Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/d5bc08-ca3b-46a7-b9d8-9319980cea68/1/1-uxRh3q5-Zs7oczlAaKWwysCj7U.mft
File:                     1-uxRh3q5-Zs7oczlAaKWwysCj7U.mft (raw, json)
Hash identifier:          HLkz1ETEQtMD/VwEQ6ppCvrwv1npB846hrHQZuAzvPc=
Subject key identifier:   C5:5C:FA:7E:0B:84:B2:A5:7A:43:9C:03:CE:EA:88:79:80:E8:26:D2
Authority key identifier: FA:EC:51:87:7A:B9:F9:9B:3B:A1:CC:E5:01:A2:96:C3:2B:02:8F:B5
Certificate issuer:       /CN=faec51877ab9f99b3ba1cce501a296c32b028fb5
Certificate serial:       01840D89EB071AC8F24E42AF3918C649FA26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-uxRh3q5-Zs7oczlAaKWwysCj7U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/d5bc08-ca3b-46a7-b9d8-9319980cea68/1/1-uxRh3q5-Zs7oczlAaKWwysCj7U.mft
Manifest number:          0649
Signing time:             Tue 25 Oct 2022 05:07:33 +0000
Manifest this update:     Tue 25 Oct 2022 05:07:33 +0000
Manifest next update:     Wed 26 Oct 2022 05:07:33 +0000
Files and hashes:         1: 1-uxRh3q5-Zs7oczlAaKWwysCj7U.crl (hash: 0cXbNEgJxfFHZTsn7zIVIcKI+hKX57nM7dBGRdZzCaA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:0d:89:eb:07:1a:c8:f2:4e:42:af:39:18:c6:49:fa:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=faec51877ab9f99b3ba1cce501a296c32b028fb5
        Validity
            Not Before: Oct 25 05:07:33 2022 GMT
            Not After : Oct 26 05:07:33 2022 GMT
        Subject: CN=c55cfa7e0b84b2a57a439c03ceea887980e826d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:88:16:1f:ac:81:4d:f2:58:22:ed:d5:3a:7b:
                    0e:94:c0:26:53:e2:32:f6:c2:a7:52:f0:50:2c:0a:
                    50:29:1e:42:6f:90:8b:f8:5d:31:86:f7:1e:ea:1e:
                    29:cd:b8:36:50:b7:f5:83:65:10:9a:9f:01:94:cd:
                    cd:fa:23:86:c7:49:bc:28:21:0d:3c:66:50:60:66:
                    ab:e3:0b:29:fe:fd:fb:a6:f7:1a:5f:76:d8:79:6f:
                    66:69:6e:85:e8:3c:bc:20:4a:01:1d:0a:d7:b8:6e:
                    b5:a2:b2:11:ee:04:b6:05:ba:b4:6e:27:ab:0d:b2:
                    01:81:e9:ed:df:bc:b2:86:d6:18:de:8c:be:12:46:
                    06:cd:6b:3a:65:ae:c7:63:38:81:4c:b8:30:61:b1:
                    cf:de:93:2f:85:90:cd:9b:f0:e8:98:b1:36:7f:d9:
                    16:47:1c:e9:9a:05:c0:2d:6d:1d:b1:fd:59:dd:dc:
                    d1:3d:a7:11:0a:e8:63:f3:7a:f6:68:95:b2:c8:69:
                    48:1b:3f:e9:77:98:2d:4e:3d:46:9b:9f:d7:61:f1:
                    3b:d7:f5:6d:23:06:e0:4c:57:71:1d:5a:ba:da:59:
                    ef:a9:84:6a:e7:55:2c:f9:5b:24:1c:9c:ed:8a:f6:
                    8e:b4:95:78:60:4a:db:0e:cc:4c:cb:16:b9:80:73:
                    b3:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:5C:FA:7E:0B:84:B2:A5:7A:43:9C:03:CE:EA:88:79:80:E8:26:D2
            X509v3 Authority Key Identifier:
                keyid:FA:EC:51:87:7A:B9:F9:9B:3B:A1:CC:E5:01:A2:96:C3:2B:02:8F:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uxRh3q5-Zs7oczlAaKWwysCj7U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d5bc08-ca3b-46a7-b9d8-9319980cea68/1/1-uxRh3q5-Zs7oczlAaKWwysCj7U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d5bc08-ca3b-46a7-b9d8-9319980cea68/1/1-uxRh3q5-Zs7oczlAaKWwysCj7U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:4e:95:25:84:6c:34:8d:d7:dd:02:3a:ec:79:82:19:2e:9d:
         a6:e8:06:4e:f0:01:54:4f:4f:21:c4:77:3e:7e:2e:19:68:2e:
         33:38:08:5f:fb:f1:9a:69:c9:53:73:59:53:19:7a:9f:54:59:
         eb:a8:4a:6b:6d:dd:57:78:04:05:10:50:98:6d:84:d9:0c:b2:
         bd:b3:00:39:e2:93:6a:20:de:dc:62:7b:c0:fd:9d:b4:3c:de:
         f5:b4:c1:fb:5f:38:bc:07:b0:35:ae:bc:2b:3c:b8:0f:6f:b1:
         8b:b5:27:cb:56:e1:74:41:95:49:17:d6:ed:1b:2d:e8:d5:e0:
         66:3d:bd:6e:e8:57:5d:eb:0b:ef:d3:1d:e4:3f:9b:9f:a8:9e:
         2a:3d:41:c3:58:64:95:61:42:9e:ac:13:c9:9c:c2:f8:82:d6:
         16:81:f2:db:2c:3e:33:02:91:80:de:11:c0:ae:1e:21:8c:a0:
         62:df:30:ee:48:ed:65:ba:65:e7:e8:27:d9:ec:ec:8d:77:50:
         6a:c7:32:5b:49:c2:6a:81:5f:be:54:a2:d3:c9:74:ee:d6:89:
         c4:bf:0b:73:5e:aa:fa:2f:dc:f5:2e:20:36:e1:ec:3b:7f:35:
         92:94:91:4f:57:ab:cc:fc:a7:83:9a:90:43:7c:c5:fc:33:86:
         3c:e8:53:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----