Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/9501dd-00a3-4bfb-8da2-18ae88470cef/1/AygU6oab9Ck1--Z3SF_66YcEYjU.mft
File:                     AygU6oab9Ck1--Z3SF_66YcEYjU.mft (raw, json)
Hash identifier:          Am8JdW0Sibvj4nvD9ZIoQS35AbJLtvqKOSvSb1N9CaA=
Subject key identifier:   12:47:92:B9:FE:ED:D7:50:2E:39:C9:9A:E2:11:82:13:9A:9C:B1:87
Authority key identifier: 03:28:14:EA:86:9B:F4:29:35:FB:E6:77:48:5F:FA:E9:87:04:62:35
Certificate issuer:       /CN=032814ea869bf42935fbe677485ffae987046235
Certificate serial:       09AD62F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AygU6oab9Ck1--Z3SF_66YcEYjU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/9501dd-00a3-4bfb-8da2-18ae88470cef/1/AygU6oab9Ck1--Z3SF_66YcEYjU.mft
Manifest number:          096C
Signing time:             Tue 24 May 2022 03:37:35 +0000
Manifest this update:     Tue 24 May 2022 03:37:35 +0000
Manifest next update:     Wed 25 May 2022 03:37:35 +0000
Files and hashes:         1: AygU6oab9Ck1--Z3SF_66YcEYjU.crl (hash: NqOLYvS5laQwVG/ySgRZ9RUIwQU+Twpdj6ARaVKaQg0=)
                          2: xh3E7jcMCQfNKjyBkO9bosIKtus.roa (hash: lNiollCdVhHJ6RomI3sw/bw/KXuNhd+nUd1C0lpXBRo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 162358000 (0x9ad62f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=032814ea869bf42935fbe677485ffae987046235
        Validity
            Not Before: May 24 03:37:35 2022 GMT
            Not After : May 25 03:37:35 2022 GMT
        Subject: CN=124792b9feedd7502e39c99ae21182139a9cb187
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:a6:b6:8f:d9:d4:de:c4:ff:4a:0f:f6:bd:13:
                    b5:e1:5d:d1:a6:57:27:ae:34:ca:9d:32:9e:6c:59:
                    0f:92:bd:21:b4:b9:7c:e1:ac:6f:aa:eb:c5:63:ea:
                    75:7b:83:35:5d:20:b9:c6:d2:93:8a:9d:01:24:00:
                    0e:48:97:5b:3e:32:da:f9:84:b0:a2:4a:6f:b1:2f:
                    ed:a6:e9:d0:92:73:a0:a6:db:0d:21:5e:66:d1:62:
                    ee:3d:ed:69:80:b5:dd:67:2e:ab:d6:f0:c1:a9:f7:
                    da:24:b5:f1:01:03:f4:1e:2a:73:da:b0:1a:50:9d:
                    5c:af:13:c2:58:84:08:80:de:b6:39:eb:a1:0d:07:
                    06:8e:9c:f0:62:59:ee:b5:45:0c:d0:62:7c:cb:c9:
                    ab:c2:e3:36:3a:98:2a:80:44:b3:a8:1c:50:41:c2:
                    48:3d:0d:c1:12:cc:e6:43:20:81:81:04:5b:0f:b1:
                    57:60:fc:4c:3f:25:22:a1:27:b0:8f:a1:67:27:f1:
                    1a:53:53:7a:5c:a6:9e:63:3c:f2:2f:2f:e7:9f:a7:
                    39:7e:64:0d:e4:1e:bd:c1:db:69:c4:f8:f5:9d:f9:
                    74:e5:4e:12:d1:cb:23:82:58:06:21:e3:55:00:4f:
                    a5:ea:e7:08:1b:e5:5c:09:28:88:25:1b:e0:18:75:
                    06:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:47:92:B9:FE:ED:D7:50:2E:39:C9:9A:E2:11:82:13:9A:9C:B1:87
            X509v3 Authority Key Identifier:
                keyid:03:28:14:EA:86:9B:F4:29:35:FB:E6:77:48:5F:FA:E9:87:04:62:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AygU6oab9Ck1--Z3SF_66YcEYjU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/9501dd-00a3-4bfb-8da2-18ae88470cef/1/AygU6oab9Ck1--Z3SF_66YcEYjU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/9501dd-00a3-4bfb-8da2-18ae88470cef/1/AygU6oab9Ck1--Z3SF_66YcEYjU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:89:9e:f5:58:d6:ed:26:bb:93:3c:93:c9:82:91:02:3f:0c:
         76:a6:af:ad:85:7a:ee:3f:f1:78:fd:70:76:1e:3b:35:a3:a4:
         d0:82:19:98:46:4d:35:b4:35:9d:4d:66:ff:3b:b3:5f:2f:17:
         0e:22:b5:6f:3b:a9:d1:57:1a:a4:18:78:23:d8:61:67:b7:5f:
         0b:95:1c:b8:8e:af:7e:1e:bc:8f:68:93:0f:2b:a0:04:dc:e3:
         73:34:c6:cd:e1:93:4f:88:d9:ae:45:8d:47:80:99:99:1c:40:
         9d:03:73:eb:17:56:b4:fd:3e:fd:67:9b:37:77:2b:56:cc:bb:
         f0:d3:8d:bc:d8:01:98:ca:93:61:6f:b8:cc:5f:a3:3c:f7:d7:
         b7:48:c6:0d:b8:8c:19:16:9f:08:7e:30:24:2c:88:3c:02:9c:
         a0:51:80:90:f9:1a:a5:be:13:9e:72:99:f3:f2:68:47:58:04:
         5c:dc:c6:92:53:1c:de:08:bc:52:68:f5:03:6b:76:84:18:e3:
         45:20:c9:5f:95:6b:6d:75:ff:a5:cf:c8:b7:1f:ce:c7:32:37:
         bd:38:78:05:80:20:24:71:4f:00:c3:cb:c4:21:ea:4a:98:9e:
         f7:e9:71:7b:09:38:cf:a4:f3:b3:39:73:c8:e7:4e:39:20:2f:
         be:b2:64:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----