Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/891c08-43b9-4d27-8a29-ed6ef0378af5/1/yiBacDIfgZtw-6VOWrVIHaw6A4c.mft
File:                     yiBacDIfgZtw-6VOWrVIHaw6A4c.mft (raw, json)
Hash identifier:          MfaS+PlwUyXOohy9movMMPNQCcIrLcbbILM0f/WPr9o=
Subject key identifier:   24:80:AB:B0:94:07:9F:B2:AF:69:E9:0B:53:6D:46:21:DB:01:95:0C
Authority key identifier: CA:20:5A:70:32:1F:81:9B:70:FB:A5:4E:5A:B5:48:1D:AC:3A:03:87
Certificate issuer:       /CN=ca205a70321f819b70fba54e5ab5481dac3a0387
Certificate serial:       01853DB60E33B8C1AB1D45D31E4C59A16D8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yiBacDIfgZtw-6VOWrVIHaw6A4c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/891c08-43b9-4d27-8a29-ed6ef0378af5/1/yiBacDIfgZtw-6VOWrVIHaw6A4c.mft
Manifest number:          07FD
Signing time:             Fri 23 Dec 2022 06:40:19 +0000
Manifest this update:     Fri 23 Dec 2022 06:40:19 +0000
Manifest next update:     Sat 24 Dec 2022 06:40:19 +0000
Files and hashes:         1: DTy5x0HwGmHinLQEE6YAp8X9U-g.roa (hash: EpCb/ORQD7qpI03Ddkku+H1IUUuVrpm7CKsXJr/aBXY=)
                          2: yiBacDIfgZtw-6VOWrVIHaw6A4c.crl (hash: pOhHDPZM5WOMxVuF7ESO7bzqf0+QZt1Isux4ePPVokU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:3d:b6:0e:33:b8:c1:ab:1d:45:d3:1e:4c:59:a1:6d:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca205a70321f819b70fba54e5ab5481dac3a0387
        Validity
            Not Before: Dec 23 06:40:19 2022 GMT
            Not After : Dec 24 06:40:19 2022 GMT
        Subject: CN=2480abb094079fb2af69e90b536d4621db01950c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:f8:25:8a:96:08:b0:85:c6:f2:f5:35:dd:cc:
                    66:45:b4:33:95:d1:18:c1:d4:27:85:84:07:83:32:
                    c0:51:5b:95:21:9f:49:1d:b1:2b:db:ca:4f:a7:e2:
                    c7:48:fa:80:69:94:83:bd:8e:78:89:38:8c:40:12:
                    22:c6:a9:7f:54:25:c4:db:5b:13:65:8d:10:d7:c1:
                    00:1e:f1:0e:5a:85:2e:38:d8:64:f5:d0:e6:ef:f6:
                    23:8e:59:1c:4e:c9:54:42:9e:ba:c2:8b:2b:3f:ed:
                    2a:a2:39:25:98:bb:be:ce:f8:d8:05:73:7c:56:8d:
                    36:1b:3b:6e:14:23:a4:3e:f4:a9:4b:75:db:7b:2b:
                    e9:02:0d:39:a3:a6:7f:88:da:72:63:2d:f8:3e:4b:
                    b3:06:3a:fc:cb:1f:1b:2b:03:90:6d:53:ad:bc:f1:
                    af:a0:cb:50:32:76:2c:8b:5b:e4:f8:50:36:ec:6d:
                    33:13:8b:17:0f:10:00:f3:58:c2:73:86:54:c2:1b:
                    55:a1:db:15:fd:ee:b1:b8:f1:9d:b9:d0:63:2a:f8:
                    1a:5c:03:5e:d1:f2:8b:37:54:10:cf:18:6b:70:45:
                    61:4e:02:3f:96:0e:57:8e:68:2a:76:dd:ce:bd:e9:
                    12:01:f7:34:2f:ba:a1:a8:57:f1:9c:11:5f:2d:33:
                    a6:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:80:AB:B0:94:07:9F:B2:AF:69:E9:0B:53:6D:46:21:DB:01:95:0C
            X509v3 Authority Key Identifier:
                keyid:CA:20:5A:70:32:1F:81:9B:70:FB:A5:4E:5A:B5:48:1D:AC:3A:03:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yiBacDIfgZtw-6VOWrVIHaw6A4c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/891c08-43b9-4d27-8a29-ed6ef0378af5/1/yiBacDIfgZtw-6VOWrVIHaw6A4c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/891c08-43b9-4d27-8a29-ed6ef0378af5/1/yiBacDIfgZtw-6VOWrVIHaw6A4c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:de:df:0c:2a:77:45:d9:96:d3:e8:c0:ed:fa:74:19:dd:0b:
         5f:08:aa:94:db:7f:35:e3:68:82:c6:98:e4:b3:f6:81:af:bc:
         e0:67:6d:bd:fb:aa:da:05:03:e7:15:0a:a8:9b:61:7b:fe:40:
         90:34:df:02:ca:ee:b5:fc:42:bb:a4:f0:37:2e:d5:0c:4d:00:
         b6:42:fc:18:1a:ba:02:a3:ce:dd:b5:49:e1:49:6d:df:f3:fe:
         c7:e6:fa:1a:19:b4:59:45:11:28:4a:81:0d:4b:21:ce:0f:0a:
         e3:8d:ce:66:db:8b:70:7f:04:9b:fb:18:a7:0b:d5:05:c3:8d:
         bd:0a:90:f7:0f:fd:0e:16:a3:8b:1e:2f:45:c9:1c:80:39:b6:
         30:b6:c7:85:a2:06:ae:76:91:d3:e2:b8:eb:41:2f:bc:e5:af:
         f4:5f:41:d8:c1:23:5a:82:dc:8f:7c:a7:b5:f4:06:79:49:8b:
         f5:9e:39:15:74:f7:02:25:5d:54:6f:3a:b7:8b:ac:dd:34:f4:
         a2:91:94:bf:2f:86:44:f2:af:32:78:41:0c:8a:bb:b7:d2:63:
         df:2e:e4:ef:61:72:c5:49:85:f5:8f:43:97:ac:a7:3b:14:51:
         ee:45:a1:76:b3:f4:8b:82:7c:b5:d8:c8:75:1b:a5:d3:94:2e:
         fa:4a:8c:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----