Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/878f1d-817f-4046-9d1f-bbf13ab954a4/1/1wyJnYHu5WdJ0BZZTOjNKJ4xj0E.mft
File:                     1wyJnYHu5WdJ0BZZTOjNKJ4xj0E.mft (raw, json)
Hash identifier:          l5XKbtl4VmeBe8rVfWS+3HSirJBNohJK75VJYseWTEU=
Subject key identifier:   B5:74:1B:5D:4C:F6:04:48:C5:0D:87:C6:8D:A0:A9:58:8D:8E:67:61
Authority key identifier: D7:0C:89:9D:81:EE:E5:67:49:D0:16:59:4C:E8:CD:28:9E:31:8F:41
Certificate issuer:       /CN=d70c899d81eee56749d016594ce8cd289e318f41
Certificate serial:       018AD683DEFD8FEE639FCD23B53345E2C627
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1wyJnYHu5WdJ0BZZTOjNKJ4xj0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/878f1d-817f-4046-9d1f-bbf13ab954a4/1/1wyJnYHu5WdJ0BZZTOjNKJ4xj0E.mft
Manifest number:          0E98
Signing time:             Wed 27 Sep 2023 12:01:20 +0000
Manifest this update:     Wed 27 Sep 2023 12:01:20 +0000
Manifest next update:     Thu 28 Sep 2023 12:01:20 +0000
Files and hashes:         1: 1wyJnYHu5WdJ0BZZTOjNKJ4xj0E.crl (hash: LqTx4dmPBzsjRffU/Gg+WFuJGyWBimPJr3hZ+ZEGEvg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:d6:83:de:fd:8f:ee:63:9f:cd:23:b5:33:45:e2:c6:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70c899d81eee56749d016594ce8cd289e318f41
        Validity
            Not Before: Sep 27 12:01:20 2023 GMT
            Not After : Sep 28 12:01:20 2023 GMT
        Subject: CN=b5741b5d4cf60448c50d87c68da0a9588d8e6761
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:0d:bd:f5:c2:62:27:b5:ae:34:31:11:c1:5c:
                    46:b8:11:f1:af:86:37:96:ef:5b:b8:b1:fd:8e:63:
                    60:de:58:3e:f7:a6:d9:9e:78:1d:05:03:4b:02:dc:
                    fa:4c:77:e9:6b:45:bf:e4:62:03:82:ce:e4:d9:16:
                    59:5f:c3:96:6c:be:61:c6:37:35:0b:1c:f5:26:84:
                    3c:48:6f:41:e6:3b:ad:15:ad:f5:37:59:1a:cb:84:
                    01:ce:8c:f7:53:a7:b3:14:a3:c7:0f:c3:49:d8:84:
                    9a:a6:8c:09:73:4a:08:4b:45:ca:11:37:c6:31:ef:
                    05:b1:0e:c4:82:ca:35:38:5e:ae:5f:e5:25:24:a0:
                    c2:6c:cd:4c:a0:62:c1:08:22:84:2e:3f:c2:4a:11:
                    5d:37:e5:52:7c:af:b5:f8:d1:bd:86:94:d8:5a:81:
                    7a:03:94:7d:66:59:eb:99:48:1f:32:a5:81:d4:71:
                    f2:52:e8:14:bd:0e:1b:37:cf:27:ae:75:d3:8c:35:
                    1c:d5:1a:f6:3c:19:26:2d:5a:43:52:01:91:99:b0:
                    53:74:47:ec:7f:f2:6a:93:61:9a:11:81:f0:15:09:
                    1b:15:de:a7:61:df:ec:74:37:47:a9:3f:17:41:65:
                    eb:d6:a5:30:44:04:95:06:0b:50:71:d2:52:ea:c2:
                    13:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:74:1B:5D:4C:F6:04:48:C5:0D:87:C6:8D:A0:A9:58:8D:8E:67:61
            X509v3 Authority Key Identifier:
                keyid:D7:0C:89:9D:81:EE:E5:67:49:D0:16:59:4C:E8:CD:28:9E:31:8F:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wyJnYHu5WdJ0BZZTOjNKJ4xj0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/878f1d-817f-4046-9d1f-bbf13ab954a4/1/1wyJnYHu5WdJ0BZZTOjNKJ4xj0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/878f1d-817f-4046-9d1f-bbf13ab954a4/1/1wyJnYHu5WdJ0BZZTOjNKJ4xj0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:e5:c9:23:e1:b5:d9:6f:0d:12:58:c8:72:9a:7b:0d:0d:76:
         94:6d:e4:fa:4f:93:98:0b:81:91:46:cc:2f:83:e2:95:e7:bd:
         29:ac:64:35:b8:6c:43:a3:bf:06:08:e5:fd:66:c6:9a:9f:23:
         b2:6d:c5:aa:a5:3c:fa:01:1d:2c:e2:e3:be:9f:ff:2b:12:4d:
         25:b0:18:5a:43:78:8d:d0:f2:fd:d3:51:95:c3:fe:7e:20:6f:
         a7:28:d2:ca:0a:22:9d:f3:43:6a:1b:34:ab:52:12:51:b0:33:
         e2:6e:6c:81:48:9c:41:d2:b3:d6:84:f1:00:49:36:8c:b3:87:
         ca:3f:f2:8c:b3:78:69:5e:44:d5:e8:73:36:c0:a0:8e:00:d0:
         07:a7:62:ac:33:e2:1a:a0:09:e2:d6:98:83:ec:99:c7:f7:2d:
         13:3a:0b:89:4c:a0:d8:4d:f3:22:e7:08:2a:8f:cb:30:a3:82:
         1f:fd:ad:b0:71:da:9d:08:ca:57:83:ea:bc:9f:b4:1d:a6:14:
         c8:64:59:07:3d:3d:4c:1e:2c:5f:38:77:a1:04:c0:1a:1d:58:
         2d:b4:7b:39:b6:1f:a1:24:4c:d6:ef:9b:3c:7a:65:4f:ef:38:
         a1:48:5e:50:f3:fa:1e:62:af:7b:5d:79:51:4e:d6:e3:90:96:
         1d:e9:b9:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----