Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/c40c94-e43f-4433-9ed6-8269acf68d57/1/GGwkV7pn346hvFD_5qgXS7umSUc.mft
File:                     GGwkV7pn346hvFD_5qgXS7umSUc.mft (raw, json)
Hash identifier:          cXuXLs1IEljvEzXpIMKd/xKYpdrjatdNMdFZrwzcyrc=
Subject key identifier:   B7:F2:77:27:A9:A0:9C:81:68:E5:59:FF:E8:E6:BB:FD:90:C0:13:FA
Authority key identifier: 18:6C:24:57:BA:67:DF:8E:A1:BC:50:FF:E6:A8:17:4B:BB:A6:49:47
Certificate issuer:       /CN=186c2457ba67df8ea1bc50ffe6a8174bbba64947
Certificate serial:       018528EE5D3049DE8B2AB845EE77C47FE321
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GGwkV7pn346hvFD_5qgXS7umSUc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/c40c94-e43f-4433-9ed6-8269acf68d57/1/GGwkV7pn346hvFD_5qgXS7umSUc.mft
Manifest number:          0195
Signing time:             Mon 19 Dec 2022 05:49:48 +0000
Manifest this update:     Mon 19 Dec 2022 05:49:48 +0000
Manifest next update:     Tue 20 Dec 2022 05:49:48 +0000
Files and hashes:         1: GGwkV7pn346hvFD_5qgXS7umSUc.crl (hash: /GBQKXyEthXvqWjbe9WLtehnczhgGCsvBqLHERNl2W0=)
                          2: G_2qgGn3Dn75UGtW04rtQT8fctM.roa (hash: VTO03VJUd59dRIkYTxOC9nkbF+RDc9rkuYvLu72BSwc=)
                          3: wEdPPxREYM9PpzizgqgTAp8WPoc.roa (hash: nngEtnEkEC82j8fpKYCjd2RRDBHb+Vs+5zXTio+Rp8s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:28:ee:5d:30:49:de:8b:2a:b8:45:ee:77:c4:7f:e3:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=186c2457ba67df8ea1bc50ffe6a8174bbba64947
        Validity
            Not Before: Dec 19 05:49:48 2022 GMT
            Not After : Dec 20 05:49:48 2022 GMT
        Subject: CN=b7f27727a9a09c8168e559ffe8e6bbfd90c013fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:39:59:ae:f0:ec:37:57:0a:ea:4b:90:62:cc:
                    9c:a3:9f:89:98:e9:c3:4b:71:43:b1:df:b6:04:b1:
                    cd:87:4e:ab:5b:92:ce:87:d9:81:2e:20:f9:69:38:
                    8d:93:8e:a5:22:83:23:7a:b5:9d:96:59:33:a9:25:
                    a1:cc:7e:4e:cc:df:9f:87:09:80:10:09:0b:b7:c5:
                    b0:43:2d:2d:f0:39:d3:42:01:0b:39:ef:01:3a:e7:
                    20:7e:11:e3:6e:63:7d:25:02:be:ec:e2:ac:d5:c0:
                    c0:85:05:ba:e1:05:dc:fb:76:50:66:ee:8f:09:45:
                    05:98:35:24:38:9c:64:64:22:74:fd:b5:6e:c6:72:
                    39:7c:73:3b:38:ed:0f:45:7f:af:ca:88:0b:77:ee:
                    b8:b2:d8:60:b0:ea:af:1c:d5:d8:08:b1:e9:cd:60:
                    b5:37:82:14:82:39:d5:77:60:5d:28:5d:27:74:ea:
                    89:ad:4a:9e:11:0d:a2:65:47:3f:0c:67:d6:fc:e8:
                    7d:82:7b:36:4b:df:bc:a5:f5:01:5e:ac:5a:5a:93:
                    8e:8a:de:11:0b:1b:ec:ac:f8:0e:53:56:4e:df:5c:
                    af:49:1b:46:2c:32:19:3b:dd:10:cc:04:eb:58:a2:
                    09:24:0c:f6:1e:cf:5b:c3:8c:bc:ea:4c:28:33:45:
                    82:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:F2:77:27:A9:A0:9C:81:68:E5:59:FF:E8:E6:BB:FD:90:C0:13:FA
            X509v3 Authority Key Identifier:
                keyid:18:6C:24:57:BA:67:DF:8E:A1:BC:50:FF:E6:A8:17:4B:BB:A6:49:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GGwkV7pn346hvFD_5qgXS7umSUc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c40c94-e43f-4433-9ed6-8269acf68d57/1/GGwkV7pn346hvFD_5qgXS7umSUc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c40c94-e43f-4433-9ed6-8269acf68d57/1/GGwkV7pn346hvFD_5qgXS7umSUc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:63:06:ee:d3:21:40:a7:33:aa:4d:a2:c3:77:26:7d:cd:c9:
         49:36:15:ab:aa:91:f7:b2:25:db:a4:00:b5:b2:6e:1c:47:b0:
         1a:99:9d:34:a4:2b:a2:f6:82:76:f6:02:9a:c4:04:dd:32:b0:
         26:5f:48:85:56:bd:3f:10:7e:5a:51:27:f9:50:9b:b9:b7:88:
         93:8c:e9:c4:30:c5:bf:ed:76:69:99:13:a8:6a:07:19:3c:c9:
         be:79:f8:8b:02:d0:dc:32:83:8f:1a:ec:aa:63:93:47:e3:3c:
         8e:23:a1:c6:3f:e9:fd:0f:b0:fb:0d:49:fe:b9:e3:b1:c0:7c:
         0f:22:53:bf:bf:27:13:64:26:c9:99:cf:dd:b3:a8:9e:aa:54:
         e5:bc:1f:e5:c4:57:a3:65:48:8b:87:7d:90:d5:b9:9f:6f:e5:
         ff:a6:2b:82:4e:10:d1:2f:3e:e6:3f:5f:15:0e:53:f4:3c:4c:
         3e:d4:f2:11:c4:aa:1c:2f:ba:a9:c0:49:bf:94:0b:c0:49:b5:
         e9:55:cb:e5:5b:fa:71:a8:47:bc:99:68:99:17:fb:49:9c:b9:
         a6:5d:54:c0:ca:93:79:3c:13:ea:94:fc:cd:fd:5f:a7:ed:bc:
         e5:a6:0b:fd:34:1f:be:48:67:2c:65:7a:6e:9d:8b:23:5e:08:
         9f:d8:24:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----