Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/716373-d341-4574-a363-a4ef498474c3/1/f_Igq9YH41e_slwvf9SPzGq2a4g.mft
File:                     f_Igq9YH41e_slwvf9SPzGq2a4g.mft (raw, json)
Hash identifier:          4lzh+e7mrNMMolfcK9JeKaH85eWYXkkVJjYuncT8PCQ=
Subject key identifier:   A5:09:F4:03:D8:83:F6:F1:23:27:63:1D:8E:A3:EE:E6:47:FF:6B:80
Authority key identifier: 7F:F2:20:AB:D6:07:E3:57:BF:B2:5C:2F:7F:D4:8F:CC:6A:B6:6B:88
Certificate issuer:       /CN=7ff220abd607e357bfb25c2f7fd48fcc6ab66b88
Certificate serial:       018A63EE156289A728DCC051F2519BEE4E94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f_Igq9YH41e_slwvf9SPzGq2a4g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/716373-d341-4574-a363-a4ef498474c3/1/f_Igq9YH41e_slwvf9SPzGq2a4g.mft
Manifest number:          0864
Signing time:             Tue 05 Sep 2023 06:01:01 +0000
Manifest this update:     Tue 05 Sep 2023 06:01:01 +0000
Manifest next update:     Wed 06 Sep 2023 06:01:01 +0000
Files and hashes:         1: ZnuFe48MAn9y231I1D4RSsaCxjc.roa (hash: xWl265HLZBn32CfCDYkzwpWexxwgeLy3LgFAJH3FN4I=)
                          2: f_Igq9YH41e_slwvf9SPzGq2a4g.crl (hash: FoSNafuJoHsJGN1MUfEcC6QPYHLp6JY005K5O0nvwNM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:63:ee:15:62:89:a7:28:dc:c0:51:f2:51:9b:ee:4e:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ff220abd607e357bfb25c2f7fd48fcc6ab66b88
        Validity
            Not Before: Sep  5 06:01:01 2023 GMT
            Not After : Sep  6 06:01:01 2023 GMT
        Subject: CN=a509f403d883f6f12327631d8ea3eee647ff6b80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:5c:c8:e6:2f:c2:86:a3:e6:ae:92:bb:b9:d8:
                    1c:90:ab:b2:80:18:01:bb:e4:40:e8:c7:09:f3:1d:
                    e5:1f:1f:fc:fb:d4:2f:9d:48:79:65:26:77:36:71:
                    93:60:2b:61:f2:09:97:4b:06:76:7a:b0:1a:05:44:
                    81:24:d4:35:7a:0d:0f:ee:43:d8:d8:cc:81:f6:9d:
                    b6:a7:d3:9a:b2:5d:92:27:13:f1:59:1e:28:6f:64:
                    2a:66:d1:fb:3d:29:2b:51:3c:95:de:e1:70:5d:d8:
                    c1:0b:47:93:3a:43:5f:58:f3:02:52:a0:45:23:53:
                    f8:03:cd:3e:49:81:03:cb:1b:50:7a:00:b1:39:b9:
                    ee:ea:dd:4d:d1:85:17:e7:99:e4:6b:05:d7:da:38:
                    7e:38:7f:a2:d6:4f:0c:86:6c:36:01:99:66:e8:86:
                    3b:c2:81:7d:6e:44:e6:04:9a:1d:a8:5e:7c:7d:b9:
                    27:4c:32:5d:37:ec:88:32:68:5e:7a:9c:22:12:1b:
                    c5:87:e9:fc:c4:0e:36:38:03:3b:33:66:f3:e1:ef:
                    64:d7:04:07:db:69:c8:54:39:2e:e7:75:dc:b1:24:
                    aa:4d:37:c4:c3:16:d3:71:bd:31:da:83:1d:d5:8e:
                    c8:78:6e:da:13:9e:2f:65:1c:a3:c8:6a:5f:d1:f7:
                    9a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:09:F4:03:D8:83:F6:F1:23:27:63:1D:8E:A3:EE:E6:47:FF:6B:80
            X509v3 Authority Key Identifier:
                keyid:7F:F2:20:AB:D6:07:E3:57:BF:B2:5C:2F:7F:D4:8F:CC:6A:B6:6B:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f_Igq9YH41e_slwvf9SPzGq2a4g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/716373-d341-4574-a363-a4ef498474c3/1/f_Igq9YH41e_slwvf9SPzGq2a4g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/716373-d341-4574-a363-a4ef498474c3/1/f_Igq9YH41e_slwvf9SPzGq2a4g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:59:f8:00:b9:f4:54:30:96:30:5a:00:91:8e:a8:db:12:aa:
         de:59:a4:41:7a:a1:b8:4b:06:75:d8:8e:f6:9b:c4:7f:2c:49:
         33:ab:d9:07:84:a3:42:87:13:40:b6:17:08:d6:96:20:8c:1a:
         01:61:d6:50:41:ef:a9:94:7b:ff:a2:82:1f:bb:3c:56:b5:d8:
         26:86:0b:2c:ba:95:3d:e4:40:e2:81:ca:f5:e4:fd:a5:f6:73:
         e2:55:fe:b8:e7:c4:8c:c8:8e:20:a8:d5:2d:5d:f0:5e:b1:6a:
         5a:be:ca:d0:a1:9e:84:ed:80:5b:f2:69:4b:02:df:1c:56:fa:
         5b:b0:69:80:90:51:82:c0:67:51:a7:28:25:f2:26:19:97:c7:
         70:be:02:96:8d:d5:e6:ee:13:8e:29:a0:eb:78:70:f5:71:df:
         44:1d:97:aa:2b:c0:70:89:d5:80:cb:d6:0c:db:f5:79:42:ab:
         36:c0:03:7b:b5:b0:83:a1:27:bd:ea:8f:ff:fa:22:3f:c9:9e:
         d3:20:52:51:1e:61:2c:2f:0a:5e:05:06:3a:bc:5a:66:ca:22:
         83:4e:b6:4d:ae:77:6e:b1:56:90:18:cc:d7:fe:ab:e7:c8:a1:
         54:cb:f9:83:90:26:a1:df:dc:44:ff:b1:60:e3:c2:bb:14:8a:
         17:d3:12:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----