Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/702da5-c2cb-4b66-b299-dc5e0c46e76c/1/2ZfQbto2HZNViOQn89mDP499HSA.mft
File:                     2ZfQbto2HZNViOQn89mDP499HSA.mft (raw, json)
Hash identifier:          f5AR0psFU4R3Q/xY4b88m955BsrVsJhDwI/zXPs3tOA=
Subject key identifier:   A4:93:9F:C0:C5:40:80:1E:57:E8:66:5A:71:FF:2A:EC:D2:85:B0:4B
Authority key identifier: D9:97:D0:6E:DA:36:1D:93:55:88:E4:27:F3:D9:83:3F:8F:7D:1D:20
Certificate issuer:       /CN=d997d06eda361d935588e427f3d9833f8f7d1d20
Certificate serial:       0187DA7614CACA7D2C471E9B5007091291D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2ZfQbto2HZNViOQn89mDP499HSA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/702da5-c2cb-4b66-b299-dc5e0c46e76c/1/2ZfQbto2HZNViOQn89mDP499HSA.mft
Manifest number:          0D70
Signing time:             Tue 02 May 2023 03:16:24 +0000
Manifest this update:     Tue 02 May 2023 03:16:24 +0000
Manifest next update:     Wed 03 May 2023 03:16:24 +0000
Files and hashes:         1: 2ZfQbto2HZNViOQn89mDP499HSA.crl (hash: qPbaaYRGxXPO2xQSmK6FU1S10/gP8ruIYa9GncTudIk=)
                          2: 2qXS5dRK3u5FlQhhakQvhq4V4x0.roa (hash: ffpvh2H6dXwEauf9Caib0avzya84BZ6tA8radcoXPlU=)
                          3: 3R0AEqE4fNjsk5cR7jfJthbibEE.roa (hash: YwL/OZ4ckKBN0BsuyNyOyK/DWB3gWKI6fcKzre/J1bQ=)
                          4: 8ToaIfv8YtM9ZSYGSwVCd5NrXD4.roa (hash: EdeIvuFTuc4NKobnRqstcYxcIw8ZqTyDdcjLVtBhP98=)
                          5: Cwt1DGoBQXX80YIU6IXGAAHOgtA.roa (hash: 9xguHN+8FgUmBOuAh/TrS1qub1gQ63IyLUXz+/7Z5Zc=)
                          6: PCijsJVFHiC47QPAo2P_dhoQlV4.roa (hash: qo547NWRlqAmKhtHOM/BzX5Fte+ObwlhhJS5gqTwj4g=)
                          7: T3-8Q8nt4yoZAfm3Ge0zt0_VqoA.roa (hash: OjVofzoWdJOtCHw2bnszg2bSmShnKWDKFuirmGHe9/0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:da:76:14:ca:ca:7d:2c:47:1e:9b:50:07:09:12:91:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d997d06eda361d935588e427f3d9833f8f7d1d20
        Validity
            Not Before: May  2 03:16:24 2023 GMT
            Not After : May  3 03:16:24 2023 GMT
        Subject: CN=a4939fc0c540801e57e8665a71ff2aecd285b04b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c8:ab:31:42:f1:2c:18:a7:52:2e:82:9f:62:
                    3b:b0:6f:c8:07:3f:d4:aa:ce:11:d0:8b:fa:78:f7:
                    92:14:23:df:13:b2:42:8b:77:1f:93:1e:ab:83:76:
                    a0:ed:91:a0:9e:60:13:5b:7c:61:27:f2:ff:65:c7:
                    f7:58:bc:01:70:c8:d5:00:7a:f6:db:da:28:a2:44:
                    2d:8f:2c:83:99:c6:15:b9:3a:f1:ed:76:ff:e8:5e:
                    bd:94:ff:c1:cc:c0:39:0b:da:5a:42:16:6c:1b:10:
                    89:70:44:85:1b:69:d9:fb:cc:bc:a2:87:b5:a3:d7:
                    46:cd:df:66:9a:c7:63:f5:7e:54:5e:b2:33:34:57:
                    29:5c:10:69:20:63:1d:92:1a:cc:f1:0b:c0:e7:ed:
                    ff:9c:9a:c5:d9:3d:ba:21:b5:7e:f7:b8:69:46:da:
                    24:95:fc:3b:7b:d6:00:dc:f7:a4:ad:b8:da:8f:63:
                    22:6b:20:37:cc:36:a8:46:e3:08:3a:2b:21:01:b5:
                    20:54:44:c4:a9:3b:36:08:3a:ad:d3:6d:21:b1:e3:
                    6d:d8:32:9c:92:ee:89:c9:2e:d9:34:be:80:70:da:
                    72:61:62:d6:b7:b2:4e:2f:02:38:57:d0:4b:a8:06:
                    57:10:df:e6:62:d5:ee:bf:dc:8c:2b:3a:1a:6a:d0:
                    6a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:93:9F:C0:C5:40:80:1E:57:E8:66:5A:71:FF:2A:EC:D2:85:B0:4B
            X509v3 Authority Key Identifier:
                keyid:D9:97:D0:6E:DA:36:1D:93:55:88:E4:27:F3:D9:83:3F:8F:7D:1D:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ZfQbto2HZNViOQn89mDP499HSA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/702da5-c2cb-4b66-b299-dc5e0c46e76c/1/2ZfQbto2HZNViOQn89mDP499HSA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/702da5-c2cb-4b66-b299-dc5e0c46e76c/1/2ZfQbto2HZNViOQn89mDP499HSA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:eb:c8:04:5b:20:aa:01:71:6d:18:5f:7f:48:59:2f:aa:67:
         1c:19:f7:af:2d:55:bf:1c:89:ce:40:7a:71:c8:79:34:a7:37:
         ec:27:07:ce:26:99:57:c4:b4:91:61:6e:49:58:c4:e8:09:ea:
         9e:64:65:2b:49:f0:8e:9b:e4:4a:28:e0:99:a8:6b:f6:2a:81:
         61:5c:2b:6c:7c:a6:31:b8:7c:d9:23:4e:cf:16:ba:7b:2c:63:
         d8:81:07:02:65:58:86:14:53:1d:23:19:c2:d4:ec:ff:86:cd:
         c8:1f:51:07:3b:dc:a5:83:22:45:0f:ea:e6:c8:2b:58:ae:37:
         da:40:60:17:6a:ee:8f:82:41:e9:39:63:f8:c5:d9:8c:15:88:
         ce:48:4a:a0:97:8d:e3:8e:0a:d6:01:fa:4b:b3:5e:e2:5b:11:
         a4:43:6a:13:61:90:5d:0f:9a:d1:ad:ab:a9:49:46:70:dd:d9:
         e5:dd:ff:e7:34:b8:dc:13:e2:bf:86:7f:28:e2:27:dc:a8:1c:
         ed:1a:dc:da:db:c1:59:ef:3f:67:76:15:c2:20:53:71:c5:dd:
         95:b7:50:9e:4c:81:d4:f4:0f:5a:ed:5a:65:d0:bd:24:31:e5:
         73:2d:57:2e:26:ee:69:e4:70:f3:f7:27:15:4a:2c:dd:ea:fa:
         82:5a:a7:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----