Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/746fc1-a112-4ee1-b617-f0a0cde9a639/1/a7pehlb4tsXB5pAxLdSGuHLxzlI.mft
File:                     a7pehlb4tsXB5pAxLdSGuHLxzlI.mft (raw, json)
Hash identifier:          KqYGheETlAs+tmZ6zGL9up7Z2IahibhZFa2uSz8ParQ=
Subject key identifier:   E1:9E:9B:4C:06:0E:FB:2E:55:9D:2A:E1:BA:7C:CB:E0:38:61:4C:22
Authority key identifier: 6B:BA:5E:86:56:F8:B6:C5:C1:E6:90:31:2D:D4:86:B8:72:F1:CE:52
Certificate issuer:       /CN=6bba5e8656f8b6c5c1e690312dd486b872f1ce52
Certificate serial:       01AF0DBB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a7pehlb4tsXB5pAxLdSGuHLxzlI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/746fc1-a112-4ee1-b617-f0a0cde9a639/1/a7pehlb4tsXB5pAxLdSGuHLxzlI.mft
Manifest number:          0231
Signing time:             Wed 09 Feb 2022 11:00:02 +0000
Manifest this update:     Wed 09 Feb 2022 11:00:02 +0000
Manifest next update:     Thu 10 Feb 2022 11:00:02 +0000
Files and hashes:         1: _NxDABQznzcDJ8yh6hRTHiLS1TY.roa (hash: QZa4hvVuKiyZEk6in21MG1zUERYxkU1Zn6gbVn1JRSw=)
                          2: a7pehlb4tsXB5pAxLdSGuHLxzlI.crl (hash: 4HIT98I79oel9I0wctIxWap/6ReNXEwRI+h8yZQhU3I=)
                          3: dPx6kv3qqQHi_2uH2lBIfphIJW8.roa (hash: qrsh/2KQEOSFxOQOH1jlO9T4CS1EUd2zZReBpc3u0Is=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28249531 (0x1af0dbb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bba5e8656f8b6c5c1e690312dd486b872f1ce52
        Validity
            Not Before: Feb  9 11:00:02 2022 GMT
            Not After : Feb 10 11:00:02 2022 GMT
        Subject: CN=e19e9b4c060efb2e559d2ae1ba7ccbe038614c22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:34:c1:53:16:e3:8c:d7:48:89:39:e0:29:b9:
                    a9:5e:88:d4:e4:72:d3:38:38:80:de:41:6f:8f:58:
                    be:42:0a:37:9a:d6:95:d7:24:4f:fe:42:cd:89:fe:
                    1d:41:6b:60:30:77:e9:59:9e:ea:0a:ac:0e:85:94:
                    41:8f:a9:80:d6:44:db:71:16:7e:db:c4:2a:a0:96:
                    5b:84:ce:1f:67:f4:37:db:d2:0b:66:dd:fb:14:2b:
                    a9:d9:a5:4c:89:bc:33:8b:13:e3:5f:1f:c1:0f:46:
                    d4:6f:7e:9a:f3:c2:59:b3:76:21:13:f1:df:a7:8a:
                    66:bb:b7:ae:04:12:7a:fc:6c:0d:a7:fa:50:33:93:
                    68:e1:e6:3c:89:b2:d4:7a:e5:cf:7f:b9:8e:dd:e0:
                    b5:20:41:9f:d2:f3:6a:b5:42:5e:36:62:99:f1:9b:
                    68:1d:1c:a0:68:f1:1f:34:5a:51:41:44:a7:ab:4f:
                    59:36:66:f9:0b:be:7b:5d:61:28:94:a0:2d:87:25:
                    69:b0:35:58:88:45:da:91:b3:dd:59:b9:59:1b:4b:
                    ad:bb:99:e5:13:ea:1c:54:c2:9d:61:4e:90:d6:46:
                    e3:06:9b:f0:14:6c:70:26:0a:b7:e2:11:d3:f9:cd:
                    9b:cc:73:7d:ff:ac:2c:b3:94:15:7c:d2:47:6c:38:
                    17:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:9E:9B:4C:06:0E:FB:2E:55:9D:2A:E1:BA:7C:CB:E0:38:61:4C:22
            X509v3 Authority Key Identifier:
                keyid:6B:BA:5E:86:56:F8:B6:C5:C1:E6:90:31:2D:D4:86:B8:72:F1:CE:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7pehlb4tsXB5pAxLdSGuHLxzlI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/746fc1-a112-4ee1-b617-f0a0cde9a639/1/a7pehlb4tsXB5pAxLdSGuHLxzlI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/746fc1-a112-4ee1-b617-f0a0cde9a639/1/a7pehlb4tsXB5pAxLdSGuHLxzlI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:c7:e1:e5:2c:b1:22:51:9a:62:cc:b8:af:61:3b:9c:78:37:
         fa:e4:a8:8b:ee:a1:3b:f7:5d:9e:15:5a:d9:f4:5a:36:60:4a:
         c9:b6:da:5d:d1:80:f3:bf:15:b8:4b:4a:9b:87:f0:5e:29:e0:
         a5:48:4e:e5:cb:97:fe:c6:55:5a:81:4c:66:19:ba:52:10:2e:
         de:2f:91:78:fb:ce:75:49:9d:1f:bd:cd:55:00:f7:8c:33:13:
         91:29:b8:f3:11:16:de:66:43:f3:03:9e:2e:3f:35:25:6b:9a:
         d6:3d:40:6d:41:6f:cd:d1:6a:77:78:5f:36:71:e9:44:6a:73:
         2a:4f:e0:d0:e7:68:a3:81:f4:ae:f5:38:dc:ab:97:4b:e6:73:
         b8:35:83:4d:04:21:a4:43:70:df:b7:2d:e3:32:7b:c5:b5:cd:
         a7:41:5f:2b:1e:6a:95:a9:9e:7b:18:73:23:c1:66:3d:75:af:
         7d:05:0c:66:64:c0:03:55:c0:80:df:18:07:35:37:5a:14:9b:
         7f:1a:cd:b7:4b:f6:b9:63:0d:69:af:f5:e0:33:34:5f:8d:7c:
         c3:09:0c:4f:7e:51:af:87:4b:2a:2f:f1:06:d9:f9:4f:27:58:
         11:f5:ce:fd:d9:2d:42:21:c6:e8:a2:a3:db:f5:9e:28:24:d1:
         20:47:10:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----