Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/0d230e-a8bc-46c9-8209-55283faeda7c/1/ZOoDRwcor6INUewnKQxfOvONuAQ.mft
File:                     ZOoDRwcor6INUewnKQxfOvONuAQ.mft (raw, json)
Hash identifier:          4nwH/9n8R+Tz71oQrOtJ/TeBAa3+727wXgRqiOxbIcs=
Subject key identifier:   75:F1:DB:5B:04:4E:50:EF:81:04:76:1A:98:FA:6A:3C:DF:E5:F3:F4
Authority key identifier: 64:EA:03:47:07:28:AF:A2:0D:51:EC:27:29:0C:5F:3A:F3:8D:B8:04
Certificate issuer:       /CN=64ea03470728afa20d51ec27290c5f3af38db804
Certificate serial:       0188D2A10BE113144E736A42742F26E5C7E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZOoDRwcor6INUewnKQxfOvONuAQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/0d230e-a8bc-46c9-8209-55283faeda7c/1/ZOoDRwcor6INUewnKQxfOvONuAQ.mft
Manifest number:          0DE9
Signing time:             Mon 19 Jun 2023 07:49:09 +0000
Manifest this update:     Mon 19 Jun 2023 07:49:09 +0000
Manifest next update:     Tue 20 Jun 2023 07:49:09 +0000
Files and hashes:         1: ZOoDRwcor6INUewnKQxfOvONuAQ.crl (hash: BSTkB+AluQDS+g/nl1r9mFH4VeUoT59ll9GuyBgMi9A=)
                          2: k5_EZ1M9coMWjdVRytFwFmLjFyY.roa (hash: NeAoXrR9vV7jK2bhfAhS2sX7Q+5EYIXLRIjbQtg+tqM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:d2:a1:0b:e1:13:14:4e:73:6a:42:74:2f:26:e5:c7:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64ea03470728afa20d51ec27290c5f3af38db804
        Validity
            Not Before: Jun 19 07:49:09 2023 GMT
            Not After : Jun 20 07:49:09 2023 GMT
        Subject: CN=75f1db5b044e50ef8104761a98fa6a3cdfe5f3f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e3:bc:44:be:92:2c:b0:4e:2f:4e:ce:b9:cc:
                    0c:3e:56:6a:73:fb:3e:5d:98:24:a0:e1:a4:19:dd:
                    55:f5:a9:04:95:25:b4:21:58:1c:fa:0a:d3:f4:f0:
                    61:d0:ea:b3:61:60:47:33:6e:9b:3d:c4:29:8a:d4:
                    7d:b2:32:27:71:c2:0f:cc:ab:dd:31:a9:52:b5:d6:
                    7f:90:04:0e:f7:56:e5:7a:3e:49:f6:4a:e2:d2:7c:
                    a5:44:28:6d:ff:e0:84:8d:e8:b9:47:40:62:d5:7e:
                    f6:98:8d:e8:b4:18:f2:97:ae:70:13:c4:97:7e:a5:
                    b6:ed:d7:71:fb:6e:27:e6:07:ee:4f:10:92:25:ac:
                    57:fe:1b:5a:8a:e6:9d:6e:4e:f7:8b:6d:8a:90:83:
                    ec:81:c3:52:4c:48:12:94:71:c4:13:0d:75:5b:cb:
                    f3:a8:a8:1f:90:32:10:f5:16:56:15:0a:0f:01:12:
                    f7:ce:c6:b3:10:44:c3:64:a7:d9:19:ac:e2:73:b5:
                    93:85:61:3c:7e:44:fa:0b:dc:5e:3d:dd:98:0a:ae:
                    ee:25:58:a2:a3:41:17:ad:24:89:9f:ab:12:e2:e0:
                    09:08:26:c7:d7:c5:8c:ad:fb:64:5d:f8:96:ad:ff:
                    d0:ac:25:e5:7c:86:bf:84:04:04:5d:bf:77:33:a5:
                    91:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:F1:DB:5B:04:4E:50:EF:81:04:76:1A:98:FA:6A:3C:DF:E5:F3:F4
            X509v3 Authority Key Identifier:
                keyid:64:EA:03:47:07:28:AF:A2:0D:51:EC:27:29:0C:5F:3A:F3:8D:B8:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZOoDRwcor6INUewnKQxfOvONuAQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0d230e-a8bc-46c9-8209-55283faeda7c/1/ZOoDRwcor6INUewnKQxfOvONuAQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0d230e-a8bc-46c9-8209-55283faeda7c/1/ZOoDRwcor6INUewnKQxfOvONuAQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:2a:af:59:37:25:a6:49:80:58:d8:6b:59:76:58:31:de:8d:
         c9:81:2a:a8:1e:5b:c8:af:d5:37:e9:72:13:6b:13:8d:da:40:
         03:22:5f:4c:bf:7e:6d:7c:ce:33:0a:01:5d:85:11:60:0f:f1:
         47:3a:37:e5:d8:37:59:a1:64:25:78:42:da:56:cf:e0:4e:e8:
         b7:3c:2f:f8:ba:d9:87:a0:3e:b4:94:a0:9b:36:85:d5:a6:40:
         d3:8a:4b:db:b0:fd:3e:9a:66:53:6a:a3:21:32:02:bb:48:7d:
         8d:e1:a5:70:fc:4f:34:81:7b:e3:aa:14:b2:69:de:bf:55:3a:
         fc:49:cc:90:8e:6d:82:0c:e7:6e:37:08:7e:73:9d:8b:da:9c:
         e7:c5:10:c1:1b:8a:2e:e1:29:1f:0f:91:1d:a7:b3:c4:0a:e6:
         3e:f0:ac:f9:db:2d:44:2c:b4:0f:e2:af:71:ac:eb:e4:1b:80:
         87:93:ad:38:bf:92:00:f0:13:43:fe:2d:d1:04:5a:23:51:68:
         51:fb:0d:a5:1f:87:60:8e:d4:ea:65:e1:d7:a6:c5:d0:ab:b8:
         58:f7:c1:c7:a9:5a:7b:44:a7:76:78:1d:86:2e:84:bb:8c:93:
         93:6a:b2:4f:d5:17:37:dd:ec:c8:49:a1:15:19:8d:a5:a6:ec:
         87:cb:04:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----