Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/5426f4-3759-4d8e-aea4-0a561b7e84c9/1/zjuv6uuoGy19F6ILjtmH4GmMZDA.mft
File:                     zjuv6uuoGy19F6ILjtmH4GmMZDA.mft (raw, json)
Hash identifier:          ca1l0WL6TtfIwqiFQ/AItx9PSYuv91FaRaxX8qa2iDY=
Subject key identifier:   B0:15:F0:C1:FB:F8:C5:7A:58:A6:B6:94:5E:71:C5:D4:8A:B2:71:A5
Authority key identifier: CE:3B:AF:EA:EB:A8:1B:2D:7D:17:A2:0B:8E:D9:87:E0:69:8C:64:30
Certificate issuer:       /CN=ce3bafeaeba81b2d7d17a20b8ed987e0698c6430
Certificate serial:       0D98C2DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zjuv6uuoGy19F6ILjtmH4GmMZDA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/5426f4-3759-4d8e-aea4-0a561b7e84c9/1/zjuv6uuoGy19F6ILjtmH4GmMZDA.mft
Manifest number:          08BA
Signing time:             Thu 24 Mar 2022 09:50:20 +0000
Manifest this update:     Thu 24 Mar 2022 09:50:20 +0000
Manifest next update:     Fri 25 Mar 2022 09:50:20 +0000
Files and hashes:         1: Y4MwXcailHBQBia-B3WnPE-PgPc.roa (hash: SkCaZ7uop4R1SCQJyw9tPWscb1brtoVYel86N68djmA=)
                          2: zjuv6uuoGy19F6ILjtmH4GmMZDA.crl (hash: eNl6u+GB/hnOhX4MMS1D/ITSfVkKUACOJeF6vtGG9OY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 228115164 (0xd98c2dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce3bafeaeba81b2d7d17a20b8ed987e0698c6430
        Validity
            Not Before: Mar 24 09:50:20 2022 GMT
            Not After : Mar 25 09:50:20 2022 GMT
        Subject: CN=b015f0c1fbf8c57a58a6b6945e71c5d48ab271a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:15:28:1e:7a:c5:03:8e:34:ad:2d:49:ad:2f:
                    27:08:39:9e:6a:5f:f1:01:93:52:36:0b:38:9a:16:
                    98:00:58:85:84:e4:87:95:ba:94:bf:2c:48:2d:fd:
                    85:54:03:02:3d:71:f3:44:14:aa:33:9d:fe:66:46:
                    35:fe:08:33:33:f6:71:2e:98:c6:ab:c4:c0:be:d1:
                    b3:23:50:7e:56:89:e3:42:a8:7d:b8:e7:f1:7d:ce:
                    89:6a:80:47:ae:7e:13:a3:be:f8:05:e8:63:76:2d:
                    2d:1c:44:02:96:39:c6:84:e9:48:b2:b4:da:5f:b6:
                    ce:92:7c:1e:a1:5c:1a:e9:1b:18:16:27:bb:41:17:
                    df:67:fd:3f:f8:2d:aa:21:18:06:38:b9:42:70:a0:
                    4a:ca:a1:65:f2:c5:cd:ba:e9:de:30:b7:ea:b5:f6:
                    ef:f0:5f:de:00:b5:3a:60:57:bf:e4:64:d8:0a:ca:
                    d5:ae:6c:3c:29:89:ae:1d:b2:d0:74:1c:a9:b5:8e:
                    8c:f2:4b:f1:5d:7f:f6:5f:09:bb:ef:b8:21:df:0b:
                    5e:f9:c5:a1:5c:7f:f4:2d:85:43:f0:a0:54:90:72:
                    df:f7:1a:b6:20:2b:23:3b:d0:bd:af:5e:c1:0a:d4:
                    09:3b:6a:fe:50:72:90:28:dc:a3:c3:8a:3a:a3:3b:
                    c9:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:15:F0:C1:FB:F8:C5:7A:58:A6:B6:94:5E:71:C5:D4:8A:B2:71:A5
            X509v3 Authority Key Identifier:
                keyid:CE:3B:AF:EA:EB:A8:1B:2D:7D:17:A2:0B:8E:D9:87:E0:69:8C:64:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zjuv6uuoGy19F6ILjtmH4GmMZDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5426f4-3759-4d8e-aea4-0a561b7e84c9/1/zjuv6uuoGy19F6ILjtmH4GmMZDA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5426f4-3759-4d8e-aea4-0a561b7e84c9/1/zjuv6uuoGy19F6ILjtmH4GmMZDA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:9c:3d:b2:1b:1a:c9:5d:8d:b9:c4:5f:ef:0d:85:24:7f:5c:
         5b:c5:c0:27:9a:19:bb:33:9f:d0:80:39:25:fe:b2:41:db:71:
         a9:55:cf:f1:24:f3:f0:d3:26:87:d3:46:23:65:1c:44:fe:16:
         34:bd:1c:92:09:27:e2:dc:01:10:de:77:0f:17:0b:c0:41:21:
         5b:3d:c6:55:db:31:c5:9c:3d:92:3a:5e:40:4c:73:50:2f:ec:
         d2:47:68:b0:01:32:8f:f6:24:83:04:73:f1:06:02:22:da:05:
         78:4a:d4:f3:4c:87:a9:fb:ad:2a:5c:06:32:ab:9a:c1:07:cb:
         6c:a7:7c:af:b8:40:b8:5b:85:15:0a:8c:39:39:f8:2f:24:2f:
         14:69:c4:26:0d:11:00:e9:8b:89:76:db:bf:6a:2c:5f:7a:7a:
         24:d5:c4:f2:d6:ac:f7:bf:02:b3:31:e1:db:51:fa:4d:7d:5f:
         54:6d:0d:6a:aa:6c:09:08:52:f4:54:91:22:db:22:59:96:69:
         9f:e9:c9:24:f2:ae:5a:18:94:bc:27:30:6c:5e:75:29:9e:b2:
         ae:d4:6e:29:a6:e6:6d:5b:04:ad:4d:cf:5b:2b:bd:ce:ad:cd:
         77:44:c4:ec:e1:94:26:60:43:ca:88:e4:b8:8a:f2:72:d1:ea:
         d0:03:ed:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----