Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/ffbbd7-ba26-473e-88b1-a8d6683018dc/1/1MrY0G329CvIonvbqr9sc2zDJOY.mft
File:                     1MrY0G329CvIonvbqr9sc2zDJOY.mft (raw, json)
Hash identifier:          JOy3rZqai06Lcp9V9nBOFkKoe/WeEPzEZbcB0JK9eLc=
Subject key identifier:   30:08:4B:96:12:EC:27:34:95:D9:06:11:D3:27:F3:20:62:55:A9:67
Authority key identifier: D4:CA:D8:D0:6D:F6:F4:2B:C8:A2:7B:DB:AA:BF:6C:73:6C:C3:24:E6
Certificate issuer:       /CN=d4cad8d06df6f42bc8a27bdbaabf6c736cc324e6
Certificate serial:       018972C05EAB345F58FF6D8D2F183D617003
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1MrY0G329CvIonvbqr9sc2zDJOY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/ffbbd7-ba26-473e-88b1-a8d6683018dc/1/1MrY0G329CvIonvbqr9sc2zDJOY.mft
Manifest number:          081A
Signing time:             Thu 20 Jul 2023 10:02:36 +0000
Manifest this update:     Thu 20 Jul 2023 10:02:36 +0000
Manifest next update:     Fri 21 Jul 2023 10:02:36 +0000
Files and hashes:         1: 1MrY0G329CvIonvbqr9sc2zDJOY.crl (hash: PUsY+3yNO2iOred8rvfhlnzpKDh6TVuYlelOWNMMNIk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:72:c0:5e:ab:34:5f:58:ff:6d:8d:2f:18:3d:61:70:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4cad8d06df6f42bc8a27bdbaabf6c736cc324e6
        Validity
            Not Before: Jul 20 10:02:36 2023 GMT
            Not After : Jul 21 10:02:36 2023 GMT
        Subject: CN=30084b9612ec273495d90611d327f3206255a967
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:20:68:92:d5:83:8d:b0:32:20:9c:e1:90:e3:
                    62:67:d0:88:77:0b:d3:5e:0c:5f:26:d3:d5:4a:db:
                    c8:8d:0d:03:9d:45:ce:e0:c3:e1:2b:88:ea:7a:bd:
                    37:cb:4e:e9:81:64:53:42:1d:cf:cb:f2:f8:7c:d6:
                    c6:db:99:d9:1e:96:3d:54:3a:75:84:68:b2:5a:19:
                    5c:df:d1:7b:97:00:69:09:9a:f7:63:88:f0:3a:cc:
                    f2:27:e4:1c:35:a7:75:56:60:30:ba:e0:c2:4d:6a:
                    43:ce:03:0f:eb:9a:e7:1a:c9:1e:ab:a9:12:f8:16:
                    7e:89:ba:b9:4a:29:ab:4b:26:be:46:bc:9e:71:ce:
                    9b:60:aa:7b:9b:e8:0b:0f:df:2f:f1:62:00:e0:e2:
                    3f:8d:46:f6:9b:65:3a:58:f9:ad:43:50:99:30:e4:
                    ad:49:25:53:67:cf:5c:c4:53:e4:67:22:00:c2:6f:
                    f9:87:11:5a:a3:43:2f:7f:d5:42:92:65:4d:d5:d0:
                    6a:f8:04:4f:e1:14:5f:16:c9:86:6d:ad:d5:79:36:
                    5f:cf:bd:74:a4:db:56:28:d2:c2:6c:6f:53:c6:9c:
                    fc:57:28:65:0b:06:2a:82:15:66:18:e8:c5:97:83:
                    ff:06:c4:4a:43:ba:cf:45:5c:bb:20:fa:9e:d8:68:
                    34:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:08:4B:96:12:EC:27:34:95:D9:06:11:D3:27:F3:20:62:55:A9:67
            X509v3 Authority Key Identifier:
                keyid:D4:CA:D8:D0:6D:F6:F4:2B:C8:A2:7B:DB:AA:BF:6C:73:6C:C3:24:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1MrY0G329CvIonvbqr9sc2zDJOY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ffbbd7-ba26-473e-88b1-a8d6683018dc/1/1MrY0G329CvIonvbqr9sc2zDJOY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ffbbd7-ba26-473e-88b1-a8d6683018dc/1/1MrY0G329CvIonvbqr9sc2zDJOY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:19:21:7e:a8:37:fe:f7:76:3e:39:44:d2:5b:57:9f:2f:86:
         0e:c6:07:39:8b:24:e3:5f:16:40:76:95:b6:24:f4:0d:28:fd:
         1e:7c:17:ac:56:40:68:cd:d0:82:fc:a4:ef:45:1b:e5:dd:92:
         01:e7:9e:d8:ed:1b:9d:e4:19:54:64:9e:60:eb:c2:2d:f6:1e:
         e6:f8:3b:ee:31:b6:41:14:f6:58:ac:f0:1b:25:63:d4:5c:59:
         22:02:af:ea:06:b4:35:2e:b0:4e:e9:80:e6:80:d9:04:df:e9:
         42:ef:48:5b:f7:71:d8:60:1b:d2:f1:e9:ec:6b:96:f1:97:cb:
         28:95:62:01:ca:3a:7c:de:e3:f1:dd:e3:50:d9:a7:36:d8:86:
         b4:83:3a:18:bb:fd:93:a9:e5:f7:10:22:14:00:92:09:46:1d:
         a4:d4:8a:19:1b:e2:08:a1:83:18:03:fb:9d:27:69:a7:75:e8:
         c5:7a:f6:fe:c1:4d:87:39:b3:e0:a7:6c:bf:6e:7b:fc:34:8e:
         bc:8d:2d:4e:ab:6b:3f:3d:0b:3d:b1:ad:77:42:cd:fe:a9:1f:
         e4:4f:7e:a7:30:2c:42:71:93:f1:95:b9:64:73:38:ae:43:54:
         99:8b:22:2f:2a:3e:a9:0d:da:66:5b:1b:a0:fb:9e:f6:52:7a:
         61:b6:ed:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----