Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/00d00b-235f-46c7-8830-c89b4dc79b2a/1/7MlHlV43wyQHE6BjZ7DLTm84sfM.mft
File:                     7MlHlV43wyQHE6BjZ7DLTm84sfM.mft (raw, json)
Hash identifier:          h+xWsPoki4WrZ2vFfQlh4BTt0AyfUjj1zECZGgaOriQ=
Subject key identifier:   5F:33:31:90:16:1E:62:AA:70:E3:7A:CF:EB:43:D8:CE:03:6C:A7:4D
Authority key identifier: EC:C9:47:95:5E:37:C3:24:07:13:A0:63:67:B0:CB:4E:6F:38:B1:F3
Certificate issuer:       /CN=ecc947955e37c3240713a06367b0cb4e6f38b1f3
Certificate serial:       01840DB18B5BBAFA7D0161CFF3C29F791AE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7MlHlV43wyQHE6BjZ7DLTm84sfM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/00d00b-235f-46c7-8830-c89b4dc79b2a/1/7MlHlV43wyQHE6BjZ7DLTm84sfM.mft
Manifest number:          05FF
Signing time:             Tue 25 Oct 2022 05:50:50 +0000
Manifest this update:     Tue 25 Oct 2022 05:50:50 +0000
Manifest next update:     Wed 26 Oct 2022 05:50:50 +0000
Files and hashes:         1: 7MlHlV43wyQHE6BjZ7DLTm84sfM.crl (hash: tfS84yn8rbf1spX4fysidQREFncvQl28bekfwVJ8JoI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:0d:b1:8b:5b:ba:fa:7d:01:61:cf:f3:c2:9f:79:1a:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecc947955e37c3240713a06367b0cb4e6f38b1f3
        Validity
            Not Before: Oct 25 05:50:50 2022 GMT
            Not After : Oct 26 05:50:50 2022 GMT
        Subject: CN=5f333190161e62aa70e37acfeb43d8ce036ca74d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:b1:2b:f2:f4:6a:61:d1:4e:68:c9:df:2f:dd:
                    c8:dc:3e:87:3b:42:e1:42:1c:ab:a6:42:b7:48:ba:
                    d7:ec:e7:78:e2:00:59:0c:93:d9:8c:03:bc:b9:11:
                    92:61:d0:da:c2:e7:20:5b:11:ba:79:a5:1a:c5:eb:
                    62:cf:15:4e:c5:e1:89:71:4d:1c:7e:af:f4:73:75:
                    40:e7:48:d3:e5:0d:10:1d:50:4b:e1:d1:dd:05:76:
                    73:75:d2:15:b3:b0:d3:9e:0a:72:e0:9e:13:a8:f9:
                    3c:f3:cb:bc:f3:df:db:92:9c:36:12:95:ca:13:7c:
                    c5:fc:cc:93:b5:86:8e:79:71:0c:cb:89:26:1e:6c:
                    d9:a9:67:57:3a:f7:4a:eb:b3:24:13:6d:15:48:3e:
                    61:3d:18:28:48:39:d8:f9:3c:0a:ed:0b:b1:80:a6:
                    58:95:98:85:c1:16:e4:c1:8a:7e:f4:fa:5b:a9:a2:
                    ef:fa:ab:96:96:55:71:ef:ee:6c:40:07:2b:0d:9a:
                    b9:6b:be:f0:65:96:d7:95:27:2a:f2:8f:7b:b1:f3:
                    dd:99:c5:06:70:f6:7e:95:23:e7:f6:39:1a:19:ff:
                    a6:6e:c1:41:af:52:02:a8:0a:41:ba:e6:7e:ef:ab:
                    96:8f:83:94:b4:53:e9:e8:41:c4:9a:84:13:95:ea:
                    6e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:33:31:90:16:1E:62:AA:70:E3:7A:CF:EB:43:D8:CE:03:6C:A7:4D
            X509v3 Authority Key Identifier:
                keyid:EC:C9:47:95:5E:37:C3:24:07:13:A0:63:67:B0:CB:4E:6F:38:B1:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7MlHlV43wyQHE6BjZ7DLTm84sfM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/00d00b-235f-46c7-8830-c89b4dc79b2a/1/7MlHlV43wyQHE6BjZ7DLTm84sfM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/00d00b-235f-46c7-8830-c89b4dc79b2a/1/7MlHlV43wyQHE6BjZ7DLTm84sfM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:8b:be:30:d2:fc:20:e0:04:13:52:d2:61:07:de:72:0e:c8:
         62:b9:71:62:11:0c:f0:39:e8:77:4a:a5:a8:f7:bf:e1:c7:18:
         9f:29:54:0a:bd:5a:3b:3e:63:de:75:1f:9e:59:ad:a7:17:60:
         ab:6b:13:97:ac:36:8d:e3:11:c5:c2:e9:ce:14:3e:96:40:10:
         d6:83:c4:48:0b:26:08:03:27:27:fe:f6:bb:06:22:ab:e1:06:
         32:1b:e5:97:12:1d:f9:00:89:0c:4d:cc:3f:59:5d:36:b2:13:
         07:7a:0f:ae:e6:b1:f9:31:41:3d:a0:3e:33:cb:a6:3c:c5:94:
         ce:54:22:f4:b2:0a:82:6a:60:6c:58:09:08:c2:f1:d8:a8:25:
         c3:5d:e0:dc:5d:9f:00:a2:e5:00:75:eb:62:6d:41:d2:e6:c3:
         c0:9f:be:95:63:ab:e7:55:d6:37:fa:d0:e5:ef:ab:be:e8:14:
         50:74:e0:59:a2:e1:e6:5b:43:94:02:0d:6a:7c:d3:c2:42:ee:
         b3:52:40:61:bf:53:4b:b8:fb:38:02:0c:e8:37:89:3e:00:f1:
         89:e3:ae:f8:c0:40:15:23:65:1d:60:50:45:db:13:a9:22:fd:
         41:3f:ab:20:d5:8e:f5:9d:20:52:4b:86:66:7f:b4:b2:7b:e2:
         52:be:04:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----