Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/55057b-a27a-4876-a6c5-c150dffff7d6/1/ph23jH8hKFhm2rSkWlRNzlWfQ9o.mft
File:                     ph23jH8hKFhm2rSkWlRNzlWfQ9o.mft (raw, json)
Hash identifier:          gxAXEvJXY5HiE4BJ16ws/Eb5OIJaaoUwk0M4Vj9mZEg=
Subject key identifier:   D4:31:32:85:ED:BE:FD:D6:D1:1C:14:E1:BA:D7:CF:5D:7E:28:5F:93
Authority key identifier: A6:1D:B7:8C:7F:21:28:58:66:DA:B4:A4:5A:54:4D:CE:55:9F:43:DA
Certificate issuer:       /CN=a61db78c7f21285866dab4a45a544dce559f43da
Certificate serial:       02EC1A4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ph23jH8hKFhm2rSkWlRNzlWfQ9o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/55057b-a27a-4876-a6c5-c150dffff7d6/1/ph23jH8hKFhm2rSkWlRNzlWfQ9o.mft
Manifest number:          03CD
Signing time:             Wed 18 May 2022 08:23:18 +0000
Manifest this update:     Wed 18 May 2022 08:23:18 +0000
Manifest next update:     Thu 19 May 2022 08:23:18 +0000
Files and hashes:         1: Gv4nqIXSNaPWqBDRWUfEa1K-oZ4.roa (hash: tCibCjhD6ShGpzBTuDYP9aCncJLHY271eyzQ4VOzSPA=)
                          2: gy8PxnPhMux-9t4sbvGCWvic5G0.roa (hash: jptPhT4osHr3FgAckCyNoQbuny6lMt6q4P49VFlXaHY=)
                          3: ph23jH8hKFhm2rSkWlRNzlWfQ9o.crl (hash: 9VqjxJUaYg7AnXVfw0pv3G7j4/3bxqx+HFBwgkqi52Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 49027662 (0x2ec1a4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a61db78c7f21285866dab4a45a544dce559f43da
        Validity
            Not Before: May 18 08:23:18 2022 GMT
            Not After : May 19 08:23:18 2022 GMT
        Subject: CN=d4313285edbefdd6d11c14e1bad7cf5d7e285f93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b7:38:70:da:ae:6d:ee:3d:15:8e:b1:2d:18:
                    e1:34:5c:f7:36:df:66:99:b4:44:1e:11:3b:73:e5:
                    69:b5:27:5d:34:98:1d:e5:51:b8:79:72:01:b7:42:
                    3f:2c:53:97:07:c8:b4:9c:97:c6:cb:30:8e:e3:40:
                    ae:28:d7:6f:43:08:cf:49:f9:a4:88:86:ce:a7:4d:
                    c3:d3:6f:67:ac:e8:c9:0e:ec:b4:02:9c:1c:4d:12:
                    89:5d:f1:e5:f7:56:e6:3b:d9:b5:7f:93:26:09:ad:
                    77:e5:35:f5:62:3b:d7:46:25:88:b4:88:8d:d3:80:
                    a7:05:5e:21:d0:d9:be:3c:52:be:80:7b:26:c1:92:
                    76:a6:52:a1:86:01:cf:0f:ad:9f:bf:99:d5:e2:35:
                    37:b4:15:99:c0:f5:77:05:d7:5b:4b:9f:1b:10:8b:
                    0c:9d:ca:a3:79:23:cd:64:92:68:08:99:f8:2d:75:
                    1d:68:2a:e4:4e:df:70:d8:1c:4e:da:4e:02:d1:62:
                    10:6b:09:0f:02:3b:49:8c:fb:4f:fd:87:87:18:34:
                    28:da:38:b0:d8:39:57:30:d3:16:29:1e:ef:a2:c8:
                    2e:5a:0f:3f:29:16:97:56:7d:0a:aa:e7:da:65:3c:
                    cd:95:80:ef:f1:00:89:34:4d:9a:07:ed:3f:0e:f3:
                    fa:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:31:32:85:ED:BE:FD:D6:D1:1C:14:E1:BA:D7:CF:5D:7E:28:5F:93
            X509v3 Authority Key Identifier:
                keyid:A6:1D:B7:8C:7F:21:28:58:66:DA:B4:A4:5A:54:4D:CE:55:9F:43:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ph23jH8hKFhm2rSkWlRNzlWfQ9o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/55057b-a27a-4876-a6c5-c150dffff7d6/1/ph23jH8hKFhm2rSkWlRNzlWfQ9o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/55057b-a27a-4876-a6c5-c150dffff7d6/1/ph23jH8hKFhm2rSkWlRNzlWfQ9o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:ed:c0:d0:63:84:a6:3b:39:cb:5f:34:a5:df:53:79:31:55:
         3b:07:20:e0:5b:07:d0:2d:ea:e5:d1:73:63:7f:05:19:0a:29:
         c7:c1:00:79:82:76:99:ef:ac:14:f6:66:f7:e1:5b:2b:9b:1b:
         3f:db:08:9a:47:ad:5b:da:bc:4d:33:0c:3b:e2:ef:fa:e8:c3:
         bb:7b:5c:65:ec:56:12:8e:4d:1f:cd:b6:5b:8f:ea:03:0a:12:
         49:ef:d5:09:b1:76:c9:61:78:5e:a0:a0:9c:dd:1a:1e:94:9d:
         d2:de:c8:17:3f:9d:a5:97:bd:1f:cf:fe:46:7d:93:ff:ca:da:
         52:40:4e:54:29:07:a5:22:12:08:2d:f3:1d:04:c4:37:61:81:
         56:72:0b:44:aa:b5:12:1d:ae:78:40:30:af:0b:02:6b:f6:b6:
         12:5f:4a:49:e0:62:49:5e:8a:48:4f:e8:07:7f:44:a5:14:c9:
         dd:60:f5:cb:d8:95:9d:9f:c7:d8:12:18:e7:de:98:b8:db:5c:
         e5:89:d7:11:14:da:01:80:e1:84:0e:b9:6f:62:f9:0e:f0:9b:
         56:90:1e:5e:8e:74:84:89:28:c1:f2:46:73:f4:d4:fb:3c:d0:
         26:40:f6:b2:a3:d4:bd:d4:c1:90:71:89:42:41:17:73:ec:b6:
         e5:61:fa:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----