Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/4054a2-0c9d-49f5-b0c9-36f1ca1c0fa6/1/Gygl3xo0VR6c7P70qVnOZaHEgus.mft
File:                     Gygl3xo0VR6c7P70qVnOZaHEgus.mft (raw, json)
Hash identifier:          tOzzE2WT3naaa5vDNRLVfLUjsAzftMx9x1KIpV4Gm/w=
Subject key identifier:   F9:A7:18:6D:DE:41:EA:EB:4B:36:3D:A1:E1:C6:50:8C:08:72:18:2D
Authority key identifier: 1B:28:25:DF:1A:34:55:1E:9C:EC:FE:F4:A9:59:CE:65:A1:C4:82:EB
Certificate issuer:       /CN=1b2825df1a34551e9cecfef4a959ce65a1c482eb
Certificate serial:       0185293782F76A282FB402C1237588422999
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gygl3xo0VR6c7P70qVnOZaHEgus.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/4054a2-0c9d-49f5-b0c9-36f1ca1c0fa6/1/Gygl3xo0VR6c7P70qVnOZaHEgus.mft
Manifest number:          0482
Signing time:             Mon 19 Dec 2022 07:09:41 +0000
Manifest this update:     Mon 19 Dec 2022 07:09:41 +0000
Manifest next update:     Tue 20 Dec 2022 07:09:41 +0000
Files and hashes:         1: BBLmLhx23Nv4yYAj3x4a30-sp_0.roa (hash: 9vSFmlBvqhJIk91NXMbpcaVHt/Q0pT/Jwjym4J3SKqw=)
                          2: Gygl3xo0VR6c7P70qVnOZaHEgus.crl (hash: A9RA1VzvoojBi2Qfa2TxrL4j8CGUMcuVxOt1JF2WWgE=)
                          3: XT0npEpCfgk1Y4vAv27NlGuoRnU.roa (hash: fAFwv0Uf3DzYe2rZSDSkU4OZl1zxUDq54EVioeskFKc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:29:37:82:f7:6a:28:2f:b4:02:c1:23:75:88:42:29:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b2825df1a34551e9cecfef4a959ce65a1c482eb
        Validity
            Not Before: Dec 19 07:09:41 2022 GMT
            Not After : Dec 20 07:09:41 2022 GMT
        Subject: CN=f9a7186dde41eaeb4b363da1e1c6508c0872182d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:85:61:d9:6e:be:6f:e5:5a:1f:9f:be:2e:65:
                    61:a9:36:4f:0c:d7:16:44:78:15:91:b3:c9:8b:78:
                    9d:24:4d:9f:a6:71:8d:3f:8b:91:6c:12:5b:c9:53:
                    c4:3e:b8:47:db:1d:aa:ff:f7:2a:45:4b:08:05:7c:
                    98:fb:35:4b:e7:71:d2:12:be:2c:e3:ad:93:a1:70:
                    c2:65:b0:61:fd:27:6c:c9:98:67:64:d1:c2:d1:9d:
                    82:f6:68:bf:04:11:ed:30:4b:67:06:fb:96:0a:7c:
                    47:22:15:96:cb:4a:2c:c2:91:fe:bd:5f:b4:ed:50:
                    9a:29:5b:97:f8:a4:e6:f5:47:08:d7:67:3f:e6:c2:
                    b5:a4:f7:36:f6:cf:6d:09:0d:5f:7e:47:30:2a:59:
                    ae:3a:da:50:48:a0:b3:ae:bb:65:3e:bc:05:ce:8c:
                    ac:1a:ec:17:10:d7:e6:0c:f7:2c:21:54:d2:9d:6c:
                    9f:9d:af:af:84:5e:1f:0c:da:24:d5:47:cb:f1:29:
                    1e:22:a8:29:d3:99:4b:99:2d:21:09:5d:94:9c:5a:
                    aa:c9:c8:d7:6a:aa:07:06:10:6c:ed:aa:18:1f:ed:
                    c8:f7:d9:ee:f6:7e:52:1c:ed:96:4d:f3:89:ec:6b:
                    c9:9d:ee:c5:5a:91:97:69:50:14:89:6b:8c:1e:e9:
                    b6:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:A7:18:6D:DE:41:EA:EB:4B:36:3D:A1:E1:C6:50:8C:08:72:18:2D
            X509v3 Authority Key Identifier:
                keyid:1B:28:25:DF:1A:34:55:1E:9C:EC:FE:F4:A9:59:CE:65:A1:C4:82:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gygl3xo0VR6c7P70qVnOZaHEgus.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4054a2-0c9d-49f5-b0c9-36f1ca1c0fa6/1/Gygl3xo0VR6c7P70qVnOZaHEgus.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4054a2-0c9d-49f5-b0c9-36f1ca1c0fa6/1/Gygl3xo0VR6c7P70qVnOZaHEgus.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:99:cd:16:e3:fa:72:92:7e:56:1e:31:ce:05:da:07:bc:48:
         07:28:8e:bf:93:a9:2c:1b:da:bb:3c:ee:0a:63:91:cc:7d:38:
         41:e8:0d:c6:48:9e:4d:b9:54:54:72:40:93:be:57:fd:8c:09:
         47:a4:24:80:aa:61:96:e1:47:12:48:33:0a:64:33:ff:a4:78:
         9b:a2:ae:18:51:4a:34:20:0f:79:15:2e:de:3e:24:b5:c4:d2:
         07:de:b0:71:43:e8:dc:b8:59:65:7b:f8:2a:8d:7e:1c:5b:1b:
         4c:be:d3:02:c8:76:64:d8:62:13:bf:f6:69:ce:6c:0c:10:07:
         b1:9b:0a:a0:55:e6:8e:97:4a:5a:ea:67:98:22:e0:fe:6f:25:
         53:a7:ae:d0:69:b4:d8:bf:0e:1d:63:01:6b:39:dc:b3:af:a5:
         6d:bf:20:e5:7c:a5:ad:68:46:e3:ac:91:9c:a0:cc:0c:3a:13:
         66:ca:0c:4c:04:33:bd:ee:6e:16:e7:cc:21:d3:5a:fb:c8:e6:
         3e:12:9f:62:41:2c:76:de:2e:f5:a4:78:2e:92:ab:4b:29:05:
         8f:12:b3:44:6a:2c:5c:89:c4:a1:bd:c7:d9:bd:40:e4:44:0f:
         f4:30:2a:b6:6d:ad:a5:27:c9:2b:04:7f:8f:73:6f:db:0e:1d:
         30:f1:9b:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----