Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/efc720-7ed5-4453-a7b1-b30faf47f06e/1/twASBHxuLSEIBl-4cvpXgxWaNi0.mft
File:                     twASBHxuLSEIBl-4cvpXgxWaNi0.mft (raw, json)
Hash identifier:          1zV0ae9uGHVpkuS0f6yx/5VTsS22wA9nz6wYJ/QLVA8=
Subject key identifier:   4B:67:B0:FD:8F:E2:1C:04:62:A9:7C:87:41:6C:CD:31:59:5A:73:5B
Authority key identifier: B7:00:12:04:7C:6E:2D:21:08:06:5F:B8:72:FA:57:83:15:9A:36:2D
Certificate issuer:       /CN=b70012047c6e2d2108065fb872fa5783159a362d
Certificate serial:       018A06DDC2E59A422755F19B53CA5D16337E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/twASBHxuLSEIBl-4cvpXgxWaNi0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/efc720-7ed5-4453-a7b1-b30faf47f06e/1/twASBHxuLSEIBl-4cvpXgxWaNi0.mft
Manifest number:          087F
Signing time:             Fri 18 Aug 2023 04:18:31 +0000
Manifest this update:     Fri 18 Aug 2023 04:18:31 +0000
Manifest next update:     Sat 19 Aug 2023 04:18:31 +0000
Files and hashes:         1: B2pNdigFezuZOJWraoUnvB1hcuA.roa (hash: jWquaHwJoVsVKWB5iQNLj1cJJIiONE5DswJVBu0XCdE=)
                          2: twASBHxuLSEIBl-4cvpXgxWaNi0.crl (hash: PgOymWjdI4qGCba4U1kHaQ8tNESF74f+mIzojOT8qKk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:06:dd:c2:e5:9a:42:27:55:f1:9b:53:ca:5d:16:33:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b70012047c6e2d2108065fb872fa5783159a362d
        Validity
            Not Before: Aug 18 04:18:31 2023 GMT
            Not After : Aug 19 04:18:31 2023 GMT
        Subject: CN=4b67b0fd8fe21c0462a97c87416ccd31595a735b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b0:a8:90:a3:84:4e:d8:57:54:77:39:41:eb:
                    e3:cc:58:29:73:54:2c:af:a8:4d:9a:02:11:d0:47:
                    af:b0:a6:d6:2a:5d:d5:80:1e:a8:33:9f:55:1c:31:
                    d4:3f:82:30:e6:f2:63:56:9c:ee:2e:16:1d:56:a0:
                    d8:a0:36:0c:dc:da:f4:d2:01:ba:5c:38:16:33:9b:
                    88:48:4b:8c:f5:77:fa:e7:b2:45:8f:7e:1b:2d:28:
                    92:fd:75:41:6e:79:a5:29:92:5f:7a:8e:80:e4:f1:
                    a2:07:8c:b3:d9:79:5d:b0:5a:9d:59:ca:8b:a1:7d:
                    24:94:a2:27:d9:14:b4:18:c2:41:a2:73:68:34:13:
                    a7:47:6f:86:a9:46:14:9b:93:b5:35:a4:f4:d7:1a:
                    78:d1:a1:cf:4e:52:c4:ae:4c:eb:bc:1a:85:56:da:
                    12:e5:14:aa:8e:38:75:e3:98:fd:9d:c6:40:98:5b:
                    f5:3c:93:a2:c6:cf:4e:47:f7:74:fb:37:94:48:d2:
                    1c:cb:cc:3c:d8:ad:20:99:e8:c6:84:7c:2a:43:41:
                    40:d2:1e:48:f9:9b:4a:df:f2:f5:b8:0c:24:ac:a1:
                    cc:e6:ea:87:f1:2c:48:60:81:e0:b9:2c:d6:ad:88:
                    4c:a0:34:da:d5:d8:f3:6a:c4:2d:35:5f:4a:16:1e:
                    6b:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:67:B0:FD:8F:E2:1C:04:62:A9:7C:87:41:6C:CD:31:59:5A:73:5B
            X509v3 Authority Key Identifier:
                keyid:B7:00:12:04:7C:6E:2D:21:08:06:5F:B8:72:FA:57:83:15:9A:36:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/twASBHxuLSEIBl-4cvpXgxWaNi0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/efc720-7ed5-4453-a7b1-b30faf47f06e/1/twASBHxuLSEIBl-4cvpXgxWaNi0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/efc720-7ed5-4453-a7b1-b30faf47f06e/1/twASBHxuLSEIBl-4cvpXgxWaNi0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:9e:3a:ee:fe:d2:c7:a2:60:4c:57:8c:a7:9f:16:b7:b4:49:
         11:8c:91:b7:d7:e2:0b:1c:5c:09:d4:93:e8:13:a4:8b:f4:12:
         be:98:d5:f7:58:cb:b1:cb:55:ac:a7:d6:7f:1b:ef:c8:a6:11:
         b2:7d:81:20:86:35:48:04:1b:5c:82:eb:10:09:46:4f:1f:fd:
         7f:4d:c8:d3:80:ed:8d:f7:1d:b3:7a:8e:9e:fe:ba:2e:f5:05:
         fd:b3:21:d2:99:c2:a4:45:59:75:ea:63:f0:bb:e9:45:91:ca:
         b3:83:75:51:9e:f9:30:5f:8a:88:22:a8:1a:75:00:a7:ff:0e:
         7f:49:44:49:94:11:06:67:66:3e:bd:e2:0b:ad:51:fa:01:bb:
         1a:64:9f:6c:7d:43:f9:ba:69:2f:40:db:7f:be:8b:7a:09:13:
         32:36:da:4a:6b:59:8f:4e:19:e7:c5:4d:26:2a:6f:ff:df:c1:
         20:73:7a:34:b2:c5:5a:b5:40:29:9e:33:9e:de:4f:87:f3:83:
         d4:13:86:b8:1f:8c:37:b4:7a:54:d1:38:7c:d5:fb:d9:f3:63:
         28:6f:36:2a:73:f7:73:53:3b:3e:75:95:41:c0:53:89:48:77:
         4a:fa:39:9d:6b:cb:dc:cf:6f:5a:54:77:dc:95:41:3e:6d:9f:
         16:0d:31:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----