Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/61e5a7-af26-441f-b760-1a6c45f48d29/1/zDcwbemF2a1vLgLN2X8NqQCDwh8.mft
File:                     zDcwbemF2a1vLgLN2X8NqQCDwh8.mft (raw, json)
Hash identifier:          nWOTasZ6gmWfa5YKj09EemMJyUB070HR+SZeU5hPg6w=
Subject key identifier:   D0:D5:AA:B2:2E:B3:E3:9D:C0:16:2D:C9:B0:95:78:51:06:F5:86:F5
Authority key identifier: CC:37:30:6D:E9:85:D9:AD:6F:2E:02:CD:D9:7F:0D:A9:00:83:C2:1F
Certificate issuer:       /CN=cc37306de985d9ad6f2e02cdd97f0da90083c21f
Certificate serial:       0181D7330E87EDD9996A8213FAC6ADA8CD1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zDcwbemF2a1vLgLN2X8NqQCDwh8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/61e5a7-af26-441f-b760-1a6c45f48d29/1/zDcwbemF2a1vLgLN2X8NqQCDwh8.mft
Manifest number:          0862
Signing time:             Thu 07 Jul 2022 05:47:36 +0000
Manifest this update:     Thu 07 Jul 2022 05:47:36 +0000
Manifest next update:     Fri 08 Jul 2022 05:47:36 +0000
Files and hashes:         1: zDcwbemF2a1vLgLN2X8NqQCDwh8.crl (hash: 2zoSmRtWxQh7zkZQol7zN1ni/k8tkOQDL4aMuGkQIdc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:81:d7:33:0e:87:ed:d9:99:6a:82:13:fa:c6:ad:a8:cd:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc37306de985d9ad6f2e02cdd97f0da90083c21f
        Validity
            Not Before: Jul  7 05:47:36 2022 GMT
            Not After : Jul  8 05:47:36 2022 GMT
        Subject: CN=d0d5aab22eb3e39dc0162dc9b095785106f586f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:d1:d5:dc:f1:86:24:ee:07:59:9f:54:c3:02:
                    25:59:64:d7:64:fe:16:67:55:e6:f8:fa:09:b8:42:
                    97:88:38:5e:63:9b:64:51:d3:01:7c:e0:39:53:e1:
                    92:09:02:de:92:d4:b5:9f:2a:66:cc:b5:cc:ef:5c:
                    ca:ab:cc:97:a6:ff:2f:eb:db:b2:bd:c4:bd:29:cf:
                    70:02:c3:25:1f:17:a8:6c:a5:08:33:84:29:86:e8:
                    97:79:9a:9c:bc:81:23:63:ab:56:01:52:f5:93:2d:
                    b4:b5:98:b6:3f:5c:4e:fd:b9:22:80:0e:c3:b6:43:
                    b0:03:3b:9f:7f:e6:43:bc:81:62:a1:4d:4b:57:ef:
                    08:d1:28:64:15:d6:20:58:c4:d3:c2:38:dc:f4:16:
                    04:3c:74:61:9c:a5:4b:47:08:90:cc:99:f3:af:bf:
                    90:a9:2c:b9:f8:5c:93:7e:f0:ae:d1:09:ec:48:a4:
                    c2:dc:2b:08:9f:44:85:28:f1:6f:bf:b8:e3:11:45:
                    7c:62:b1:5f:00:da:14:fb:4e:ee:ee:a3:33:a5:15:
                    be:b8:7d:52:72:af:d9:19:73:43:e1:5b:12:3c:dc:
                    9b:60:4a:4f:29:07:c2:7a:eb:85:bc:c0:e5:6a:48:
                    ab:d3:79:1e:ba:e9:6d:8c:17:12:d2:ac:bc:33:43:
                    dd:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:D5:AA:B2:2E:B3:E3:9D:C0:16:2D:C9:B0:95:78:51:06:F5:86:F5
            X509v3 Authority Key Identifier:
                keyid:CC:37:30:6D:E9:85:D9:AD:6F:2E:02:CD:D9:7F:0D:A9:00:83:C2:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zDcwbemF2a1vLgLN2X8NqQCDwh8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/61e5a7-af26-441f-b760-1a6c45f48d29/1/zDcwbemF2a1vLgLN2X8NqQCDwh8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/61e5a7-af26-441f-b760-1a6c45f48d29/1/zDcwbemF2a1vLgLN2X8NqQCDwh8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:66:1e:f7:3e:69:c2:3a:76:63:e7:3f:62:0f:79:13:4b:a9:
         b0:84:b6:d5:e2:9f:9a:eb:a3:7a:88:a8:50:c9:f1:f4:a5:ca:
         5a:9d:fc:f6:24:0c:00:bf:d4:81:91:59:4f:ab:84:cc:cd:11:
         2a:8b:c8:ca:6c:f7:00:9c:b1:5c:51:dd:7d:fd:0c:bd:ae:62:
         b2:66:5d:c3:34:b3:2e:0c:48:76:96:a5:83:b1:28:49:46:5f:
         65:4b:86:e2:fd:1d:03:06:f6:ae:d0:78:1d:7b:9e:26:b9:39:
         92:6a:37:cd:75:eb:e0:f1:57:a0:b8:ce:e0:b1:90:ec:e6:f0:
         fa:ea:a5:28:80:30:5b:e0:38:c3:ed:c9:8c:ab:43:02:ea:ec:
         e1:56:49:05:67:27:76:3a:a3:25:99:58:76:41:f0:62:8b:b5:
         97:b2:0b:b9:6f:cb:3b:fb:89:df:2b:ba:0d:c3:81:b2:c5:02:
         18:fd:bc:fb:b4:71:04:92:e1:69:f2:87:cc:51:02:7b:13:12:
         a6:ee:55:74:12:33:0d:92:92:69:8c:d5:c1:24:90:c7:39:be:
         ec:e4:25:4a:bd:dc:9b:4d:59:20:3f:ae:bb:7a:fa:12:9f:b8:
         a7:13:88:c0:37:0e:d5:db:17:b0:ce:b2:b2:7e:b4:61:c8:14:
         fd:ba:44:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----