Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/8ab32c-2fcd-4b69-b01b-b090831c9c31/1/zwc5Ad2FUPbCT8pGriZgkcgGSIY.mft
File:                     zwc5Ad2FUPbCT8pGriZgkcgGSIY.mft (raw, json)
Hash identifier:          TCsvjkfvEGFAFlHJ8+hG3baPbamxzmW3h5lqz8hs1cc=
Subject key identifier:   DB:DA:DA:FB:5E:C2:51:98:21:36:81:43:6C:BF:AB:47:30:82:30:5B
Authority key identifier: CF:07:39:01:DD:85:50:F6:C2:4F:CA:46:AE:26:60:91:C8:06:48:86
Certificate issuer:       /CN=cf073901dd8550f6c24fca46ae266091c8064886
Certificate serial:       01849984602887305AD12C3A87FD7C1FA8B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zwc5Ad2FUPbCT8pGriZgkcgGSIY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/8ab32c-2fcd-4b69-b01b-b090831c9c31/1/zwc5Ad2FUPbCT8pGriZgkcgGSIY.mft
Manifest number:          03C4
Signing time:             Mon 21 Nov 2022 09:28:20 +0000
Manifest this update:     Mon 21 Nov 2022 09:28:20 +0000
Manifest next update:     Tue 22 Nov 2022 09:28:20 +0000
Files and hashes:         1: 31OHOGs3NbrebwTXh6RaXuPYD-o.roa (hash: psQAk6cNe1tIghzrGl1+Pocr9OLxwaME2idkN9gHhi8=)
                          2: zwc5Ad2FUPbCT8pGriZgkcgGSIY.crl (hash: E5iu53RNcyffGF1W4u+5IiHLC9d8TOHcgJH0SYzasBU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:99:84:60:28:87:30:5a:d1:2c:3a:87:fd:7c:1f:a8:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf073901dd8550f6c24fca46ae266091c8064886
        Validity
            Not Before: Nov 21 09:28:20 2022 GMT
            Not After : Nov 22 09:28:20 2022 GMT
        Subject: CN=dbdadafb5ec25198213681436cbfab473082305b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:c6:b8:e7:76:f6:82:87:e6:7d:e0:36:ae:1f:
                    56:e0:a7:2f:b0:f9:64:78:20:be:62:cb:6d:71:e8:
                    2e:91:38:16:ac:f0:6a:31:f4:b5:99:81:1e:8d:21:
                    f6:78:2d:f9:59:01:ff:71:3b:ff:9f:5a:ec:f3:75:
                    f4:82:0c:d5:17:19:ad:89:60:8c:0f:1e:47:67:8e:
                    ef:ba:2d:f4:f8:93:d4:d2:9e:9b:27:f1:03:b3:f9:
                    79:64:c2:97:ef:38:c9:ed:f6:dd:cd:a3:10:99:65:
                    3a:59:f9:e7:f7:ec:68:e2:ee:64:2d:f7:7f:39:d4:
                    c4:a3:9b:e3:85:68:ed:e5:26:0c:80:40:ec:01:13:
                    84:ed:cd:10:01:aa:53:24:fb:fa:46:1a:e2:32:02:
                    6e:54:73:65:8f:42:2f:90:8e:0c:ba:ed:0c:24:cd:
                    c5:b0:4f:2a:82:4b:0e:92:e2:e3:ec:70:4d:ae:2e:
                    e5:e5:19:ee:4a:72:47:c5:6b:d0:29:c1:d5:c8:c1:
                    9d:a6:d9:68:98:db:60:5b:ca:38:8f:26:b0:4d:9f:
                    ed:a4:83:d9:c3:cb:55:36:99:57:34:22:98:01:d1:
                    1d:da:68:35:f9:c8:19:ee:9c:cb:a1:d0:bd:82:10:
                    f0:7a:e2:84:e1:b0:e9:2f:73:2a:2b:c2:10:7b:aa:
                    25:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:DA:DA:FB:5E:C2:51:98:21:36:81:43:6C:BF:AB:47:30:82:30:5B
            X509v3 Authority Key Identifier:
                keyid:CF:07:39:01:DD:85:50:F6:C2:4F:CA:46:AE:26:60:91:C8:06:48:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwc5Ad2FUPbCT8pGriZgkcgGSIY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/8ab32c-2fcd-4b69-b01b-b090831c9c31/1/zwc5Ad2FUPbCT8pGriZgkcgGSIY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/8ab32c-2fcd-4b69-b01b-b090831c9c31/1/zwc5Ad2FUPbCT8pGriZgkcgGSIY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:ef:ce:73:78:91:94:33:60:20:81:c0:c0:c7:d4:61:67:46:
         11:1d:9a:5d:27:7c:91:12:9a:20:10:15:bb:f4:0e:4d:52:de:
         17:ad:0b:ad:69:ed:52:7b:ea:5f:d1:f1:45:77:da:45:3c:4f:
         d7:cd:b5:1b:5c:50:03:6d:23:7b:d9:2c:0a:10:07:99:8a:51:
         7d:e2:56:fe:24:83:9f:1a:ab:68:69:5f:b9:12:f3:fc:65:eb:
         3c:d2:d9:21:60:63:9e:14:92:39:50:f1:c7:24:1b:50:b8:82:
         03:ef:50:d1:06:fc:de:d3:a0:fd:de:28:9d:e1:38:3d:71:d3:
         0b:f0:69:d3:ff:28:7c:e6:ad:36:ad:d6:8b:f0:ee:a7:85:0e:
         3f:ff:4c:ed:8a:93:f2:36:79:34:63:64:8b:20:32:d0:e4:c6:
         08:75:3f:2d:cf:fb:76:9b:4c:84:ac:74:d9:b7:99:78:f8:1a:
         9c:a8:11:03:6c:f8:6e:99:83:ab:2c:24:70:77:c6:e6:cd:83:
         7b:4e:a2:9d:cc:4b:6f:06:4e:9a:74:a1:6f:56:46:71:b5:28:
         98:a9:53:4d:6b:d5:ce:bc:06:f0:8f:15:53:81:ed:6f:24:75:
         4b:69:64:77:a1:ff:8c:45:0a:67:37:bf:88:83:48:36:52:d7:
         fc:43:6a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----