Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/743cb4-44d3-4ab1-ac78-add86c095bfe/1/KJZh0omwOm4rBVH4U6Xcjxlo9q0.mft
File:                     KJZh0omwOm4rBVH4U6Xcjxlo9q0.mft (raw, json)
Hash identifier:          W8zXshdkLxA4BaFrTlnzZZwmd7mkbGMl4uhlx5ApcDw=
Subject key identifier:   4A:11:57:8E:7E:1A:01:11:63:D2:69:9C:44:A1:98:65:18:A6:34:E7
Authority key identifier: 28:96:61:D2:89:B0:3A:6E:2B:05:51:F8:53:A5:DC:8F:19:68:F6:AD
Certificate issuer:       /CN=289661d289b03a6e2b0551f853a5dc8f1968f6ad
Certificate serial:       01840E4C20DB99B3FC5F1AFE5A68276BCAA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KJZh0omwOm4rBVH4U6Xcjxlo9q0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/743cb4-44d3-4ab1-ac78-add86c095bfe/1/KJZh0omwOm4rBVH4U6Xcjxlo9q0.mft
Manifest number:          0B30
Signing time:             Tue 25 Oct 2022 08:39:40 +0000
Manifest this update:     Tue 25 Oct 2022 08:39:40 +0000
Manifest next update:     Wed 26 Oct 2022 08:39:40 +0000
Files and hashes:         1: KJZh0omwOm4rBVH4U6Xcjxlo9q0.crl (hash: pa+1IMoEM0w/cwc94+N88fjm62m7gE2cVTZQeeQselY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:0e:4c:20:db:99:b3:fc:5f:1a:fe:5a:68:27:6b:ca:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=289661d289b03a6e2b0551f853a5dc8f1968f6ad
        Validity
            Not Before: Oct 25 08:39:40 2022 GMT
            Not After : Oct 26 08:39:40 2022 GMT
        Subject: CN=4a11578e7e1a011163d2699c44a1986518a634e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:a4:e3:0f:09:63:9f:a2:0e:f7:1f:55:f3:a7:
                    cb:91:39:97:ad:c2:0e:c4:5e:68:65:29:c3:29:fa:
                    0e:00:bd:dd:bc:1d:09:ff:37:41:54:a0:6d:b2:46:
                    ab:c6:e9:89:17:6c:28:dc:23:52:74:96:b9:0f:95:
                    b0:fb:bb:89:60:e8:bf:a5:31:ff:ce:5d:8b:b6:e4:
                    01:27:38:ad:19:8a:76:55:ac:1b:44:bd:05:6c:cc:
                    4a:0b:c2:6d:06:c0:4f:b2:f2:ed:13:3f:39:1a:8b:
                    bb:0e:ff:e1:5d:0d:c2:0d:e6:05:20:ac:e6:c3:f4:
                    d6:92:cf:c5:bb:3d:6f:fe:c0:78:83:aa:26:cb:bf:
                    e6:bb:84:2d:2d:d5:34:cd:7e:29:93:4c:56:62:0c:
                    36:ef:7e:9e:ff:ed:4b:34:e8:00:60:19:1a:81:f6:
                    2e:74:63:11:0a:60:d0:86:9a:86:19:ce:69:fe:30:
                    13:4e:eb:be:20:63:cf:5d:7c:c2:ec:59:bb:ab:e2:
                    3b:36:27:5d:f9:7a:88:07:1a:fe:16:06:46:ba:0a:
                    be:8f:f8:17:d8:81:f9:a6:75:20:23:c9:02:24:2f:
                    6c:7a:f4:66:d0:c2:ba:7a:a9:eb:f9:80:4c:d5:76:
                    90:10:1a:51:97:b9:80:5b:26:0d:42:60:82:ad:fa:
                    4a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:11:57:8E:7E:1A:01:11:63:D2:69:9C:44:A1:98:65:18:A6:34:E7
            X509v3 Authority Key Identifier:
                keyid:28:96:61:D2:89:B0:3A:6E:2B:05:51:F8:53:A5:DC:8F:19:68:F6:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJZh0omwOm4rBVH4U6Xcjxlo9q0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/743cb4-44d3-4ab1-ac78-add86c095bfe/1/KJZh0omwOm4rBVH4U6Xcjxlo9q0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/743cb4-44d3-4ab1-ac78-add86c095bfe/1/KJZh0omwOm4rBVH4U6Xcjxlo9q0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:1b:01:db:6e:df:d6:9b:dd:45:8f:33:9b:c6:82:7e:2a:b3:
         62:68:b4:64:44:03:7c:3c:b9:09:d0:14:c7:0c:16:19:56:36:
         0d:88:7a:9e:e8:b1:b9:59:0c:47:9a:a4:51:fa:fe:b5:8f:17:
         eb:1f:15:84:7b:48:27:f4:39:d5:9f:a6:5b:9c:4a:dd:2a:5c:
         0d:bf:49:a5:f0:e2:ea:dc:3f:f0:29:03:f2:e8:1a:e1:17:12:
         71:52:c4:56:67:bf:a6:13:07:cf:d9:83:df:4b:4a:e3:64:69:
         70:1c:70:6e:c7:35:7a:69:a5:3e:92:d4:13:17:17:a8:01:33:
         dd:d2:9f:5b:9a:64:64:8c:20:61:e5:d8:9a:04:0d:96:ca:55:
         ee:3b:72:fa:a3:b4:a3:24:fc:96:4d:8b:fa:2f:0e:97:fc:54:
         e0:bd:52:0c:04:47:81:55:eb:8c:5b:cc:0d:b1:e8:16:26:8d:
         42:98:d5:8e:e1:35:58:30:64:9b:0d:49:51:fc:a3:9b:77:f9:
         72:9e:8e:2f:12:18:0a:ca:43:a0:ca:73:bf:36:29:6d:60:e8:
         03:82:f0:ad:66:8e:32:6d:53:33:4f:3a:5c:3b:6a:7d:dc:ad:
         ba:58:bf:bf:78:de:7b:47:81:de:33:64:51:64:ab:ef:70:ab:
         99:f7:b6:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----