Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/7a1838-09ab-42d2-8187-2081df13bd2d/1/6oFVo1VTWLs3NX1tntnvaD6XhBk.mft
File:                     6oFVo1VTWLs3NX1tntnvaD6XhBk.mft (raw, json)
Hash identifier:          Buqj/4JorUAqOr+V9tuQiH6CvwO0R8dBmaZAJQTY5LY=
Subject key identifier:   11:5E:5C:70:E3:0A:D3:CA:61:C1:41:E3:5F:37:F2:59:EB:36:6F:2F
Authority key identifier: EA:81:55:A3:55:53:58:BB:37:35:7D:6D:9E:D9:EF:68:3E:97:84:19
Certificate issuer:       /CN=ea8155a3555358bb37357d6d9ed9ef683e978419
Certificate serial:       0185612B347E6F9F04646D5965EDFF729475
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6oFVo1VTWLs3NX1tntnvaD6XhBk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/7a1838-09ab-42d2-8187-2081df13bd2d/1/6oFVo1VTWLs3NX1tntnvaD6XhBk.mft
Manifest number:          0200
Signing time:             Fri 30 Dec 2022 03:54:59 +0000
Manifest this update:     Fri 30 Dec 2022 03:54:59 +0000
Manifest next update:     Sat 31 Dec 2022 03:54:59 +0000
Files and hashes:         1: 6oFVo1VTWLs3NX1tntnvaD6XhBk.crl (hash: 60DneyPyMhlCgkfvFYwsRG9/L2pIAG7dLjcHCycsNng=)
                          2: Morsu8e0C2Dszoqli8qL93hL208.roa (hash: cI2c6GCwYcoTBQDO+Houv1LOiKzapTYlCri2JXzxgxU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:61:2b:34:7e:6f:9f:04:64:6d:59:65:ed:ff:72:94:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea8155a3555358bb37357d6d9ed9ef683e978419
        Validity
            Not Before: Dec 30 03:54:59 2022 GMT
            Not After : Dec 31 03:54:59 2022 GMT
        Subject: CN=115e5c70e30ad3ca61c141e35f37f259eb366f2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:63:22:ba:ac:63:9f:8e:44:26:55:53:92:f4:
                    f2:17:0f:76:77:6d:ea:7c:48:3f:a4:cc:aa:97:f7:
                    2a:d6:e4:16:66:93:4e:bf:e3:29:40:ba:83:85:c8:
                    43:c6:db:dd:f2:0f:97:c3:00:5b:d4:b8:49:65:ae:
                    e0:a5:87:01:65:a2:c7:81:2b:d3:03:51:2e:d9:aa:
                    df:15:fb:0c:19:02:1e:3f:5b:36:d0:58:47:35:02:
                    96:03:e8:98:82:20:43:34:31:9f:0a:ae:cd:33:48:
                    da:77:2a:94:b0:34:74:46:09:f9:0c:05:88:88:a3:
                    4c:b1:02:dc:57:da:2d:50:02:1e:c9:3a:ca:07:e7:
                    97:d1:f7:b5:85:f9:61:c9:ef:8d:7a:4c:c5:c1:b8:
                    78:88:ca:83:32:57:f1:42:20:a5:a9:0b:cc:e2:16:
                    19:c7:e7:41:fd:03:da:3e:cd:f1:b7:81:72:42:9a:
                    a8:dd:38:dd:09:1a:1d:ac:da:11:e3:43:f3:94:b3:
                    ea:8d:43:b8:55:fd:cf:e2:bb:13:cc:b3:e0:a0:ba:
                    af:16:89:dd:3d:82:50:c3:5a:6e:2c:da:ad:c9:d9:
                    35:6f:ff:f3:c6:4b:c3:a5:4d:80:0a:d7:61:4d:d9:
                    35:14:45:16:d9:db:18:fb:43:06:a0:f5:2b:c1:59:
                    6d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:5E:5C:70:E3:0A:D3:CA:61:C1:41:E3:5F:37:F2:59:EB:36:6F:2F
            X509v3 Authority Key Identifier:
                keyid:EA:81:55:A3:55:53:58:BB:37:35:7D:6D:9E:D9:EF:68:3E:97:84:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6oFVo1VTWLs3NX1tntnvaD6XhBk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/7a1838-09ab-42d2-8187-2081df13bd2d/1/6oFVo1VTWLs3NX1tntnvaD6XhBk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/7a1838-09ab-42d2-8187-2081df13bd2d/1/6oFVo1VTWLs3NX1tntnvaD6XhBk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:6c:8f:cb:81:95:9c:40:0f:c6:df:7c:3a:9b:07:44:ce:4a:
         56:43:4b:0a:0f:c7:91:5d:b3:1c:cf:f4:18:48:24:b3:f6:e4:
         81:96:39:68:b2:ce:2b:64:71:89:8a:52:49:2f:81:69:4c:10:
         b3:d2:05:1d:ce:87:80:f6:28:b4:db:ef:8a:29:6b:07:05:69:
         d0:53:a4:6c:f0:2a:d0:d5:72:f2:e8:d2:a1:c4:3a:2d:dd:46:
         09:ea:99:3e:f0:c1:25:23:d4:15:4d:05:ca:94:44:38:92:56:
         b5:22:e6:94:a8:99:be:4b:da:4b:99:a4:a5:45:5c:26:9b:04:
         61:5e:e1:71:f4:2e:53:df:51:59:df:60:3a:a3:e6:9a:a1:7d:
         eb:e5:7c:fd:1f:e0:a1:f0:07:71:f8:dc:e1:08:2f:7e:44:07:
         37:6d:f7:c7:c8:52:52:88:20:e6:0c:0a:9c:c2:02:1a:32:bc:
         08:dc:e6:78:cd:3c:19:35:c6:38:34:74:7c:06:51:86:26:86:
         ed:bc:e2:8d:cc:92:73:9f:b1:88:2e:8d:73:2f:4e:2f:7a:38:
         d5:60:05:f3:ba:0d:0c:85:e8:0d:ac:d1:7e:ff:05:a4:2d:13:
         37:50:38:25:0a:c9:33:72:27:41:0d:49:a9:c3:0e:2f:80:47:
         fb:12:7e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----