Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/dca951-bca5-4162-af8a-581ed63f0c78/1/dVCGGiRMaRIt-V8k66e3EONmGY8.mft
File:                     dVCGGiRMaRIt-V8k66e3EONmGY8.mft (raw, json)
Hash identifier:          eqPG0wDPBuhS7DErTGksVljkQ8cf6KqD7HkZoQ/8evs=
Subject key identifier:   1E:BF:9D:9C:FF:21:9A:26:FB:E4:BC:85:2D:E0:90:59:51:D8:BF:7C
Authority key identifier: 75:50:86:1A:24:4C:69:12:2D:F9:5F:24:EB:A7:B7:10:E3:66:19:8F
Certificate issuer:       /CN=7550861a244c69122df95f24eba7b710e366198f
Certificate serial:       01837F18101CB3980CD81A27E6110E1BC886
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dVCGGiRMaRIt-V8k66e3EONmGY8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/dca951-bca5-4162-af8a-581ed63f0c78/1/dVCGGiRMaRIt-V8k66e3EONmGY8.mft
Manifest number:          0926
Signing time:             Tue 27 Sep 2022 13:17:06 +0000
Manifest this update:     Tue 27 Sep 2022 13:17:06 +0000
Manifest next update:     Wed 28 Sep 2022 13:17:06 +0000
Files and hashes:         1: L4ZZc-4HphhF3LOPVKtUgkw5j50.roa (hash: NUAO148f9N7uVC/SBfkhHBi9n6JFcPGawKHG3pyRFhA=)
                          2: dVCGGiRMaRIt-V8k66e3EONmGY8.crl (hash: WwyUJ1d6Sj9LpkwxquOrm0pcLe2dM7FX9TOreV000gM=)
                          3: qK9l4AP3ETd6mDsbFPyn9vjd3EY.roa (hash: OTCOZFq6JtEt2ZJZrlR4bEjzFenSydqbU1yFZqXeb84=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:7f:18:10:1c:b3:98:0c:d8:1a:27:e6:11:0e:1b:c8:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7550861a244c69122df95f24eba7b710e366198f
        Validity
            Not Before: Sep 27 13:17:06 2022 GMT
            Not After : Sep 28 13:17:06 2022 GMT
        Subject: CN=1ebf9d9cff219a26fbe4bc852de0905951d8bf7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:5e:cc:6a:32:c7:7b:d1:e4:11:cb:0d:b8:65:
                    8e:d8:8c:22:f5:d2:a8:23:f4:57:37:12:e9:c0:d2:
                    e1:4a:54:31:1e:64:a6:27:97:fb:44:ee:f1:4c:97:
                    b3:55:1c:ad:f0:f0:41:39:3b:f5:df:92:d9:26:9b:
                    87:88:63:43:39:68:7e:ea:1c:f1:2e:cc:23:71:f3:
                    80:37:bf:21:90:6f:98:7b:41:7c:bb:dc:d1:2b:cb:
                    33:dc:8f:d6:62:cb:db:f7:d3:11:bc:a9:1b:d1:11:
                    09:67:cf:05:9a:d0:03:42:79:19:f0:5d:9e:cf:c1:
                    2a:32:24:ce:c2:41:a4:45:43:1f:9a:7f:e3:73:ac:
                    76:f4:26:36:bb:6d:aa:5f:d3:66:93:80:31:89:c5:
                    da:42:d1:b1:40:df:97:03:6a:85:6d:82:df:ce:72:
                    de:c1:12:92:64:bd:6a:5b:e8:30:0f:81:38:0c:5d:
                    a7:3b:13:f5:7b:84:73:81:83:0c:24:ed:86:e0:bd:
                    b3:d9:87:54:a5:24:56:8a:8f:08:9c:aa:79:2f:16:
                    3c:53:45:5e:2a:d6:63:4a:cd:02:b8:ec:5a:bf:d4:
                    b0:91:18:64:03:b4:a2:3a:b1:ed:85:f5:ae:90:ed:
                    71:99:04:97:aa:1c:88:08:9a:64:d7:ad:b3:38:62:
                    8c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:BF:9D:9C:FF:21:9A:26:FB:E4:BC:85:2D:E0:90:59:51:D8:BF:7C
            X509v3 Authority Key Identifier:
                keyid:75:50:86:1A:24:4C:69:12:2D:F9:5F:24:EB:A7:B7:10:E3:66:19:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dVCGGiRMaRIt-V8k66e3EONmGY8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/dca951-bca5-4162-af8a-581ed63f0c78/1/dVCGGiRMaRIt-V8k66e3EONmGY8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/dca951-bca5-4162-af8a-581ed63f0c78/1/dVCGGiRMaRIt-V8k66e3EONmGY8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:f6:5e:a9:16:52:6b:d3:1a:31:b0:c0:23:1d:e8:44:76:63:
         2d:bb:86:20:00:c5:c1:a9:05:19:24:ae:ec:9c:4e:92:8d:a6:
         de:53:e5:08:81:1e:ca:4f:3f:ef:75:91:ca:fc:36:56:00:01:
         18:14:59:fa:0c:1f:14:6f:b8:c9:85:18:0e:8e:ed:5a:ed:94:
         62:69:06:f9:f9:2e:15:44:2f:db:12:c4:7a:ba:01:b3:77:25:
         f4:a9:2e:e7:97:5b:7b:4a:e2:fd:b6:09:51:87:a1:2f:86:d5:
         9e:95:63:f7:e6:28:48:5f:68:26:09:75:29:cb:bd:33:6a:67:
         5b:c3:7f:a6:8e:27:76:30:94:b3:8b:7c:2f:60:cb:f9:6b:fb:
         6b:62:eb:b6:99:2c:72:ad:d4:a9:0b:e1:f6:ac:03:0f:1c:11:
         f8:6b:93:07:cc:e5:56:1f:9c:50:ae:ed:b1:b5:e1:90:a0:96:
         28:e7:4b:a6:36:4b:2c:20:3b:13:cc:f9:9e:bd:bc:a2:23:fe:
         8f:34:ca:62:48:e6:e4:02:3f:35:c0:77:7a:99:f2:35:a1:94:
         b0:6e:01:e0:0b:58:be:93:53:6e:86:bd:20:a9:30:5b:68:b8:
         58:22:94:8f:fa:27:78:61:a0:06:61:ec:9b:d9:45:be:4f:da:
         7a:24:2d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----