Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/0d85f0-c9db-4838-a785-2861746c73bf/1/p0Y4MWJ2ycgZNeQ70r2dJeKGXEg.mft
File:                     p0Y4MWJ2ycgZNeQ70r2dJeKGXEg.mft (raw, json)
Hash identifier:          U5d4fsL4d7pbRz9+fDpFoPNhZUBVGLsyR/ObIQozJmo=
Subject key identifier:   4A:CB:0C:C1:99:BE:90:3C:0B:9C:E3:EC:79:8A:E8:14:5D:E6:9D:60
Authority key identifier: A7:46:38:31:62:76:C9:C8:19:35:E4:3B:D2:BD:9D:25:E2:86:5C:48
Certificate issuer:       /CN=a74638316276c9c81935e43bd2bd9d25e2865c48
Certificate serial:       0185292E6CEE8E936264C20ABB62FC5A5C80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p0Y4MWJ2ycgZNeQ70r2dJeKGXEg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/0d85f0-c9db-4838-a785-2861746c73bf/1/p0Y4MWJ2ycgZNeQ70r2dJeKGXEg.mft
Manifest number:          054C
Signing time:             Mon 19 Dec 2022 06:59:46 +0000
Manifest this update:     Mon 19 Dec 2022 06:59:46 +0000
Manifest next update:     Tue 20 Dec 2022 06:59:46 +0000
Files and hashes:         1: VQD_yB0HZwGDSogclqC1M1Vbf6g.roa (hash: jHm5VKg9niNE0Ml6866wTyBtoBlm/YX8sV4rgZJLLHg=)
                          2: p0Y4MWJ2ycgZNeQ70r2dJeKGXEg.crl (hash: CU9bUr9rYt1mSsEh7C9kugg4KxpWkEsu9oWOq0AyV68=)
                          3: vp7fJ-hE2r1idme_tCyA3E5N1BI.roa (hash: yXY1gbksrdT9JYguIk1FBPTxlXZ2Llal3Tzdc0LyTVw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:29:2e:6c:ee:8e:93:62:64:c2:0a:bb:62:fc:5a:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a74638316276c9c81935e43bd2bd9d25e2865c48
        Validity
            Not Before: Dec 19 06:59:46 2022 GMT
            Not After : Dec 20 06:59:46 2022 GMT
        Subject: CN=4acb0cc199be903c0b9ce3ec798ae8145de69d60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:28:13:23:a5:51:b7:a0:28:4a:f0:f3:14:04:
                    9d:a0:b5:23:2e:0d:9f:28:64:84:65:2b:87:43:d8:
                    e3:3b:6c:c2:f5:5c:15:24:f7:2e:33:37:c3:31:c7:
                    d6:99:16:f8:fd:0c:6d:59:3a:da:85:8a:8f:5b:d1:
                    d8:ec:fe:19:6d:1b:78:ef:f9:17:98:68:e8:ea:b5:
                    02:bc:f6:36:97:9e:2e:cb:23:15:29:4a:72:50:a1:
                    f8:44:df:b6:6a:7c:a8:a7:af:5e:cc:a1:84:e3:4b:
                    10:b6:28:d8:86:c6:48:bb:22:10:a3:77:62:64:53:
                    aa:a9:38:23:80:13:92:4b:e7:bc:1d:f0:4d:c1:dd:
                    4f:d9:fd:f3:8d:a1:23:b7:65:26:95:f6:25:92:51:
                    4c:da:50:b4:5f:20:03:2f:73:1f:33:6e:d5:aa:07:
                    c1:ff:79:a0:51:72:33:86:0e:a7:76:4c:2f:44:6c:
                    b4:db:43:d5:b5:97:0b:86:85:d9:94:88:5d:6d:3b:
                    43:0a:1a:5f:9c:ca:6d:c1:36:33:d6:72:6e:ad:75:
                    33:15:32:e1:6b:39:b5:e8:9a:00:3e:53:ac:7c:79:
                    90:a9:0f:44:4b:41:69:5e:9e:36:c8:59:11:76:0e:
                    8c:aa:e1:3c:2f:27:f6:77:94:ba:7c:4f:5b:92:40:
                    78:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:CB:0C:C1:99:BE:90:3C:0B:9C:E3:EC:79:8A:E8:14:5D:E6:9D:60
            X509v3 Authority Key Identifier:
                keyid:A7:46:38:31:62:76:C9:C8:19:35:E4:3B:D2:BD:9D:25:E2:86:5C:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0Y4MWJ2ycgZNeQ70r2dJeKGXEg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/0d85f0-c9db-4838-a785-2861746c73bf/1/p0Y4MWJ2ycgZNeQ70r2dJeKGXEg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/0d85f0-c9db-4838-a785-2861746c73bf/1/p0Y4MWJ2ycgZNeQ70r2dJeKGXEg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:3f:08:14:0d:73:4c:4a:98:1a:b3:4e:46:7b:08:23:2a:96:
         59:22:f8:72:3e:f9:a2:7d:c9:88:df:49:23:81:1b:3d:81:ee:
         51:c9:3c:a2:a7:d4:49:23:85:3a:c8:2c:05:cb:70:59:02:5a:
         be:2e:dd:94:93:5d:8e:b2:cd:1d:4d:53:74:2d:43:bc:52:52:
         d9:0e:f7:86:e4:15:2b:2d:fc:41:e0:01:f0:44:c8:19:74:67:
         7c:62:ad:95:1b:93:d9:e8:e8:b8:c6:7c:d1:cb:f9:e8:11:8a:
         88:ab:bd:77:c5:d3:80:7c:3e:74:96:c9:7c:13:6c:39:5c:81:
         df:7b:4d:86:16:73:5d:ac:df:71:fe:59:fb:73:46:00:27:04:
         63:0b:e6:92:4b:2e:e0:72:bb:bf:9d:4a:f3:22:89:2e:91:d0:
         e9:ce:c6:53:56:65:61:a0:03:2a:ef:49:b4:5a:c7:cf:16:7a:
         ee:d4:68:2c:eb:8a:8b:7b:3b:32:02:59:fb:b6:7d:c3:dd:59:
         e2:1b:20:78:76:36:7d:70:0f:c1:28:e2:fc:7e:ff:5c:d6:49:
         8f:6c:95:84:23:e0:2b:e8:8a:59:c6:22:25:d7:2d:1d:0b:40:
         d4:0c:27:46:52:33:d2:e1:e1:0a:b7:e9:16:a5:15:f6:01:b6:
         01:29:a6:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----