Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/7f1058-2b59-4b7b-9954-2e2059dbe61a/1/uFWiJvTrEqVRbeyhGWtxKHygGFw.mft
File:                     uFWiJvTrEqVRbeyhGWtxKHygGFw.mft (raw, json)
Hash identifier:          1YnnZSZJ+4EvfM2D7HA1hfX+2oL74YZ2LftHZtjnc2c=
Subject key identifier:   EB:67:C4:1F:FC:17:36:48:59:04:6F:53:8E:84:F6:FE:72:87:FB:78
Authority key identifier: B8:55:A2:26:F4:EB:12:A5:51:6D:EC:A1:19:6B:71:28:7C:A0:18:5C
Certificate issuer:       /CN=b855a226f4eb12a5516deca1196b71287ca0185c
Certificate serial:       01870DE311B37D438FC0F5B5A3E6380663DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uFWiJvTrEqVRbeyhGWtxKHygGFw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/7f1058-2b59-4b7b-9954-2e2059dbe61a/1/uFWiJvTrEqVRbeyhGWtxKHygGFw.mft
Manifest number:          05B0
Signing time:             Thu 23 Mar 2023 09:53:17 +0000
Manifest this update:     Thu 23 Mar 2023 09:53:17 +0000
Manifest next update:     Fri 24 Mar 2023 09:53:17 +0000
Files and hashes:         1: HhkVkRmins85vLtIuNe_a-R91Wg.roa (hash: vU/rsPiZ9GMBqlHT8PR1GGRiXsyJRgnM/47Pa2j3iUQ=)
                          2: eQzzjMr88Z763xh-fzLNp9B5oBw.roa (hash: 8q2atFA1QnY/B+woG4ubmZYdH0E+HPXp1JXETeDuHZE=)
                          3: uFWiJvTrEqVRbeyhGWtxKHygGFw.crl (hash: 4cfLlNOB5BRSdHohcPrK993iwQZQc5//jBDMt2HLfV0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:0d:e3:11:b3:7d:43:8f:c0:f5:b5:a3:e6:38:06:63:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b855a226f4eb12a5516deca1196b71287ca0185c
        Validity
            Not Before: Mar 23 09:53:17 2023 GMT
            Not After : Mar 24 09:53:17 2023 GMT
        Subject: CN=eb67c41ffc17364859046f538e84f6fe7287fb78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:74:04:07:3b:82:65:d9:95:ec:05:70:1c:fa:
                    08:13:27:3d:d8:10:b9:a7:88:0d:06:24:d3:0f:2f:
                    e4:9b:05:a2:ba:72:a3:8a:4a:de:9d:e4:9d:a1:d4:
                    1a:c7:9c:7e:ae:cd:19:fd:06:2a:52:b2:4e:88:78:
                    6c:7d:bf:5f:d9:86:04:f3:75:6c:a4:5b:83:38:3d:
                    71:c4:e4:0f:5b:0b:85:9b:bb:13:a9:71:07:ba:2d:
                    69:b8:83:df:cc:39:fc:70:14:7d:db:49:51:40:0d:
                    e7:3b:06:91:0c:2f:b9:41:06:97:c4:9e:63:2a:ee:
                    87:43:ba:8b:26:6b:ce:56:34:14:16:29:7c:32:38:
                    08:f8:54:4c:a5:d4:e5:e7:36:1f:7e:e9:4b:22:fe:
                    d7:27:e7:e2:01:e7:c0:f6:1e:cc:6c:3e:0e:5a:07:
                    1d:15:ae:8a:ec:47:66:ad:2b:c6:7a:ac:b2:18:2c:
                    3c:dd:ff:d1:03:bb:0c:36:a3:2a:48:9e:2a:fd:b3:
                    28:75:54:f7:9f:a9:b7:75:99:44:71:68:84:d1:28:
                    71:8b:22:e0:33:fb:fc:44:87:23:a8:47:1e:45:4a:
                    de:78:9f:cc:c5:0c:7c:74:3c:fa:16:ea:af:1e:a7:
                    f6:b8:92:3f:25:09:eb:ed:ba:17:70:da:11:30:b5:
                    47:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:67:C4:1F:FC:17:36:48:59:04:6F:53:8E:84:F6:FE:72:87:FB:78
            X509v3 Authority Key Identifier:
                keyid:B8:55:A2:26:F4:EB:12:A5:51:6D:EC:A1:19:6B:71:28:7C:A0:18:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFWiJvTrEqVRbeyhGWtxKHygGFw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7f1058-2b59-4b7b-9954-2e2059dbe61a/1/uFWiJvTrEqVRbeyhGWtxKHygGFw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7f1058-2b59-4b7b-9954-2e2059dbe61a/1/uFWiJvTrEqVRbeyhGWtxKHygGFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:57:96:8a:2e:b5:48:85:39:e0:ce:10:3d:f6:d3:8b:5a:19:
         f5:cd:d9:52:fb:20:b2:0f:1f:e5:3c:88:bb:5f:27:7b:25:c3:
         26:72:7c:75:fb:08:90:2f:3e:9c:c9:83:9f:37:62:d9:6b:9c:
         99:8e:27:74:3d:dc:13:09:e4:f6:61:16:1b:90:3b:b8:9c:d9:
         92:fc:1f:36:c8:3d:18:90:9e:fd:0e:5e:3e:87:c9:75:b3:ad:
         27:9f:27:5f:7b:df:f7:0f:6d:ba:fe:55:4a:8c:2b:3c:cd:04:
         8f:c7:ce:48:09:f1:1a:3e:15:a7:4f:20:c3:68:bb:87:67:29:
         26:cf:e8:86:4c:9e:e3:5f:d2:a4:0f:98:4d:cf:e6:29:57:8d:
         bd:45:4e:38:59:f9:e5:67:af:24:d6:5c:19:59:c0:72:98:1f:
         e3:8a:fa:40:fd:ad:ce:b9:36:dc:53:f0:88:ff:76:d9:0d:0e:
         ee:61:4c:86:16:46:c6:45:be:bc:4d:73:26:3b:63:84:a4:17:
         d8:e7:d0:ba:ca:3f:95:ce:cc:3d:dc:d2:32:2d:cb:c6:bd:db:
         21:db:3b:dc:f5:5d:ed:c0:d4:7d:62:87:91:3e:28:8a:c8:db:
         4a:95:05:46:c7:fd:b1:99:cf:c9:64:71:b8:12:95:43:72:16:
         8b:c8:4e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----