Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/7a936c-d6e2-4cc1-9e4b-d237a9e6ab14/1/yvJIiCS3FKHzDCyAn722hXVlK0o.mft
File:                     yvJIiCS3FKHzDCyAn722hXVlK0o.mft (raw, json)
Hash identifier:          zaxVYDc+6nIX4/0cgjzTM5d7F8OJzx9YTAygzLZcjuY=
Subject key identifier:   42:58:09:FA:BA:44:57:39:7E:69:A1:E6:5A:8D:7D:18:4A:57:D7:A6
Authority key identifier: CA:F2:48:88:24:B7:14:A1:F3:0C:2C:80:9F:BD:B6:85:75:65:2B:4A
Certificate issuer:       /CN=caf2488824b714a1f30c2c809fbdb68575652b4a
Certificate serial:       018852714BB72C4D98E9345D908272F65259
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yvJIiCS3FKHzDCyAn722hXVlK0o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/7a936c-d6e2-4cc1-9e4b-d237a9e6ab14/1/yvJIiCS3FKHzDCyAn722hXVlK0o.mft
Manifest number:          062E
Signing time:             Thu 25 May 2023 10:25:36 +0000
Manifest this update:     Thu 25 May 2023 10:25:36 +0000
Manifest next update:     Fri 26 May 2023 10:25:36 +0000
Files and hashes:         1: oGZYuI4EZmiHe2gLEAff6GSdF80.roa (hash: Zaujg6uB9UUwAPorirKzsPt1k2ZfeeQG1N0NiWbimQI=)
                          2: rmGyfkFNDI7C6qIZvqG4XUMcngw.roa (hash: YpkixmA2NcPWa+oLY2F17gMATXYN/fjtNBdZ7b9QED8=)
                          3: yvJIiCS3FKHzDCyAn722hXVlK0o.crl (hash: luhhPejGiFgadabcFYH/NFPdIASGqtm3spj8YxF0UJg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:52:71:4b:b7:2c:4d:98:e9:34:5d:90:82:72:f6:52:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=caf2488824b714a1f30c2c809fbdb68575652b4a
        Validity
            Not Before: May 25 10:25:36 2023 GMT
            Not After : May 26 10:25:36 2023 GMT
        Subject: CN=425809faba4457397e69a1e65a8d7d184a57d7a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:5b:46:8a:0c:ea:0c:27:3f:f9:65:28:fd:83:
                    ab:6b:f2:59:15:9a:25:e6:a8:73:69:0f:03:15:06:
                    2e:03:a7:85:b0:0e:c6:4d:c0:a6:f2:d0:6b:68:c4:
                    23:7a:bc:c9:6e:6a:66:8a:9f:4d:bf:8d:ff:c4:9d:
                    18:da:74:46:0d:5c:32:53:c8:f4:8e:fa:3d:61:51:
                    56:0e:4f:d8:8c:6a:df:98:b5:ed:bd:fb:42:57:5f:
                    7e:7f:3e:7d:c6:f1:3c:d5:47:5b:00:40:8c:a1:4e:
                    8e:de:dd:91:8f:a7:29:ae:3a:ec:29:05:a3:81:62:
                    5f:bb:c1:c9:32:1b:9f:b4:18:18:c9:f6:be:17:92:
                    0c:31:ec:d0:31:77:66:d5:93:4a:55:8f:34:4e:a0:
                    7a:1a:e2:50:dc:62:e8:ca:f2:0d:a0:c4:99:95:c7:
                    df:98:52:b6:51:81:ff:eb:34:5c:05:f0:71:47:c0:
                    f3:17:c8:35:94:9c:4b:d7:f4:bd:d1:3d:5c:00:ee:
                    ec:b4:d4:08:cf:2a:e7:d3:81:8c:db:f3:fb:b9:29:
                    db:ce:58:ac:20:0d:99:54:8b:19:48:79:72:07:81:
                    76:e2:4a:29:c7:34:bb:07:95:15:4d:ef:53:41:31:
                    70:74:2c:f7:2f:b0:3a:7c:ef:62:3e:45:77:fe:4e:
                    89:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:58:09:FA:BA:44:57:39:7E:69:A1:E6:5A:8D:7D:18:4A:57:D7:A6
            X509v3 Authority Key Identifier:
                keyid:CA:F2:48:88:24:B7:14:A1:F3:0C:2C:80:9F:BD:B6:85:75:65:2B:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvJIiCS3FKHzDCyAn722hXVlK0o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7a936c-d6e2-4cc1-9e4b-d237a9e6ab14/1/yvJIiCS3FKHzDCyAn722hXVlK0o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7a936c-d6e2-4cc1-9e4b-d237a9e6ab14/1/yvJIiCS3FKHzDCyAn722hXVlK0o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:e2:25:fc:6d:14:61:31:32:44:42:da:68:a4:a8:b3:6b:ad:
         9d:ad:5a:c5:86:af:bb:0e:2d:fe:21:33:a7:ce:78:4d:03:9e:
         f1:d1:e9:d0:7a:0d:84:83:30:35:07:c8:5e:08:92:49:2c:2f:
         be:2b:ac:b6:b3:24:21:45:af:8c:f0:ef:fa:29:cd:24:2a:8c:
         58:00:6f:13:a9:54:37:ce:e6:57:2d:a2:b0:0e:21:10:7d:24:
         44:d2:46:09:4c:b7:4f:bc:f2:41:aa:58:f3:5c:cd:c9:86:db:
         d1:09:48:3e:95:e2:c0:4d:da:2c:fd:a1:54:53:0b:fa:3e:79:
         a5:fb:e3:4e:a8:db:79:e0:fd:bb:f4:87:d3:05:07:0c:cd:57:
         43:fc:2a:9c:af:d4:7a:7f:22:9e:c0:55:bb:85:84:8b:f7:f1:
         1b:3a:98:16:39:96:5f:92:73:b4:43:8b:eb:8a:05:d0:f0:6e:
         24:1a:3f:f4:04:e1:1c:bf:b7:17:70:67:ec:78:6e:38:45:cb:
         03:04:9d:9d:53:00:67:06:8a:e7:b2:8e:fe:8a:1d:86:48:bf:
         fa:8e:58:de:a7:04:cb:51:93:a4:84:11:38:ce:9d:95:75:91:
         b1:e3:17:9a:31:38:be:f4:53:e5:5c:b7:ab:1f:b1:56:63:a9:
         d4:cf:5c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----