Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/0b834c-d254-435f-b208-9f6b2786f32a/1/1HDKxunkoagJpAZRN-zUyrOC4No.mft
File:                     1HDKxunkoagJpAZRN-zUyrOC4No.mft (raw, json)
Hash identifier:          LF3p1LJiCZDaQBDKPsLyGKt2UH4ao/brTYbDpYr+8uU=
Subject key identifier:   EB:44:42:D5:99:CF:59:C9:5A:31:9F:68:E1:89:CD:70:8E:1B:78:4C
Authority key identifier: D4:70:CA:C6:E9:E4:A1:A8:09:A4:06:51:37:EC:D4:CA:B3:82:E0:DA
Certificate issuer:       /CN=d470cac6e9e4a1a809a4065137ecd4cab382e0da
Certificate serial:       06717358
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1HDKxunkoagJpAZRN-zUyrOC4No.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/0b834c-d254-435f-b208-9f6b2786f32a/1/1HDKxunkoagJpAZRN-zUyrOC4No.mft
Manifest number:          0870
Signing time:             Tue 15 Mar 2022 06:48:08 +0000
Manifest this update:     Tue 15 Mar 2022 06:48:08 +0000
Manifest next update:     Wed 16 Mar 2022 06:48:08 +0000
Files and hashes:         1: 1HDKxunkoagJpAZRN-zUyrOC4No.crl (hash: Jhj7N75lB/Kz1Aj32N9aiIQ5zNau3lSmRmASeJl7trg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108098392 (0x6717358)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d470cac6e9e4a1a809a4065137ecd4cab382e0da
        Validity
            Not Before: Mar 15 06:48:08 2022 GMT
            Not After : Mar 16 06:48:08 2022 GMT
        Subject: CN=eb4442d599cf59c95a319f68e189cd708e1b784c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:35:93:2d:44:d2:3c:d8:c3:6d:af:33:e4:ec:
                    f8:d4:6e:5d:4b:0b:a4:41:ff:5d:5f:83:a2:a7:71:
                    38:f8:d9:52:4a:16:22:ef:ef:fd:3e:9e:40:4e:9e:
                    31:f3:e9:51:f0:e9:dc:d5:4d:05:96:ef:a9:44:67:
                    7f:c3:9f:c4:f8:28:c3:ed:96:62:de:e3:0f:a9:ce:
                    90:9b:fb:f2:e7:43:ae:39:93:f7:cf:c9:db:a0:59:
                    cc:37:ab:53:7c:d5:cb:00:6a:eb:c9:ba:6c:b1:d6:
                    4c:fa:7a:f0:8e:05:af:a0:83:40:33:2b:73:ad:04:
                    6d:ea:f7:be:02:36:c0:18:31:28:fd:ce:73:b8:96:
                    92:ba:66:b2:4f:a6:59:4a:14:4b:d2:d2:d4:8d:d6:
                    2c:9a:94:6d:a0:18:6e:70:aa:74:e3:8e:74:b3:57:
                    e3:49:54:55:a1:b0:b8:e9:a8:3c:6c:a9:30:6c:d7:
                    0a:40:99:18:e8:25:04:cf:c3:dc:0b:b3:be:45:a0:
                    f5:7f:6d:ed:59:b7:62:a9:b1:0c:d6:de:fd:42:b6:
                    05:f9:54:be:bc:49:cc:b9:2c:c0:84:79:f6:55:d6:
                    4b:55:f6:8c:b4:7e:12:5e:29:52:95:70:00:46:32:
                    a2:ca:b5:d7:1c:dd:14:2b:64:8e:02:fd:b5:48:1a:
                    bf:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:44:42:D5:99:CF:59:C9:5A:31:9F:68:E1:89:CD:70:8E:1B:78:4C
            X509v3 Authority Key Identifier:
                keyid:D4:70:CA:C6:E9:E4:A1:A8:09:A4:06:51:37:EC:D4:CA:B3:82:E0:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HDKxunkoagJpAZRN-zUyrOC4No.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/0b834c-d254-435f-b208-9f6b2786f32a/1/1HDKxunkoagJpAZRN-zUyrOC4No.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/0b834c-d254-435f-b208-9f6b2786f32a/1/1HDKxunkoagJpAZRN-zUyrOC4No.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:97:2d:5c:d7:53:48:98:f9:9d:a5:2d:f7:d6:ec:0d:07:2d:
         98:1e:4a:ee:b8:7e:49:5d:46:a2:63:00:b4:67:cd:77:0e:c8:
         f7:2a:0a:96:39:9e:bd:48:fe:97:06:92:2b:fc:a4:0b:97:37:
         f6:2c:63:1b:72:7c:bb:b9:13:d8:c4:93:ba:33:24:ac:4c:20:
         58:bf:d3:34:fd:29:d1:7b:70:28:fd:bc:95:90:d9:ab:54:2f:
         05:a2:2b:d3:d5:ef:62:1d:a9:6d:c2:99:34:49:5f:90:d3:c8:
         14:69:52:1b:56:c5:4b:a8:f2:6e:34:bc:8e:0f:6f:87:ef:8e:
         31:e4:65:f3:13:af:8c:ab:4d:12:a7:ab:37:7f:04:1f:77:9c:
         5e:2b:63:1f:61:3e:1b:99:a4:59:02:76:08:6f:78:b4:8f:b0:
         c5:d5:e4:04:b4:05:f1:62:d5:73:8b:03:b1:54:a8:bd:86:95:
         90:67:48:11:ef:bb:c1:05:1f:64:df:ab:ba:18:00:fa:14:4a:
         2e:a2:c1:bb:b2:6b:33:7e:7f:66:39:7c:46:0b:80:b3:51:31:
         b2:60:01:cc:c7:bd:db:64:d2:fc:dd:cd:25:cd:3d:33:3e:64:
         fb:18:84:3f:18:21:60:39:fe:2c:64:77:b8:f8:c3:66:16:de:
         f6:0d:d0:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----