Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/d52ddd-92e1-4d26-a6a1-2161c065e1ec/1/tyLJBjlxS7bGp7CxI_DQZixw1cE.mft
File:                     tyLJBjlxS7bGp7CxI_DQZixw1cE.mft (raw, json)
Hash identifier:          HSJ69Z0Hr+Ie3wG5e4bhyn0lNP2LEh6pghNtAXCBRXU=
Subject key identifier:   DC:A7:9C:19:E3:34:C6:80:A9:3B:B3:F3:65:30:86:1F:AB:7D:02:21
Authority key identifier: B7:22:C9:06:39:71:4B:B6:C6:A7:B0:B1:23:F0:D0:66:2C:70:D5:C1
Certificate issuer:       /CN=b722c90639714bb6c6a7b0b123f0d0662c70d5c1
Certificate serial:       01850690105E7C3B4A7F06333974197995F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tyLJBjlxS7bGp7CxI_DQZixw1cE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/d52ddd-92e1-4d26-a6a1-2161c065e1ec/1/tyLJBjlxS7bGp7CxI_DQZixw1cE.mft
Manifest number:          096C
Signing time:             Mon 12 Dec 2022 13:39:42 +0000
Manifest this update:     Mon 12 Dec 2022 13:39:42 +0000
Manifest next update:     Tue 13 Dec 2022 13:39:42 +0000
Files and hashes:         1: DU6aTQLGToe4sPoUmJeuDzeYk-Q.roa (hash: 3dJVaVwIy0RdHTC3tG84YTQdDmxLMM2q04jSlKK9mbA=)
                          2: tyLJBjlxS7bGp7CxI_DQZixw1cE.crl (hash: x5/rLvZ6Uw+kSCRbo8KdwqxfEta7Lbj07SYdp1H+C5w=)
                          3: vXzICEn5H4rlL3lkD5MFYVZyoDo.roa (hash: S8AGnwweyFWeH/aatAqqKUZFoytXopNJ9q6GkDgPB6E=)
                          4: zCG2HuGiHZjTXSKJbWv6FdrkxnA.roa (hash: lUshoBUB6GInHOLkchbOAbc3qdtqeRDZ/Q1T6gpKbQg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:06:90:10:5e:7c:3b:4a:7f:06:33:39:74:19:79:95:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b722c90639714bb6c6a7b0b123f0d0662c70d5c1
        Validity
            Not Before: Dec 12 13:39:42 2022 GMT
            Not After : Dec 13 13:39:42 2022 GMT
        Subject: CN=dca79c19e334c680a93bb3f36530861fab7d0221
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:92:00:2b:6c:fd:95:0b:6b:f7:43:9d:34:9e:
                    7d:83:a9:df:ed:bc:64:27:f6:bf:56:d2:e5:fa:5f:
                    5d:46:96:31:52:96:86:8e:1c:50:3f:98:50:42:f8:
                    78:2b:9a:b7:10:c1:69:c2:4e:52:5f:1a:e5:58:ef:
                    6a:10:56:9f:16:14:60:c8:68:b8:5b:3a:c2:34:34:
                    c2:a4:0d:23:87:d9:70:7b:ce:e1:e9:3e:35:42:42:
                    a3:d7:20:fb:e3:9a:8a:4b:6e:9f:ed:d7:3b:bf:95:
                    bf:42:d6:07:4b:62:93:21:f0:60:50:20:cb:a5:ab:
                    13:75:5b:e4:14:24:70:2d:0e:23:69:7b:d7:0d:c3:
                    bd:53:29:1f:17:6f:80:b0:59:6e:7d:25:e2:f3:f0:
                    38:be:d3:39:39:cd:c5:61:b3:f6:06:14:dc:8d:5b:
                    3d:90:3f:46:67:a5:f7:e5:cb:35:3c:5c:a0:a3:6d:
                    60:ce:2e:ca:be:81:fa:96:a5:d7:dc:ce:54:a4:bb:
                    e3:d3:54:66:79:e5:d0:57:50:df:9c:8c:bf:fe:d1:
                    fb:16:b6:bb:8d:5a:cd:60:fc:39:a3:83:4c:f7:ef:
                    1c:8c:a9:e4:2d:10:f2:7a:c2:13:a0:75:9c:40:ae:
                    e1:ad:f6:90:98:a2:0c:c2:8e:02:6c:1b:d9:7f:be:
                    9b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:A7:9C:19:E3:34:C6:80:A9:3B:B3:F3:65:30:86:1F:AB:7D:02:21
            X509v3 Authority Key Identifier:
                keyid:B7:22:C9:06:39:71:4B:B6:C6:A7:B0:B1:23:F0:D0:66:2C:70:D5:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tyLJBjlxS7bGp7CxI_DQZixw1cE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d52ddd-92e1-4d26-a6a1-2161c065e1ec/1/tyLJBjlxS7bGp7CxI_DQZixw1cE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d52ddd-92e1-4d26-a6a1-2161c065e1ec/1/tyLJBjlxS7bGp7CxI_DQZixw1cE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:3e:94:f7:38:85:13:a7:ad:58:e5:04:61:b1:39:c4:e9:28:
         f7:09:39:b9:01:8c:1e:0b:11:0c:ae:53:9d:58:48:04:5c:0b:
         17:b1:19:3a:f1:28:61:18:40:f7:92:29:37:d1:d7:a0:a1:07:
         04:bf:02:21:de:ab:d3:42:08:fd:64:a1:5d:bf:99:a7:06:53:
         5b:99:7c:93:01:95:44:85:af:47:fe:3f:fe:ba:06:1f:ac:d4:
         b0:97:9a:60:8f:0d:03:17:3f:aa:e1:39:99:37:09:49:c7:46:
         1e:70:27:92:e5:ed:43:85:89:b5:67:a9:96:ee:f9:1b:b4:22:
         94:6d:64:c0:8d:59:48:d5:d7:a5:f7:fd:d7:8d:86:2d:30:27:
         10:dd:53:16:94:ed:aa:35:6b:5f:94:3b:72:4b:2a:13:32:92:
         be:7c:c2:71:e2:49:4d:d0:27:e0:b9:aa:95:a4:8d:39:48:7c:
         84:fd:05:30:fa:0a:98:74:28:e1:94:9f:3f:3c:03:ba:66:88:
         c5:64:58:85:c3:77:80:a0:14:64:44:a0:d5:8e:25:af:6e:e1:
         0f:70:22:38:c5:cc:46:87:f2:74:38:3e:5c:d5:5a:52:32:b8:
         94:80:e5:7b:aa:35:19:96:3d:bd:fd:51:8c:94:c7:d9:26:8f:
         68:1b:1d:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----