Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/69fa0f-4414-4a69-acd1-6cf3c3c26006/1/LyHK6Gy_EJmsz5HgIjWdJIbLpp0.mft
File:                     LyHK6Gy_EJmsz5HgIjWdJIbLpp0.mft (raw, json)
Hash identifier:          5pgjIbapprhx+XHwS8TueMgpMlJWicnF7+80UsjMaqo=
Subject key identifier:   B8:6F:78:28:2D:F3:FA:64:8D:F9:2C:D2:A0:D2:AB:92:66:F7:D6:84
Authority key identifier: 2F:21:CA:E8:6C:BF:10:99:AC:CF:91:E0:22:35:9D:24:86:CB:A6:9D
Certificate issuer:       /CN=2f21cae86cbf1099accf91e022359d2486cba69d
Certificate serial:       0189FCAE556ACC71836780B6D2C77B129C90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LyHK6Gy_EJmsz5HgIjWdJIbLpp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/69fa0f-4414-4a69-acd1-6cf3c3c26006/1/LyHK6Gy_EJmsz5HgIjWdJIbLpp0.mft
Manifest number:          0869
Signing time:             Wed 16 Aug 2023 04:50:30 +0000
Manifest this update:     Wed 16 Aug 2023 04:50:30 +0000
Manifest next update:     Thu 17 Aug 2023 04:50:30 +0000
Files and hashes:         1: LyHK6Gy_EJmsz5HgIjWdJIbLpp0.crl (hash: d8fy+OmkoswQVwidBJK74VOR74noZAspkrwlXE4SOL4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:fc:ae:55:6a:cc:71:83:67:80:b6:d2:c7:7b:12:9c:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f21cae86cbf1099accf91e022359d2486cba69d
        Validity
            Not Before: Aug 16 04:50:30 2023 GMT
            Not After : Aug 17 04:50:30 2023 GMT
        Subject: CN=b86f78282df3fa648df92cd2a0d2ab9266f7d684
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ea:c7:4c:f8:30:c0:95:fc:ff:52:55:84:6a:
                    91:7a:58:30:a2:24:ac:1c:18:ed:3d:50:d9:7a:df:
                    d3:1b:86:4d:b4:ac:6f:c3:d4:8f:1d:ab:5a:6c:8d:
                    b1:8d:72:80:2b:a6:50:4d:b4:59:fd:82:e8:a2:ee:
                    c6:fd:64:9d:84:e6:ba:af:cf:70:e3:b5:a8:e2:54:
                    d1:60:dd:a5:a3:97:15:73:25:64:bd:29:cb:e4:37:
                    9b:1d:ca:0e:12:4a:3a:6e:dd:90:b5:ae:20:63:eb:
                    14:ac:31:08:d3:32:04:19:f1:12:95:87:c7:fd:d4:
                    98:09:54:e4:2b:fd:3e:ce:bb:13:97:37:15:fa:be:
                    2a:0b:ad:db:f8:18:27:3c:70:2b:a5:72:99:e5:c2:
                    b6:07:21:1f:91:48:ca:54:95:a8:f9:c0:cf:39:7f:
                    e4:6a:ea:63:68:df:8d:32:ba:33:ca:ac:6b:10:09:
                    04:a6:a8:d8:74:96:12:17:06:ab:05:e1:f4:9d:78:
                    3a:db:fe:0c:f1:1a:5b:bd:3a:9d:d0:f4:75:90:6b:
                    73:e0:51:0a:0e:35:02:93:70:b5:bd:7f:94:de:9c:
                    a3:a1:3f:ea:9e:e4:83:80:23:b1:46:5d:10:2c:64:
                    d5:0c:74:9c:24:e1:7b:b1:0a:a2:0e:85:83:74:5d:
                    c5:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:6F:78:28:2D:F3:FA:64:8D:F9:2C:D2:A0:D2:AB:92:66:F7:D6:84
            X509v3 Authority Key Identifier:
                keyid:2F:21:CA:E8:6C:BF:10:99:AC:CF:91:E0:22:35:9D:24:86:CB:A6:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyHK6Gy_EJmsz5HgIjWdJIbLpp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/69fa0f-4414-4a69-acd1-6cf3c3c26006/1/LyHK6Gy_EJmsz5HgIjWdJIbLpp0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/69fa0f-4414-4a69-acd1-6cf3c3c26006/1/LyHK6Gy_EJmsz5HgIjWdJIbLpp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:9e:2a:58:a9:7e:35:12:5e:e5:30:82:13:a4:0b:92:e0:ee:
         3e:01:0d:b2:91:92:0c:d3:0e:dd:51:71:e9:c9:3c:59:5e:37:
         07:ad:18:e0:b3:5e:f9:72:a1:83:e2:4d:1b:d3:b3:8e:e3:ea:
         24:81:b9:cb:3d:2c:8c:49:7c:77:67:d0:df:82:47:9d:8f:50:
         a2:0b:2d:bf:e4:17:1b:65:55:d0:b9:31:f2:40:66:2c:b5:ab:
         9d:2f:6f:e2:5c:62:7e:37:0a:d4:ee:53:22:8b:a7:e5:7e:6e:
         23:9f:96:5b:ab:c2:0b:dc:b9:81:79:56:c0:02:da:b1:17:a7:
         5b:aa:6a:43:51:41:cc:60:19:94:07:74:fd:f3:f8:43:84:87:
         8d:fa:c8:a1:22:31:84:56:63:12:ec:e8:06:4e:b8:31:7b:61:
         8c:f2:5f:20:5d:f8:7b:53:ef:30:13:31:94:a7:18:51:15:18:
         cb:eb:f5:8d:2b:87:b1:47:f0:40:62:69:be:a3:0b:2b:86:35:
         44:4c:0c:fb:db:bd:f8:cb:3e:25:9c:13:03:c3:21:66:a4:31:
         b7:97:00:be:ad:38:32:6c:b7:c0:a8:a8:e5:e4:51:97:db:42:
         ad:39:df:b9:b1:ce:d0:e6:98:b1:36:1c:0d:05:65:ff:de:86:
         a8:36:dd:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----