Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/dcdb34-4e2f-4e82-8535-16813a96cc88/1/m2hm2a-PQ7sOnh_JxC0TuRni7sc.mft
File:                     m2hm2a-PQ7sOnh_JxC0TuRni7sc.mft (raw, json)
Hash identifier:          lm/k6FWIk4Fq/gdWJ91LYN/bu3X2klMNe8dhFZ3PlfI=
Subject key identifier:   93:6D:50:83:13:99:8C:D4:8F:9C:F9:53:12:3D:ED:60:D7:DB:B3:F1
Authority key identifier: 9B:68:66:D9:AF:8F:43:BB:0E:9E:1F:C9:C4:2D:13:B9:19:E2:EE:C7
Certificate issuer:       /CN=9b6866d9af8f43bb0e9e1fc9c42d13b919e2eec7
Certificate serial:       01833E75BC7400C344BBC7DEAC4399148697
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m2hm2a-PQ7sOnh_JxC0TuRni7sc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/dcdb34-4e2f-4e82-8535-16813a96cc88/1/m2hm2a-PQ7sOnh_JxC0TuRni7sc.mft
Manifest number:          0ABE
Signing time:             Thu 15 Sep 2022 00:04:06 +0000
Manifest this update:     Thu 15 Sep 2022 00:04:06 +0000
Manifest next update:     Fri 16 Sep 2022 00:04:06 +0000
Files and hashes:         1: ZzpjGuJKoEH-93kWJTayHVRApFE.roa (hash: A4Ka+IMT+cV/ewopSeUwmPzCgbuEvYTmUq4jUsXlSl8=)
                          2: m2hm2a-PQ7sOnh_JxC0TuRni7sc.crl (hash: zdR0NMfA3Dtm87nFLeh9uaVyAo6m3y/6gFad02IbhxQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:3e:75:bc:74:00:c3:44:bb:c7:de:ac:43:99:14:86:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b6866d9af8f43bb0e9e1fc9c42d13b919e2eec7
        Validity
            Not Before: Sep 15 00:04:06 2022 GMT
            Not After : Sep 16 00:04:06 2022 GMT
        Subject: CN=936d508313998cd48f9cf953123ded60d7dbb3f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:5c:82:cd:02:d5:f9:b3:0d:73:cc:b7:ed:2d:
                    ba:b2:10:8b:41:80:ae:b8:e1:5f:22:7a:50:36:68:
                    a9:b5:a2:4b:29:14:48:66:44:b8:2c:87:f8:1a:41:
                    21:8b:7d:c0:24:fa:80:be:a1:ba:98:1c:9a:e5:0f:
                    2a:13:7e:7f:74:c3:79:58:70:90:9c:11:c4:ba:51:
                    74:28:1a:fb:e1:6b:fc:d7:94:22:16:0f:0e:7b:eb:
                    84:d5:f1:f6:ef:db:75:b4:bd:84:9a:ef:65:a8:75:
                    06:88:14:14:9b:c5:71:4b:c8:fe:a9:13:3b:18:24:
                    69:28:53:69:de:59:6c:a9:41:e0:9e:dc:1b:e1:7f:
                    82:63:60:5b:c7:1b:b9:0a:dc:19:a8:b5:16:06:7b:
                    07:12:32:1a:d1:c6:3a:0f:0a:1f:e9:a2:d2:55:89:
                    97:cb:84:2a:9d:b3:11:c0:d6:e4:76:ac:43:f9:c4:
                    d8:13:56:ae:14:2b:01:10:d7:ee:e6:da:7f:dd:93:
                    20:76:9f:cb:46:92:d5:51:f4:dd:2a:4e:2e:1c:f3:
                    8c:bb:22:55:23:a1:49:00:d9:08:d3:fc:49:76:aa:
                    5a:00:04:67:0b:e6:fe:18:80:00:33:39:be:41:90:
                    7a:0d:42:58:d0:94:af:8e:16:dd:4f:5d:d3:7e:1a:
                    b6:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:6D:50:83:13:99:8C:D4:8F:9C:F9:53:12:3D:ED:60:D7:DB:B3:F1
            X509v3 Authority Key Identifier:
                keyid:9B:68:66:D9:AF:8F:43:BB:0E:9E:1F:C9:C4:2D:13:B9:19:E2:EE:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m2hm2a-PQ7sOnh_JxC0TuRni7sc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/dcdb34-4e2f-4e82-8535-16813a96cc88/1/m2hm2a-PQ7sOnh_JxC0TuRni7sc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/dcdb34-4e2f-4e82-8535-16813a96cc88/1/m2hm2a-PQ7sOnh_JxC0TuRni7sc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:04:a2:aa:8f:88:9d:62:53:fa:5d:df:fe:3f:a9:4d:52:fc:
         7c:2d:47:5c:92:41:7e:a7:6c:37:0a:6a:3a:2a:80:69:9d:14:
         80:f0:4a:13:8e:9c:e1:60:10:07:cc:01:aa:10:3f:3b:a0:07:
         2b:c6:bc:54:08:90:7e:5d:a9:a7:1d:7c:96:58:74:33:72:66:
         c8:66:85:50:05:9e:7f:07:af:1b:6e:18:fc:17:9b:67:52:31:
         32:c2:b9:7f:bf:ec:71:ba:50:64:3c:40:df:1c:a5:88:dc:45:
         80:b9:57:2f:b5:d5:d5:9c:ed:59:9f:73:de:4c:84:60:e2:11:
         0d:cd:f1:e6:19:ca:70:52:79:47:95:6c:05:73:b1:4e:ce:a8:
         52:ee:68:3f:4b:e7:b0:fa:4d:dc:55:a9:dc:cb:35:b7:91:35:
         2c:da:43:62:39:09:37:70:49:34:af:71:e2:69:93:5b:5b:96:
         65:bb:6f:5c:3c:41:68:df:08:4e:b1:7b:bc:d8:80:d6:fe:ec:
         a2:bb:61:82:e5:69:4e:a9:f3:77:30:3c:05:f1:df:ee:c6:3e:
         ee:6a:25:a7:67:9e:96:a9:9f:ae:4e:38:35:1d:ec:60:28:55:
         e5:7b:d5:b0:be:38:0b:f9:a3:72:5b:34:49:d7:89:09:6e:7d:
         79:aa:8b:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----