Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/b06a8b-4077-444e-819f-edf1638850ed/1/a5mBXQoL3Yq4K7AjUxjbfnO5Pfs.mft
File:                     a5mBXQoL3Yq4K7AjUxjbfnO5Pfs.mft (raw, json)
Hash identifier:          FzRhnSwgmDW5yWi+tENje+b5oKbbinLIvXFGzEr40Gc=
Subject key identifier:   50:7C:AF:8F:6A:02:24:80:32:B7:95:9D:9F:AD:09:60:3B:AF:A7:F8
Authority key identifier: 6B:99:81:5D:0A:0B:DD:8A:B8:2B:B0:23:53:18:DB:7E:73:B9:3D:FB
Certificate issuer:       /CN=6b99815d0a0bdd8ab82bb0235318db7e73b93dfb
Certificate serial:       01892A8DB38BA93E56B62EBD422B35ED8BFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a5mBXQoL3Yq4K7AjUxjbfnO5Pfs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/b06a8b-4077-444e-819f-edf1638850ed/1/a5mBXQoL3Yq4K7AjUxjbfnO5Pfs.mft
Manifest number:          0878
Signing time:             Thu 06 Jul 2023 09:34:36 +0000
Manifest this update:     Thu 06 Jul 2023 09:34:36 +0000
Manifest next update:     Fri 07 Jul 2023 09:34:36 +0000
Files and hashes:         1: a5mBXQoL3Yq4K7AjUxjbfnO5Pfs.crl (hash: 4sX7olxfbr1ea7E9IDSGaGsfRY2v1/yzZymqbaBm268=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:2a:8d:b3:8b:a9:3e:56:b6:2e:bd:42:2b:35:ed:8b:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b99815d0a0bdd8ab82bb0235318db7e73b93dfb
        Validity
            Not Before: Jul  6 09:34:36 2023 GMT
            Not After : Jul  7 09:34:36 2023 GMT
        Subject: CN=507caf8f6a02248032b7959d9fad09603bafa7f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:af:7b:4a:0b:4d:32:04:0e:e8:4b:78:97:d0:
                    ce:ef:ee:a2:49:f8:71:47:ec:14:cc:1a:db:2c:45:
                    2f:db:47:fb:f2:0c:41:65:0c:a7:5d:1c:74:76:8a:
                    f6:73:05:86:7c:dd:0d:e6:01:df:7f:2f:28:de:2b:
                    f9:d0:96:19:a5:5b:94:e2:fe:e2:f5:c5:30:9e:78:
                    30:b7:4a:cf:c5:a0:6b:d9:1a:2e:50:d4:bd:95:33:
                    e1:b6:2a:a7:64:ad:59:7c:df:5c:ce:f8:6a:d5:14:
                    cc:8b:79:d1:24:7a:e2:38:2b:e9:b2:2f:09:d5:76:
                    5a:cf:cb:09:2d:58:7e:75:84:82:e9:a0:8f:cb:13:
                    a0:98:a2:43:b9:5d:1e:9a:db:8c:30:eb:a5:f4:d8:
                    0c:4e:03:f9:5a:b2:df:56:f6:7e:f5:3b:bd:92:4f:
                    ad:e9:2c:2d:a9:c9:14:18:1a:e3:b4:db:6c:17:22:
                    ec:48:2c:ee:63:6a:ee:25:f0:e2:f5:e0:c4:2e:72:
                    d3:9e:06:f0:7a:e4:20:1a:ec:79:0a:c0:66:2f:c7:
                    0c:46:0e:d3:75:3c:e1:86:03:ef:c2:f4:04:38:05:
                    dd:65:46:ed:e4:70:39:5f:dd:6c:cc:52:5f:86:2c:
                    15:65:09:5e:79:81:39:8e:28:78:4c:18:07:c6:47:
                    90:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:7C:AF:8F:6A:02:24:80:32:B7:95:9D:9F:AD:09:60:3B:AF:A7:F8
            X509v3 Authority Key Identifier:
                keyid:6B:99:81:5D:0A:0B:DD:8A:B8:2B:B0:23:53:18:DB:7E:73:B9:3D:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5mBXQoL3Yq4K7AjUxjbfnO5Pfs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b06a8b-4077-444e-819f-edf1638850ed/1/a5mBXQoL3Yq4K7AjUxjbfnO5Pfs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b06a8b-4077-444e-819f-edf1638850ed/1/a5mBXQoL3Yq4K7AjUxjbfnO5Pfs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:e6:03:48:88:73:f0:77:53:6d:ae:fd:63:52:81:20:28:86:
         66:6c:01:a4:3a:72:2b:53:d1:2b:ca:d9:0f:a5:25:74:90:06:
         e2:ca:2c:4e:88:ac:19:c6:ce:e8:e5:68:ca:9a:4c:96:30:98:
         63:cc:af:ac:aa:69:d0:c5:14:6d:1a:2d:a5:7e:a3:05:1c:02:
         ba:de:de:67:d8:76:46:a9:b3:b0:1a:60:47:4b:6d:4a:fd:87:
         d1:84:4e:09:e5:8d:f8:89:df:c3:6e:9d:1b:c1:ac:3d:6d:7c:
         67:a0:e3:16:40:b0:a5:a7:44:f7:4a:53:90:a4:94:9e:c8:9c:
         6b:f6:8e:d8:7a:7c:80:1b:e3:f7:4a:c8:8e:6b:12:b8:0b:32:
         49:4a:02:c2:58:fb:62:69:84:ad:ce:61:ba:d0:7d:a7:27:eb:
         db:47:e0:0e:17:9c:75:e2:9e:7c:48:64:39:66:0c:60:a7:21:
         85:c2:f6:dd:70:9a:b6:65:8f:8c:cd:44:aa:dc:28:e4:b0:a8:
         9c:3d:84:14:37:fa:dd:68:34:55:c0:d0:a8:fc:5d:0e:5f:3d:
         5b:22:19:d7:11:5a:1d:c4:4e:41:7b:b3:cb:62:44:8b:3a:a7:
         82:56:67:10:fc:c5:70:b5:7d:7d:8e:0a:13:76:3d:63:31:8d:
         04:1d:54:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----