Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/796945-6886-43bc-ad8d-5d3fc56043bf/1/h1wObtsVGo-RoIabv6VhiD58Ems.mft
File:                     h1wObtsVGo-RoIabv6VhiD58Ems.mft (raw, json)
Hash identifier:          RnWGOd38oi0nASrJgH9rtlIxS4UacVY18JIauL/6Eu8=
Subject key identifier:   E3:AB:28:F3:39:F1:B8:6C:6D:4A:A7:7D:DA:60:B4:E6:45:2F:CA:4F
Authority key identifier: 87:5C:0E:6E:DB:15:1A:8F:91:A0:86:9B:BF:A5:61:88:3E:7C:12:6B
Certificate issuer:       /CN=875c0e6edb151a8f91a0869bbfa561883e7c126b
Certificate serial:       041B94B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h1wObtsVGo-RoIabv6VhiD58Ems.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/796945-6886-43bc-ad8d-5d3fc56043bf/1/h1wObtsVGo-RoIabv6VhiD58Ems.mft
Manifest number:          055D
Signing time:             Tue 10 May 2022 06:42:51 +0000
Manifest this update:     Tue 10 May 2022 06:42:51 +0000
Manifest next update:     Wed 11 May 2022 06:42:51 +0000
Files and hashes:         1: h1wObtsVGo-RoIabv6VhiD58Ems.crl (hash: skRO8fRF+XXJp/en/OZeDvp3Cyc/SBK7mw58Euzh6AI=)
                          2: i_twomEgFvY5jQzj9IdGHZwtkQA.roa (hash: yLa8SNBG0jjxPAGyvGXRGLfnZ06XekemaAeWdTuM3e0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 68916405 (0x41b94b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=875c0e6edb151a8f91a0869bbfa561883e7c126b
        Validity
            Not Before: May 10 06:42:51 2022 GMT
            Not After : May 11 06:42:51 2022 GMT
        Subject: CN=e3ab28f339f1b86c6d4aa77dda60b4e6452fca4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:4a:a3:4c:12:b7:cb:93:b6:3d:c5:fc:71:07:
                    d9:5d:ab:24:6d:f3:ea:1a:36:20:e2:2d:b2:fa:1d:
                    7c:91:f6:e6:40:95:57:10:ba:22:e5:8f:d4:ef:65:
                    25:22:d8:61:f4:02:95:17:1e:84:93:a6:50:8d:b7:
                    c7:24:f8:20:ab:58:34:fb:3a:20:ee:0b:32:d1:9b:
                    e7:9a:e3:3a:a3:4e:3b:44:44:7f:0a:fd:44:75:03:
                    a4:6b:9f:fd:22:27:25:61:d5:ed:35:59:66:e3:90:
                    d6:8d:7f:35:a8:65:78:fe:14:d0:a8:0f:ce:28:ab:
                    60:9d:6d:5b:e1:3c:a9:a5:65:e6:80:6f:b9:ae:25:
                    ca:c3:cb:ea:88:ac:79:13:b8:6c:d1:b5:77:92:ff:
                    b3:9c:29:52:e4:c0:3c:16:2d:20:60:38:e5:8a:f7:
                    4e:dd:e7:d6:f2:e6:88:df:4f:51:42:c1:b1:5f:f2:
                    a7:1d:ba:00:bd:68:07:0f:16:7c:1c:7f:17:36:de:
                    75:db:03:ec:8c:50:02:da:a5:7b:2b:3b:a9:fe:01:
                    94:43:ad:5b:be:ea:17:ce:ba:2b:bd:eb:10:87:8d:
                    e6:4b:41:75:06:e6:1f:c3:f5:35:dd:ca:85:21:c6:
                    92:2c:6b:d9:9b:7c:26:9b:b1:a6:c9:70:cc:83:ad:
                    e0:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:AB:28:F3:39:F1:B8:6C:6D:4A:A7:7D:DA:60:B4:E6:45:2F:CA:4F
            X509v3 Authority Key Identifier:
                keyid:87:5C:0E:6E:DB:15:1A:8F:91:A0:86:9B:BF:A5:61:88:3E:7C:12:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h1wObtsVGo-RoIabv6VhiD58Ems.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/796945-6886-43bc-ad8d-5d3fc56043bf/1/h1wObtsVGo-RoIabv6VhiD58Ems.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/796945-6886-43bc-ad8d-5d3fc56043bf/1/h1wObtsVGo-RoIabv6VhiD58Ems.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:60:a2:dc:e9:fa:cf:4a:ae:a0:ac:b5:02:16:14:4e:00:19:
         af:34:de:b5:b4:17:02:64:38:2f:49:6c:62:bd:1c:6f:d1:6b:
         f1:cf:86:d6:10:18:35:17:90:8f:83:a0:c9:7a:b5:2a:ab:cf:
         a3:51:87:48:0d:5a:2f:83:75:16:bb:cf:5c:17:33:bb:fb:65:
         0d:4b:b7:12:96:c4:22:98:07:94:d1:c5:fa:21:87:b0:32:77:
         c9:89:bf:f6:9a:86:51:fb:3c:ff:d1:49:5b:40:75:74:5a:44:
         ef:6e:4b:a0:b8:94:b5:45:b8:13:18:1e:fc:bc:f1:1b:61:06:
         da:65:7d:81:4a:bf:41:bc:cb:67:31:33:15:d5:ac:69:80:63:
         83:0f:2d:5f:88:8f:16:45:ea:0b:e2:53:ce:5b:68:af:2a:7f:
         29:8b:4a:2d:99:6f:56:41:8a:44:03:6e:31:49:84:fb:f7:ab:
         bb:07:5a:c5:ed:e4:fa:e1:d8:f2:76:12:f4:81:97:77:6c:eb:
         74:08:6d:b4:e9:a1:cd:63:10:c8:a0:49:36:f1:67:38:d7:de:
         73:1a:bd:48:94:ff:d2:ca:2d:df:79:61:a2:cd:37:74:ee:3c:
         e2:71:4d:79:c3:10:e9:be:a4:1b:91:85:48:9c:97:74:25:e7:
         e5:ae:f5:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----