Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/c45b6a-5905-4c4d-9566-c85219c27a50/1/Nma-JwlzVBx2e7m406yZm1iuWF8.mft
File:                     Nma-JwlzVBx2e7m406yZm1iuWF8.mft (raw, json)
Hash identifier:          x0BGOeMebvAEg0rxfbbbhbyeGcgzJYnByT3OKXRfIFg=
Subject key identifier:   64:9D:54:AE:1B:BD:2B:E4:6D:03:77:98:51:EE:47:FB:D5:DF:62:34
Authority key identifier: 36:66:BE:27:09:73:54:1C:76:7B:B9:B8:D3:AC:99:9B:58:AE:58:5F
Certificate issuer:       /CN=3666be270973541c767bb9b8d3ac999b58ae585f
Certificate serial:       01A95E73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nma-JwlzVBx2e7m406yZm1iuWF8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/c45b6a-5905-4c4d-9566-c85219c27a50/1/Nma-JwlzVBx2e7m406yZm1iuWF8.mft
Manifest number:          0220
Signing time:             Fri 22 Apr 2022 08:00:57 +0000
Manifest this update:     Fri 22 Apr 2022 08:00:57 +0000
Manifest next update:     Sat 23 Apr 2022 08:00:57 +0000
Files and hashes:         1: Nma-JwlzVBx2e7m406yZm1iuWF8.crl (hash: VDVz7f3Tv/Jzh0AOKjc7Vbc9ys/dHn7gffvqz1OJQHs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27876979 (0x1a95e73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3666be270973541c767bb9b8d3ac999b58ae585f
        Validity
            Not Before: Apr 22 08:00:57 2022 GMT
            Not After : Apr 23 08:00:57 2022 GMT
        Subject: CN=649d54ae1bbd2be46d03779851ee47fbd5df6234
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:35:7d:26:e5:6c:2d:b6:0b:f9:40:54:bf:f1:
                    7b:29:55:95:24:5a:02:df:d3:c0:6d:bf:3b:ba:59:
                    e1:7a:ee:ba:84:80:89:da:c9:3a:ee:c2:c9:c0:70:
                    bc:7a:66:89:73:03:dc:40:4e:df:83:74:c9:c3:53:
                    9b:1c:41:15:25:3e:b7:52:e5:75:c8:a3:39:b8:70:
                    ec:b1:80:d9:59:6d:ce:65:93:9f:7d:aa:13:5a:de:
                    c5:77:1f:38:f0:3e:21:9d:63:10:0e:e4:0b:8b:8c:
                    b9:e1:a4:9d:6a:5d:27:fa:d8:71:3a:02:e9:d7:e1:
                    88:dd:2c:c0:96:5c:f2:ad:6a:2c:0d:f4:29:9c:06:
                    d1:f7:a5:8d:0c:37:10:19:74:5d:a7:c8:da:93:63:
                    d2:09:2e:2f:2a:62:a7:29:1f:78:a5:3e:b9:16:ed:
                    2c:85:b5:12:52:4e:fd:e4:2b:1e:b5:cf:64:bc:66:
                    14:2d:e3:f8:48:3c:f9:f6:d6:4a:f2:38:94:cd:28:
                    b9:51:65:a5:1c:f3:18:fb:c5:10:60:62:b1:e5:30:
                    c8:29:26:96:a2:84:44:d3:b9:c8:2f:8b:b6:d4:5c:
                    e1:a5:0a:94:2c:32:c0:4a:4c:f0:5b:83:98:08:a3:
                    18:07:e4:3d:4e:71:17:12:f9:81:46:ff:56:cf:a5:
                    37:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:9D:54:AE:1B:BD:2B:E4:6D:03:77:98:51:EE:47:FB:D5:DF:62:34
            X509v3 Authority Key Identifier:
                keyid:36:66:BE:27:09:73:54:1C:76:7B:B9:B8:D3:AC:99:9B:58:AE:58:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nma-JwlzVBx2e7m406yZm1iuWF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c45b6a-5905-4c4d-9566-c85219c27a50/1/Nma-JwlzVBx2e7m406yZm1iuWF8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c45b6a-5905-4c4d-9566-c85219c27a50/1/Nma-JwlzVBx2e7m406yZm1iuWF8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:9a:68:18:f8:6b:a6:bd:38:3e:8a:49:1b:dd:e5:ea:2f:49:
         cd:b7:82:39:85:f4:07:f5:f6:e0:dc:cc:ac:75:a4:3e:c5:d7:
         70:d8:09:ef:57:b1:c8:91:b6:15:c7:7d:8d:1a:80:5d:46:b9:
         f2:a8:02:5f:d7:55:c8:84:b0:09:41:48:e3:6a:76:5f:e6:f2:
         00:c7:b4:0e:c9:83:e2:1b:b5:d9:bb:cc:51:5b:13:12:64:eb:
         6a:4f:a2:f3:d3:0f:32:08:ea:63:63:36:72:19:a6:10:57:7f:
         27:9b:61:98:eb:23:c9:0f:85:97:8a:a9:50:56:50:89:19:ff:
         e6:ef:af:c3:3f:f0:cf:34:b0:e8:25:fd:58:4f:79:84:14:bb:
         13:0f:b1:77:23:8f:9c:9d:80:d2:9d:27:31:40:d4:82:e5:22:
         44:2b:82:1a:c4:7a:05:1a:54:8d:02:62:f8:a0:8b:ec:b2:8c:
         6d:07:7f:2f:74:43:7f:20:c6:f6:b0:3e:10:18:4d:61:d8:3e:
         75:73:92:41:c1:27:0f:f6:4f:e8:7e:9a:ff:88:5b:97:56:83:
         8e:0a:59:18:b1:d8:24:89:50:cf:7f:da:10:24:94:60:5d:8a:
         69:8f:f3:2c:67:3f:a4:6b:14:a3:0c:39:23:2f:1f:47:07:41:
         5d:4c:6e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----