Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/235802-5fc4-4565-8bda-c92f921f26fa/1/ISJop9UQajQiGaq4axPZK-ltTLw.mft
File:                     ISJop9UQajQiGaq4axPZK-ltTLw.mft (raw, json)
Hash identifier:          RS/dcujKDOyaCQhMvoz9S9Y/b6X80FjDfDs5WwPM4uQ=
Subject key identifier:   EF:D1:63:62:62:B6:49:E2:31:06:AB:86:A2:EC:AF:CD:27:45:2F:A7
Authority key identifier: 21:22:68:A7:D5:10:6A:34:22:19:AA:B8:6B:13:D9:2B:E9:6D:4C:BC
Certificate issuer:       /CN=212268a7d5106a342219aab86b13d92be96d4cbc
Certificate serial:       0188522158A9536C1574134238881A1158B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ISJop9UQajQiGaq4axPZK-ltTLw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/235802-5fc4-4565-8bda-c92f921f26fa/1/ISJop9UQajQiGaq4axPZK-ltTLw.mft
Manifest number:          0DA5
Signing time:             Thu 25 May 2023 08:58:17 +0000
Manifest this update:     Thu 25 May 2023 08:58:17 +0000
Manifest next update:     Fri 26 May 2023 08:58:17 +0000
Files and hashes:         1: ISJop9UQajQiGaq4axPZK-ltTLw.crl (hash: 8ynxk00g/onw6AYau138yWf0N8NTCXQVtlzA/zURRuE=)
                          2: tMAAnJhA4JKQ71oLqzdy37xqpzM.roa (hash: Bjb2kOOr+2tSqGmQNIV+0thxY/+wOq9WnE0XDEbw2LA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:52:21:58:a9:53:6c:15:74:13:42:38:88:1a:11:58:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=212268a7d5106a342219aab86b13d92be96d4cbc
        Validity
            Not Before: May 25 08:58:17 2023 GMT
            Not After : May 26 08:58:17 2023 GMT
        Subject: CN=efd1636262b649e23106ab86a2ecafcd27452fa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:af:39:7d:b6:aa:bd:4a:a7:da:c8:98:30:63:
                    e9:c2:66:44:1a:13:8b:3c:ee:85:2f:69:9c:90:e7:
                    1e:fb:24:84:74:78:95:c9:45:d6:5b:e8:86:21:47:
                    58:46:cf:7c:21:3c:e1:07:52:7d:4c:2c:35:0b:06:
                    0d:2d:cc:17:a2:e1:f7:fc:56:88:8d:d3:1d:3a:4c:
                    92:ad:80:b7:e0:ab:81:28:49:74:01:41:c1:33:ff:
                    f5:b1:be:eb:09:c2:0d:94:ef:9d:2c:16:9f:a2:a7:
                    8c:84:0e:8c:12:7b:d9:88:0e:69:c6:80:2c:d0:35:
                    4a:7a:9a:5f:4c:66:8f:8c:f2:43:d7:5e:67:e5:74:
                    d2:1f:6b:a7:cc:ae:1a:b9:28:d2:a5:bc:df:fb:b0:
                    a3:06:03:28:29:e5:41:81:28:6d:51:c1:aa:48:10:
                    ce:28:64:9f:aa:d9:48:e8:82:9f:df:64:5a:9e:f3:
                    81:07:1d:74:cb:90:ca:06:a3:37:2f:0b:2a:62:0c:
                    2d:f2:ea:c9:99:92:74:96:87:b7:37:90:9a:bd:be:
                    5e:d3:cc:43:52:58:13:3b:f9:02:cd:8c:92:16:89:
                    83:09:57:66:cc:75:2c:88:24:8e:6a:6b:47:2c:6f:
                    9a:66:f6:9d:e9:ce:b6:66:46:af:e7:88:a5:0a:8f:
                    15:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:D1:63:62:62:B6:49:E2:31:06:AB:86:A2:EC:AF:CD:27:45:2F:A7
            X509v3 Authority Key Identifier:
                keyid:21:22:68:A7:D5:10:6A:34:22:19:AA:B8:6B:13:D9:2B:E9:6D:4C:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ISJop9UQajQiGaq4axPZK-ltTLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/235802-5fc4-4565-8bda-c92f921f26fa/1/ISJop9UQajQiGaq4axPZK-ltTLw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/235802-5fc4-4565-8bda-c92f921f26fa/1/ISJop9UQajQiGaq4axPZK-ltTLw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:ef:d6:54:81:ac:5d:4e:5c:33:b9:2e:bd:f3:ab:fb:98:1b:
         7e:20:d1:32:8e:94:96:d4:69:76:32:02:20:a7:a3:51:e2:f9:
         d6:58:03:62:cd:5c:30:cb:1e:54:eb:d5:8a:01:17:31:e0:b4:
         e7:76:b7:c5:84:39:53:49:d7:dc:a9:1d:9f:89:40:7e:eb:e2:
         64:68:d3:68:0a:c8:e2:76:7f:31:29:a0:15:33:40:d2:a9:a1:
         c5:b1:05:82:fe:df:1b:90:98:6e:f3:b6:32:9a:dc:f3:3d:4b:
         3c:ff:81:10:30:99:22:65:8c:a7:cd:0f:d9:dd:18:ad:17:b6:
         c4:0c:2e:43:c1:60:04:93:85:16:72:c0:cb:04:ca:0f:2f:4f:
         fe:ca:23:dd:fb:57:e4:fb:3e:2e:93:00:5e:98:03:89:a4:03:
         94:0a:00:1f:ac:0f:e2:e9:c1:60:73:89:16:2f:38:ae:74:43:
         de:0e:1f:34:d6:81:2a:39:d0:e8:8c:19:a0:dd:30:99:c4:32:
         70:d6:bd:df:37:9e:8d:24:24:5f:59:97:1e:28:18:4c:28:16:
         71:1b:8f:4a:3e:2f:c2:86:d1:5d:fd:03:c6:f9:76:cd:79:bd:
         25:55:0e:b1:dd:a8:ba:fb:a9:70:4c:b3:db:33:aa:d9:f1:9c:
         2b:72:97:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----