Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/6a2bb5-0217-4595-bef6-4638a66e4dd8/1/U-3eLO8vtcq06h6neUAdKVcI2nc.mft
File:                     U-3eLO8vtcq06h6neUAdKVcI2nc.mft (raw, json)
Hash identifier:          2yxeukgW3FU9UeC81FKHP+LwliWERcV/cuxJhLAeeiU=
Subject key identifier:   64:FB:B4:AA:C8:98:0F:0F:90:32:AB:57:FB:B8:DD:C4:A2:00:8C:9D
Authority key identifier: 53:ED:DE:2C:EF:2F:B5:CA:B4:EA:1E:A7:79:40:1D:29:57:08:DA:77
Certificate issuer:       /CN=53edde2cef2fb5cab4ea1ea779401d295708da77
Certificate serial:       0187092A8853901AFF8281E00B395F863476
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U-3eLO8vtcq06h6neUAdKVcI2nc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/6a2bb5-0217-4595-bef6-4638a66e4dd8/1/U-3eLO8vtcq06h6neUAdKVcI2nc.mft
Manifest number:          06C8
Signing time:             Wed 22 Mar 2023 11:53:14 +0000
Manifest this update:     Wed 22 Mar 2023 11:53:14 +0000
Manifest next update:     Thu 23 Mar 2023 11:53:14 +0000
Files and hashes:         1: JdBJ5pG0tmV_A-4d43GGP-JU1dw.roa (hash: VA9k5bCpipjsehTYXIz8AeEJuoPSTYjhFzMo4jQETNY=)
                          2: U-3eLO8vtcq06h6neUAdKVcI2nc.crl (hash: vdio92oz22raK7SFyE5o+FsFU4qiwye7KOfBIZrxOBA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:09:2a:88:53:90:1a:ff:82:81:e0:0b:39:5f:86:34:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53edde2cef2fb5cab4ea1ea779401d295708da77
        Validity
            Not Before: Mar 22 11:53:14 2023 GMT
            Not After : Mar 23 11:53:14 2023 GMT
        Subject: CN=64fbb4aac8980f0f9032ab57fbb8ddc4a2008c9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:8e:78:45:0a:cf:ee:f7:61:14:f8:f9:c6:88:
                    b4:17:8e:24:7f:8f:04:f1:2e:5c:ad:a1:be:78:cc:
                    c6:16:5a:20:91:97:f6:a5:61:96:de:e4:f6:60:f0:
                    83:21:33:8e:31:45:2f:17:0b:73:70:dc:c2:48:fd:
                    aa:94:42:e0:a7:a6:2e:b4:2d:db:c1:55:78:10:82:
                    27:1f:f5:84:06:b5:3c:10:f1:90:f0:98:d8:4c:4f:
                    c7:ac:ce:62:0c:5b:3c:5f:80:38:ca:d2:37:64:77:
                    c7:b6:fe:d2:67:60:59:a3:45:c6:d0:05:78:ea:4f:
                    3b:c8:26:81:7b:17:11:bc:48:06:2f:5d:72:f3:36:
                    ee:b3:67:ed:63:55:83:c9:b2:20:4b:fd:50:60:58:
                    d0:c8:8c:3c:73:20:9c:59:ed:c9:16:a6:86:bd:d4:
                    b9:d2:54:a3:69:b5:97:2f:e6:c6:14:01:bd:84:f6:
                    81:6f:81:9c:79:94:e9:e9:52:93:07:5f:2d:f7:33:
                    a3:f6:19:23:58:dc:4b:72:80:68:58:a7:a9:d5:bc:
                    2a:92:ef:96:03:0f:54:2c:97:94:2e:89:f2:a3:fc:
                    7d:e5:77:86:43:d1:f5:b8:85:f2:6f:1e:33:d4:d7:
                    44:f8:7b:66:30:d7:ff:c0:af:1a:06:36:ab:e7:df:
                    ca:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:FB:B4:AA:C8:98:0F:0F:90:32:AB:57:FB:B8:DD:C4:A2:00:8C:9D
            X509v3 Authority Key Identifier:
                keyid:53:ED:DE:2C:EF:2F:B5:CA:B4:EA:1E:A7:79:40:1D:29:57:08:DA:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U-3eLO8vtcq06h6neUAdKVcI2nc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6a2bb5-0217-4595-bef6-4638a66e4dd8/1/U-3eLO8vtcq06h6neUAdKVcI2nc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6a2bb5-0217-4595-bef6-4638a66e4dd8/1/U-3eLO8vtcq06h6neUAdKVcI2nc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:d6:12:1d:08:b5:88:34:0d:1e:d5:dd:6a:49:41:9a:9f:39:
         7f:4e:16:3c:ee:1a:e2:a8:bd:bb:3c:ff:45:b1:ab:a4:cd:63:
         be:3e:7c:e2:2f:ac:ac:06:93:9f:31:16:bf:48:53:b7:dc:c6:
         63:70:e9:97:dc:d0:d4:8e:49:fa:8c:56:f7:a3:94:bb:4e:e6:
         72:cd:75:6a:db:1f:58:e3:09:d4:68:67:2e:6b:dc:a9:2c:c1:
         a0:95:21:8b:b7:b6:5d:d3:5c:78:31:57:cf:17:55:2e:f4:01:
         dc:95:d8:41:d5:4a:e0:06:02:de:fe:ea:95:1f:85:cd:7c:65:
         0a:40:71:c9:1b:a3:88:61:c5:82:07:d5:4f:52:51:83:39:86:
         92:bf:c6:5c:c0:95:b0:06:0f:97:60:b9:b6:25:24:55:25:cf:
         b9:a7:c4:21:4e:24:53:0c:e0:a4:c7:4c:ec:0d:3c:2c:48:dd:
         b0:60:ed:7e:f8:cc:d7:5b:a8:99:f6:92:45:f0:2f:27:3e:3c:
         2e:0d:13:b3:5f:4c:43:de:3d:51:a0:0e:03:bc:64:d3:55:51:
         d8:36:af:52:1d:e5:b0:9d:06:d2:29:97:1c:c3:83:6b:9a:8f:
         66:b1:48:8e:f9:f6:95:18:79:58:0d:dc:c3:25:12:c4:f1:92:
         1a:a7:d1:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----