Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/0528e7-262c-4182-be63-75760fa7a0f8/1/8z8Ygmd4WkqtTDD0FLYKG84XLmA.mft
File:                     8z8Ygmd4WkqtTDD0FLYKG84XLmA.mft (raw, json)
Hash identifier:          FBdHqSHONoPIbISR/xdiqicpPS4KSTjAiGm4KvO8OtM=
Subject key identifier:   E6:8F:E0:5E:A2:66:81:9B:7A:48:E7:05:A5:37:96:D0:E0:84:43:78
Authority key identifier: F3:3F:18:82:67:78:5A:4A:AD:4C:30:F4:14:B6:0A:1B:CE:17:2E:60
Certificate issuer:       /CN=f33f188267785a4aad4c30f414b60a1bce172e60
Certificate serial:       03376F04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8z8Ygmd4WkqtTDD0FLYKG84XLmA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/0528e7-262c-4182-be63-75760fa7a0f8/1/8z8Ygmd4WkqtTDD0FLYKG84XLmA.mft
Manifest number:          0442
Signing time:             Fri 22 Apr 2022 10:45:12 +0000
Manifest this update:     Fri 22 Apr 2022 10:45:12 +0000
Manifest next update:     Sat 23 Apr 2022 10:45:12 +0000
Files and hashes:         1: 8z8Ygmd4WkqtTDD0FLYKG84XLmA.crl (hash: x2zRj/SwqXYY+qntfdCLouY2o8FZy6NnM79cCTWAwNg=)
                          2: XfAGMqwFIfLfhq-nEqol8PfmgfM.roa (hash: n+Pl5PsxEjwzAK09eHqpzJ8z0bknSH1zu52mhtuIh6g=)
                          3: eq9x3smNaRoPI4Kt-bI-bH0Nnro.roa (hash: hcYIzOaMhG2M59TqqYC1ZiVhZc7R/05asR0+OfZRUaU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 53964548 (0x3376f04)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f33f188267785a4aad4c30f414b60a1bce172e60
        Validity
            Not Before: Apr 22 10:45:12 2022 GMT
            Not After : Apr 23 10:45:12 2022 GMT
        Subject: CN=e68fe05ea266819b7a48e705a53796d0e0844378
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:77:3d:ba:04:6b:6c:70:09:62:57:0d:79:ef:
                    34:c3:ce:5d:10:eb:ab:4d:89:3f:de:cc:df:26:8d:
                    f4:03:a4:f4:c0:21:e6:86:75:62:d4:1f:0f:3d:0e:
                    12:a3:78:6c:e9:26:65:62:3c:42:c1:d1:88:a4:91:
                    f3:3f:ab:39:ba:f4:bd:4a:5b:17:b8:7f:f7:64:35:
                    f1:32:c1:73:2b:be:94:d2:7b:c0:47:5c:c8:ac:62:
                    5d:07:07:9e:84:5c:da:a7:c7:84:6d:ab:51:aa:9e:
                    ec:f3:7c:44:86:d1:32:a4:ba:56:2b:38:9d:07:3a:
                    95:75:6f:74:d3:9d:72:dd:be:64:1e:f7:e1:7c:b8:
                    0c:e7:65:b7:16:49:0e:b6:ee:91:9e:69:65:7e:2c:
                    f3:7b:e6:88:26:7f:fb:fb:96:47:9e:5e:b9:b9:eb:
                    3f:9a:af:0f:79:08:09:5d:05:17:51:45:18:30:26:
                    9c:de:34:c3:e4:46:6a:95:eb:ce:5d:0b:f7:f7:35:
                    c1:d7:18:b9:f0:92:00:45:0a:ef:9c:7b:a1:cd:81:
                    a6:51:a3:08:b2:74:26:9e:a1:09:7d:8c:b8:77:63:
                    ac:9c:3b:e7:da:aa:1a:d1:75:df:5d:87:1b:92:78:
                    bd:0d:76:91:94:53:e2:d0:06:f5:00:56:77:f6:8d:
                    23:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:8F:E0:5E:A2:66:81:9B:7A:48:E7:05:A5:37:96:D0:E0:84:43:78
            X509v3 Authority Key Identifier:
                keyid:F3:3F:18:82:67:78:5A:4A:AD:4C:30:F4:14:B6:0A:1B:CE:17:2E:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8z8Ygmd4WkqtTDD0FLYKG84XLmA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0528e7-262c-4182-be63-75760fa7a0f8/1/8z8Ygmd4WkqtTDD0FLYKG84XLmA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0528e7-262c-4182-be63-75760fa7a0f8/1/8z8Ygmd4WkqtTDD0FLYKG84XLmA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:c3:4b:00:51:8f:93:ad:64:d7:67:c8:5f:56:b2:1f:69:a8:
         67:0c:48:73:6a:66:96:1a:92:ab:3b:35:c5:f5:14:0b:8f:21:
         93:1e:7f:6b:1f:4d:c9:10:c7:40:23:b4:c6:1d:fd:ff:65:92:
         62:c2:16:e7:2a:af:8e:bf:b4:51:a5:de:54:5a:c1:c2:6d:c9:
         8b:58:46:96:28:42:6c:48:cc:cf:30:5e:67:af:01:40:87:0c:
         a3:50:2d:0f:da:d8:52:71:50:f4:a5:49:32:c8:ca:0e:6e:f4:
         d6:2b:d8:e7:46:2b:10:59:d3:dd:e4:dd:2a:53:ba:14:49:39:
         6a:54:12:90:cc:d1:6a:b1:64:e7:68:15:66:f6:a1:c8:5a:f1:
         f4:d6:86:bc:c0:aa:9e:7e:cf:4f:f4:ec:03:89:ec:c8:2d:40:
         ec:ed:fb:c5:69:34:0a:e8:4e:98:51:cd:d1:72:7f:df:84:77:
         14:e4:d8:10:91:76:df:86:a9:7d:02:da:4b:8b:11:54:ca:6c:
         cc:f4:e3:aa:d9:2d:87:9b:3f:af:97:c1:62:48:c5:1a:61:de:
         a5:20:dd:52:25:a6:8f:af:48:7b:c3:9a:ae:0b:df:3c:c1:b7:
         28:8d:9f:be:7e:3b:f8:37:c3:9d:b0:e0:52:78:63:43:20:fc:
         4a:11:97:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----