Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/9322ea-d8fd-464e-a69d-3fc536931b8f/1/_aFOZ4YD79H1c9719Grc0-gY9OM.mft
File:                     _aFOZ4YD79H1c9719Grc0-gY9OM.mft (raw, json)
Hash identifier:          cl7jVpVd1ailmaohWeHta/y4lo8+sm1c/KvPEtyTeBk=
Subject key identifier:   35:9F:90:79:73:8A:3D:22:D1:35:D9:EB:C0:37:CF:2C:1B:AB:51:FD
Authority key identifier: FD:A1:4E:67:86:03:EF:D1:F5:73:DE:F5:F4:6A:DC:D3:E8:18:F4:E3
Certificate issuer:       /CN=fda14e678603efd1f573def5f46adcd3e818f4e3
Certificate serial:       0186A128BA366A2C487CBD2496BE7E39800D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_aFOZ4YD79H1c9719Grc0-gY9OM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/9322ea-d8fd-464e-a69d-3fc536931b8f/1/_aFOZ4YD79H1c9719Grc0-gY9OM.mft
Manifest number:          B7
Signing time:             Thu 02 Mar 2023 07:10:46 +0000
Manifest this update:     Thu 02 Mar 2023 07:10:46 +0000
Manifest next update:     Fri 03 Mar 2023 07:10:46 +0000
Files and hashes:         1: IiLpR7dze_Nfev8Jf9iX1bxEACA.roa (hash: kcSw3EpFKuJ5D9UZJ9IdYLJ2/RuWyF8UgMcb9/KLbmg=)
                          2: _aFOZ4YD79H1c9719Grc0-gY9OM.crl (hash: Nfjomyuav+qLw3ONQ4874Z7bqGBHt5f2cFsEqtBj5ZA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:a1:28:ba:36:6a:2c:48:7c:bd:24:96:be:7e:39:80:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fda14e678603efd1f573def5f46adcd3e818f4e3
        Validity
            Not Before: Mar  2 07:10:46 2023 GMT
            Not After : Mar  3 07:10:46 2023 GMT
        Subject: CN=359f9079738a3d22d135d9ebc037cf2c1bab51fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:aa:68:7e:ba:6a:c0:83:b0:2e:3c:c8:6d:99:
                    d3:c7:61:0a:46:01:a8:d4:0e:55:00:7e:9e:92:48:
                    12:d1:15:f4:f7:9d:16:5c:bf:67:10:00:2e:51:2a:
                    c1:b7:27:48:a9:65:e8:d0:6f:76:45:60:b8:b6:4b:
                    f4:a9:88:fb:07:b2:b4:bc:30:a1:84:2d:13:32:23:
                    cc:26:a0:c6:a1:f7:56:fd:29:36:9c:f4:d6:60:03:
                    9e:51:c7:15:72:41:7c:b4:ea:c3:97:42:e9:91:f1:
                    d4:b1:c0:35:40:3c:c5:8f:17:8c:10:50:62:32:bd:
                    09:d6:26:d6:3c:2c:7b:fc:a2:a8:df:fe:41:77:86:
                    33:03:f5:24:0a:d1:19:0e:1c:31:6d:ed:03:79:58:
                    3d:52:a1:d1:96:e7:ac:93:65:31:16:21:6c:72:bb:
                    ac:20:f4:1c:12:7a:74:3a:14:d8:af:81:1c:0f:12:
                    8a:d0:9e:4c:6a:f8:7f:32:72:1b:64:46:aa:49:7b:
                    53:97:d0:13:f1:23:40:6e:9b:6f:01:65:38:6b:5b:
                    39:0c:b6:85:b0:c1:88:53:96:0d:84:ef:7a:de:dd:
                    85:8b:e0:24:d2:6c:ae:42:ea:74:9c:0d:d9:4d:9a:
                    96:1d:3d:b9:1b:dc:1e:a9:47:51:52:bf:b6:22:f1:
                    bd:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:9F:90:79:73:8A:3D:22:D1:35:D9:EB:C0:37:CF:2C:1B:AB:51:FD
            X509v3 Authority Key Identifier:
                keyid:FD:A1:4E:67:86:03:EF:D1:F5:73:DE:F5:F4:6A:DC:D3:E8:18:F4:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_aFOZ4YD79H1c9719Grc0-gY9OM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/9322ea-d8fd-464e-a69d-3fc536931b8f/1/_aFOZ4YD79H1c9719Grc0-gY9OM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/9322ea-d8fd-464e-a69d-3fc536931b8f/1/_aFOZ4YD79H1c9719Grc0-gY9OM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:8d:7a:71:b8:8b:75:05:f2:3f:82:e8:7f:14:1b:11:a5:a3:
         97:6d:7a:9e:27:81:30:37:99:c0:be:80:8b:d9:92:0d:ae:57:
         e1:59:dc:cb:8b:9d:7a:b5:e3:99:df:11:1e:72:57:2d:23:48:
         e6:8e:77:25:7f:7d:87:ce:a4:3c:2d:4b:07:00:5b:96:94:1e:
         62:12:84:27:4c:4b:aa:82:06:74:ad:f6:e7:20:fe:f6:8b:65:
         8f:19:43:db:a3:45:f7:49:73:95:78:96:45:36:67:0d:7d:a2:
         16:06:0a:c8:cd:23:e5:96:6a:09:2d:a2:6c:b2:a5:1b:71:fe:
         9c:97:f8:b5:7b:6f:61:a7:05:f5:5b:26:51:c3:e2:0c:37:b6:
         96:cb:c3:4d:7b:5e:f1:9f:36:7e:04:59:a6:8d:b6:9c:f1:c7:
         8f:1f:73:1a:a2:ca:ed:67:6f:27:b7:32:d9:5e:51:32:fd:69:
         94:cc:5b:a2:55:e9:78:33:7e:65:23:80:54:4e:a6:ca:b2:35:
         42:e5:0a:99:06:7a:81:85:df:d3:75:83:7a:2a:e7:df:e6:31:
         01:9e:c8:83:d3:14:99:4a:01:7f:ac:d3:15:5c:de:fd:e0:89:
         fa:b2:eb:9a:f9:68:9f:09:04:85:d1:d6:48:92:3e:42:39:83:
         00:48:a1:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----