Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/1da29f-f040-4ea5-ba5c-db6432797c20/1/b_IQJIqHj9xU-ThcCsVE1_7KY0M.mft
File:                     b_IQJIqHj9xU-ThcCsVE1_7KY0M.mft (raw, json)
Hash identifier:          SWDMHoe3Hv257Od8QP6Ewlir2U/WEfm8RVFpPJceQIY=
Subject key identifier:   98:14:E6:FB:1A:56:73:13:2D:04:DB:67:6C:0B:CE:88:1A:68:2D:80
Authority key identifier: 6F:F2:10:24:8A:87:8F:DC:54:F9:38:5C:0A:C5:44:D7:FE:CA:63:43
Certificate issuer:       /CN=6ff210248a878fdc54f9385c0ac544d7feca6343
Certificate serial:       018528EE64BC8A8B37935F458C0F4A073D3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b_IQJIqHj9xU-ThcCsVE1_7KY0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/1da29f-f040-4ea5-ba5c-db6432797c20/1/b_IQJIqHj9xU-ThcCsVE1_7KY0M.mft
Manifest number:          0B9C
Signing time:             Mon 19 Dec 2022 05:49:50 +0000
Manifest this update:     Mon 19 Dec 2022 05:49:50 +0000
Manifest next update:     Tue 20 Dec 2022 05:49:50 +0000
Files and hashes:         1: 0iQfqM9KTlzE7kJFHq-_KXeEFrg.roa (hash: n7EdNM4B3UdtImr1ds3OU4gUA00C57rVRKaDAgIvDME=)
                          2: b_IQJIqHj9xU-ThcCsVE1_7KY0M.crl (hash: FL3ee7s/uePPiCJy0Yxxo61+2oDzIK0INDOYd/R1sew=)
                          3: wzvi29Te6AYb272eVN_VOyQO4kU.roa (hash: iuGNmAywhGlBDP+7u0uVPoPvJPHAybCXEscmKDSTENE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:28:ee:64:bc:8a:8b:37:93:5f:45:8c:0f:4a:07:3d:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ff210248a878fdc54f9385c0ac544d7feca6343
        Validity
            Not Before: Dec 19 05:49:50 2022 GMT
            Not After : Dec 20 05:49:50 2022 GMT
        Subject: CN=9814e6fb1a5673132d04db676c0bce881a682d80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:e2:a3:c2:b5:15:50:2f:61:cc:a7:b9:89:c2:
                    0e:a9:fd:da:4a:f0:79:ab:58:9c:04:49:bd:a9:5a:
                    ff:b5:42:c4:93:6a:17:df:51:5e:ee:05:11:76:f2:
                    74:89:ad:a2:d9:51:6f:36:d3:13:bd:bf:26:0b:79:
                    f1:cc:d2:29:a4:de:9f:f5:b4:3e:ef:bb:09:c8:a7:
                    76:39:59:e6:3d:72:36:ab:1b:e4:f3:a5:ca:42:db:
                    8c:03:eb:57:f0:4f:b3:76:88:eb:5c:98:cd:65:d0:
                    09:f0:48:9a:c5:54:fb:20:80:41:0a:80:bc:36:52:
                    82:95:fd:4e:cb:f7:26:c7:e9:88:58:25:5c:ab:1f:
                    e1:b5:be:51:94:8d:05:32:b2:6c:42:1b:1c:d2:db:
                    f7:67:77:cd:3e:d8:9a:b5:ae:e4:26:53:04:b2:b5:
                    af:c7:24:42:84:f0:8b:12:a0:bf:65:39:54:d5:c1:
                    86:73:d9:a9:24:fd:38:e0:cb:af:0b:5c:02:e0:a5:
                    7c:18:45:f5:d3:14:45:9a:65:a0:8c:96:bc:66:88:
                    fd:16:8c:8f:f1:bc:92:44:55:d6:dc:27:21:4b:e9:
                    20:7c:15:f2:5b:b5:55:88:78:58:12:cf:79:3d:60:
                    82:88:ae:0c:7c:25:ed:5e:4f:cd:1c:a6:6d:a8:68:
                    55:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:14:E6:FB:1A:56:73:13:2D:04:DB:67:6C:0B:CE:88:1A:68:2D:80
            X509v3 Authority Key Identifier:
                keyid:6F:F2:10:24:8A:87:8F:DC:54:F9:38:5C:0A:C5:44:D7:FE:CA:63:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_IQJIqHj9xU-ThcCsVE1_7KY0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/1da29f-f040-4ea5-ba5c-db6432797c20/1/b_IQJIqHj9xU-ThcCsVE1_7KY0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/1da29f-f040-4ea5-ba5c-db6432797c20/1/b_IQJIqHj9xU-ThcCsVE1_7KY0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:da:e6:ce:b4:5d:74:76:76:bc:d8:76:55:24:d9:e1:0f:b1:
         79:3d:0e:90:d4:7c:47:dd:50:11:5b:98:60:78:96:fa:a9:80:
         a2:f8:38:59:9e:07:81:d3:ab:23:17:a5:26:f4:a7:6d:c3:65:
         64:7f:e5:b7:5d:63:1c:f9:f5:cf:7e:57:1c:75:c8:03:c3:35:
         6b:5b:10:59:32:b0:6e:59:c5:b7:2f:9e:d4:e4:dd:73:2c:47:
         0f:30:58:96:f3:5a:a9:48:a0:99:5e:ef:bc:ee:0e:8f:c1:40:
         d0:fc:ee:ca:74:79:2d:18:12:1c:03:6f:4c:d8:7d:06:a7:7b:
         d9:35:f6:9d:7e:33:4f:1f:8e:6a:96:78:8c:2e:92:29:7d:88:
         14:f4:13:c6:91:cd:7d:ab:10:14:4d:08:30:36:80:6b:05:be:
         16:b3:60:5e:31:c6:08:9d:ba:28:75:6a:f9:35:d7:c6:25:ff:
         74:82:d7:e3:27:30:5c:32:ef:fa:6c:6f:9e:77:7b:ef:31:1a:
         a9:cb:f5:99:8b:76:94:1c:9e:68:f9:39:15:93:57:ce:0e:79:
         65:9e:66:8d:e9:dc:71:39:a5:7c:d9:8c:43:b5:2f:65:97:33:
         a2:1f:b2:43:4b:03:17:27:ff:4d:4f:3a:ce:70:37:7b:63:1d:
         2a:97:70:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----