Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/9ee01f-e976-4803-961e-94cf22dee5fe/1/mx6hXCG31V3qS9yGGxwK_J5DcDE.mft
File:                     mx6hXCG31V3qS9yGGxwK_J5DcDE.mft (raw, json)
Hash identifier:          NIxujYY7dc7r1N8aUwpQuoQ2NbBpqC9J06GV4CD5jEk=
Subject key identifier:   2C:5D:5A:B9:E7:33:85:AD:9A:62:6D:AE:80:C8:92:9A:9B:10:4E:32
Authority key identifier: 9B:1E:A1:5C:21:B7:D5:5D:EA:4B:DC:86:1B:1C:0A:FC:9E:43:70:31
Certificate issuer:       /CN=9b1ea15c21b7d55dea4bdc861b1c0afc9e437031
Certificate serial:       01853788D7D7001B6031EE3C2607EE4A7F65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mx6hXCG31V3qS9yGGxwK_J5DcDE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/9ee01f-e976-4803-961e-94cf22dee5fe/1/mx6hXCG31V3qS9yGGxwK_J5DcDE.mft
Manifest number:          03B6
Signing time:             Thu 22 Dec 2022 01:53:12 +0000
Manifest this update:     Thu 22 Dec 2022 01:53:12 +0000
Manifest next update:     Fri 23 Dec 2022 01:53:12 +0000
Files and hashes:         1: 0PEmk1AZbdKeRB_EQi34avL-iZ4.roa (hash: qXSHfRVpFAAYkH6vuN13B+cUyN0mOYrNeF6F2ZcEUUg=)
                          2: 1-7_PDo0_-Prw5yZcsE-Hhnsz6Xk.roa (hash: TuynOXZFBvbL8Dfu6qBxIlORPX/NgY+GZ6eRQGkJZXA=)
                          3: K5ACg8KEnrJ8vxQycxGEPErJNdA.roa (hash: O2IOVYuhnfG9SmF2RY/wZqI16pwv4NF328Wu7FS4td4=)
                          4: KzDiNsXqWjIXpJ6dQttWSdDqsdI.roa (hash: YVPctjlzcSA1pGKqQm1MD1qrvD8PD0kzLruDfArDhoM=)
                          5: LKpTou4dK0FkHLB5dvm_R64KPEw.roa (hash: urbU3y2ds+0JSYTqJtT39EBbRZJBb1O1+kBFO2Ha188=)
                          6: UCcVVz02bRvNxHs0xsUKEvMf4Zg.roa (hash: /n+06GB/Jv6vDP4n7l0Hl7E2K7ELBmCoirTaL9xDuNQ=)
                          7: UnlppUNdunj-8YwDjFvzA_7mmOU.roa (hash: PmeYNl5VPcddckNqSj/dqXpNzLZtpKuKeIlG7ERJmFw=)
                          8: mx6hXCG31V3qS9yGGxwK_J5DcDE.crl (hash: Ol+avJYh2VS+AuGcs10uh3hyeQEmXuWSgOFGFmmS/NI=)
                          9: nCXTMKMkofLMZkm-YkbwPYUOgWc.roa (hash: 3Z+Ce1baNbvob1s9uM7fmEU1yI9sfAWI7ChoI4AbxYs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:37:88:d7:d7:00:1b:60:31:ee:3c:26:07:ee:4a:7f:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b1ea15c21b7d55dea4bdc861b1c0afc9e437031
        Validity
            Not Before: Dec 22 01:53:12 2022 GMT
            Not After : Dec 23 01:53:12 2022 GMT
        Subject: CN=2c5d5ab9e73385ad9a626dae80c8929a9b104e32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:03:ca:48:1d:7e:ed:38:18:c7:99:86:37:ae:
                    55:49:52:d2:be:0e:a8:51:64:90:73:95:a9:ff:da:
                    ef:c8:ea:b3:6a:12:2e:6d:a2:56:d3:27:39:76:3f:
                    17:d8:83:a8:34:ec:6a:11:da:fa:49:14:79:2e:d5:
                    05:e1:6a:97:6b:0c:5f:80:75:7d:26:6a:0e:67:e8:
                    1f:8b:a9:df:f0:6f:b7:09:4b:a6:c0:d4:95:3a:2c:
                    e3:bd:06:e0:68:9d:ba:2c:83:5c:c6:46:dc:53:07:
                    54:21:c3:dc:bb:4f:4a:62:8c:72:f2:0a:5b:9e:0d:
                    40:19:2e:d3:ae:e9:54:86:f8:76:f0:ff:a7:fe:72:
                    d5:22:ea:6f:47:4f:3a:e8:12:37:cb:69:f5:90:de:
                    8b:66:66:c8:8c:60:21:88:c9:42:52:16:d9:3c:9e:
                    57:fe:b3:0e:aa:a6:95:f0:65:d9:9b:04:44:61:64:
                    9c:fb:64:e2:25:8e:da:d6:b7:a0:28:ec:38:d1:b5:
                    52:4d:92:b7:3e:e5:ac:6f:1b:24:f9:8a:37:32:69:
                    ec:f6:e0:c8:21:8f:3c:42:b9:bc:6e:1a:45:77:24:
                    a5:c1:60:bd:50:4f:12:15:db:7f:9f:ed:e3:31:9c:
                    69:7f:f0:ab:6e:20:ec:b2:76:37:cd:ea:cb:be:1e:
                    1c:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:5D:5A:B9:E7:33:85:AD:9A:62:6D:AE:80:C8:92:9A:9B:10:4E:32
            X509v3 Authority Key Identifier:
                keyid:9B:1E:A1:5C:21:B7:D5:5D:EA:4B:DC:86:1B:1C:0A:FC:9E:43:70:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mx6hXCG31V3qS9yGGxwK_J5DcDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9ee01f-e976-4803-961e-94cf22dee5fe/1/mx6hXCG31V3qS9yGGxwK_J5DcDE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9ee01f-e976-4803-961e-94cf22dee5fe/1/mx6hXCG31V3qS9yGGxwK_J5DcDE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:7f:2f:22:4a:98:d6:b5:da:71:0e:df:8c:cc:7c:c1:a6:4b:
         7b:1f:06:ae:69:57:b6:a3:8e:d5:db:fb:fb:ac:24:e1:8e:41:
         c5:6d:8c:c4:1f:aa:99:41:86:55:02:7e:0f:80:59:11:9d:f4:
         e7:c6:e0:b3:ef:93:21:4c:32:74:02:98:cf:89:19:32:8c:d7:
         a0:44:3e:44:ce:ac:85:04:5e:67:af:51:87:34:2d:22:94:00:
         a4:b7:46:88:25:12:09:3a:f0:14:5f:bb:9a:3f:39:d6:b4:c6:
         58:7f:20:bf:46:49:4d:c6:25:14:9b:45:4a:01:f3:56:5a:a1:
         d3:dd:53:38:8f:0f:cb:47:93:11:fa:92:a4:13:46:72:a9:89:
         75:6e:94:45:a9:fa:c9:5a:8e:96:4d:22:26:c4:ab:10:1b:ef:
         e7:06:0d:b8:be:43:9c:3a:80:78:a2:70:87:96:ae:8a:1a:fc:
         a8:01:ef:e6:cc:7e:5f:9d:1a:65:8a:bf:54:8c:24:b8:16:d2:
         a2:2a:89:e3:17:4a:b2:05:95:37:db:c9:d6:f7:37:34:40:5c:
         3e:52:2e:a9:c4:10:3f:e5:87:e4:f4:a7:1d:15:ee:57:e8:2b:
         08:50:e9:b2:f3:be:35:37:8c:99:06:ee:57:15:ee:4f:41:dd:
         5c:1c:36:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----