Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/0a7b25-a8fe-4af4-9283-081cc5b8af6d/1/0hyStyZ4xvh_2b-Puivhn6wGS1g.mft
File:                     0hyStyZ4xvh_2b-Puivhn6wGS1g.mft (raw, json)
Hash identifier:          pN9e4EOHTp3t/blmWFJlKUWf36q9oBTPu4tdjVCkmNQ=
Subject key identifier:   A3:1B:F2:BC:70:0A:7D:85:64:BD:A1:8F:02:36:F6:73:0B:79:25:00
Authority key identifier: D2:1C:92:B7:26:78:C6:F8:7F:D9:BF:8F:BA:2B:E1:9F:AC:06:4B:58
Certificate issuer:       /CN=d21c92b72678c6f87fd9bf8fba2be19fac064b58
Certificate serial:       018AA7BC741B9684BD618CE07538A99108A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0hyStyZ4xvh_2b-Puivhn6wGS1g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/0a7b25-a8fe-4af4-9283-081cc5b8af6d/1/0hyStyZ4xvh_2b-Puivhn6wGS1g.mft
Manifest number:          088E
Signing time:             Mon 18 Sep 2023 10:01:00 +0000
Manifest this update:     Mon 18 Sep 2023 10:01:00 +0000
Manifest next update:     Tue 19 Sep 2023 10:01:00 +0000
Files and hashes:         1: 0hyStyZ4xvh_2b-Puivhn6wGS1g.crl (hash: GQZT0+MPhIB3A6jFteJf/o55k8MiZk5EkLTOoEvgTSs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:a7:bc:74:1b:96:84:bd:61:8c:e0:75:38:a9:91:08:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d21c92b72678c6f87fd9bf8fba2be19fac064b58
        Validity
            Not Before: Sep 18 10:01:00 2023 GMT
            Not After : Sep 19 10:01:00 2023 GMT
        Subject: CN=a31bf2bc700a7d8564bda18f0236f6730b792500
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:23:82:0c:47:c6:2e:d2:ae:8d:cf:11:11:b0:
                    7e:b5:70:2e:9b:95:c7:57:b4:15:f1:e8:af:29:5c:
                    f5:c7:61:bd:6b:e9:34:b7:a1:6c:5d:6b:87:ca:06:
                    24:ef:73:93:b6:0c:56:f6:86:44:7c:35:59:9e:58:
                    bf:0e:f5:91:c9:6d:84:ad:c7:9a:4e:0b:61:d0:02:
                    04:d9:81:37:fc:48:02:68:02:c2:58:fc:73:10:6f:
                    10:30:6e:f5:ef:9a:16:26:8b:66:ab:58:3d:48:23:
                    d3:62:df:73:f3:a6:54:f3:ee:56:f0:39:15:b4:3b:
                    ab:8f:fd:0e:6e:e4:64:74:15:2b:08:a1:ed:6f:9d:
                    b0:a2:00:1d:fb:28:2f:e0:e2:6c:3d:6a:f7:e2:dd:
                    d3:cd:a2:52:80:fd:94:dc:5c:f0:b4:31:b4:c0:e9:
                    c2:7e:d5:ef:9a:d2:e1:58:e5:ca:87:64:88:b1:73:
                    e2:c2:2a:33:2f:09:85:6e:50:f1:04:3a:40:6f:43:
                    78:65:24:51:8d:0f:17:d4:b3:00:35:d7:f1:1a:8f:
                    d4:47:5c:63:d5:ff:21:f1:2c:bf:ab:e9:c8:7a:c1:
                    5e:2c:b7:45:46:d6:6c:6b:31:1e:0e:08:81:93:6f:
                    bc:81:b7:5d:fe:f7:6a:51:3e:09:07:1c:01:b5:39:
                    e7:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:1B:F2:BC:70:0A:7D:85:64:BD:A1:8F:02:36:F6:73:0B:79:25:00
            X509v3 Authority Key Identifier:
                keyid:D2:1C:92:B7:26:78:C6:F8:7F:D9:BF:8F:BA:2B:E1:9F:AC:06:4B:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0hyStyZ4xvh_2b-Puivhn6wGS1g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0a7b25-a8fe-4af4-9283-081cc5b8af6d/1/0hyStyZ4xvh_2b-Puivhn6wGS1g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0a7b25-a8fe-4af4-9283-081cc5b8af6d/1/0hyStyZ4xvh_2b-Puivhn6wGS1g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:fc:75:9b:72:da:a2:d0:59:ed:6e:bf:76:c3:24:ae:2e:80:
         cb:1a:6f:8a:36:f8:ac:5f:20:7e:8a:56:7e:61:62:60:64:5c:
         55:39:3c:50:8a:b8:9d:38:e7:f4:ac:52:46:fc:05:4d:e6:f9:
         58:11:c1:71:ee:fb:12:2c:8e:e3:68:a2:e1:86:07:8f:1e:fa:
         80:03:62:e5:4d:49:a3:f7:8d:62:4c:b5:6a:bd:26:ea:b5:97:
         4c:4f:61:0b:5d:77:49:2c:be:da:26:31:71:ea:9f:c7:54:65:
         ed:e1:e5:f9:61:f0:5b:36:b5:62:0d:c9:dc:1d:60:72:5f:29:
         91:4b:72:23:1e:e8:58:01:92:53:15:e0:54:be:b3:92:fb:98:
         c0:f9:b7:00:e7:41:fe:ac:06:fb:17:6d:d0:93:17:19:64:d8:
         27:b6:39:a8:15:67:8d:94:ad:41:b7:1c:b3:5d:18:81:fd:a1:
         bc:d3:60:a7:eb:8e:9a:e3:47:bd:e8:76:f0:6f:21:0f:e7:14:
         ec:08:f4:bf:a1:89:1d:27:e0:4c:98:8e:f6:e5:4b:8e:aa:97:
         fe:5a:49:c8:5c:aa:6f:86:7e:31:7a:22:78:0e:1d:f8:d5:52:
         f0:ca:c3:e5:ff:3c:99:9b:fe:aa:a6:49:67:d6:17:e3:0e:7e:
         0d:8f:40:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----