Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/f1a2ff-b7af-422e-989c-64ecf3d0121a/1/1-lRZdqdvDYdu2Q_YdIN_VdA69TQ.mft
File:                     1-lRZdqdvDYdu2Q_YdIN_VdA69TQ.mft (raw, json)
Hash identifier:          ayepHYVupC4qSulPadrrT9vY5em7aDy02KJ6BtQOsjM=
Subject key identifier:   54:68:0F:F4:58:53:52:4A:92:BC:71:0A:F4:FD:4E:62:26:BF:4D:D7
Authority key identifier: FA:54:59:76:A7:6F:0D:87:6E:D9:0F:D8:74:83:7F:55:D0:3A:F5:34
Certificate issuer:       /CN=fa545976a76f0d876ed90fd874837f55d03af534
Certificate serial:       0A5D3EAC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-lRZdqdvDYdu2Q_YdIN_VdA69TQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/f1a2ff-b7af-422e-989c-64ecf3d0121a/1/1-lRZdqdvDYdu2Q_YdIN_VdA69TQ.mft
Manifest number:          0920
Signing time:             Fri 29 Apr 2022 06:51:03 +0000
Manifest this update:     Fri 29 Apr 2022 06:51:03 +0000
Manifest next update:     Sat 30 Apr 2022 06:51:03 +0000
Files and hashes:         1: 1-lRZdqdvDYdu2Q_YdIN_VdA69TQ.crl (hash: B8LV3netDiuzM8AjhNur0kwiMnPcv83tUS0kHSiKbZI=)
                          2: LFpRKGv8eJnI3BQ-GXJefNTRGaM.roa (hash: SNT9ymgUEprkVc+xelTgvDJIU9J2OjpFVgwr6ceOqu0=)
                          3: drdz1XLrgV7LdoQwFFOUqyIn6bU.roa (hash: QqmkewT/aFnnJJJXj+oUM1H6MUsP9iDLpR1R5ZB+kVU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 173883052 (0xa5d3eac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa545976a76f0d876ed90fd874837f55d03af534
        Validity
            Not Before: Apr 29 06:51:03 2022 GMT
            Not After : Apr 30 06:51:03 2022 GMT
        Subject: CN=54680ff45853524a92bc710af4fd4e6226bf4dd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0e:f4:78:c6:b1:71:04:e3:cf:3f:46:bb:8a:
                    3e:56:2c:85:02:1c:04:dc:7b:a0:2d:ea:ec:1f:81:
                    93:9c:d8:42:e5:7a:7e:59:5e:28:30:b8:d2:c5:e4:
                    30:16:95:c8:55:5b:28:7f:17:2c:01:13:75:00:c2:
                    46:68:c1:e4:43:6a:c6:8a:9d:80:e7:ed:99:bf:d5:
                    e0:65:b6:51:21:2c:7d:e9:68:96:c2:82:12:82:7d:
                    06:ba:86:d7:88:f0:39:4c:ea:6c:d0:61:a3:91:e1:
                    66:84:cd:73:d2:4b:dd:f1:69:15:64:e4:57:3d:59:
                    32:c6:34:84:71:a2:c5:19:d9:68:a5:7b:70:26:8c:
                    17:e1:01:77:08:bb:01:14:81:e3:0c:6b:1c:c6:21:
                    e2:c8:c9:91:b7:91:3e:b8:61:17:39:b9:91:fb:9d:
                    f8:74:fa:0d:be:a4:f8:0d:95:76:ce:48:c8:3f:c8:
                    b8:83:92:03:e0:fa:c7:69:49:c7:a6:6e:09:fe:b6:
                    78:7f:db:54:79:97:2c:0b:dc:db:92:e0:f9:65:17:
                    82:92:03:da:83:be:dc:ee:4f:da:80:59:2f:cd:a7:
                    88:c1:c3:2f:df:3a:0f:d1:39:59:69:f1:3b:a5:5a:
                    b0:80:06:c5:4c:38:a4:f4:ff:6d:09:2b:19:13:ce:
                    05:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:68:0F:F4:58:53:52:4A:92:BC:71:0A:F4:FD:4E:62:26:BF:4D:D7
            X509v3 Authority Key Identifier:
                keyid:FA:54:59:76:A7:6F:0D:87:6E:D9:0F:D8:74:83:7F:55:D0:3A:F5:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-lRZdqdvDYdu2Q_YdIN_VdA69TQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f1a2ff-b7af-422e-989c-64ecf3d0121a/1/1-lRZdqdvDYdu2Q_YdIN_VdA69TQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f1a2ff-b7af-422e-989c-64ecf3d0121a/1/1-lRZdqdvDYdu2Q_YdIN_VdA69TQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:7f:bd:cd:62:30:30:25:21:80:27:6f:ce:e5:e4:94:dd:f2:
         ce:3a:f1:6c:5b:6d:6d:8b:5a:9f:1a:7b:93:18:0f:37:83:10:
         6c:46:26:81:89:f9:2a:2a:96:c6:55:2d:f5:a3:7c:2a:8e:f6:
         60:29:bb:6a:3f:d3:97:c0:c2:25:fb:2f:40:28:cc:b8:2f:de:
         1f:b3:1a:e9:a4:0b:8c:0d:06:f8:ac:c1:a3:2e:b5:84:7a:aa:
         fb:e9:ad:a2:5f:93:fd:77:f7:ad:21:2a:c0:ed:a9:cb:9f:90:
         80:6d:0e:44:ee:9a:a7:1c:53:8e:36:d0:dc:c4:8d:55:df:cc:
         b3:5b:c7:a2:77:fa:a4:db:01:a7:69:b2:9c:55:eb:1e:88:83:
         50:3a:de:1b:f5:b1:b2:68:ea:e2:35:e0:89:cc:8e:2c:ab:43:
         fe:fc:84:a8:27:bd:73:b9:77:f9:5d:92:30:f7:6d:8d:24:78:
         76:04:6e:30:ad:ae:ec:7a:74:e7:38:dc:7d:d3:aa:20:d4:c4:
         0a:87:f6:47:b7:29:18:d6:be:4c:cc:b6:c9:5d:85:4a:e5:a2:
         be:d9:71:58:14:4d:9f:06:30:6b:0c:51:56:9f:38:72:ca:5e:
         50:e4:ff:7d:12:1b:55:90:3c:a6:87:34:e8:2c:c2:57:90:c5:
         86:62:74:c3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----