Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/b4744b-4c8a-4e1f-96c7-9473f19c3638/1/oMQDPIrFXuRFlWkxX9jk-tm7XJ0.mft
File:                     oMQDPIrFXuRFlWkxX9jk-tm7XJ0.mft (raw, json)
Hash identifier:          8hrQxy++s6BpUllHclgDTe9L0nh9gPdwRJ1YhFh26us=
Subject key identifier:   81:04:E0:16:DB:9C:D0:FD:0A:D7:A9:3D:F6:74:5C:48:1F:87:28:E6
Authority key identifier: A0:C4:03:3C:8A:C5:5E:E4:45:95:69:31:5F:D8:E4:FA:D9:BB:5C:9D
Certificate issuer:       /CN=a0c4033c8ac55ee4459569315fd8e4fad9bb5c9d
Certificate serial:       01823DEF229C7336FCFD6CF70094D245A4D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oMQDPIrFXuRFlWkxX9jk-tm7XJ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/b4744b-4c8a-4e1f-96c7-9473f19c3638/1/oMQDPIrFXuRFlWkxX9jk-tm7XJ0.mft
Manifest number:          0540
Signing time:             Wed 27 Jul 2022 04:34:18 +0000
Manifest this update:     Wed 27 Jul 2022 04:34:18 +0000
Manifest next update:     Thu 28 Jul 2022 04:34:18 +0000
Files and hashes:         1: 3g2qqOt94YQl40B3rq2k1USPHOU.roa (hash: 3qVWvDBF6DryLvkV4y4r1xsQVYWyRWdCtXeSmT3nM5c=)
                          2: oMQDPIrFXuRFlWkxX9jk-tm7XJ0.crl (hash: /1gwR6ioON1b3MY/SpkzdbCY1Apa2BLB//sgnhTvSd4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:3d:ef:22:9c:73:36:fc:fd:6c:f7:00:94:d2:45:a4:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0c4033c8ac55ee4459569315fd8e4fad9bb5c9d
        Validity
            Not Before: Jul 27 04:34:18 2022 GMT
            Not After : Jul 28 04:34:18 2022 GMT
        Subject: CN=8104e016db9cd0fd0ad7a93df6745c481f8728e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:82:71:6f:bd:5b:1d:f6:18:48:f7:18:32:68:
                    30:b6:aa:63:25:2d:ce:d4:bf:f7:cb:11:2b:97:38:
                    2d:91:35:f5:d1:33:ff:ad:dd:42:d6:96:81:67:17:
                    c7:bf:ab:bc:80:55:49:b0:f4:19:f4:61:93:f3:19:
                    ae:6d:82:4e:0b:b7:86:9f:fa:fb:b6:bf:4d:60:53:
                    82:cd:a9:b9:80:d7:7e:32:16:d4:e5:93:70:da:e5:
                    bc:2a:0f:67:7c:e9:26:34:21:29:f8:06:c8:e2:22:
                    81:f5:fb:d6:f1:55:df:0f:ef:3f:f8:7d:a3:a3:94:
                    0f:cc:c7:8f:96:6d:f8:ac:e6:ee:8d:e1:77:35:6f:
                    5f:5f:d3:f3:33:95:69:d0:a4:e1:86:69:85:85:2a:
                    09:8e:d3:29:56:d4:31:e0:f0:45:4a:41:27:2c:67:
                    a6:86:44:3d:c1:41:c8:62:6c:f2:7d:70:84:32:ff:
                    56:f4:5f:58:67:a9:1f:c1:da:e6:97:45:36:26:fe:
                    2d:92:07:c6:2b:25:85:c1:c6:62:56:ae:19:fc:c5:
                    cb:70:c5:29:a2:1d:d2:dc:44:7a:d0:c5:a6:3d:ba:
                    1f:f0:36:13:c6:ba:75:2f:80:34:02:53:0e:f7:f3:
                    7e:d9:8b:27:a8:ab:01:5f:42:1e:2a:2d:e1:f1:4c:
                    73:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:04:E0:16:DB:9C:D0:FD:0A:D7:A9:3D:F6:74:5C:48:1F:87:28:E6
            X509v3 Authority Key Identifier:
                keyid:A0:C4:03:3C:8A:C5:5E:E4:45:95:69:31:5F:D8:E4:FA:D9:BB:5C:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oMQDPIrFXuRFlWkxX9jk-tm7XJ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b4744b-4c8a-4e1f-96c7-9473f19c3638/1/oMQDPIrFXuRFlWkxX9jk-tm7XJ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b4744b-4c8a-4e1f-96c7-9473f19c3638/1/oMQDPIrFXuRFlWkxX9jk-tm7XJ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:10:6f:6a:d6:0c:7c:99:77:71:d3:3a:2a:71:ec:07:b7:a5:
         f8:3b:71:c3:8c:95:56:f4:f4:93:57:d7:70:13:11:da:25:b8:
         0d:fe:74:94:9f:23:bc:6e:cc:36:70:c3:8f:4f:50:7f:ef:6c:
         dd:0f:f8:49:fa:1c:a1:a9:81:02:6a:0f:3a:04:6e:af:bf:41:
         fb:72:b5:7a:4e:43:46:80:42:b7:7d:42:b0:3c:73:bd:36:79:
         14:3e:eb:2d:41:f8:6a:bb:63:eb:0c:bf:b9:b9:15:d7:5d:5d:
         f8:c1:ee:3a:91:b2:be:8c:df:90:73:fe:ac:bb:a2:89:d6:7c:
         b4:ef:f7:7b:63:53:24:0b:2a:73:18:5f:58:70:9f:44:26:83:
         54:3b:c5:38:82:a0:e6:ab:17:39:e4:ac:f5:38:4b:d4:75:b1:
         53:5e:7b:48:e8:9a:93:e7:8b:ca:35:7a:60:21:89:8e:9b:4e:
         8b:86:b6:55:6e:9e:d1:97:c4:d3:a4:a1:f0:46:a8:d9:0d:29:
         97:0c:a8:2f:53:87:11:41:a3:41:cd:99:99:90:c6:9a:10:cb:
         62:bc:8f:26:72:7e:6f:e7:70:6f:74:fd:30:04:89:d8:56:fc:
         90:a5:91:4e:0b:c4:e7:d1:da:c0:ed:aa:67:d3:7d:e7:f5:bd:
         6e:3c:55:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----