Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/124bb3-9511-42f9-bbfc-6e545390aa44/1/TvEpnCQo-l6AorFQekY4SQIkZMc.mft
File:                     TvEpnCQo-l6AorFQekY4SQIkZMc.mft (raw, json)
Hash identifier:          WBJ27Kc9FECVmQ7ha5Qs5VBuNC61bfHVPpLcsDJAaqc=
Subject key identifier:   15:DE:8F:91:1C:EE:7A:B1:15:DF:A8:D5:4F:A3:B7:CF:C7:33:2F:DB
Authority key identifier: 4E:F1:29:9C:24:28:FA:5E:80:A2:B1:50:7A:46:38:49:02:24:64:C7
Certificate issuer:       /CN=4ef1299c2428fa5e80a2b1507a463849022464c7
Certificate serial:       01866DA9B258DBA3628F1FE6DA3B888DB24F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TvEpnCQo-l6AorFQekY4SQIkZMc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/124bb3-9511-42f9-bbfc-6e545390aa44/1/TvEpnCQo-l6AorFQekY4SQIkZMc.mft
Manifest number:          0C8A
Signing time:             Mon 20 Feb 2023 07:11:23 +0000
Manifest this update:     Mon 20 Feb 2023 07:11:23 +0000
Manifest next update:     Tue 21 Feb 2023 07:11:23 +0000
Files and hashes:         1: TvEpnCQo-l6AorFQekY4SQIkZMc.crl (hash: Ma2OeP8fu9fjh93PJVXd+RdrE1TQ0VpCrGYK0gUVCiw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:6d:a9:b2:58:db:a3:62:8f:1f:e6:da:3b:88:8d:b2:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ef1299c2428fa5e80a2b1507a463849022464c7
        Validity
            Not Before: Feb 20 07:11:23 2023 GMT
            Not After : Feb 21 07:11:23 2023 GMT
        Subject: CN=15de8f911cee7ab115dfa8d54fa3b7cfc7332fdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0f:35:73:67:f1:97:fc:37:8f:36:62:cc:5a:
                    9a:02:eb:12:3a:ae:bb:66:92:c9:6f:e9:a3:7e:e0:
                    12:cd:4f:af:8d:2e:a9:11:7a:af:03:b5:54:cc:e7:
                    3c:da:b5:6a:49:17:8a:46:21:d5:8c:37:b7:7b:ec:
                    39:9f:40:98:51:94:65:43:1e:e7:fa:bf:bc:a1:61:
                    e3:fc:4d:fd:f5:a6:c8:a5:3d:28:3c:51:78:56:8f:
                    13:7e:75:8c:0b:48:03:2c:7b:a4:d7:aa:5a:bf:88:
                    da:77:9b:0b:47:d9:8c:6b:6f:bf:02:27:99:8e:88:
                    7e:a1:9a:51:47:c3:b4:6c:48:56:d4:87:46:85:57:
                    37:f4:7d:8c:28:89:d6:f4:39:bd:fe:f6:ab:71:ed:
                    ff:07:c4:11:ac:c8:f0:7b:25:46:df:c9:7c:80:c3:
                    28:30:ea:03:14:33:dd:30:8b:8b:76:3c:8c:6e:da:
                    ee:1f:73:67:bd:b4:5e:d8:47:19:65:05:8f:07:65:
                    f2:b8:06:55:47:e5:c6:8d:d8:42:b4:a3:32:a9:02:
                    29:21:70:0f:df:e1:2f:1d:6a:35:e1:15:54:30:c7:
                    e7:5a:cc:97:45:f7:8f:a7:48:8e:f9:b4:2e:30:a0:
                    89:6e:de:2a:28:82:8f:b1:a6:6e:a5:05:1b:72:f9:
                    d8:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:DE:8F:91:1C:EE:7A:B1:15:DF:A8:D5:4F:A3:B7:CF:C7:33:2F:DB
            X509v3 Authority Key Identifier:
                keyid:4E:F1:29:9C:24:28:FA:5E:80:A2:B1:50:7A:46:38:49:02:24:64:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TvEpnCQo-l6AorFQekY4SQIkZMc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/124bb3-9511-42f9-bbfc-6e545390aa44/1/TvEpnCQo-l6AorFQekY4SQIkZMc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/124bb3-9511-42f9-bbfc-6e545390aa44/1/TvEpnCQo-l6AorFQekY4SQIkZMc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:a6:05:1c:02:a0:24:e1:5f:7f:d3:18:f9:84:26:c3:fb:36:
         59:c5:71:d8:fd:9f:ed:df:ef:77:4f:f1:5b:c7:d8:2a:73:19:
         d7:19:ab:58:1e:91:92:a5:40:ca:0b:4e:73:ee:01:ee:46:dd:
         b7:90:49:10:ea:1e:72:b9:0f:bf:cd:36:c9:56:c5:ea:96:93:
         f9:64:c1:74:39:44:05:66:66:91:c4:f9:f1:dc:9a:9f:fc:d5:
         ce:aa:69:7b:85:33:b7:f9:9d:10:f8:49:32:03:d0:55:b0:5d:
         47:58:2a:8a:3f:34:3d:e6:4c:94:e6:95:9e:ff:d5:8c:33:f8:
         de:27:06:a7:62:e1:75:43:26:de:5e:78:6e:45:f4:ec:f5:70:
         42:3c:cc:05:cf:72:bc:b2:47:60:3e:4b:8c:ff:e9:20:55:6c:
         9e:e0:b1:7b:52:46:37:51:39:ba:d5:55:5d:05:ea:f1:71:f2:
         5b:ca:78:92:24:ed:46:31:e9:ce:3d:75:f0:8c:0c:ca:d7:d9:
         5e:9d:22:ed:d0:a0:ff:5b:40:c5:ed:20:a3:81:5c:6c:9a:d2:
         38:b0:76:f0:90:ee:fe:ff:2b:4b:3d:12:dc:3e:a8:1e:23:19:
         47:98:c9:5b:ac:06:44:9b:38:06:1c:f6:9d:74:06:39:81:86:
         fe:4f:dd:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----