Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/5527da-18d9-47d0-9e14-ffb4b3b76b0e/1/OXl_7O0raH75RrV1Od0P5U09G6I.mft
File:                     OXl_7O0raH75RrV1Od0P5U09G6I.mft (raw, json)
Hash identifier:          SflidWa5FcIE14KkkZaZy+zJV1GxN2BKn4moqDR9eH0=
Subject key identifier:   6F:7B:FA:E7:10:03:1E:AD:6E:62:42:69:E8:67:80:D9:5E:83:BE:72
Authority key identifier: 39:79:7F:EC:ED:2B:68:7E:F9:46:B5:75:39:DD:0F:E5:4D:3D:1B:A2
Certificate issuer:       /CN=39797feced2b687ef946b57539dd0fe54d3d1ba2
Certificate serial:       0184D2BC751D9EF79CAA1E6199825AA1ADB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OXl_7O0raH75RrV1Od0P5U09G6I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/5527da-18d9-47d0-9e14-ffb4b3b76b0e/1/OXl_7O0raH75RrV1Od0P5U09G6I.mft
Manifest number:          0BA1
Signing time:             Fri 02 Dec 2022 12:07:56 +0000
Manifest this update:     Fri 02 Dec 2022 12:07:56 +0000
Manifest next update:     Sat 03 Dec 2022 12:07:56 +0000
Files and hashes:         1: 1KIaSig-BSSVXw9eH-ZA61tl9xE.roa (hash: ntJtcn6DJm2yO/FSJ6nCilsyw1mslQC+6MsRFLWt5ls=)
                          2: OXl_7O0raH75RrV1Od0P5U09G6I.crl (hash: Vf3vsaH9W+eYhaQxMG3kLdUSyrWkjpzalpt+raJBj7U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:d2:bc:75:1d:9e:f7:9c:aa:1e:61:99:82:5a:a1:ad:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39797feced2b687ef946b57539dd0fe54d3d1ba2
        Validity
            Not Before: Dec  2 12:07:56 2022 GMT
            Not After : Dec  3 12:07:56 2022 GMT
        Subject: CN=6f7bfae710031ead6e624269e86780d95e83be72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:6a:67:ff:b1:83:11:f6:0c:47:f3:26:26:9c:
                    5b:dc:1b:a3:23:39:4b:9b:e2:3b:33:78:4e:bb:5c:
                    dc:df:42:6b:4d:b0:06:00:d0:3b:a0:e2:0b:5d:3d:
                    c2:88:35:a9:6f:29:af:7c:de:47:19:49:38:3b:26:
                    b9:ae:af:6f:6e:9b:90:5f:8a:a4:c4:55:20:db:03:
                    00:91:a1:9b:ce:7e:65:b3:7d:b9:14:31:08:90:16:
                    4f:8f:5d:0e:e1:11:38:2f:aa:6a:cd:25:07:56:65:
                    f1:74:35:8b:a7:3e:07:1a:f0:c1:55:54:78:b0:98:
                    1a:61:fb:c0:76:29:87:4f:df:e0:d3:58:db:9a:ca:
                    09:d4:a8:76:55:22:85:94:17:e7:53:b0:58:9e:0c:
                    9c:a4:04:fc:1f:1d:f9:f3:af:d0:16:c6:92:50:82:
                    16:75:79:e3:65:ff:23:77:ef:5c:da:2c:7e:93:54:
                    c3:3c:d7:9a:87:8f:a1:58:0a:b9:45:6b:74:88:5b:
                    df:5b:62:5e:76:c1:d4:8d:e4:01:62:bc:f6:a8:63:
                    eb:d0:7c:6a:56:5f:67:45:2a:4d:00:8f:71:64:f3:
                    ff:66:22:02:55:fc:07:04:a9:97:01:f1:ab:7f:d5:
                    e8:0d:cd:5d:e9:67:c2:43:02:10:3c:cc:cb:2c:6a:
                    22:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:7B:FA:E7:10:03:1E:AD:6E:62:42:69:E8:67:80:D9:5E:83:BE:72
            X509v3 Authority Key Identifier:
                keyid:39:79:7F:EC:ED:2B:68:7E:F9:46:B5:75:39:DD:0F:E5:4D:3D:1B:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXl_7O0raH75RrV1Od0P5U09G6I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5527da-18d9-47d0-9e14-ffb4b3b76b0e/1/OXl_7O0raH75RrV1Od0P5U09G6I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5527da-18d9-47d0-9e14-ffb4b3b76b0e/1/OXl_7O0raH75RrV1Od0P5U09G6I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:a5:4f:07:51:75:81:0f:57:5c:dc:17:70:cc:a7:62:d0:79:
         bf:ef:0e:bf:07:79:d1:a8:03:2c:a4:24:ac:b0:e1:3e:f1:7e:
         87:c2:5d:26:8a:3e:9a:6e:82:c1:3b:21:cf:63:5c:5c:ce:68:
         52:dc:a6:ac:28:6f:e1:01:45:9f:3b:d3:53:5a:fc:70:cc:17:
         35:7a:5c:36:3c:d7:af:1b:41:14:48:3d:56:9d:b4:50:9d:83:
         8e:a1:53:e6:c7:d9:b9:f4:e5:ee:75:ab:c6:c8:59:56:b1:f3:
         fb:40:ce:6f:8a:0c:ca:e9:3c:d8:6c:8a:89:83:8c:9b:47:a1:
         fc:e1:71:fc:65:fe:6a:28:76:c1:93:35:76:40:e3:e3:e2:1e:
         67:d5:b8:6e:95:a4:53:e3:39:8a:d6:26:92:18:1c:ed:96:85:
         37:82:3e:1d:ec:1d:9d:46:3a:7b:bb:f2:1a:ce:f8:00:62:17:
         7c:14:2b:44:74:55:b2:15:55:c5:9f:87:9a:13:75:0b:b9:74:
         97:a9:47:27:1b:14:aa:3f:9d:fb:0a:54:ca:1e:c3:b5:2e:83:
         8c:25:8f:96:5b:dc:ae:46:86:96:97:70:e1:f2:5f:d6:15:8c:
         21:50:36:65:d6:0e:15:d4:c6:26:0c:a6:43:81:6d:49:ca:5d:
         3d:eb:ce:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----