Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/d4374e-a52a-4620-8f59-1e15a5a885a5/1/kxQz4rt-gyYGxGK1Nm-pQcz6H8o.mft
File:                     kxQz4rt-gyYGxGK1Nm-pQcz6H8o.mft (raw, json)
Hash identifier:          hlMTtJlCw6uiIMFpK/K8E15gXG1O1T/1zQf4TZLSxgw=
Subject key identifier:   81:F6:F8:34:46:AA:19:DA:3D:8B:51:B5:61:ED:66:5A:6E:FC:95:C5
Authority key identifier: 93:14:33:E2:BB:7E:83:26:06:C4:62:B5:36:6F:A9:41:CC:FA:1F:CA
Certificate issuer:       /CN=931433e2bb7e832606c462b5366fa941ccfa1fca
Certificate serial:       046E6FB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kxQz4rt-gyYGxGK1Nm-pQcz6H8o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/d4374e-a52a-4620-8f59-1e15a5a885a5/1/kxQz4rt-gyYGxGK1Nm-pQcz6H8o.mft
Manifest number:          05BC
Signing time:             Thu 09 Jun 2022 03:02:22 +0000
Manifest this update:     Thu 09 Jun 2022 03:02:22 +0000
Manifest next update:     Fri 10 Jun 2022 03:02:22 +0000
Files and hashes:         1: DI2YEDzGoZUe6VNqJnnXDxIwYjA.roa (hash: kiN/q1Bo5myUATu7kUG0iyVlqY86z1i79dxVtZGoSz8=)
                          2: kxQz4rt-gyYGxGK1Nm-pQcz6H8o.crl (hash: gqY79VFu7ObgKl5HsR4KxXoj8RNa8JFaokwRl3TWxhU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 74346425 (0x46e6fb9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=931433e2bb7e832606c462b5366fa941ccfa1fca
        Validity
            Not Before: Jun  9 03:02:22 2022 GMT
            Not After : Jun 10 03:02:22 2022 GMT
        Subject: CN=81f6f83446aa19da3d8b51b561ed665a6efc95c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f6:a3:9b:77:9d:30:98:35:5a:88:f6:40:5a:
                    76:9d:35:9f:95:60:6f:bc:42:3d:a7:d3:c6:06:f7:
                    b9:07:44:e1:82:03:17:e3:cb:82:ea:56:de:18:6c:
                    96:48:79:f4:3c:72:e9:35:ea:77:1c:e5:5f:35:f8:
                    d3:38:75:fe:3a:5a:22:b3:0d:40:08:1f:ff:52:1e:
                    49:3f:ec:69:72:32:7e:e1:0e:a3:f6:73:ce:45:d1:
                    38:f0:fc:f9:10:7d:6c:73:a9:6d:1a:a0:78:db:c9:
                    81:7d:85:1f:e9:32:33:82:f7:da:f0:51:a4:88:b9:
                    37:5c:81:5a:b9:4c:23:5e:4c:d1:8a:87:fc:70:45:
                    51:e6:5b:3d:cb:b1:d6:c5:59:84:2c:5a:51:b3:5a:
                    a8:8d:de:13:3c:5b:48:38:4d:cf:a0:5d:94:6d:05:
                    ab:9b:b7:5a:de:65:4c:f4:10:72:3a:b4:64:c6:a5:
                    95:a5:3f:6f:dc:15:7d:2a:6e:7a:33:f6:9b:2e:dc:
                    47:64:33:c0:8a:c8:02:05:b0:19:2a:58:14:2e:43:
                    08:4b:0b:90:40:a3:7d:59:99:cf:fa:e7:52:72:38:
                    71:8b:dc:29:81:f1:47:41:ba:70:39:20:ad:67:5c:
                    df:71:2c:ca:65:85:68:ed:57:ef:ae:4b:d6:27:0b:
                    8c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:F6:F8:34:46:AA:19:DA:3D:8B:51:B5:61:ED:66:5A:6E:FC:95:C5
            X509v3 Authority Key Identifier:
                keyid:93:14:33:E2:BB:7E:83:26:06:C4:62:B5:36:6F:A9:41:CC:FA:1F:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kxQz4rt-gyYGxGK1Nm-pQcz6H8o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d4374e-a52a-4620-8f59-1e15a5a885a5/1/kxQz4rt-gyYGxGK1Nm-pQcz6H8o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d4374e-a52a-4620-8f59-1e15a5a885a5/1/kxQz4rt-gyYGxGK1Nm-pQcz6H8o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:5c:c4:65:0f:6c:91:6f:04:f1:c4:20:a7:42:0f:8a:a7:71:
         27:b3:e2:d8:31:72:5c:0e:56:c5:ac:81:b4:50:4d:bf:ac:d0:
         9e:30:07:f1:a8:4a:1b:44:7c:d1:15:a9:df:52:19:8e:d7:aa:
         32:30:aa:92:71:06:2d:3e:f8:27:05:1a:4d:f1:d1:e3:31:00:
         31:06:40:e6:43:c2:c8:99:ef:ba:9a:84:47:ba:09:43:32:3b:
         4a:42:9b:e6:df:87:34:75:9a:8d:da:73:c6:de:1c:b1:e2:15:
         c7:60:6d:70:91:7c:65:eb:b4:31:73:10:af:ff:d0:a1:c2:53:
         da:0e:14:00:7d:8e:7f:d1:18:8d:ed:fa:d0:1e:b9:ee:7d:72:
         64:1d:b9:38:e2:a0:2b:1a:d3:11:f3:6a:c0:c9:ed:d1:03:d2:
         e3:b3:ac:05:d9:2e:fe:39:dc:76:fc:91:09:cc:7e:ce:f9:e0:
         de:4b:39:37:0f:92:1b:b8:e5:66:fb:ac:de:32:ee:63:03:35:
         5b:0e:6b:3f:01:50:0a:64:b6:c4:a8:27:15:e0:e9:31:e4:c5:
         02:05:4a:55:5f:0b:e1:e7:1d:cd:e3:b6:6a:53:0f:97:b2:07:
         c7:07:db:af:e4:8a:11:d0:ee:fa:05:4b:03:6f:3b:a5:6c:27:
         f2:a6:9d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----