Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d297ec-5648-466c-852f-9f7bcbef2f5c/1/JmAgEsn9h8Zzcn29lbnZkRsmonA.mft
File:                     JmAgEsn9h8Zzcn29lbnZkRsmonA.mft (raw, json)
Hash identifier:          eYLyzzB791/4kXBbIZEBbJPs/0c3xhNb1Iv9GnBz/6Y=
Subject key identifier:   08:CF:8F:CC:B6:66:70:53:EA:2F:3F:A4:DE:E5:53:DB:E4:57:0B:6A
Authority key identifier: 26:60:20:12:C9:FD:87:C6:73:72:7D:BD:95:B9:D9:91:1B:26:A2:70
Certificate issuer:       /CN=26602012c9fd87c673727dbd95b9d9911b26a270
Certificate serial:       0183C6DD89888D94FB3E2EC6FA67E301CF76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JmAgEsn9h8Zzcn29lbnZkRsmonA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/d297ec-5648-466c-852f-9f7bcbef2f5c/1/JmAgEsn9h8Zzcn29lbnZkRsmonA.mft
Manifest number:          0B08
Signing time:             Tue 11 Oct 2022 11:45:50 +0000
Manifest this update:     Tue 11 Oct 2022 11:45:50 +0000
Manifest next update:     Wed 12 Oct 2022 11:45:50 +0000
Files and hashes:         1: JmAgEsn9h8Zzcn29lbnZkRsmonA.crl (hash: +ZKFy0oTT7rZu4Oppf5kc+9rPi2qg7B9JCyXk6O/Zwk=)
                          2: yOwgKRYqOpwn99n50m14Ksda_xA.roa (hash: 3Y5JAWCi/POHbHL9T/d//qKDM6Hj+mFncFamGlS/2ig=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:c6:dd:89:88:8d:94:fb:3e:2e:c6:fa:67:e3:01:cf:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26602012c9fd87c673727dbd95b9d9911b26a270
        Validity
            Not Before: Oct 11 11:45:50 2022 GMT
            Not After : Oct 12 11:45:50 2022 GMT
        Subject: CN=08cf8fccb6667053ea2f3fa4dee553dbe4570b6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:4b:0f:94:fa:e1:bb:81:de:d5:51:76:f2:f1:
                    b7:68:3a:23:35:37:89:f4:f9:68:15:78:bc:21:18:
                    9d:60:9d:d4:03:14:13:fb:c6:1e:be:51:e1:e8:04:
                    5b:6a:0e:38:ba:df:75:38:df:ef:a9:ad:1b:b4:9e:
                    9f:d3:bd:f6:d2:38:b9:d4:d5:08:22:c9:df:fa:f7:
                    3d:91:68:63:eb:7e:d6:f8:21:7b:cb:8a:80:4b:09:
                    50:b6:ba:7d:a9:7f:4d:96:61:35:cc:b7:4b:d1:a4:
                    27:ae:39:0b:8c:f5:86:81:4f:be:1f:50:3d:ce:16:
                    2c:19:2e:27:5e:2f:ad:ed:86:b8:d2:4c:d2:18:43:
                    2b:d6:3a:b7:6d:fd:81:0d:31:17:56:4f:2a:24:d9:
                    8b:e6:3d:f7:6c:f0:9b:d6:39:79:83:1f:28:96:e0:
                    cf:64:ac:b0:93:34:ce:f3:13:fc:60:8d:48:ea:2c:
                    92:e4:0b:37:04:7e:aa:c6:93:e6:ed:a3:ab:2e:ef:
                    2f:96:d4:ab:c4:fa:c2:bf:a2:71:16:f6:a9:aa:85:
                    a7:a8:95:33:22:ad:ae:a3:13:0c:33:4b:1e:97:a6:
                    1a:17:c5:61:7c:aa:86:15:ed:60:f6:6b:d1:88:d8:
                    ab:dc:6d:40:b4:6e:32:9b:a2:f4:cc:9c:45:bf:b5:
                    55:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:CF:8F:CC:B6:66:70:53:EA:2F:3F:A4:DE:E5:53:DB:E4:57:0B:6A
            X509v3 Authority Key Identifier:
                keyid:26:60:20:12:C9:FD:87:C6:73:72:7D:BD:95:B9:D9:91:1B:26:A2:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmAgEsn9h8Zzcn29lbnZkRsmonA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d297ec-5648-466c-852f-9f7bcbef2f5c/1/JmAgEsn9h8Zzcn29lbnZkRsmonA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d297ec-5648-466c-852f-9f7bcbef2f5c/1/JmAgEsn9h8Zzcn29lbnZkRsmonA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:d8:25:0c:59:80:79:6a:23:dd:e8:db:9c:94:13:e3:b4:ff:
         2c:9c:af:03:f3:3b:a8:b7:1a:a0:58:91:fc:79:a2:ee:92:9d:
         79:03:d0:91:bf:19:98:94:1e:83:40:fe:96:74:b2:1b:bc:c4:
         2e:48:87:5d:2b:53:13:10:8a:54:e5:c0:8d:30:ff:af:f1:92:
         a7:0b:2b:c5:fd:61:09:db:bf:d4:af:ff:3b:b8:8e:ce:11:32:
         4f:93:74:13:ac:ee:78:3f:94:64:8e:99:3b:af:04:e4:a7:65:
         d5:a2:65:a5:ff:85:04:88:cf:05:24:5a:8b:64:84:d7:fe:01:
         4d:d7:dc:b0:f0:30:db:5b:79:db:48:7a:28:fa:cc:86:c1:ea:
         ea:29:e0:21:13:fb:06:a3:53:fe:8d:0d:eb:58:83:75:31:b1:
         8b:39:11:0a:be:96:5a:7f:98:43:8d:26:a3:fb:1b:49:9f:64:
         0f:94:29:cb:c6:a5:95:2e:1c:ce:13:0c:4f:75:ae:b2:90:49:
         a2:8f:ce:e8:03:a2:8d:26:f0:d1:c4:89:b0:7b:1d:02:f6:d8:
         92:7c:97:76:d0:94:9a:78:2c:c7:75:e5:88:5c:6c:8b:b8:2b:
         e0:55:1c:22:33:81:cd:c1:05:bf:d9:97:3d:62:a3:ef:e8:6f:
         99:14:3d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----