Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/755581-b349-4e32-a34e-ae849f0c36d1/1/tXffNC3CJhhhfign1KwT-m1KKBc.mft
File:                     tXffNC3CJhhhfign1KwT-m1KKBc.mft (raw, json)
Hash identifier:          sNfphod3aLcV0FYxUDsjbjPEY4ImBJXwn2W0i+uilmM=
Subject key identifier:   7B:35:05:FA:D1:39:B1:17:B9:7C:7C:6C:D9:81:EA:CF:D5:D2:1F:72
Authority key identifier: B5:77:DF:34:2D:C2:26:18:61:7E:28:27:D4:AC:13:FA:6D:4A:28:17
Certificate issuer:       /CN=b577df342dc22618617e2827d4ac13fa6d4a2817
Certificate serial:       0185099133097EAA0DB5A09AF33BE5D2E49C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tXffNC3CJhhhfign1KwT-m1KKBc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/755581-b349-4e32-a34e-ae849f0c36d1/1/tXffNC3CJhhhfign1KwT-m1KKBc.mft
Manifest number:          0B26
Signing time:             Tue 13 Dec 2022 03:39:48 +0000
Manifest this update:     Tue 13 Dec 2022 03:39:48 +0000
Manifest next update:     Wed 14 Dec 2022 03:39:48 +0000
Files and hashes:         1: tXffNC3CJhhhfign1KwT-m1KKBc.crl (hash: 47q/RnDfOq4bNSXbXeWDlcncauHFFTjnKmL7YB3YSUw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:09:91:33:09:7e:aa:0d:b5:a0:9a:f3:3b:e5:d2:e4:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b577df342dc22618617e2827d4ac13fa6d4a2817
        Validity
            Not Before: Dec 13 03:39:48 2022 GMT
            Not After : Dec 14 03:39:48 2022 GMT
        Subject: CN=7b3505fad139b117b97c7c6cd981eacfd5d21f72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:1d:fd:32:50:1a:4d:a2:e5:d3:dc:6c:bd:36:
                    95:e8:dd:ab:8c:52:66:05:76:4a:ef:7c:d9:83:b4:
                    ed:56:69:e1:44:f6:94:b7:b0:86:f0:8e:7b:ff:14:
                    39:7a:48:86:7f:e4:70:05:39:56:62:23:5b:b6:b3:
                    13:99:db:d3:bf:4e:83:bd:6f:05:9e:39:d7:90:c7:
                    28:27:03:4d:c3:f3:77:b3:7b:86:aa:65:35:6a:18:
                    d4:5b:ea:12:9e:90:7d:be:e8:f2:37:40:01:b3:0f:
                    09:09:fc:a2:dd:32:23:c5:b1:0b:48:35:c6:06:b8:
                    88:3f:79:df:16:d0:ea:9a:7b:01:fc:ec:8a:38:22:
                    3f:76:08:99:e2:82:6f:1e:c8:f4:89:8f:71:71:93:
                    1a:54:b7:11:3a:2e:7f:5e:59:86:6b:67:54:df:75:
                    11:dd:61:9b:8b:58:fa:f2:97:e2:d9:df:f5:8b:ed:
                    fc:ff:7c:6d:ec:66:19:82:d6:a7:8b:8e:b7:7b:80:
                    a8:b8:73:8c:de:21:38:36:f8:cb:18:8e:40:3e:58:
                    d5:0c:11:75:9a:fb:67:66:ff:de:a1:51:7b:e0:21:
                    7d:ab:9e:52:b6:3f:4b:bf:c8:60:6d:ce:94:11:d2:
                    f3:0b:95:8c:06:de:18:40:8c:34:38:12:5b:ab:64:
                    a3:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:35:05:FA:D1:39:B1:17:B9:7C:7C:6C:D9:81:EA:CF:D5:D2:1F:72
            X509v3 Authority Key Identifier:
                keyid:B5:77:DF:34:2D:C2:26:18:61:7E:28:27:D4:AC:13:FA:6D:4A:28:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXffNC3CJhhhfign1KwT-m1KKBc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/755581-b349-4e32-a34e-ae849f0c36d1/1/tXffNC3CJhhhfign1KwT-m1KKBc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/755581-b349-4e32-a34e-ae849f0c36d1/1/tXffNC3CJhhhfign1KwT-m1KKBc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:5d:35:28:89:f3:c7:23:ae:1b:2b:34:c3:00:d3:3f:48:9a:
         e6:7f:fd:4a:80:82:cc:6b:62:35:39:02:6a:be:d0:35:b4:6d:
         eb:e3:93:4d:cd:2d:7d:ab:ab:9c:37:62:9d:0a:5c:f9:3f:cc:
         1f:40:7c:57:10:f5:85:fa:d4:e9:b7:df:9b:e7:81:f6:a7:83:
         b2:c2:66:53:38:70:3d:9a:47:99:95:03:80:fd:e7:ca:e0:36:
         c0:be:ff:fc:7d:6c:bf:e9:82:da:69:04:8f:2e:5a:9b:6b:82:
         8f:dd:73:9a:0c:3c:bd:38:43:4e:37:48:e9:39:5a:51:fe:6e:
         7e:0c:58:af:b4:c3:e5:47:b7:a9:97:f5:5a:1e:09:ab:41:e3:
         65:61:73:9c:86:cb:c8:8e:ec:ea:ac:1c:c4:7f:10:5e:f5:f6:
         05:ff:a0:6b:1e:af:85:60:dd:49:28:0e:0e:47:4e:58:cb:d4:
         17:7c:10:01:aa:66:69:ec:a7:ea:35:28:29:ca:d2:b5:4e:37:
         df:af:60:71:b3:7a:ea:4b:c3:d5:83:32:fd:5a:25:f9:15:aa:
         6c:2e:70:2b:d9:42:83:a2:7f:bd:ae:e4:93:ba:38:77:f1:e6:
         a3:79:15:20:41:46:e9:0a:83:3f:85:b9:c6:f4:7e:ad:9e:d1:
         04:45:d2:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----