Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/cb6670-25c9-4dd1-a818-e5c7974f2f54/1/6b_eQa1we5y8uPXks8ulmcbmT4c.mft
File:                     6b_eQa1we5y8uPXks8ulmcbmT4c.mft (raw, json)
Hash identifier:          lCJg7iJRE1Hr0FqM/HMmEwpIu7n2dMcrbIH/lQ04gmA=
Subject key identifier:   06:76:54:A4:C8:A8:05:60:53:DF:1F:33:8C:C8:A5:A2:78:92:DA:37
Authority key identifier: E9:BF:DE:41:AD:70:7B:9C:BC:B8:F5:E4:B3:CB:A5:99:C6:E6:4F:87
Certificate issuer:       /CN=e9bfde41ad707b9cbcb8f5e4b3cba599c6e64f87
Certificate serial:       0F89D2E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6b_eQa1we5y8uPXks8ulmcbmT4c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/cb6670-25c9-4dd1-a818-e5c7974f2f54/1/6b_eQa1we5y8uPXks8ulmcbmT4c.mft
Manifest number:          089A
Signing time:             Tue 15 Mar 2022 09:58:49 +0000
Manifest this update:     Tue 15 Mar 2022 09:58:49 +0000
Manifest next update:     Wed 16 Mar 2022 09:58:49 +0000
Files and hashes:         1: 6b_eQa1we5y8uPXks8ulmcbmT4c.crl (hash: VkGQvychQmHPeI/twfawoxdcewPSIz86K8SavEJQtsY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 260690656 (0xf89d2e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9bfde41ad707b9cbcb8f5e4b3cba599c6e64f87
        Validity
            Not Before: Mar 15 09:58:49 2022 GMT
            Not After : Mar 16 09:58:49 2022 GMT
        Subject: CN=067654a4c8a8056053df1f338cc8a5a27892da37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:f6:77:e8:d9:bc:82:63:02:f0:16:a3:75:da:
                    69:9b:4d:af:98:ee:c4:ec:0e:e6:5e:02:ef:9a:7d:
                    a5:41:ca:03:c4:23:fc:06:9d:74:fe:85:74:9c:a5:
                    a0:c7:89:29:1b:25:60:cb:73:0c:01:19:2d:66:62:
                    b6:56:64:7f:3b:3a:4c:82:26:2b:06:81:93:a1:07:
                    3e:01:09:5e:dd:35:52:f2:17:46:f9:d8:fb:3c:cc:
                    d1:71:37:78:14:7d:43:ae:54:ca:ee:f3:67:89:88:
                    18:d0:b4:69:2a:56:6c:59:a9:e7:ad:2f:bb:f4:63:
                    bb:17:fa:8b:d5:c4:55:06:ac:d1:e3:13:cc:bc:1a:
                    76:71:29:ff:75:85:5c:55:5a:1c:ad:de:83:bc:aa:
                    2f:76:0b:b1:ef:a4:96:a4:bf:1b:49:5e:2d:36:e7:
                    45:d7:c2:3a:80:65:96:6f:03:fd:53:ed:94:3f:72:
                    da:5c:d8:46:85:77:6d:47:90:d7:ee:40:72:4f:3f:
                    db:25:14:db:df:6b:dc:44:ff:87:17:55:8a:89:5f:
                    86:e0:56:99:67:e2:82:49:17:2b:99:44:b6:33:d9:
                    a5:40:2b:3b:b8:9e:c5:6d:17:27:bf:63:e7:32:da:
                    1a:42:55:71:55:c2:48:8c:bc:c9:8b:27:86:63:b1:
                    15:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:76:54:A4:C8:A8:05:60:53:DF:1F:33:8C:C8:A5:A2:78:92:DA:37
            X509v3 Authority Key Identifier:
                keyid:E9:BF:DE:41:AD:70:7B:9C:BC:B8:F5:E4:B3:CB:A5:99:C6:E6:4F:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b_eQa1we5y8uPXks8ulmcbmT4c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cb6670-25c9-4dd1-a818-e5c7974f2f54/1/6b_eQa1we5y8uPXks8ulmcbmT4c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cb6670-25c9-4dd1-a818-e5c7974f2f54/1/6b_eQa1we5y8uPXks8ulmcbmT4c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:31:c3:b6:bd:c6:b6:d9:b1:da:d2:df:e1:52:b5:ab:d5:c6:
         28:11:a8:84:f8:7f:1b:28:35:8a:8c:c6:fa:4f:f7:81:42:24:
         7b:6c:b4:e5:87:2b:08:2f:52:fd:2e:c7:8d:2d:71:5c:d7:d1:
         d1:57:a1:fe:04:d1:f6:7a:76:3c:3c:15:92:37:23:3c:34:94:
         ff:80:92:ec:f1:c1:39:e9:8c:a1:b5:72:9b:31:7e:76:54:02:
         63:64:ab:45:13:7d:8a:56:c4:87:de:f8:ce:2d:d8:a3:9e:26:
         9c:91:f3:52:4f:e5:d7:81:40:b7:a7:77:bc:6f:5e:21:f2:3e:
         c7:6f:09:10:0d:c6:bd:7f:49:c3:d4:56:c6:a0:46:2b:2c:00:
         6f:d4:36:9a:2c:a8:93:ee:53:71:d0:84:16:23:6f:a9:26:2e:
         c3:9c:ee:a9:1f:66:d6:b9:09:88:89:ea:c4:c9:15:5b:a4:1a:
         99:93:42:9f:ed:14:28:f0:47:49:db:3f:5a:87:45:6f:63:71:
         e8:6a:13:99:96:27:e7:7d:84:7f:57:91:c8:6c:a9:46:dd:37:
         2d:d5:8b:7c:e1:1d:14:78:81:aa:4d:12:51:e2:30:bf:8e:07:
         18:01:62:f0:64:98:4d:24:34:4f:5a:4e:d8:5e:71:f9:66:28:
         d9:b7:f7:fb
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgIED4nS4DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
OWJmZGU0MWFkNzA3YjljYmNiOGY1ZTRiM2NiYTU5OWM2ZTY0Zjg3MB4XDTIyMDMx
NTA5NTg0OVoXDTIyMDMxNjA5NTg0OVowMzExMC8GA1UEAxMoMDY3NjU0YTRjOGE4
MDU2MDUzZGYxZjMzOGNjOGE1YTI3ODkyZGEzNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIz2d+jZvIJjAvAWo3XaaZtNr5juxOwO5l4C75p9pUHKA8Qj
/AaddP6FdJyloMeJKRslYMtzDAEZLWZitlZkfzs6TIImKwaBk6EHPgEJXt01UvIX
RvnY+zzM0XE3eBR9Q65Uyu7zZ4mIGNC0aSpWbFmp560vu/Rjuxf6i9XEVQas0eMT
zLwadnEp/3WFXFVaHK3eg7yqL3YLse+klqS/G0leLTbnRdfCOoBllm8D/VPtlD9y
2lzYRoV3bUeQ1+5Ack8/2yUU299r3ET/hxdViolfhuBWmWfigkkXK5lEtjPZpUAr
O7iexW0XJ79j5zLaGkJVcVXCSIy8yYsnhmOxFacCAwEAAaOCAiIwggIeMB0GA1Ud
DgQWBBQGdlSkyKgFYFPfHzOMyKWieJLaNzAfBgNVHSMEGDAWgBTpv95BrXB7nLy4
9eSzy6WZxuZPhzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzZiX2VRYTF3ZTV5OHVQWGtzOHVsbWNibVQ0Yy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNmUvY2I2NjcwLTI1YzktNGRkMS1hODE4LWU1Yzc5NzRmMmY1NC8x
LzZiX2VRYTF3ZTV5OHVQWGtzOHVsbWNibVQ0Yy5tZnQwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmUv
Y2I2NjcwLTI1YzktNGRkMS1hODE4LWU1Yzc5NzRmMmY1NC8xLzZiX2VRYTF3ZTV5
OHVQWGtzOHVsbWNibVQ0Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/
BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAGIxw7a9xrbZsdrS3+FStavVxigR
qIT4fxsoNYqMxvpP94FCJHtstOWHKwgvUv0ux40tcVzX0dFXof4E0fZ6djw8FZI3
Izw0lP+AkuzxwTnpjKG1cpsxfnZUAmNkq0UTfYpWxIfe+M4t2KOeJpyR81JP5deB
QLend7xvXiHyPsdvCRANxr1/ScPUVsagRissAG/UNposqJPuU3HQhBYjb6kmLsOc
7qkfZta5CYiJ6sTJFVukGpmTQp/tFCjwR0nbP1qHRW9jcehqE5mWJ+d9hH9Xkchs
qUbdNy3Vi3zhHRR4gapNElHiML+OBxgBYvBkmE0kNE9aTthecflmKNm39/s=
-----END CERTIFICATE-----