Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/d52c14-2910-4b46-abdb-38910c069ab5/1/3m7DRbfzbs7CVujEdX5Q3j_t59E.mft
File:                     3m7DRbfzbs7CVujEdX5Q3j_t59E.mft (raw, json)
Hash identifier:          9/mdnDoA1YBA7yiVsWYYthwbFQep6Jsczp4kyYl+DDM=
Subject key identifier:   A4:41:9A:C2:41:69:C8:95:50:60:12:29:0E:3C:01:CE:29:E0:86:6A
Authority key identifier: DE:6E:C3:45:B7:F3:6E:CE:C2:56:E8:C4:75:7E:50:DE:3F:ED:E7:D1
Certificate issuer:       /CN=de6ec345b7f36ecec256e8c4757e50de3fede7d1
Certificate serial:       018736CA1FAF8C0E47509E41E302D158B5B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3m7DRbfzbs7CVujEdX5Q3j_t59E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/d52c14-2910-4b46-abdb-38910c069ab5/1/3m7DRbfzbs7CVujEdX5Q3j_t59E.mft
Manifest number:          0D00
Signing time:             Fri 31 Mar 2023 08:30:28 +0000
Manifest this update:     Fri 31 Mar 2023 08:30:28 +0000
Manifest next update:     Sat 01 Apr 2023 08:30:28 +0000
Files and hashes:         1: 3m7DRbfzbs7CVujEdX5Q3j_t59E.crl (hash: K2QEI92q50gSUh5DqyYOgPoSExV404eTNXx0Hq+mDvs=)
                          2: RIGIrs_ivCKKIYiMm6l5i1UTbxE.roa (hash: oqOgaocbnfKouIutevfgso80kIWt1e92TSSskuS49wE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:36:ca:1f:af:8c:0e:47:50:9e:41:e3:02:d1:58:b5:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de6ec345b7f36ecec256e8c4757e50de3fede7d1
        Validity
            Not Before: Mar 31 08:30:28 2023 GMT
            Not After : Apr  1 08:30:28 2023 GMT
        Subject: CN=a4419ac24169c895506012290e3c01ce29e0866a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:6e:83:4c:3f:00:a4:6f:78:2a:31:35:f1:81:
                    2f:44:5e:c4:cd:d8:e2:5b:f1:54:44:c8:0c:67:f2:
                    cc:2f:59:72:63:39:cb:cb:91:10:db:ae:5e:f6:67:
                    9f:ae:12:39:ca:07:ae:67:c5:eb:58:e3:73:5a:99:
                    8c:9e:85:00:70:cb:85:d6:46:56:b0:cf:25:b2:e6:
                    3f:0b:1a:f4:ff:2c:cf:a1:5c:d9:a6:ad:5c:a2:ae:
                    c3:a2:1c:83:ec:e4:f5:34:be:bf:38:fd:cb:9a:78:
                    1c:11:5d:19:a9:28:96:ce:a4:50:40:1a:0e:75:3d:
                    54:b1:76:a8:ee:b8:26:41:64:6d:4b:e8:d9:a3:f9:
                    a0:a1:e8:f2:3b:3e:a5:51:34:fa:1d:1d:54:ec:8a:
                    ec:2e:d9:d2:c5:3c:12:30:f4:2c:45:b3:d9:42:24:
                    fe:a4:c5:f4:d9:e1:dd:af:90:c2:ba:b9:f6:e5:e2:
                    db:a3:fa:e7:e8:7d:36:51:d4:7f:96:27:28:bf:33:
                    e2:ed:ed:92:06:9f:6c:4c:da:f6:12:b4:c6:b2:c2:
                    a6:ca:bc:ed:4e:ac:8b:f3:83:5f:21:2d:21:6a:97:
                    09:cb:e6:78:8c:df:8b:08:17:d8:b3:92:94:59:4a:
                    b4:20:7f:59:de:24:39:66:9f:da:b4:97:50:7d:76:
                    b0:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:41:9A:C2:41:69:C8:95:50:60:12:29:0E:3C:01:CE:29:E0:86:6A
            X509v3 Authority Key Identifier:
                keyid:DE:6E:C3:45:B7:F3:6E:CE:C2:56:E8:C4:75:7E:50:DE:3F:ED:E7:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3m7DRbfzbs7CVujEdX5Q3j_t59E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/d52c14-2910-4b46-abdb-38910c069ab5/1/3m7DRbfzbs7CVujEdX5Q3j_t59E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/d52c14-2910-4b46-abdb-38910c069ab5/1/3m7DRbfzbs7CVujEdX5Q3j_t59E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:5c:7a:78:a8:e1:97:d1:cf:f9:4c:b9:0f:38:96:7b:2d:b2:
         c0:a0:9d:af:0b:fb:51:b3:a3:a0:0e:08:9d:b4:6f:a8:23:a2:
         33:71:fa:cf:de:8a:10:3d:2a:1d:93:77:02:99:b0:c6:f8:9d:
         fa:57:0d:1a:c9:df:47:5f:72:f9:e3:29:ea:4d:b6:0d:85:f0:
         16:3c:ea:a3:82:99:1f:74:f8:4f:d0:1f:5f:15:32:ba:f6:a0:
         e9:09:16:53:4d:10:d6:92:cc:41:88:58:eb:0e:91:0e:01:1b:
         4a:0c:f3:66:ae:39:e9:0b:7e:7b:46:dc:ca:ff:6a:a7:44:2f:
         9a:97:58:a8:9f:c4:c7:a9:03:ee:d8:10:33:5f:e5:dc:b5:ab:
         e0:31:75:65:3a:ae:66:3e:88:e5:64:3e:67:f8:f9:b2:b3:50:
         36:76:75:e6:69:d0:18:53:4c:08:76:d2:78:ac:4c:de:cc:a1:
         a3:fa:58:ef:81:74:4a:98:2b:da:49:b5:7c:f9:7f:af:d3:1e:
         db:7a:59:31:d0:44:4d:5d:0b:91:c7:76:19:1a:b8:eb:c7:89:
         e8:19:eb:fa:bc:f2:40:a9:e8:c4:73:e1:bb:91:e6:16:4b:7d:
         2a:6f:e2:17:12:fe:3f:df:6d:49:53:54:95:e0:38:cb:14:a2:
         da:76:c8:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----