Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/6df1aa-0015-4518-89e8-0808df98211c/1/6XMZ2tNcydWutv17tdjJuGSxfak.mft
File:                     6XMZ2tNcydWutv17tdjJuGSxfak.mft (raw, json)
Hash identifier:          bFIr/DQngYIsH1J1ZYtea9LcAe5I60Mqcf6KpTND4QA=
Subject key identifier:   0E:4B:38:ED:B0:CA:E1:91:C6:36:74:8D:7A:6C:34:F4:1A:06:FA:47
Authority key identifier: E9:73:19:DA:D3:5C:C9:D5:AE:B6:FD:7B:B5:D8:C9:B8:64:B1:7D:A9
Certificate issuer:       /CN=e97319dad35cc9d5aeb6fd7bb5d8c9b864b17da9
Certificate serial:       0183153D3650B781CF78C9A9AF44AA5EDADD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6XMZ2tNcydWutv17tdjJuGSxfak.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/6df1aa-0015-4518-89e8-0808df98211c/1/6XMZ2tNcydWutv17tdjJuGSxfak.mft
Manifest number:          0AA4
Signing time:             Tue 06 Sep 2022 23:57:56 +0000
Manifest this update:     Tue 06 Sep 2022 23:57:56 +0000
Manifest next update:     Wed 07 Sep 2022 23:57:56 +0000
Files and hashes:         1: 6XMZ2tNcydWutv17tdjJuGSxfak.crl (hash: Xn1o0Wzm312Wtar/dxxfTZiMBbNltElb+5EPXxaK8R4=)
                          2: wEnGyKeJL3bLWqEmy7caM3f-kgM.roa (hash: zsCGyJ2aoKw5IERACWEJwWMryp1O46pyZD9T1GY1JPs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:15:3d:36:50:b7:81:cf:78:c9:a9:af:44:aa:5e:da:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e97319dad35cc9d5aeb6fd7bb5d8c9b864b17da9
        Validity
            Not Before: Sep  6 23:57:56 2022 GMT
            Not After : Sep  7 23:57:56 2022 GMT
        Subject: CN=0e4b38edb0cae191c636748d7a6c34f41a06fa47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:4d:2a:a2:22:a5:1f:5f:7f:b7:eb:95:fa:a8:
                    fd:13:5f:2a:45:1f:8e:2d:da:52:aa:44:34:2a:d5:
                    d1:f5:f9:ff:d0:f8:19:00:5d:ab:76:68:6b:61:83:
                    1d:68:dc:40:3e:ab:63:b1:66:01:05:2e:e7:22:b5:
                    89:83:66:6f:b5:b1:1b:44:98:e9:c8:a7:d1:09:58:
                    61:71:1a:ed:5d:32:e5:fb:40:eb:f3:13:0c:7c:91:
                    59:62:0f:8e:14:ab:7a:20:8a:19:de:8a:2f:e5:02:
                    c1:c6:40:3c:0e:c7:7d:ea:13:a3:db:60:d6:00:8f:
                    25:57:41:88:c2:84:7c:fa:d2:07:a6:03:67:d6:4e:
                    57:4b:eb:99:af:57:f0:65:13:6e:09:e5:5d:56:fc:
                    70:d1:c9:be:4a:08:c0:ba:e8:ad:60:48:91:19:46:
                    b6:ac:46:90:e4:5d:c0:7b:e9:8b:4f:c6:06:be:b0:
                    5c:a9:ac:8b:e1:b5:41:4f:ed:f3:fc:ec:f0:98:19:
                    2f:21:6a:3c:d8:66:be:4a:02:d6:fb:95:fc:f5:2c:
                    48:b1:cf:9d:e5:8b:89:3a:49:b0:bb:6c:b8:b6:8d:
                    ba:b7:cd:d8:a0:c5:69:15:b7:8c:72:7a:bf:fd:a3:
                    54:d0:83:37:a9:28:ca:9c:28:59:43:cd:b4:ec:8e:
                    34:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:4B:38:ED:B0:CA:E1:91:C6:36:74:8D:7A:6C:34:F4:1A:06:FA:47
            X509v3 Authority Key Identifier:
                keyid:E9:73:19:DA:D3:5C:C9:D5:AE:B6:FD:7B:B5:D8:C9:B8:64:B1:7D:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XMZ2tNcydWutv17tdjJuGSxfak.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6df1aa-0015-4518-89e8-0808df98211c/1/6XMZ2tNcydWutv17tdjJuGSxfak.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6df1aa-0015-4518-89e8-0808df98211c/1/6XMZ2tNcydWutv17tdjJuGSxfak.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:42:cc:ab:60:b2:c7:0b:ef:4c:9b:4d:fe:a0:84:13:d9:55:
         1c:ff:88:27:da:04:3a:7c:be:b5:3f:19:92:e5:0f:30:fa:ba:
         dc:c1:58:49:8b:82:a6:91:3c:2d:9c:bd:8b:58:2e:e1:31:d4:
         d6:4b:33:85:e7:97:ee:a1:b4:07:7c:46:49:53:38:45:59:0c:
         6c:26:b9:68:01:40:4f:b5:c2:05:c5:76:c8:c9:6d:d8:f1:55:
         de:07:fe:c9:8d:1d:a5:7e:c6:c5:52:2b:49:82:3c:e9:3c:47:
         50:9b:96:67:42:db:70:4c:d4:ca:6f:7e:93:96:27:58:15:8c:
         5e:3b:c4:4f:4a:da:a0:cf:ad:85:09:17:1b:f8:4e:d7:2d:1d:
         19:b7:e3:db:ae:c6:bb:dd:86:df:d5:b2:03:16:1c:bc:50:b7:
         54:e2:6d:b9:6a:d4:9e:6c:d8:66:13:e0:0e:cd:ae:94:a6:10:
         37:d2:5a:8e:a5:b2:0b:6d:57:4e:14:3d:8b:17:69:a3:99:f9:
         af:d0:9b:17:31:ff:8f:2b:51:64:bb:cc:2a:5d:cb:97:6f:96:
         51:6c:3f:92:bc:6d:8e:93:01:95:e0:68:4d:9b:f3:a8:ae:72:
         cd:bb:66:32:02:2d:01:a2:06:ad:07:37:97:49:a3:ae:45:03:
         e3:b6:db:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----