Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/78c103-89da-4b84-8f34-aeb6d2cf2de2/1/j4sV00wItfH8_0-edMlbx2oLar4.mft
File:                     j4sV00wItfH8_0-edMlbx2oLar4.mft (raw, json)
Hash identifier:          1Hj9u+GjN4Ev+dLQb4mb3nXQQuw7hccHBF2eGnPFlcU=
Subject key identifier:   02:E1:7C:36:2D:6E:2B:D7:FE:77:9B:0C:96:4C:31:04:98:7D:BF:3F
Authority key identifier: 8F:8B:15:D3:4C:08:B5:F1:FC:FF:4F:9E:74:C9:5B:C7:6A:0B:6A:BE
Certificate issuer:       /CN=8f8b15d34c08b5f1fcff4f9e74c95bc76a0b6abe
Certificate serial:       0189FC89D42D3D1F01F7DD8A096104813462
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j4sV00wItfH8_0-edMlbx2oLar4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/78c103-89da-4b84-8f34-aeb6d2cf2de2/1/j4sV00wItfH8_0-edMlbx2oLar4.mft
Manifest number:          086A
Signing time:             Wed 16 Aug 2023 04:10:38 +0000
Manifest this update:     Wed 16 Aug 2023 04:10:38 +0000
Manifest next update:     Thu 17 Aug 2023 04:10:38 +0000
Files and hashes:         1: j4sV00wItfH8_0-edMlbx2oLar4.crl (hash: uhSseyn/C6/Y01GI/NSTQrQKQSL8+2ZuSWTVS3Re8kM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:fc:89:d4:2d:3d:1f:01:f7:dd:8a:09:61:04:81:34:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f8b15d34c08b5f1fcff4f9e74c95bc76a0b6abe
        Validity
            Not Before: Aug 16 04:10:38 2023 GMT
            Not After : Aug 17 04:10:38 2023 GMT
        Subject: CN=02e17c362d6e2bd7fe779b0c964c3104987dbf3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7a:be:99:ec:cd:8b:2a:31:01:3c:1c:f8:51:
                    2b:63:19:d7:a7:c2:2f:3c:5d:5d:02:25:e2:42:8c:
                    df:1e:9e:a4:d3:aa:b9:e5:17:32:87:ca:59:26:11:
                    0e:55:eb:e3:f4:4f:2a:2a:29:87:03:d2:70:b5:c8:
                    29:4e:ed:0a:98:48:7a:0a:11:11:37:e1:3f:95:1b:
                    64:63:c6:73:9d:fd:c2:12:72:f8:6c:a9:9b:10:45:
                    6f:cf:47:34:ab:f3:b3:68:3d:0b:ad:87:18:13:39:
                    f8:9a:21:78:38:cb:a4:0e:ea:13:7d:35:c8:cb:6e:
                    cc:19:ea:e7:f9:88:0e:36:ca:93:84:90:e0:3d:80:
                    b4:44:76:8b:95:d5:5f:52:a4:d0:1b:3f:ca:c0:4b:
                    b4:dd:98:95:2f:fc:36:1e:ac:da:c6:d5:76:4c:cf:
                    cf:9b:14:7a:de:d3:53:9b:96:19:f7:28:da:0d:80:
                    6d:1a:24:1a:69:c9:05:b1:9a:7b:e5:8f:1c:a8:76:
                    14:15:02:cf:f7:42:7b:e8:10:71:47:6f:8b:a7:14:
                    69:f5:0f:a0:a4:36:40:a0:10:31:80:38:5f:93:c5:
                    ce:18:b6:a0:e1:86:73:95:29:4b:95:e3:43:5d:fa:
                    7f:d9:41:4e:d3:67:2a:05:32:43:99:fe:8d:f6:51:
                    39:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:E1:7C:36:2D:6E:2B:D7:FE:77:9B:0C:96:4C:31:04:98:7D:BF:3F
            X509v3 Authority Key Identifier:
                keyid:8F:8B:15:D3:4C:08:B5:F1:FC:FF:4F:9E:74:C9:5B:C7:6A:0B:6A:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j4sV00wItfH8_0-edMlbx2oLar4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/78c103-89da-4b84-8f34-aeb6d2cf2de2/1/j4sV00wItfH8_0-edMlbx2oLar4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/78c103-89da-4b84-8f34-aeb6d2cf2de2/1/j4sV00wItfH8_0-edMlbx2oLar4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:75:4e:93:1c:53:09:02:ec:4e:6f:89:7c:6b:d3:b2:3a:fc:
         e7:58:6c:cf:45:4e:94:d9:ac:c1:e7:8d:5b:3b:52:6f:98:6b:
         65:a2:fc:e9:7c:81:f6:bb:4d:6d:49:3f:ef:cf:f8:78:11:d1:
         9d:83:76:ef:c4:2d:da:ee:eb:51:bb:4a:da:e2:02:3a:89:81:
         3a:a9:51:df:a6:28:06:fe:6a:ec:c3:ce:8c:34:54:4d:ff:29:
         b5:52:db:d2:43:f4:66:12:1d:83:49:8d:88:6f:c4:61:9a:f5:
         0b:52:97:25:5d:a4:02:97:ea:a4:71:18:57:de:58:10:af:64:
         31:e8:f2:4b:87:c9:c1:f7:71:1e:af:c4:24:d0:34:44:76:24:
         df:14:da:46:13:5a:db:a3:81:a1:9f:23:08:0e:ab:a8:19:b0:
         d6:3c:38:a2:d0:ec:87:31:f5:05:3c:b4:5d:58:5d:72:29:8b:
         d2:84:12:04:10:bc:a8:a7:8b:dd:da:35:d0:d5:c2:cf:d6:0e:
         1c:68:8f:45:f3:a6:cd:24:a8:dd:3e:e6:44:53:77:e0:1c:5b:
         a2:7b:b6:06:a0:a1:1c:61:b6:66:82:73:76:75:24:30:2f:02:
         ba:f5:a2:ba:99:dc:2f:16:fe:25:07:e9:7b:16:aa:fa:78:7d:
         0c:5a:7f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----