Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2dba51-ead5-4282-abb0-d062b199aaef/1/7oeoFd918q19IuC-v3bzjEmz_8U.mft
File:                     7oeoFd918q19IuC-v3bzjEmz_8U.mft (raw, json)
Hash identifier:          fCqqPPyQR/e0TgQSMMIRpH7lwjycOO21Xjbv733aAZI=
Subject key identifier:   C8:B8:08:41:50:93:A5:B4:4B:98:E0:4C:9E:85:FE:4C:CB:A4:FA:29
Authority key identifier: EE:87:A8:15:DF:75:F2:AD:7D:22:E0:BE:BF:76:F3:8C:49:B3:FF:C5
Certificate issuer:       /CN=ee87a815df75f2ad7d22e0bebf76f38c49b3ffc5
Certificate serial:       018513D48E5E30BB40FFAC5198329E95F416
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7oeoFd918q19IuC-v3bzjEmz_8U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/2dba51-ead5-4282-abb0-d062b199aaef/1/7oeoFd918q19IuC-v3bzjEmz_8U.mft
Manifest number:          087A
Signing time:             Thu 15 Dec 2022 03:29:35 +0000
Manifest this update:     Thu 15 Dec 2022 03:29:35 +0000
Manifest next update:     Fri 16 Dec 2022 03:29:35 +0000
Files and hashes:         1: 4bTqHt81OI-pYGL0Etst54YNvqQ.roa (hash: tnN8/PEdH8enJQz/Qoivi31En+kqs8qOMQ/yKrwhicw=)
                          2: 7oeoFd918q19IuC-v3bzjEmz_8U.crl (hash: wQwgqDkqGiO5rSO2171gMXPHicRXaUtfJup/bo0rc/k=)
                          3: RkY52MruIYGMT7VjzgbKvQL2NO4.roa (hash: +EC5SER05W7bq98l2ZlGkEu4lS7UQ8pIu2Qob9cXFFQ=)
                          4: WhzhPBS2Qpe7GfEN9HmOaXSwIsk.roa (hash: bo+D3pbv/LzmkxKzp+tlH3yGWSCUQE052frGDrohPqU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:13:d4:8e:5e:30:bb:40:ff:ac:51:98:32:9e:95:f4:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee87a815df75f2ad7d22e0bebf76f38c49b3ffc5
        Validity
            Not Before: Dec 15 03:29:35 2022 GMT
            Not After : Dec 16 03:29:35 2022 GMT
        Subject: CN=c8b808415093a5b44b98e04c9e85fe4ccba4fa29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:2e:3c:d5:77:ca:03:17:f0:f3:b0:51:43:5d:
                    2c:8c:3d:bf:29:e7:03:03:62:d9:bc:a7:c9:2f:16:
                    4b:3f:16:4c:c6:7b:37:8d:3b:bd:09:b4:65:92:45:
                    44:69:9b:09:08:29:0c:41:4a:26:cd:13:44:4d:0d:
                    62:96:03:30:52:51:e7:e9:7b:c8:90:db:6c:42:54:
                    a4:72:e9:5d:f2:6c:c0:26:ef:3e:6c:76:2a:7f:53:
                    56:5d:c1:d0:9d:e6:76:81:26:5c:00:db:ae:09:b0:
                    23:91:d1:67:1c:9f:5d:39:62:c9:d0:46:66:55:46:
                    3f:7d:9b:69:9d:ef:44:b5:64:cd:20:28:c7:19:98:
                    f6:7e:06:41:27:e2:14:58:44:c2:64:fd:74:99:66:
                    ec:3f:19:54:2e:d8:e1:a7:16:f6:92:84:50:4b:da:
                    a7:d3:11:bd:61:46:9d:77:a6:1d:2d:80:9d:7f:6f:
                    a1:29:4b:84:a3:46:d9:93:1f:ce:5f:6f:ba:9f:3c:
                    e6:f7:97:05:18:d7:89:4c:8b:3e:38:44:d1:53:e9:
                    11:54:cf:6a:9f:5c:49:13:6a:74:c8:e5:b8:a1:6f:
                    61:5b:43:57:a4:89:be:be:d5:d6:b6:70:49:1f:18:
                    0b:df:3e:dd:ae:08:b8:4c:f8:10:bc:49:0d:10:07:
                    d6:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:B8:08:41:50:93:A5:B4:4B:98:E0:4C:9E:85:FE:4C:CB:A4:FA:29
            X509v3 Authority Key Identifier:
                keyid:EE:87:A8:15:DF:75:F2:AD:7D:22:E0:BE:BF:76:F3:8C:49:B3:FF:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7oeoFd918q19IuC-v3bzjEmz_8U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2dba51-ead5-4282-abb0-d062b199aaef/1/7oeoFd918q19IuC-v3bzjEmz_8U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2dba51-ead5-4282-abb0-d062b199aaef/1/7oeoFd918q19IuC-v3bzjEmz_8U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:4a:1f:a6:bf:2d:de:f3:66:e3:31:f0:4e:e4:e8:cd:9c:83:
         e4:05:9d:4a:8e:6e:ac:11:3e:d5:73:71:f8:f1:79:66:58:5a:
         4d:4a:13:eb:1d:3a:2c:6a:b3:62:1c:f8:ba:f0:aa:99:b3:d8:
         85:5b:21:71:62:88:0f:00:dd:0a:e7:38:09:ea:a7:cf:b6:c2:
         06:b4:9f:6c:f1:24:24:f7:af:80:54:15:05:f9:c7:06:90:b2:
         57:38:0c:fa:c3:a8:e5:72:49:0e:66:59:05:b2:4d:97:00:ea:
         1e:59:c8:12:d4:9f:22:98:38:1a:5c:96:c0:d5:82:e4:39:b3:
         03:8d:41:e7:e4:4b:ca:fe:3e:0f:17:93:5d:9f:70:ae:f9:9f:
         77:86:42:bb:4b:c0:c0:c4:a1:ee:a4:8b:9e:b4:3a:4b:4e:c6:
         4b:5a:68:8b:66:59:ee:c2:c3:a2:26:9d:51:74:fe:a8:6f:e0:
         70:55:50:2b:77:9e:c7:c2:87:52:39:34:cd:5f:08:a6:56:cb:
         5b:03:05:ab:8c:7c:d8:e8:6f:51:18:03:10:39:e2:6b:b2:56:
         cb:82:4d:a1:c2:cf:55:04:7c:e5:d9:bf:a9:11:94:56:41:df:
         33:b7:85:65:65:78:34:46:8a:cc:64:04:b6:12:95:3c:2f:11:
         4d:99:a5:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----