Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/69b6da-6473-44f2-8e91-f36567f62678/1/pFEOWt0HQo8mPY6gFAx9NS5TSGw.mft
File:                     pFEOWt0HQo8mPY6gFAx9NS5TSGw.mft (raw, json)
Hash identifier:          k7ipvrjHyoaSxqPPUd1S+QIhNN8fAU/hXNLgeIf5g4w=
Subject key identifier:   2E:4A:97:F7:FB:E9:3B:5C:81:A2:C2:6B:4E:8F:0B:4A:A3:5E:19:9B
Authority key identifier: A4:51:0E:5A:DD:07:42:8F:26:3D:8E:A0:14:0C:7D:35:2E:53:48:6C
Certificate issuer:       /CN=a4510e5add07428f263d8ea0140c7d352e53486c
Certificate serial:       0188288BBDC0B19036A1FB29D42D80B68F0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pFEOWt0HQo8mPY6gFAx9NS5TSGw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/69b6da-6473-44f2-8e91-f36567f62678/1/pFEOWt0HQo8mPY6gFAx9NS5TSGw.mft
Manifest number:          04E8
Signing time:             Wed 17 May 2023 07:10:26 +0000
Manifest this update:     Wed 17 May 2023 07:10:26 +0000
Manifest next update:     Thu 18 May 2023 07:10:26 +0000
Files and hashes:         1: pFEOWt0HQo8mPY6gFAx9NS5TSGw.crl (hash: 5+uEa5MXFsxyLKQYqNplPrV1vKn0hyMZE35tdLi6vps=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:28:8b:bd:c0:b1:90:36:a1:fb:29:d4:2d:80:b6:8f:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4510e5add07428f263d8ea0140c7d352e53486c
        Validity
            Not Before: May 17 07:10:26 2023 GMT
            Not After : May 18 07:10:26 2023 GMT
        Subject: CN=2e4a97f7fbe93b5c81a2c26b4e8f0b4aa35e199b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:81:4c:47:66:f4:c6:f9:75:da:4e:01:5c:72:
                    a1:02:55:86:77:70:94:f9:65:82:88:38:75:90:b8:
                    d6:8d:1d:e2:f2:e0:0d:ea:99:fa:12:da:52:c0:0e:
                    53:c8:5d:f3:a0:c9:5f:85:07:d4:77:3d:3a:0f:c7:
                    73:f9:5a:0e:65:6c:83:82:47:4b:c4:b1:34:9b:b5:
                    60:b7:28:77:aa:53:d2:a0:ef:f5:35:d8:d6:05:f8:
                    11:8a:2f:4c:c6:11:ae:65:24:ff:80:33:f1:66:58:
                    8e:0b:0f:3e:c9:7a:2c:f3:fa:13:8a:d9:c9:8a:72:
                    75:63:0e:fc:49:d5:56:47:62:7e:bf:b3:12:82:8d:
                    cb:89:f3:fc:59:0a:ac:8a:3a:3f:33:a5:6b:e0:d0:
                    d3:f4:53:06:aa:c7:50:a1:77:0d:7e:f4:1a:9a:4c:
                    55:88:e5:de:7d:7e:e9:5e:a1:65:8f:75:0f:9e:ac:
                    5c:c9:f7:9c:44:89:63:03:30:ad:09:45:9f:f2:fe:
                    03:8e:69:1a:63:3d:bc:86:2f:82:18:b9:55:dc:e1:
                    12:1d:ad:a2:ce:3c:b5:64:af:e8:e0:a7:f8:b4:24:
                    b4:5a:6e:59:6c:a4:ae:0c:9d:f6:a2:07:ac:8b:3a:
                    1f:4a:04:29:c8:ee:8c:cf:7b:a8:16:ac:97:2d:b9:
                    7f:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:4A:97:F7:FB:E9:3B:5C:81:A2:C2:6B:4E:8F:0B:4A:A3:5E:19:9B
            X509v3 Authority Key Identifier:
                keyid:A4:51:0E:5A:DD:07:42:8F:26:3D:8E:A0:14:0C:7D:35:2E:53:48:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pFEOWt0HQo8mPY6gFAx9NS5TSGw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/69b6da-6473-44f2-8e91-f36567f62678/1/pFEOWt0HQo8mPY6gFAx9NS5TSGw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/69b6da-6473-44f2-8e91-f36567f62678/1/pFEOWt0HQo8mPY6gFAx9NS5TSGw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:16:d4:e8:4e:98:66:6b:ab:2e:7a:17:18:48:bb:41:42:dd:
         41:13:04:53:b9:3a:02:23:0d:0b:5c:4f:46:e6:29:00:fb:12:
         fe:01:26:69:00:09:88:6b:6f:68:a0:76:c1:b5:8a:a0:84:4a:
         25:32:c8:ad:19:a0:a4:91:9d:51:cb:81:db:c6:9c:85:4e:2f:
         2c:48:e3:11:39:52:87:a4:b4:de:a2:c5:f0:6b:c0:06:cf:21:
         ef:30:14:a9:3f:08:f2:ca:a4:39:78:b6:bd:0c:b3:b5:a0:c0:
         ad:70:b2:d3:b7:0a:61:36:4c:4e:a1:00:79:e9:b7:7e:4d:4c:
         e4:30:d9:82:d8:67:45:9c:ca:8b:c4:7c:c7:c7:3b:a2:02:b8:
         c5:85:84:ef:5c:01:10:29:46:71:4d:e8:f9:1a:9f:46:01:57:
         a9:48:cf:95:e2:dc:3f:fb:00:4b:6d:d5:5b:4f:7d:e7:80:ae:
         e2:2c:03:66:b2:7f:84:36:00:5b:7d:bf:d8:d6:52:24:f1:cf:
         de:39:75:0f:47:e3:1a:1c:a2:42:ad:44:38:c8:46:e4:25:d0:
         59:ee:94:04:cd:77:68:1b:da:fb:f6:62:39:fd:6e:7a:80:9e:
         1d:ba:02:f8:3d:d1:6d:b0:69:ad:3b:ec:03:f9:12:9f:32:4c:
         66:5d:72:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----