Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/148cda-d5e7-42e1-b2fd-71fa7772a74a/1/hsuAQ1-tPkviaL7fVam-G8na1Q8.mft
File:                     hsuAQ1-tPkviaL7fVam-G8na1Q8.mft (raw, json)
Hash identifier:          rRCn9PvqMZnKplquxLJT4wCD4uRede+O460QVDgSq1I=
Subject key identifier:   CE:42:6B:06:BC:D2:DE:6A:7F:2A:C3:2A:99:4E:34:33:7D:8E:C2:01
Authority key identifier: 86:CB:80:43:5F:AD:3E:4B:E2:68:BE:DF:55:A9:BE:1B:C9:DA:D5:0F
Certificate issuer:       /CN=86cb80435fad3e4be268bedf55a9be1bc9dad50f
Certificate serial:       0184E0876DCB97FF389A5A6F286EE0820BA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hsuAQ1-tPkviaL7fVam-G8na1Q8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/148cda-d5e7-42e1-b2fd-71fa7772a74a/1/hsuAQ1-tPkviaL7fVam-G8na1Q8.mft
Manifest number:          0BA8
Signing time:             Mon 05 Dec 2022 04:24:42 +0000
Manifest this update:     Mon 05 Dec 2022 04:24:42 +0000
Manifest next update:     Tue 06 Dec 2022 04:24:42 +0000
Files and hashes:         1: hsuAQ1-tPkviaL7fVam-G8na1Q8.crl (hash: EDJYOLcQVbL8EdgXZ9vS0YVw74qVVEbb8oY5eOS2r0E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:e0:87:6d:cb:97:ff:38:9a:5a:6f:28:6e:e0:82:0b:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86cb80435fad3e4be268bedf55a9be1bc9dad50f
        Validity
            Not Before: Dec  5 04:24:42 2022 GMT
            Not After : Dec  6 04:24:42 2022 GMT
        Subject: CN=ce426b06bcd2de6a7f2ac32a994e34337d8ec201
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:16:6c:79:e8:99:07:e4:aa:0d:7e:04:d9:d7:
                    86:af:e8:ba:0d:fe:c7:5f:9e:57:09:50:65:3e:11:
                    32:ca:db:fb:cc:0a:48:f4:94:f8:cc:12:da:f8:d1:
                    c3:20:de:37:ea:5f:55:b9:10:81:b4:e6:65:27:21:
                    90:c7:5e:ce:99:d4:4f:2e:e4:df:c2:df:e3:fd:c3:
                    3d:fb:6e:50:d9:48:f6:a3:44:03:04:f3:38:ef:b3:
                    3b:ed:07:55:40:62:58:e1:34:20:26:f5:b2:94:aa:
                    f2:1b:c2:d4:ad:64:4b:8f:a7:58:e4:f9:c5:06:b2:
                    00:34:f1:e2:b0:99:d0:3c:57:30:01:c4:70:06:b1:
                    c8:6e:4e:53:c4:89:ee:4e:c1:aa:f9:bc:be:a4:a8:
                    b9:99:6d:34:0d:8a:a6:a4:3d:11:fa:2e:8d:8b:16:
                    46:82:0d:e9:0e:14:9c:fb:48:da:84:a0:d6:4d:c6:
                    53:29:10:e7:90:08:c8:92:cf:eb:e8:e5:00:7f:76:
                    28:15:72:00:69:27:8e:04:d8:25:bc:bc:6d:c9:10:
                    b9:bb:55:d2:38:92:43:db:c9:22:31:b4:36:1b:66:
                    ea:b4:4f:1e:1a:28:32:fa:23:18:67:4f:92:61:a0:
                    a0:9e:7a:77:22:4d:29:b3:ff:e3:3b:c2:60:a2:75:
                    6f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:42:6B:06:BC:D2:DE:6A:7F:2A:C3:2A:99:4E:34:33:7D:8E:C2:01
            X509v3 Authority Key Identifier:
                keyid:86:CB:80:43:5F:AD:3E:4B:E2:68:BE:DF:55:A9:BE:1B:C9:DA:D5:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hsuAQ1-tPkviaL7fVam-G8na1Q8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/148cda-d5e7-42e1-b2fd-71fa7772a74a/1/hsuAQ1-tPkviaL7fVam-G8na1Q8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/148cda-d5e7-42e1-b2fd-71fa7772a74a/1/hsuAQ1-tPkviaL7fVam-G8na1Q8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:88:f4:0c:29:5e:bb:cb:af:5a:8c:4f:75:44:81:b6:9d:a4:
         c9:1d:cf:0f:ae:ac:36:4e:56:e1:9a:30:c5:de:d2:f2:2f:03:
         73:f4:aa:79:8e:35:6f:9a:c8:7b:45:91:d2:4d:64:c3:78:18:
         ce:dc:08:44:1e:64:77:b2:ec:5d:8f:90:7a:f4:16:1f:4a:5e:
         b7:94:22:c3:16:03:fc:0c:fa:f4:cd:89:3f:2b:54:63:5b:e7:
         a7:07:b5:5f:f5:bb:fe:15:64:05:66:c0:57:78:ec:fc:1d:c6:
         7c:84:5c:09:64:3b:8b:82:12:24:7f:f7:20:ff:67:7e:64:16:
         ca:d1:2f:df:9f:65:4c:04:b5:f0:95:17:08:bd:d0:59:7a:73:
         77:61:2f:ed:a6:e7:7a:ad:c6:2b:0c:30:35:24:41:9a:77:ac:
         e2:47:c2:b2:5d:01:c3:fb:01:33:0d:98:10:18:62:c5:88:1b:
         78:70:d6:18:d8:3d:a5:1f:57:1a:e9:af:89:e7:e0:a4:79:c0:
         d4:b3:65:a7:7c:58:d5:a9:56:4d:fe:48:79:1b:16:dc:9a:a0:
         74:ae:ae:f5:8a:b0:9c:61:ff:39:98:96:ce:56:68:22:3c:f3:
         37:e2:59:b9:a2:5c:9b:77:38:9e:44:e8:ac:66:63:d1:17:b3:
         6b:67:9f:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----