Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/a9e9a8-eabe-4cb0-b7ca-839dd1e5dd1a/1/p1AJeVOqFOdzUHdrYvw3vj849AI.mft
File:                     p1AJeVOqFOdzUHdrYvw3vj849AI.mft (raw, json)
Hash identifier:          HKdAv8ZR1s0wcX0twpEQcFsR73j5L2TfbTiozuPvAHw=
Subject key identifier:   7F:37:29:6B:2A:44:04:52:2B:95:67:2A:FD:E2:3F:4F:5C:A0:9C:19
Authority key identifier: A7:50:09:79:53:AA:14:E7:73:50:77:6B:62:FC:37:BE:3F:38:F4:02
Certificate issuer:       /CN=a750097953aa14e77350776b62fc37be3f38f402
Certificate serial:       01884775AE64CBF25C29639C26BDD1E0CA8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p1AJeVOqFOdzUHdrYvw3vj849AI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/a9e9a8-eabe-4cb0-b7ca-839dd1e5dd1a/1/p1AJeVOqFOdzUHdrYvw3vj849AI.mft
Manifest number:          013F
Signing time:             Tue 23 May 2023 07:14:34 +0000
Manifest this update:     Tue 23 May 2023 07:14:34 +0000
Manifest next update:     Wed 24 May 2023 07:14:34 +0000
Files and hashes:         1: 2U5XIDX9Snl6TEACLyuDMZcMUfM.roa (hash: 4wJH/N1ta98FMMf7VAr2Ulm/zcJbR8d/k9C5ekbwdsY=)
                          2: 9Pjh7_VqAIhubYFvpMxTq1o4u3E.roa (hash: Hi+0H3h7hn0NWgfxZhzbTPCbU68G8lmw61QsOZl05DQ=)
                          3: p1AJeVOqFOdzUHdrYvw3vj849AI.crl (hash: JEinJmD2Zy0k5rs5oiXKF1N2fJYCxyCVnxohoD/GaBM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:47:75:ae:64:cb:f2:5c:29:63:9c:26:bd:d1:e0:ca:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a750097953aa14e77350776b62fc37be3f38f402
        Validity
            Not Before: May 23 07:14:34 2023 GMT
            Not After : May 24 07:14:34 2023 GMT
        Subject: CN=7f37296b2a4404522b95672afde23f4f5ca09c19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2c:19:19:d6:e8:52:40:90:04:f8:d6:e0:e4:
                    63:ba:bf:4c:ee:2d:11:c1:5e:4e:96:1f:d6:fc:c5:
                    4f:f2:0c:b3:87:97:25:e6:23:46:21:e6:10:82:8d:
                    ca:f8:f3:6b:f5:d3:47:13:49:39:06:bc:11:9c:2f:
                    02:24:17:c9:19:c8:83:ce:40:8d:c0:90:b4:43:f8:
                    17:25:5a:63:ba:d0:e1:c7:f1:bd:69:fd:39:51:ed:
                    49:b4:4e:6d:fd:3c:b8:47:30:2b:21:ac:a8:9f:67:
                    41:9c:b2:3a:f7:99:72:5a:24:32:80:bf:00:40:31:
                    8d:ef:04:06:e8:35:97:7a:f9:9d:d6:c9:23:75:64:
                    3a:74:80:74:31:2f:01:3e:60:7a:cd:2e:d0:b0:11:
                    f1:ac:0d:d3:58:c0:05:bb:9f:68:26:84:4a:b0:b4:
                    99:52:03:f6:9c:59:8a:b5:b9:ce:f8:a8:e9:e1:a9:
                    0c:9e:20:3e:4a:d6:1d:48:34:6a:22:22:c4:c3:c6:
                    31:dd:a4:ab:bb:fb:cb:bd:c7:a7:86:0d:73:c6:8a:
                    1b:c9:42:fe:e4:87:a6:54:46:9a:3a:5f:e2:53:a9:
                    ab:68:63:54:e9:00:08:6c:77:f3:af:27:12:60:01:
                    c0:57:bc:40:c4:7a:02:44:1a:82:0d:4e:ad:3c:54:
                    e5:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:37:29:6B:2A:44:04:52:2B:95:67:2A:FD:E2:3F:4F:5C:A0:9C:19
            X509v3 Authority Key Identifier:
                keyid:A7:50:09:79:53:AA:14:E7:73:50:77:6B:62:FC:37:BE:3F:38:F4:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p1AJeVOqFOdzUHdrYvw3vj849AI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a9e9a8-eabe-4cb0-b7ca-839dd1e5dd1a/1/p1AJeVOqFOdzUHdrYvw3vj849AI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a9e9a8-eabe-4cb0-b7ca-839dd1e5dd1a/1/p1AJeVOqFOdzUHdrYvw3vj849AI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:50:5b:fb:72:de:7c:60:4b:9a:4f:99:84:9f:12:78:c6:23:
         4d:55:f8:a0:4e:a8:3a:b5:7b:44:30:9f:8d:d6:33:63:78:e9:
         f3:c7:46:f0:0e:9e:98:3a:56:ed:75:7f:e4:8d:48:b4:5d:f9:
         75:f9:a5:74:9f:41:f1:ea:1c:f6:1d:e1:55:b4:39:81:3b:37:
         1c:76:ea:ac:87:bf:b8:a3:ff:7e:fd:5f:72:25:61:f1:00:af:
         99:84:d8:fa:38:f9:e9:a6:4f:39:f6:0a:54:3c:77:ae:a9:d2:
         d8:41:4c:df:fe:9f:ee:6d:47:b9:77:13:89:c6:eb:46:ec:cf:
         c8:25:61:60:80:3a:02:00:d3:fa:38:e5:f6:8a:d0:52:bc:0c:
         ed:2d:dc:fb:d3:f9:33:6e:bf:91:10:1c:76:db:69:f2:68:4c:
         56:94:1d:d5:9a:84:99:e7:64:24:d5:e5:fc:2a:30:d8:62:64:
         82:dd:bc:40:80:10:e6:be:18:5e:a9:c1:c5:45:1f:10:e9:3a:
         cc:67:92:df:7c:3b:6a:d8:f9:09:4a:82:84:38:d9:7a:50:dc:
         26:ec:8a:9d:f9:ed:c2:b6:44:39:17:44:21:c8:ae:5b:99:49:
         a2:ef:47:2b:8e:0e:10:11:12:8b:55:c0:af:91:9d:f9:03:cb:
         c0:12:4d:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----