Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/2fd437-e682-4625-9ee6-40b369bfcc2c/1/1-JKzk46wudJnVsM4HJJdvb2JrAE.mft
File:                     1-JKzk46wudJnVsM4HJJdvb2JrAE.mft (raw, json)
Hash identifier:          z5o6lpJr0p2QNr9yvxsXD5cetoKZG7dKnXfuREt6I/o=
Subject key identifier:   54:48:B3:53:92:01:03:6C:49:BA:D0:82:BB:39:CA:8C:9E:2E:A3:14
Authority key identifier: F8:92:B3:93:8E:B0:B9:D2:67:56:C3:38:1C:92:5D:BD:BD:89:AC:01
Certificate issuer:       /CN=f892b3938eb0b9d26756c3381c925dbdbd89ac01
Certificate serial:       0184F542208C66EAE1A423B10F1D5317067B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-JKzk46wudJnVsM4HJJdvb2JrAE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/2fd437-e682-4625-9ee6-40b369bfcc2c/1/1-JKzk46wudJnVsM4HJJdvb2JrAE.mft
Manifest number:          043E
Signing time:             Fri 09 Dec 2022 05:01:02 +0000
Manifest this update:     Fri 09 Dec 2022 05:01:02 +0000
Manifest next update:     Sat 10 Dec 2022 05:01:02 +0000
Files and hashes:         1: 1-JKzk46wudJnVsM4HJJdvb2JrAE.crl (hash: FAWXjs5y0kx2breJQAj0Cy/HtpHxF3Sar/FA62qLqh8=)
                          2: HoCMFfQoCKfnd3cbT0xE4DmHfNQ.roa (hash: jteyE3mKSdOBa7KPeXH+qM3TMN/LkUUkY8JomN6us9M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:f5:42:20:8c:66:ea:e1:a4:23:b1:0f:1d:53:17:06:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f892b3938eb0b9d26756c3381c925dbdbd89ac01
        Validity
            Not Before: Dec  9 05:01:02 2022 GMT
            Not After : Dec 10 05:01:02 2022 GMT
        Subject: CN=5448b3539201036c49bad082bb39ca8c9e2ea314
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:27:6e:55:e8:28:a4:c1:ce:25:d5:67:e7:45:
                    da:64:93:76:c8:0b:0a:c8:9b:19:9b:4b:25:be:26:
                    52:f0:b1:19:8c:07:33:7c:f7:09:b4:07:da:90:47:
                    a8:ff:5f:55:d7:82:31:bf:33:6d:75:6a:eb:9d:ed:
                    14:05:0a:46:1c:d5:c2:3e:74:55:20:61:cf:d8:b2:
                    6e:50:27:c5:c2:4e:e8:3c:d8:2d:2d:5b:71:e2:b4:
                    94:64:05:ce:de:cc:a1:33:91:ba:9d:39:d3:fc:69:
                    1f:82:28:7f:5b:59:ec:8a:24:8b:5a:af:e1:6d:65:
                    67:77:6a:5b:4c:1a:be:44:81:f4:3a:f2:e4:9f:99:
                    3c:43:68:08:e3:15:dc:51:df:ab:62:66:04:67:6c:
                    de:f6:44:fb:77:5a:2b:7e:28:2d:3b:98:1b:76:df:
                    18:43:f6:13:a3:a0:c5:60:93:6b:2c:d7:ed:64:62:
                    32:3d:cf:b2:2b:2c:3f:44:63:29:91:6f:21:ab:85:
                    a4:c5:86:1d:e7:e1:30:91:d0:af:aa:ed:0d:6a:9e:
                    18:e8:ba:9f:2f:2b:f4:37:a1:c4:35:b6:c6:03:a5:
                    16:be:81:0c:9f:be:f0:ab:73:c3:e8:7c:1a:21:82:
                    30:3a:17:94:2c:0c:f8:b0:b1:3b:e4:6e:c4:3b:a3:
                    0b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:48:B3:53:92:01:03:6C:49:BA:D0:82:BB:39:CA:8C:9E:2E:A3:14
            X509v3 Authority Key Identifier:
                keyid:F8:92:B3:93:8E:B0:B9:D2:67:56:C3:38:1C:92:5D:BD:BD:89:AC:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-JKzk46wudJnVsM4HJJdvb2JrAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2fd437-e682-4625-9ee6-40b369bfcc2c/1/1-JKzk46wudJnVsM4HJJdvb2JrAE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2fd437-e682-4625-9ee6-40b369bfcc2c/1/1-JKzk46wudJnVsM4HJJdvb2JrAE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:02:1c:f9:b2:b3:55:56:fd:7d:54:99:16:3c:2f:09:c0:50:
         c3:23:7e:70:ee:f5:c2:8b:50:09:7f:66:8a:c8:f2:69:e3:04:
         b0:47:97:88:b9:11:1b:7d:b2:d5:65:3b:28:86:70:87:01:f5:
         e2:bf:59:ee:8e:03:48:d2:45:8f:42:b1:4c:0d:bf:be:7b:62:
         45:2c:33:2a:26:19:0a:fe:3c:16:08:6c:1a:21:e7:6b:ac:14:
         ff:c7:88:0d:16:b6:a1:00:29:41:ee:75:34:74:55:6b:f4:ad:
         a0:de:e2:a4:bb:bd:d1:66:73:6a:be:ce:b3:b5:ed:7d:21:c3:
         f5:e6:b6:18:7b:9f:47:2f:ae:9a:90:4b:42:2c:81:3c:fc:07:
         70:89:4a:a2:97:68:28:3d:ec:8b:ca:4e:ef:7a:e2:3a:59:78:
         97:e7:c4:ac:98:e8:f7:a2:79:bf:6d:38:fc:03:ac:c4:46:09:
         05:63:79:c0:6f:fe:a7:d9:8e:31:35:93:e1:0b:f0:2c:b5:8d:
         12:51:1b:07:9e:94:20:63:c4:97:69:d9:1c:b3:27:a9:cf:50:
         a4:bb:4f:65:4a:06:a4:a1:7b:30:0f:64:53:09:a4:bb:d1:50:
         ed:e5:f3:34:86:26:d6:a7:0e:16:bb:39:4b:45:d5:87:60:65:
         c6:ae:f7:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----