Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/9e44ae-b97c-4c80-a26e-fb00cb0a8cd0/1/3HHrOHicr_siDPQQt2GQvvXy6V4.mft
File:                     3HHrOHicr_siDPQQt2GQvvXy6V4.mft (raw, json)
Hash identifier:          ZbH/J0DUGfoR5DdXO9D9h9aJHYU8pN4PRqOGlTi9ZoQ=
Subject key identifier:   94:90:A1:04:84:97:51:05:E9:7C:5E:AB:DA:8D:A4:6C:1C:BC:BC:26
Authority key identifier: DC:71:EB:38:78:9C:AF:FB:22:0C:F4:10:B7:61:90:BE:F5:F2:E9:5E
Certificate issuer:       /CN=dc71eb38789caffb220cf410b76190bef5f2e95e
Certificate serial:       0183166233D1082DD07AD2B18DA6DFCE8116
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3HHrOHicr_siDPQQt2GQvvXy6V4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/9e44ae-b97c-4c80-a26e-fb00cb0a8cd0/1/3HHrOHicr_siDPQQt2GQvvXy6V4.mft
Manifest number:          06DE
Signing time:             Wed 07 Sep 2022 05:17:57 +0000
Manifest this update:     Wed 07 Sep 2022 05:17:57 +0000
Manifest next update:     Thu 08 Sep 2022 05:17:57 +0000
Files and hashes:         1: 3HHrOHicr_siDPQQt2GQvvXy6V4.crl (hash: oR4d9Jby6MFqOebLBz1QAWXrWhdUpaL0qwfmca4SgXI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:16:62:33:d1:08:2d:d0:7a:d2:b1:8d:a6:df:ce:81:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc71eb38789caffb220cf410b76190bef5f2e95e
        Validity
            Not Before: Sep  7 05:17:57 2022 GMT
            Not After : Sep  8 05:17:57 2022 GMT
        Subject: CN=9490a10484975105e97c5eabda8da46c1cbcbc26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ac:2c:d1:59:fd:90:45:97:e1:11:ad:e3:7a:
                    fd:b1:fb:45:1e:94:8e:d7:b1:27:91:05:30:90:da:
                    0d:2b:cb:78:63:ab:1c:8a:98:cd:8e:a6:a3:89:bf:
                    99:c9:f9:3f:9f:49:ad:be:2c:e7:96:4c:e2:b0:05:
                    c8:59:cc:9f:0a:62:1c:8e:9f:4f:b2:d2:db:b4:2d:
                    d8:c7:27:ec:17:d1:9d:ed:9d:11:9a:51:67:d8:92:
                    89:b0:5b:67:50:c1:2f:05:2e:b3:e0:96:99:1f:b8:
                    0d:85:a3:ba:ee:6a:70:d7:23:05:cb:13:24:32:37:
                    72:69:98:3d:b4:29:f6:3c:79:ce:93:34:1c:5d:4a:
                    d0:7b:5c:91:88:8b:98:78:15:a6:33:d6:5a:1d:4f:
                    38:61:ef:45:58:4e:d1:a3:de:1a:58:1b:ea:37:81:
                    2e:81:51:86:9f:75:f3:64:b6:dc:13:e4:ec:68:2b:
                    1c:ed:47:04:b0:75:94:7d:7a:3b:02:d3:a6:dc:5e:
                    b3:c4:11:68:d5:cc:24:f8:c4:f7:fd:00:98:86:fb:
                    d4:5a:5d:82:17:d0:c1:53:24:1b:4d:d5:89:e2:9a:
                    3f:b6:b2:67:77:a7:54:02:4c:74:d8:b2:ab:96:d7:
                    00:7d:47:94:0a:91:29:7c:8b:89:f6:e1:dc:9a:c8:
                    48:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:90:A1:04:84:97:51:05:E9:7C:5E:AB:DA:8D:A4:6C:1C:BC:BC:26
            X509v3 Authority Key Identifier:
                keyid:DC:71:EB:38:78:9C:AF:FB:22:0C:F4:10:B7:61:90:BE:F5:F2:E9:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HHrOHicr_siDPQQt2GQvvXy6V4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9e44ae-b97c-4c80-a26e-fb00cb0a8cd0/1/3HHrOHicr_siDPQQt2GQvvXy6V4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9e44ae-b97c-4c80-a26e-fb00cb0a8cd0/1/3HHrOHicr_siDPQQt2GQvvXy6V4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:3d:72:ab:71:2e:1f:e2:98:61:f4:99:76:2d:d6:89:b0:d1:
         91:62:12:f6:4c:1b:e8:95:91:00:cd:7c:0f:82:fc:93:89:29:
         e8:bf:ca:b8:d0:9b:5a:07:ea:46:52:08:d8:de:eb:80:f0:e0:
         25:77:9d:63:99:3e:1b:1a:8f:f2:91:32:60:f9:20:ea:96:82:
         55:19:64:a2:b7:c4:fc:8c:6a:35:60:44:6a:0d:4f:94:d4:50:
         64:be:ca:18:ba:4c:11:3b:43:d6:a6:a7:3f:b1:b3:be:52:d6:
         24:09:43:92:a4:38:62:25:eb:fa:8d:71:2e:39:d1:48:81:97:
         0b:4e:f5:63:59:4d:6e:fa:1c:40:31:92:96:85:81:14:6f:18:
         c5:b4:6a:42:3d:f8:71:64:e5:e5:47:15:0d:6f:11:1c:ba:c7:
         b0:69:8e:91:98:61:86:f6:54:61:49:43:ef:92:f4:2a:b9:c2:
         ca:24:98:f8:19:08:f1:61:4e:8f:15:d0:1f:d0:45:fb:6f:42:
         36:1c:bb:e6:75:f2:cf:a3:66:78:c0:0e:a9:e2:19:c8:e3:89:
         52:9d:6a:d7:79:3b:aa:26:2a:3a:b1:da:04:0a:3a:02:63:8d:
         06:df:97:85:ef:e8:1b:9f:55:71:46:48:7a:38:57:f6:60:7c:
         68:08:88:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----