Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/3535b1-bdf7-460b-8a2a-11c927a42bea/1/sY7WXSlahhoftGskv2qeyvfz6rk.mft
File:                     sY7WXSlahhoftGskv2qeyvfz6rk.mft (raw, json)
Hash identifier:          5yNEvkrQeYXGpVX0rCHXqUXdJs+nsoPCEmQA84tkQ5Y=
Subject key identifier:   6F:FB:B0:3D:23:36:86:47:D4:D6:A6:D9:53:7F:45:B7:B9:67:88:B5
Authority key identifier: B1:8E:D6:5D:29:5A:86:1A:1F:B4:6B:24:BF:6A:9E:CA:F7:F3:EA:B9
Certificate issuer:       /CN=b18ed65d295a861a1fb46b24bf6a9ecaf7f3eab9
Certificate serial:       0227C00C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sY7WXSlahhoftGskv2qeyvfz6rk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/3535b1-bdf7-460b-8a2a-11c927a42bea/1/sY7WXSlahhoftGskv2qeyvfz6rk.mft
Manifest number:          02F6
Signing time:             Fri 18 Feb 2022 08:41:04 +0000
Manifest this update:     Fri 18 Feb 2022 08:41:04 +0000
Manifest next update:     Sat 19 Feb 2022 08:41:04 +0000
Files and hashes:         1: 1BZLpzgx8Vbas48aKByNp4GdaQ8.roa (hash: A72JQQz1ASDp+khUFMPJZotDEPAKScPpjUyZnTaYQFM=)
                          2: sY7WXSlahhoftGskv2qeyvfz6rk.crl (hash: OgtQa4MDff6cfi0guHc9TTttLgj0hsel8gT/UPrfTp8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36159500 (0x227c00c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b18ed65d295a861a1fb46b24bf6a9ecaf7f3eab9
        Validity
            Not Before: Feb 18 08:41:04 2022 GMT
            Not After : Feb 19 08:41:04 2022 GMT
        Subject: CN=6ffbb03d23368647d4d6a6d9537f45b7b96788b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a9:a9:37:4b:8c:19:c2:3d:19:07:88:23:94:
                    bf:8b:6a:17:1a:16:78:2a:1a:e1:02:32:29:70:9e:
                    28:72:4b:a4:52:76:7e:cb:5b:a3:42:11:05:07:7d:
                    10:e0:b0:15:23:19:db:a0:aa:a0:47:d3:67:ba:71:
                    b5:42:20:cd:be:94:d4:e4:d1:8b:57:f9:5f:47:d2:
                    02:40:cf:48:e8:51:14:44:2b:2c:b6:46:e8:e5:de:
                    db:69:05:08:87:b5:f7:6e:bb:96:0b:4b:bc:a5:e3:
                    ed:ed:cb:49:82:61:d3:78:7b:d1:52:aa:81:09:d8:
                    bf:fa:b5:46:ca:70:cc:ee:3f:97:2b:36:48:a3:3f:
                    16:15:4f:ba:0d:8d:52:14:34:ba:f7:ea:9b:04:18:
                    e3:34:24:ed:87:68:e2:ed:99:c6:5b:f9:e6:d0:78:
                    c8:dd:5d:7d:09:13:2e:2e:e7:cb:2d:40:4b:14:ef:
                    32:ea:4c:2c:54:aa:9f:54:f6:e2:bc:61:c5:47:02:
                    58:78:b0:9b:22:28:cb:96:14:54:cd:3c:4e:84:fe:
                    08:64:ea:ef:17:58:79:64:2f:5a:88:c2:a0:da:4e:
                    c3:6f:8e:c3:b7:e7:a6:c9:5b:a8:d3:af:16:65:a2:
                    b9:5d:9b:ad:61:aa:61:3b:6b:06:a7:bb:cb:d6:3d:
                    e2:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:FB:B0:3D:23:36:86:47:D4:D6:A6:D9:53:7F:45:B7:B9:67:88:B5
            X509v3 Authority Key Identifier:
                keyid:B1:8E:D6:5D:29:5A:86:1A:1F:B4:6B:24:BF:6A:9E:CA:F7:F3:EA:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sY7WXSlahhoftGskv2qeyvfz6rk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/3535b1-bdf7-460b-8a2a-11c927a42bea/1/sY7WXSlahhoftGskv2qeyvfz6rk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/3535b1-bdf7-460b-8a2a-11c927a42bea/1/sY7WXSlahhoftGskv2qeyvfz6rk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:58:97:60:dc:a5:bd:58:f2:75:dd:01:d0:6c:4d:1f:ea:89:
         33:ec:09:27:3b:3d:73:54:32:fa:9f:cd:78:a2:e9:5a:2d:a4:
         3f:3f:f3:61:8b:1d:93:84:3c:a4:a2:5f:a4:87:70:b6:ed:fb:
         3f:c3:32:e0:e4:4c:d8:56:a8:88:a9:fc:d8:c0:3a:0b:46:b7:
         4e:ad:30:af:0a:cc:6d:7c:72:e6:0b:ef:38:3e:3a:38:83:0d:
         32:5b:ec:e1:33:52:67:b6:de:59:fa:23:01:e0:12:2f:3d:7a:
         c8:b9:08:83:fb:6e:a4:f3:f7:4c:20:1b:5c:91:01:29:18:8b:
         d1:23:f9:a2:9b:4c:cf:7d:d2:67:ff:84:87:ed:30:d3:b8:ba:
         c5:28:89:9f:70:97:12:71:d4:26:bc:5a:c9:27:1e:3c:58:0a:
         58:da:f5:d2:1b:42:f4:d3:59:27:8b:86:5c:1d:8e:45:bb:39:
         2f:60:a8:05:32:82:d7:eb:56:36:e3:01:50:21:aa:1b:22:2f:
         14:b4:fd:f6:eb:88:50:6a:43:c1:8d:4c:90:c3:83:19:25:db:
         df:55:15:22:a1:89:a0:e5:50:fc:f5:ad:8f:82:59:b0:39:f9:
         04:45:e9:55:89:53:b5:a0:dd:1f:df:0a:2a:18:84:6d:e5:79:
         e8:e6:9b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----