Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ca5919-bb58-41ea-92cb-bb0c3f9c79f6/1/I-OR8GK9jNeeuEX6ZugKtCkUqa8.mft
File:                     I-OR8GK9jNeeuEX6ZugKtCkUqa8.mft (raw, json)
Hash identifier:          gcx8IpVkQx2gNrP27zrd1z3vdSZ73qyN4jyl6ubT0Ac=
Subject key identifier:   2D:28:BF:0C:56:50:1F:0B:F0:0C:25:BD:AE:76:15:24:40:37:F6:8D
Authority key identifier: 23:E3:91:F0:62:BD:8C:D7:9E:B8:45:FA:66:E8:0A:B4:29:14:A9:AF
Certificate issuer:       /CN=23e391f062bd8cd79eb845fa66e80ab42914a9af
Certificate serial:       01840D438BDF5049B8E0112624BB91395F6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I-OR8GK9jNeeuEX6ZugKtCkUqa8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/ca5919-bb58-41ea-92cb-bb0c3f9c79f6/1/I-OR8GK9jNeeuEX6ZugKtCkUqa8.mft
Manifest number:          0648
Signing time:             Tue 25 Oct 2022 03:50:41 +0000
Manifest this update:     Tue 25 Oct 2022 03:50:41 +0000
Manifest next update:     Wed 26 Oct 2022 03:50:41 +0000
Files and hashes:         1: I-OR8GK9jNeeuEX6ZugKtCkUqa8.crl (hash: IV3MtnQkhUOFqwRzD28nrSgZ+/S27rrjtzE2htz+3Dg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:0d:43:8b:df:50:49:b8:e0:11:26:24:bb:91:39:5f:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23e391f062bd8cd79eb845fa66e80ab42914a9af
        Validity
            Not Before: Oct 25 03:50:41 2022 GMT
            Not After : Oct 26 03:50:41 2022 GMT
        Subject: CN=2d28bf0c56501f0bf00c25bdae7615244037f68d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0b:5d:ae:4d:2e:d0:70:a2:bc:9c:0b:1e:a6:
                    cd:d9:59:3a:57:61:1b:f7:f0:c0:fa:50:ac:4b:18:
                    a5:f1:b5:cc:1a:b2:7f:56:d6:b1:57:fd:97:8f:fd:
                    a0:43:2d:76:6f:0d:c9:bf:c5:ed:0c:dc:c3:0a:44:
                    8e:1d:b1:0f:a7:7d:ef:d4:5b:ca:a8:a3:7b:20:67:
                    1a:74:f2:bd:04:4f:89:f3:26:1b:f1:68:b6:45:58:
                    8c:26:f2:00:2d:65:e9:0d:76:78:bd:60:a0:3a:84:
                    9b:1a:af:48:b3:2e:e9:56:10:79:f1:be:e9:91:4b:
                    2a:8e:2e:66:2d:e6:08:10:d3:0c:4b:80:be:08:8a:
                    de:0b:fd:ce:ad:55:98:7e:56:d3:51:76:73:0b:c4:
                    e8:39:5f:cd:4f:dd:cd:2b:76:3d:9f:d5:85:fb:f4:
                    77:08:d7:23:20:c7:c2:65:28:da:ce:1c:61:e2:05:
                    94:bd:d5:01:ff:73:61:99:4e:1b:2c:2b:fa:05:28:
                    a5:be:5a:9f:63:50:cd:8e:11:8e:53:a4:9a:ca:3e:
                    e6:0b:43:fd:e6:61:62:fc:fa:08:11:54:0d:65:6a:
                    96:a3:22:d5:34:2f:8d:2c:df:80:b8:21:a9:89:84:
                    86:3d:77:d7:11:d9:67:96:ad:da:44:9e:18:b3:53:
                    0d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:28:BF:0C:56:50:1F:0B:F0:0C:25:BD:AE:76:15:24:40:37:F6:8D
            X509v3 Authority Key Identifier:
                keyid:23:E3:91:F0:62:BD:8C:D7:9E:B8:45:FA:66:E8:0A:B4:29:14:A9:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-OR8GK9jNeeuEX6ZugKtCkUqa8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ca5919-bb58-41ea-92cb-bb0c3f9c79f6/1/I-OR8GK9jNeeuEX6ZugKtCkUqa8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ca5919-bb58-41ea-92cb-bb0c3f9c79f6/1/I-OR8GK9jNeeuEX6ZugKtCkUqa8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:0b:ab:01:9c:d2:12:1e:e3:2d:e2:ee:c2:f6:26:02:65:75:
         2d:67:a3:28:71:70:93:79:48:1e:c1:8c:cf:30:58:01:b6:d0:
         29:8d:3e:aa:8e:45:0d:0c:c4:15:b3:a0:e3:21:87:1d:0e:35:
         61:d2:ba:72:56:b5:8c:ee:7a:bc:43:fb:9f:15:73:e9:89:53:
         c7:ef:88:57:bc:eb:f5:92:b4:08:95:bb:05:ad:7d:7e:31:1a:
         e0:40:7f:d3:b6:68:0a:db:00:87:1d:52:8f:e6:20:bf:0a:c1:
         08:e1:cc:01:d0:95:3e:5a:60:f9:7c:1d:14:f0:f8:ef:99:a9:
         da:d0:6d:ab:c7:50:98:83:ba:c6:fc:8e:98:e1:e3:77:2a:92:
         f4:1e:5b:32:b4:2b:0d:7d:9c:5e:80:dc:ed:99:b2:82:25:59:
         7c:d8:d7:d0:7c:a1:6a:cf:bf:64:3a:7e:18:fd:16:e8:b0:3f:
         27:be:7b:7d:e3:06:e9:f8:b5:66:ec:93:4e:67:b2:6e:ba:0a:
         cd:8a:d0:d8:f9:dc:36:e5:59:73:13:32:e4:57:7c:ad:90:c5:
         73:5b:ab:08:77:26:f9:ff:48:eb:8d:e5:49:bf:e1:3f:b3:1a:
         1c:76:e4:25:65:e8:2f:08:ff:eb:ef:34:e0:bb:d3:a1:95:f8:
         ff:dc:b8:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----