Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/2de3d1-12ed-45bb-a7a9-0eaf7f8c6b92/1/BXoFJal4HCJlK5-9vwKYkA7uFhw.mft
File:                     BXoFJal4HCJlK5-9vwKYkA7uFhw.mft (raw, json)
Hash identifier:          4e1rOHzMgaCaCmd9f/xr9AGKxsiNeg0SkZ9j7UD15gk=
Subject key identifier:   C4:2D:81:80:72:E9:C6:59:08:19:4C:57:94:8E:EB:7E:20:67:11:C5
Authority key identifier: 05:7A:05:25:A9:78:1C:22:65:2B:9F:BD:BF:02:98:90:0E:EE:16:1C
Certificate issuer:       /CN=057a0525a9781c22652b9fbdbf0298900eee161c
Certificate serial:       0182ED2025EDDBF157723E14EE01FB5EBBE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BXoFJal4HCJlK5-9vwKYkA7uFhw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/2de3d1-12ed-45bb-a7a9-0eaf7f8c6b92/1/BXoFJal4HCJlK5-9vwKYkA7uFhw.mft
Manifest number:          0A8E
Signing time:             Tue 30 Aug 2022 05:01:22 +0000
Manifest this update:     Tue 30 Aug 2022 05:01:22 +0000
Manifest next update:     Wed 31 Aug 2022 05:01:22 +0000
Files and hashes:         1: BXoFJal4HCJlK5-9vwKYkA7uFhw.crl (hash: XvzNvU1uo6yjuSIm3psUNKVGYfICMGJlpqGUnyvtpsU=)
                          2: LbOLsbut51cQLdBkJDTEXwFV_0M.roa (hash: +9+XCx0natl4OC54FLP4wzqM2qF+zFcN1RnGgiIa+e8=)
                          3: TWWXpp1-KbaEp3mG9czA4I56KIM.roa (hash: KmvuAt02dp1obYHsTaqejs2PPyGaHvt05H2v5L4gMbk=)
                          4: hVhZq7lYC3XLrbHHH8iwu4Ai_G4.roa (hash: EVRVJUPq7OkAV0HC22gOpLPiOL+lD8taSU13M+V8j30=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:ed:20:25:ed:db:f1:57:72:3e:14:ee:01:fb:5e:bb:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=057a0525a9781c22652b9fbdbf0298900eee161c
        Validity
            Not Before: Aug 30 05:01:22 2022 GMT
            Not After : Aug 31 05:01:22 2022 GMT
        Subject: CN=c42d818072e9c65908194c57948eeb7e206711c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:f0:db:1c:5d:30:15:ba:7e:5e:be:ee:85:44:
                    ba:e0:8c:43:70:56:33:7a:69:08:9b:2b:b6:05:96:
                    d7:e9:c3:4a:9d:70:34:9c:b8:4b:8e:da:b9:37:4f:
                    8a:21:90:d3:22:1c:64:04:bc:42:73:9a:c9:27:56:
                    49:26:ad:fa:17:7d:54:17:6c:c9:32:fd:18:81:c5:
                    df:66:4d:3a:e5:91:a9:36:53:7f:46:8d:22:11:b4:
                    95:d3:e6:28:93:06:66:e7:10:87:41:dd:7b:79:06:
                    83:95:94:5c:9d:6f:00:b8:a4:6a:8b:c9:c4:fd:4a:
                    92:ad:0d:6c:a0:5c:c2:53:f7:fd:fa:f6:a0:c1:56:
                    0e:d4:e2:01:cc:59:8c:07:c7:09:c1:35:e0:9d:5b:
                    17:ad:47:28:8f:fa:1a:96:ad:1b:a5:18:11:f2:56:
                    c0:b1:51:6a:87:96:b1:07:74:f2:bc:d3:7a:aa:8d:
                    b2:f7:67:30:43:f6:37:6c:60:4b:d3:60:3c:a3:af:
                    59:85:96:14:a6:31:54:3c:ab:f4:2d:8e:75:f1:fc:
                    26:5d:22:d1:63:53:70:1a:b8:50:3b:d1:74:f8:2e:
                    96:53:f3:70:96:5d:92:fc:47:3a:1a:b1:97:66:8e:
                    0f:7f:b4:7e:71:ee:c4:94:b6:56:af:27:95:9f:c0:
                    13:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:2D:81:80:72:E9:C6:59:08:19:4C:57:94:8E:EB:7E:20:67:11:C5
            X509v3 Authority Key Identifier:
                keyid:05:7A:05:25:A9:78:1C:22:65:2B:9F:BD:BF:02:98:90:0E:EE:16:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BXoFJal4HCJlK5-9vwKYkA7uFhw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/2de3d1-12ed-45bb-a7a9-0eaf7f8c6b92/1/BXoFJal4HCJlK5-9vwKYkA7uFhw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/2de3d1-12ed-45bb-a7a9-0eaf7f8c6b92/1/BXoFJal4HCJlK5-9vwKYkA7uFhw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:f2:5a:8d:00:02:6a:eb:01:61:fc:8c:11:48:79:3d:55:00:
         ee:57:2c:1e:87:47:d4:b0:cc:4f:4c:14:3a:c5:4d:59:87:89:
         42:27:f8:88:e4:d6:06:ee:44:2d:0e:4b:b0:dd:c8:7d:8f:b2:
         c9:67:af:e7:5e:9c:94:32:99:38:e9:82:bd:c3:4e:24:b7:65:
         75:db:6b:fe:1a:1d:44:e5:6a:e7:14:bb:f6:43:65:84:1a:07:
         d7:88:93:f4:c0:65:c0:bc:b1:84:f7:58:5a:ac:6b:c9:03:13:
         df:74:ed:37:dc:36:8a:34:30:fc:a4:86:31:a6:8a:8a:f5:bb:
         62:85:ce:db:14:a3:34:71:98:20:51:00:66:d3:ea:93:9e:b7:
         fc:4d:7e:e7:77:69:c7:56:ea:a1:db:7d:e2:48:9d:e3:93:05:
         ea:bd:33:83:3e:1f:0c:03:8e:b3:be:7b:28:60:5f:dd:cd:97:
         86:fb:9c:a3:c9:42:e9:ed:f1:5c:29:c3:c3:2c:dc:e1:58:dd:
         59:92:18:89:20:59:80:77:76:cf:f9:eb:1f:9b:44:e4:7a:e3:
         20:c1:b4:14:73:ec:da:e6:93:01:0e:d2:ff:ee:59:83:8e:d5:
         65:2a:76:29:55:02:7f:b8:b2:6e:41:00:31:0a:41:f3:59:24:
         b9:54:6f:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----