Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/d3c11d-fa02-403f-872b-c7f9f73bb72a/1/TbcX4Evl4gQ1g27XMotBOVM0-KE.mft
File:                     TbcX4Evl4gQ1g27XMotBOVM0-KE.mft (raw, json)
Hash identifier:          0fmPEjIDacdDB2iBpVkC7G8v2JRni+t76ko/8sIzsZY=
Subject key identifier:   C4:9E:3D:BA:C9:A4:53:AE:BD:BD:FC:FA:0C:A2:E9:49:4B:9E:9B:A9
Authority key identifier: 4D:B7:17:E0:4B:E5:E2:04:35:83:6E:D7:32:8B:41:39:53:34:F8:A1
Certificate issuer:       /CN=4db717e04be5e20435836ed7328b41395334f8a1
Certificate serial:       01853C07B41BB221FC9782A3C03819F12DCF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TbcX4Evl4gQ1g27XMotBOVM0-KE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/d3c11d-fa02-403f-872b-c7f9f73bb72a/1/TbcX4Evl4gQ1g27XMotBOVM0-KE.mft
Manifest number:          06
Signing time:             Thu 22 Dec 2022 22:50:15 +0000
Manifest this update:     Thu 22 Dec 2022 22:50:15 +0000
Manifest next update:     Fri 23 Dec 2022 22:50:15 +0000
Files and hashes:         1: 5AcEKyeVA91OwS0Ww-YNzX-3IJo.roa (hash: aeP6mNnmqs+npQCFWpvTEKthSUguNJNIetnu/mSLRfA=)
                          2: TbcX4Evl4gQ1g27XMotBOVM0-KE.crl (hash: TwWut9n3kHhzYsECqMRi1W0N79NyH9Niyh7tdROZQj8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:3c:07:b4:1b:b2:21:fc:97:82:a3:c0:38:19:f1:2d:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4db717e04be5e20435836ed7328b41395334f8a1
        Validity
            Not Before: Dec 22 22:50:15 2022 GMT
            Not After : Dec 23 22:50:15 2022 GMT
        Subject: CN=c49e3dbac9a453aebdbdfcfa0ca2e9494b9e9ba9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a3:fa:ad:bd:b7:f1:0a:25:b9:41:6c:66:0c:
                    65:cb:65:3a:ad:72:29:74:41:d5:1a:59:2c:4f:b8:
                    e2:bc:9e:40:28:d6:f2:89:ee:1f:65:c3:92:48:72:
                    a2:65:c0:ae:47:e6:9b:cb:70:42:16:2d:82:45:61:
                    92:b0:31:94:35:af:97:4f:b2:a2:9d:7f:10:b6:99:
                    b8:72:9e:d2:79:f9:4c:4a:cd:84:da:aa:d0:4e:88:
                    e9:0b:80:e6:89:ca:46:98:7f:b0:85:08:11:4c:02:
                    75:8b:52:5e:a9:00:b1:de:d0:f1:d4:fc:91:c0:6c:
                    d7:0d:28:71:3b:d0:f6:28:35:2b:76:5e:30:2f:fc:
                    12:a1:1c:f4:1a:84:d0:e4:bb:44:33:88:1c:cd:3a:
                    15:9b:10:31:81:ea:6a:a1:c1:55:54:3c:22:24:3a:
                    dc:87:63:49:99:4f:7c:ff:50:13:a8:74:b2:55:ef:
                    c7:44:7b:20:22:21:56:41:94:74:f2:bc:0e:7a:c8:
                    54:0b:00:5c:50:3b:d0:69:6e:eb:d3:3f:20:08:ae:
                    68:b8:1d:a3:82:47:9b:cb:82:3f:22:6c:32:71:1d:
                    9d:22:c7:36:f8:04:73:fd:78:ec:fb:9c:60:8b:84:
                    e1:2a:dd:25:0c:bb:47:39:13:30:2f:d8:f8:24:d7:
                    19:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:9E:3D:BA:C9:A4:53:AE:BD:BD:FC:FA:0C:A2:E9:49:4B:9E:9B:A9
            X509v3 Authority Key Identifier:
                keyid:4D:B7:17:E0:4B:E5:E2:04:35:83:6E:D7:32:8B:41:39:53:34:F8:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TbcX4Evl4gQ1g27XMotBOVM0-KE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/d3c11d-fa02-403f-872b-c7f9f73bb72a/1/TbcX4Evl4gQ1g27XMotBOVM0-KE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/d3c11d-fa02-403f-872b-c7f9f73bb72a/1/TbcX4Evl4gQ1g27XMotBOVM0-KE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d8:18:6c:92:35:95:61:be:7b:3f:a9:9c:14:ac:c2:fc:58:5a:
         e8:89:99:1f:f3:1f:c5:84:6c:f4:f7:af:f7:02:7e:9a:9c:6b:
         20:e1:97:f7:b0:e0:03:69:c4:0d:3f:77:71:72:24:a6:01:c5:
         28:77:c4:9b:1d:e9:07:3a:23:df:56:ae:c9:cd:94:5c:d5:4b:
         1a:ae:7a:bc:e7:b2:53:f6:f4:a6:bd:10:03:81:0f:03:42:62:
         47:41:39:5b:40:47:34:1b:f3:d6:dc:4b:01:b6:ae:41:03:63:
         b3:76:f8:cd:a0:76:ed:76:a0:4b:99:7d:0c:f7:61:e6:83:f2:
         db:af:2d:35:0c:77:22:9f:49:fa:74:e6:ce:a7:0d:ca:d4:e4:
         86:83:43:99:5a:e4:4a:b0:81:5a:de:1d:fc:4e:bd:fe:7f:08:
         7d:47:09:d7:d4:55:a3:a0:b0:f0:fa:8c:b1:45:cf:d2:77:22:
         ea:25:8c:d0:40:73:ab:d6:aa:d5:8a:0f:4d:58:a2:57:6f:9e:
         e6:9d:33:e2:f4:5c:c5:e0:79:ca:dd:2b:fd:df:8e:56:dd:49:
         e9:4f:19:75:4e:60:0a:a7:05:df:fc:65:ca:3e:73:d4:5c:4b:
         7e:df:6a:56:e1:a4:73:28:2a:42:ea:63:18:f9:7b:60:99:88:
         3c:db:41:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----