Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/e76711-7837-4112-9f32-381dd0afc8c4/1/NrgsYdxiGmgulA0YlIjw028-D1M.mft
File:                     NrgsYdxiGmgulA0YlIjw028-D1M.mft (raw, json)
Hash identifier:          17qIsGc8TsLO8X13S+sn/TZXzpifSv0sW/zMs4tfeN8=
Subject key identifier:   5F:45:4A:BF:AA:1A:D0:41:BD:B3:FA:69:08:67:B4:E7:42:EE:2A:63
Authority key identifier: 36:B8:2C:61:DC:62:1A:68:2E:94:0D:18:94:88:F0:D3:6F:3E:0F:53
Certificate issuer:       /CN=36b82c61dc621a682e940d189488f0d36f3e0f53
Certificate serial:       01840D3764D592612B981A7E194CA59B31D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NrgsYdxiGmgulA0YlIjw028-D1M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/e76711-7837-4112-9f32-381dd0afc8c4/1/NrgsYdxiGmgulA0YlIjw028-D1M.mft
Manifest number:          26
Signing time:             Tue 25 Oct 2022 03:37:24 +0000
Manifest this update:     Tue 25 Oct 2022 03:37:24 +0000
Manifest next update:     Wed 26 Oct 2022 03:37:24 +0000
Files and hashes:         1: NrgsYdxiGmgulA0YlIjw028-D1M.crl (hash: CjJ6IVyucbOX7qfB7gkmIHCqwyU1bfmiaXVTZ9hWfBk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:0d:37:64:d5:92:61:2b:98:1a:7e:19:4c:a5:9b:31:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36b82c61dc621a682e940d189488f0d36f3e0f53
        Validity
            Not Before: Oct 25 03:37:24 2022 GMT
            Not After : Oct 26 03:37:24 2022 GMT
        Subject: CN=5f454abfaa1ad041bdb3fa690867b4e742ee2a63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:60:83:2f:d8:50:0e:78:51:e1:e3:bf:59:76:
                    eb:5e:5b:c2:9e:9d:51:1b:1c:cf:0f:79:58:b8:0b:
                    2a:60:e7:1d:d0:7b:87:20:cf:cd:a5:0f:a9:f7:40:
                    d8:83:6d:3d:f7:87:f3:93:f6:7a:64:37:3b:6a:d2:
                    84:e2:71:5d:a2:df:e9:45:de:a5:49:6c:81:84:ff:
                    26:64:79:d0:c6:0f:c3:75:e6:35:e2:6e:69:12:aa:
                    94:29:b7:f6:21:c8:cf:5a:35:7a:09:d5:e7:3b:9a:
                    34:e0:a3:b2:ae:f1:ef:fc:9c:95:69:42:4c:32:8f:
                    be:63:c6:c3:a2:0d:2b:1c:32:76:00:50:97:89:5d:
                    59:c8:24:0f:59:d7:6d:27:3b:d0:ea:58:44:58:de:
                    7c:50:b5:dd:7d:78:75:3d:13:6e:07:a8:d3:4f:71:
                    22:ab:e3:cc:6b:02:ff:b6:f5:17:19:fe:95:f6:e3:
                    10:87:ef:47:a4:5e:47:30:c2:e7:1c:ad:4c:3a:7f:
                    48:c6:5b:b2:9b:ec:c7:a3:87:65:4c:e1:9d:90:9d:
                    8f:b6:bd:d2:d7:f1:93:d5:3e:5a:d7:06:6a:31:db:
                    2c:a1:d7:03:b2:e0:38:8b:e7:f3:bc:50:fd:e0:25:
                    0a:af:6e:70:83:8d:05:bd:f7:83:49:f0:c9:48:97:
                    bc:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:45:4A:BF:AA:1A:D0:41:BD:B3:FA:69:08:67:B4:E7:42:EE:2A:63
            X509v3 Authority Key Identifier:
                keyid:36:B8:2C:61:DC:62:1A:68:2E:94:0D:18:94:88:F0:D3:6F:3E:0F:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NrgsYdxiGmgulA0YlIjw028-D1M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/e76711-7837-4112-9f32-381dd0afc8c4/1/NrgsYdxiGmgulA0YlIjw028-D1M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/e76711-7837-4112-9f32-381dd0afc8c4/1/NrgsYdxiGmgulA0YlIjw028-D1M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:bb:9c:4e:e9:6c:5f:83:39:c9:c2:fb:c4:39:33:c0:88:cb:
         5c:db:59:c9:b4:eb:ab:80:77:d4:ed:89:4c:7a:cd:48:c4:af:
         6c:97:f2:47:b6:6a:91:f6:e3:80:13:89:7e:45:94:f3:d0:d8:
         69:37:81:39:17:6a:9a:3e:9e:50:9f:45:03:88:53:96:de:dc:
         6d:31:49:4d:d8:32:fb:ad:e3:d1:97:95:ce:3a:ee:84:e5:72:
         00:3c:7d:13:1d:09:c7:fc:ed:da:7b:da:ff:c7:62:20:e6:9c:
         aa:2d:cc:39:5c:14:f6:20:8e:38:6d:07:32:94:b4:d6:b5:98:
         c4:84:83:fb:41:2f:0a:36:e0:94:ad:5d:cb:6a:c9:25:dd:f7:
         0b:67:c6:18:02:43:74:66:48:83:63:9e:bf:c9:04:43:23:b0:
         95:6c:91:bb:69:ba:0b:04:ad:9a:18:67:4c:8d:75:7f:70:1c:
         8b:b5:ce:d0:bc:a8:fc:d0:76:ed:7a:18:b5:66:e8:10:e8:b9:
         e6:9e:e4:01:d2:f3:69:26:f0:3c:bf:f3:0d:16:58:64:54:75:
         f9:6c:e9:ef:55:b3:3e:98:14:09:6a:db:8c:69:f6:ca:13:d4:
         af:a0:11:e7:3c:c4:8f:0d:96:16:f2:92:c9:f3:ea:88:a3:97:
         2a:89:ef:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----