Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/935f3f-6e39-4568-9995-3cc45a773fe1/1/eAiu1s_M89qvRPxNypDqUTITkIw.mft
File:                     eAiu1s_M89qvRPxNypDqUTITkIw.mft (raw, json)
Hash identifier:          /Z20VhEBZuAlQnPwEN9gCcmdmf7n964sWqaSqAYGPrE=
Subject key identifier:   C8:51:09:0C:FE:9C:0A:0D:0C:F1:92:8E:2C:B5:06:B8:B1:34:E8:38
Authority key identifier: 78:08:AE:D6:CF:CC:F3:DA:AF:44:FC:4D:CA:90:EA:51:32:13:90:8C
Certificate issuer:       /CN=7808aed6cfccf3daaf44fc4dca90ea513213908c
Certificate serial:       018498F1ED36163C989423C1D8800D421159
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eAiu1s_M89qvRPxNypDqUTITkIw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/935f3f-6e39-4568-9995-3cc45a773fe1/1/eAiu1s_M89qvRPxNypDqUTITkIw.mft
Manifest number:          0B89
Signing time:             Mon 21 Nov 2022 06:48:22 +0000
Manifest this update:     Mon 21 Nov 2022 06:48:22 +0000
Manifest next update:     Tue 22 Nov 2022 06:48:22 +0000
Files and hashes:         1: OLTLmuUb7HhgvsErfrF6c0t_Qtk.roa (hash: ycGggyfQB749AoW5jdnuHCP3Q0GbEXyiZ7BD0ds/r6U=)
                          2: XsIZq2L9wKv2hJ5f6OwVzME-83k.roa (hash: n7NGukzZ/5C4HoinXe9QMdLRlGhuMptHBte5o7Pp6qA=)
                          3: cG4wfqL_MraWGi4FNSTZM8xT-0c.roa (hash: b8/23Mn+BSwBC0LvHzmVLyf78N6v4NOaG9FmFKgzjrA=)
                          4: eAiu1s_M89qvRPxNypDqUTITkIw.crl (hash: Q91L8f8xpjK0EYmSDpzBsEffDz+DGdKlQcVbLa/FdI4=)
                          5: oahRDPAsx5Wh8169qD7yh4ruPRs.roa (hash: SzSd4Zve4KGuyRXNsukwmXUc+Z1Up2rvdCjdsC3NyAI=)
                          6: vuiqKsdW93sr2kXSIInQVb1w124.roa (hash: NMefXqhaoiuDEJ3IOWGhPw81XFpFegDY6X6xEBaLxPo=)
                          7: wZS9yp24X0xKIPdBKFfJTQmQqUg.roa (hash: o6CbWxrYH1lU70SBaCoFOAeUVK24y9xt0jmaT0Q9dkQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:98:f1:ed:36:16:3c:98:94:23:c1:d8:80:0d:42:11:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7808aed6cfccf3daaf44fc4dca90ea513213908c
        Validity
            Not Before: Nov 21 06:48:22 2022 GMT
            Not After : Nov 22 06:48:22 2022 GMT
        Subject: CN=c851090cfe9c0a0d0cf1928e2cb506b8b134e838
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:56:00:b3:c3:de:78:aa:14:ed:d5:59:81:50:
                    3e:bd:eb:10:0d:2d:39:91:72:3a:8c:f4:31:2a:bf:
                    ae:63:35:d1:45:d2:b5:6d:5f:b0:54:4c:f9:96:22:
                    72:5c:31:19:b1:22:66:fe:b1:a8:89:9b:ec:16:2d:
                    d3:b6:39:69:36:f6:d6:e1:b0:9c:59:73:b1:bf:78:
                    47:83:c8:42:f1:9c:f3:a1:36:90:7e:1c:73:6a:3a:
                    dc:0a:48:83:37:ad:68:e5:f7:3b:78:c3:6b:d5:0c:
                    40:7c:b4:cf:13:20:c9:31:d8:c7:3e:32:39:3b:a1:
                    07:22:f6:28:d5:68:9f:8c:d6:0f:b7:ca:1c:f9:39:
                    bd:5c:bc:ae:56:df:93:e7:4e:13:61:83:7c:80:fe:
                    fd:7f:ff:c7:1e:46:2b:dd:2c:97:a2:21:92:45:2d:
                    9e:86:74:77:a5:08:5c:08:a7:73:45:71:1d:47:db:
                    bb:f7:05:5b:90:2c:0a:1e:cd:5f:99:2d:e5:35:5d:
                    9e:40:f1:64:57:68:0a:c5:22:08:74:66:94:44:da:
                    e8:3b:3c:6d:e9:de:eb:73:ee:de:e1:39:b0:c1:ec:
                    d0:49:2b:46:25:67:dd:4f:26:15:4e:ee:25:18:d7:
                    92:b8:e5:c5:9c:35:b0:f9:c1:69:b2:17:27:8e:aa:
                    0a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:51:09:0C:FE:9C:0A:0D:0C:F1:92:8E:2C:B5:06:B8:B1:34:E8:38
            X509v3 Authority Key Identifier:
                keyid:78:08:AE:D6:CF:CC:F3:DA:AF:44:FC:4D:CA:90:EA:51:32:13:90:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eAiu1s_M89qvRPxNypDqUTITkIw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/935f3f-6e39-4568-9995-3cc45a773fe1/1/eAiu1s_M89qvRPxNypDqUTITkIw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/935f3f-6e39-4568-9995-3cc45a773fe1/1/eAiu1s_M89qvRPxNypDqUTITkIw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:c2:f2:ec:ad:f2:bd:6e:8b:d5:0b:c3:f2:fd:bc:65:ff:2f:
         2d:7a:d1:13:57:af:85:7a:9f:66:7c:bb:01:b0:b7:96:aa:d0:
         be:7c:b4:2f:36:52:83:c2:d6:c6:07:42:fb:7e:93:c6:f9:d7:
         2a:2f:7c:c5:f5:be:65:e0:28:e4:15:26:21:3f:4f:ff:2b:dd:
         b8:a4:d3:37:16:35:2e:d3:1e:38:24:6b:58:5e:e8:4f:20:39:
         38:8c:6d:66:39:71:70:5b:1e:2c:85:00:ef:54:5c:86:80:72:
         74:26:b1:35:31:3e:0b:66:9e:24:4b:06:9f:2f:33:6c:a3:07:
         1c:4f:77:4c:6c:cb:d1:d4:67:00:04:9a:3f:3d:a3:3f:9d:17:
         ff:b3:11:83:82:3c:d4:bf:46:0f:34:96:ad:01:53:7d:d3:d9:
         9b:13:9f:1b:b5:3b:33:c4:d4:22:24:47:b1:67:63:f6:ae:53:
         4e:ab:95:e7:c1:28:18:e6:75:4d:70:ec:da:fe:d6:68:26:ee:
         8a:0f:49:ce:e4:f5:f7:f8:71:a7:7b:e8:5c:80:b5:51:bb:50:
         a4:49:19:82:8e:ec:8c:35:3a:60:53:9f:a1:be:9f:b8:e2:ad:
         0c:d4:8e:e4:bf:20:b2:a0:31:9d:dd:b7:2b:c2:11:67:1c:51:
         a1:f0:1c:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----