Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/6a7494-f8db-4667-9474-658fb39b676b/1/gBVjCbD6lrjYCwMm5HNkrktP7lA.mft
File:                     gBVjCbD6lrjYCwMm5HNkrktP7lA.mft (raw, json)
Hash identifier:          y33NoC7rC2I9KrjRZbq1k23+M/g+dXNd1gWRDE+Z25M=
Subject key identifier:   25:6C:90:16:93:27:3A:F4:4D:E2:81:ED:42:21:86:98:B6:ED:C0:45
Authority key identifier: 80:15:63:09:B0:FA:96:B8:D8:0B:03:26:E4:73:64:AE:4B:4F:EE:50
Certificate issuer:       /CN=80156309b0fa96b8d80b0326e47364ae4b4fee50
Certificate serial:       0189CE393063DD266AB8A1F81CC1153B6297
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gBVjCbD6lrjYCwMm5HNkrktP7lA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/6a7494-f8db-4667-9474-658fb39b676b/1/gBVjCbD6lrjYCwMm5HNkrktP7lA.mft
Manifest number:          0E79
Signing time:             Mon 07 Aug 2023 04:20:01 +0000
Manifest this update:     Mon 07 Aug 2023 04:20:01 +0000
Manifest next update:     Tue 08 Aug 2023 04:20:01 +0000
Files and hashes:         1: gBVjCbD6lrjYCwMm5HNkrktP7lA.crl (hash: B06CrEBJPl919iB+q00NUtzwXhG2iGGWSjKTYwCWSDA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:ce:39:30:63:dd:26:6a:b8:a1:f8:1c:c1:15:3b:62:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80156309b0fa96b8d80b0326e47364ae4b4fee50
        Validity
            Not Before: Aug  7 04:20:01 2023 GMT
            Not After : Aug  8 04:20:01 2023 GMT
        Subject: CN=256c901693273af44de281ed42218698b6edc045
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:2e:16:e9:3a:0e:90:67:6f:e5:70:30:39:2f:
                    3e:b8:cc:bb:45:9f:9a:f4:e5:5b:c7:bf:84:14:96:
                    5e:e7:61:08:43:6c:58:e8:84:89:e8:fa:f3:48:5b:
                    f0:f8:82:02:a1:f4:72:49:b5:79:a9:1e:70:56:20:
                    90:99:a5:e6:ec:fe:1f:d3:2e:1b:be:be:f1:35:84:
                    41:1a:59:6c:d9:ee:15:a9:bb:cd:54:b3:b0:fe:0c:
                    2d:0d:e5:c7:72:b4:63:c8:83:33:13:6e:01:12:2e:
                    4b:1c:58:12:ba:eb:05:65:40:c3:63:f6:60:ed:0c:
                    d7:42:f9:38:47:3c:b0:2b:b1:f0:fb:b2:01:b1:40:
                    39:00:12:dc:82:1a:63:c8:9c:a0:00:6f:8f:f7:48:
                    52:9e:e2:90:e6:9c:17:7a:e2:de:1a:36:11:d2:d7:
                    6e:24:30:9e:29:de:f0:0c:b0:e4:6f:a3:63:f3:cf:
                    61:24:b4:86:e3:8b:0c:54:40:e9:c6:76:75:16:11:
                    36:b0:08:e4:3a:34:04:96:1a:ef:e4:7a:5b:09:00:
                    70:3f:ae:b1:b8:08:7f:f6:8c:a2:6c:27:ab:81:0b:
                    5d:6c:96:29:be:0f:df:8d:b4:e7:bd:81:2f:ca:d1:
                    2b:3f:80:ef:14:65:83:ba:e2:69:a0:7e:95:82:94:
                    63:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:6C:90:16:93:27:3A:F4:4D:E2:81:ED:42:21:86:98:B6:ED:C0:45
            X509v3 Authority Key Identifier:
                keyid:80:15:63:09:B0:FA:96:B8:D8:0B:03:26:E4:73:64:AE:4B:4F:EE:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gBVjCbD6lrjYCwMm5HNkrktP7lA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/6a7494-f8db-4667-9474-658fb39b676b/1/gBVjCbD6lrjYCwMm5HNkrktP7lA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/6a7494-f8db-4667-9474-658fb39b676b/1/gBVjCbD6lrjYCwMm5HNkrktP7lA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:1d:94:9e:fd:38:36:d6:df:51:da:60:79:58:93:1c:1d:b0:
         d8:7a:c6:42:dc:04:3b:5b:28:0d:0c:04:83:3a:7e:90:3d:15:
         82:24:31:dc:96:8b:87:94:ab:30:34:d4:a6:33:f4:cc:80:46:
         2b:59:9c:fc:11:68:6a:1b:51:3b:cf:a0:be:a1:db:48:c9:4b:
         85:3a:64:78:61:ca:8a:7f:6a:b8:3d:82:d4:d3:4a:74:62:29:
         04:f7:4e:17:37:7f:81:29:2c:e2:7b:c1:b2:f9:a9:8a:0e:00:
         f3:ad:71:7e:79:cf:7b:48:dc:f6:f5:5b:8a:b7:ed:6a:94:d7:
         dc:48:ab:16:b3:36:5b:d5:32:1d:10:ac:69:87:ac:18:84:c3:
         40:11:6d:53:ad:cd:cd:a5:e5:da:66:5f:5e:a0:a8:ff:3b:d2:
         fa:13:b4:b4:00:ee:5b:6e:01:88:83:26:04:c6:25:f9:31:a6:
         ad:5f:bb:36:cd:ab:10:5a:27:d7:d0:f5:db:95:26:4b:3c:c0:
         f7:b8:3c:c6:f4:25:de:81:e8:42:b5:57:b7:d7:11:40:25:b9:
         74:f8:eb:b2:39:13:9e:17:b9:a1:f8:86:1a:c2:a1:47:bc:ae:
         f5:16:a7:69:6c:b8:fe:02:83:fe:84:61:72:3e:0b:63:6f:ca:
         86:18:16:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----