
         c9:35:93:c5:9e:92:98:3c:5a:ac:82:98:c0:2d:74:7f:fe:39:
         21:23:f3:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----