Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/10f316-0b65-4323-ad93-e51800f909e6/1/7VNWwcgYd6AfVxI7P1jzq2hhR6k.mft
File:                     7VNWwcgYd6AfVxI7P1jzq2hhR6k.mft (raw, json)
Hash identifier:          V+fJggPqHveGRbp6Jw9u6Vh4TBZMgGo13hu744DoKLs=
Subject key identifier:   BD:3C:BB:6D:68:FE:49:0D:D0:B1:7D:76:87:3E:98:54:2C:CA:5C:EA
Authority key identifier: ED:53:56:C1:C8:18:77:A0:1F:57:12:3B:3F:58:F3:AB:68:61:47:A9
Certificate issuer:       /CN=ed5356c1c81877a01f57123b3f58f3ab686147a9
Certificate serial:       018B710247777C952B0AA1064835F886725A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7VNWwcgYd6AfVxI7P1jzq2hhR6k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/10f316-0b65-4323-ad93-e51800f909e6/1/7VNWwcgYd6AfVxI7P1jzq2hhR6k.mft
Manifest number:          0854
Signing time:             Fri 27 Oct 2023 12:00:56 +0000
Manifest this update:     Fri 27 Oct 2023 12:00:56 +0000
Manifest next update:     Sat 28 Oct 2023 12:00:56 +0000
Files and hashes:         1: 7VNWwcgYd6AfVxI7P1jzq2hhR6k.crl (hash: 7h3QB+scUJYlTAdGxLWrX9phG6j3M9ec1rzsuahaoww=)
                          2: TQEL8IwnXosJ9tazqGpCwWROOS0.roa (hash: hxeCOROdTfJvx2OFbPtwuh0C0all8fInsfmaLo1rRnE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:71:02:47:77:7c:95:2b:0a:a1:06:48:35:f8:86:72:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed5356c1c81877a01f57123b3f58f3ab686147a9
        Validity
            Not Before: Oct 27 12:00:56 2023 GMT
            Not After : Oct 28 12:00:56 2023 GMT
        Subject: CN=bd3cbb6d68fe490dd0b17d76873e98542cca5cea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:aa:06:60:fe:70:e5:2b:e0:3c:e0:1c:13:4c:
                    08:56:f4:7f:60:96:30:78:94:15:21:63:80:3e:5e:
                    fc:86:b1:e0:4a:bb:24:c7:9e:3b:7b:b3:54:3c:dc:
                    7c:7e:97:a1:59:a7:d3:85:86:a9:5f:16:e8:2d:b7:
                    68:be:50:f9:fa:a2:0f:eb:96:e3:d4:ed:70:49:a9:
                    77:46:45:7a:47:81:a6:0b:a8:3e:d2:a3:8e:9d:7d:
                    46:6d:6f:65:c1:94:d0:06:9b:80:c9:27:b6:ee:c2:
                    27:ea:16:6c:51:2f:47:58:76:ea:d6:ab:15:8e:ac:
                    d0:82:4c:93:0f:9a:de:eb:0a:9f:1f:11:ea:66:c7:
                    63:6d:ff:58:fb:0f:86:fc:f8:db:8b:85:d0:2d:b2:
                    40:4e:7c:7d:6e:1c:7c:80:bb:aa:47:18:f5:31:42:
                    9c:3e:c6:a8:80:16:4b:76:3a:77:d3:b2:63:9f:61:
                    89:8b:3e:06:e2:7a:94:09:cc:f7:55:d7:7d:ee:19:
                    9b:52:40:6b:ae:9a:14:b2:35:db:5e:ab:be:7e:5a:
                    a1:35:13:d8:5a:63:fa:5c:5e:67:bf:28:dd:f1:02:
                    49:06:c0:18:f3:5f:b4:f4:14:92:f1:25:5d:fa:e8:
                    64:46:50:0a:0e:71:ad:f2:46:ba:ef:58:a0:9b:ed:
                    99:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:3C:BB:6D:68:FE:49:0D:D0:B1:7D:76:87:3E:98:54:2C:CA:5C:EA
            X509v3 Authority Key Identifier:
                keyid:ED:53:56:C1:C8:18:77:A0:1F:57:12:3B:3F:58:F3:AB:68:61:47:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7VNWwcgYd6AfVxI7P1jzq2hhR6k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/10f316-0b65-4323-ad93-e51800f909e6/1/7VNWwcgYd6AfVxI7P1jzq2hhR6k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/10f316-0b65-4323-ad93-e51800f909e6/1/7VNWwcgYd6AfVxI7P1jzq2hhR6k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:79:f1:cb:7e:cd:5c:a3:ed:d7:cd:eb:00:b0:61:26:4f:9f:
         81:e0:49:ec:eb:7a:a7:73:76:64:32:f3:cd:d1:75:72:d4:b6:
         3d:0d:4f:ed:5b:81:69:6e:73:e6:cf:d4:dd:c0:ae:b7:48:87:
         07:04:d8:f1:74:85:d1:90:a6:32:45:12:d4:45:ab:d6:eb:77:
         fb:71:79:c6:f3:7a:93:19:b4:b3:bd:26:06:93:2b:26:93:41:
         45:04:f3:d9:2f:7d:23:04:9d:de:aa:4b:81:84:cb:3e:94:30:
         2e:a5:51:9f:8f:a5:55:3e:31:bf:65:2e:9a:7c:51:84:80:da:
         41:0d:ca:a7:88:bd:c9:00:e7:af:cb:01:d1:c4:ac:88:d1:e5:
         b5:04:45:54:d3:63:aa:50:d5:8e:eb:35:26:98:66:bd:8f:18:
         92:ae:ab:8b:ef:cf:11:85:25:57:4b:4e:8a:13:9b:a0:06:b6:
         8c:39:a0:68:2c:b6:71:a9:de:9d:10:a3:e1:d8:86:37:4e:09:
         b6:c9:00:72:ee:c7:10:34:4a:65:c7:64:d4:71:48:4b:23:ca:
         13:17:43:34:79:ff:0c:6d:2a:19:e3:17:2b:0c:0b:c9:d4:dd:
         91:b7:ba:da:6d:38:c5:55:27:5c:11:11:65:fb:f6:bf:c9:1e:
         ae:b7:3b:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----