Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/04619f-25de-4de7-96e6-9c010e6b6c08/1/3qVl-s_KijdP5vDNpHENUpBdrJw.mft
File:                     3qVl-s_KijdP5vDNpHENUpBdrJw.mft (raw, json)
Hash identifier:          mGIC2kd5C9T4dhUspTdO99D0ZlXmUIQshVG0H0afh4E=
Subject key identifier:   EA:F7:0C:EA:F9:11:A5:03:1A:56:2D:AA:69:94:BD:7F:23:6C:9B:72
Authority key identifier: DE:A5:65:FA:CF:CA:8A:37:4F:E6:F0:CD:A4:71:0D:52:90:5D:AC:9C
Certificate issuer:       /CN=dea565facfca8a374fe6f0cda4710d52905dac9c
Certificate serial:       01852D5AEB559DD6934BF1BFDBDEDDDEA49D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3qVl-s_KijdP5vDNpHENUpBdrJw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/04619f-25de-4de7-96e6-9c010e6b6c08/1/3qVl-s_KijdP5vDNpHENUpBdrJw.mft
Manifest number:          0BD8
Signing time:             Tue 20 Dec 2022 02:26:51 +0000
Manifest this update:     Tue 20 Dec 2022 02:26:51 +0000
Manifest next update:     Wed 21 Dec 2022 02:26:51 +0000
Files and hashes:         1: 3qVl-s_KijdP5vDNpHENUpBdrJw.crl (hash: /ZCdWQuWTbRpnCkHchr3ppivZ64ZdaA3iFt48nipXU4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:2d:5a:eb:55:9d:d6:93:4b:f1:bf:db:de:dd:de:a4:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dea565facfca8a374fe6f0cda4710d52905dac9c
        Validity
            Not Before: Dec 20 02:26:51 2022 GMT
            Not After : Dec 21 02:26:51 2022 GMT
        Subject: CN=eaf70ceaf911a5031a562daa6994bd7f236c9b72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:3a:51:34:f3:26:82:5d:f9:ff:4f:d4:a6:e4:
                    96:62:4d:1d:2f:ca:f9:a7:3c:97:11:2b:e9:0c:13:
                    68:bb:c1:56:8e:89:a7:0f:27:11:f1:25:3d:f1:4e:
                    3f:41:5a:08:f4:72:ba:2d:b9:37:81:e3:ef:1a:44:
                    29:c7:f0:25:a3:ed:63:1b:2f:43:96:60:cc:3f:b1:
                    15:82:ba:d5:86:88:f2:a2:c7:1c:8b:aa:bf:0b:a6:
                    6d:9a:13:10:6d:68:1a:f3:1f:6f:61:e5:7d:97:a1:
                    21:86:83:d3:6b:15:19:6c:37:8e:95:8c:00:83:1c:
                    87:fd:30:3a:d6:8c:ad:9e:1d:6d:5d:f6:72:8e:31:
                    c3:85:c0:b3:ae:cd:42:83:9e:1a:f0:d6:0d:29:10:
                    b6:7b:ed:9f:7e:af:46:3d:97:cb:b0:b6:3b:f8:d5:
                    15:1c:53:77:8c:54:90:8b:12:72:35:25:bd:bd:a6:
                    ac:65:4d:86:9f:cc:97:4b:93:05:76:b2:8d:5a:0d:
                    32:a4:bd:dd:97:f2:a7:75:8f:b7:ec:dc:57:27:cd:
                    25:ac:4e:f2:b1:40:58:14:87:d6:60:3c:3a:c2:1c:
                    7c:02:7b:fb:c1:9e:9d:2e:62:ca:cf:43:05:f5:84:
                    bc:50:e0:83:de:3e:3a:bd:bb:a0:b7:1f:38:f7:70:
                    5d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:F7:0C:EA:F9:11:A5:03:1A:56:2D:AA:69:94:BD:7F:23:6C:9B:72
            X509v3 Authority Key Identifier:
                keyid:DE:A5:65:FA:CF:CA:8A:37:4F:E6:F0:CD:A4:71:0D:52:90:5D:AC:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3qVl-s_KijdP5vDNpHENUpBdrJw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/04619f-25de-4de7-96e6-9c010e6b6c08/1/3qVl-s_KijdP5vDNpHENUpBdrJw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/04619f-25de-4de7-96e6-9c010e6b6c08/1/3qVl-s_KijdP5vDNpHENUpBdrJw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:e3:dd:63:e4:39:37:57:c7:cc:65:16:63:a7:e1:6b:04:45:
         1b:ad:24:6c:e3:96:5d:cc:de:18:db:67:ae:e2:69:1d:4a:44:
         38:d7:a0:66:81:bb:ce:97:b2:f1:41:53:dc:93:7d:60:00:a4:
         44:6e:d4:7d:86:74:b5:7d:84:58:81:32:92:e0:e8:4e:15:65:
         9a:e9:c9:13:0c:76:38:0f:f9:f8:19:cc:88:c2:0c:61:f3:01:
         6e:71:53:25:88:20:ad:03:3c:fa:0b:dd:3f:e1:37:64:67:8c:
         3a:a7:bb:03:38:84:ed:a9:f9:ea:a6:3c:da:bc:2c:4f:c8:dd:
         1d:02:fd:47:47:f2:22:59:a6:29:c8:05:be:0d:41:74:81:b6:
         74:7e:a3:97:04:e4:e6:38:0d:c8:4d:b8:a6:07:bf:e6:20:4a:
         86:83:9f:54:ee:2c:0f:7f:6d:42:ce:5d:1a:b1:c8:af:74:31:
         34:24:00:0f:8a:cd:89:82:40:99:ef:ca:38:7e:2a:ca:f4:4d:
         65:5e:55:53:62:c1:a0:21:00:99:25:a5:ad:09:f2:b9:af:db:
         49:58:48:86:ee:9f:36:d0:ea:a8:fc:26:5a:25:c9:f2:1c:44:
         26:1a:05:80:e3:c8:48:91:11:9a:ff:df:f5:fe:0f:e6:06:b8:
         67:0f:7e:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----