Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/ed29fc-1839-4eb7-b27a-f2fc239ce0d0/1/1ZX4qSRgo8N2VbY8B1PH6t7_6eM.mft
File:                     1ZX4qSRgo8N2VbY8B1PH6t7_6eM.mft (raw, json)
Hash identifier:          99xEbDZa/mLMcaPiSDQgerdbI3fwr3KxyqngcVowbds=
Subject key identifier:   5F:BF:25:8B:31:C5:E6:F8:4D:E3:BA:47:4A:14:42:12:5D:6F:29:64
Authority key identifier: D5:95:F8:A9:24:60:A3:C3:76:55:B6:3C:07:53:C7:EA:DE:FF:E9:E3
Certificate issuer:       /CN=d595f8a92460a3c37655b63c0753c7eadeffe9e3
Certificate serial:       018AB6C1E365FFD05EF22834967DC2E977AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1ZX4qSRgo8N2VbY8B1PH6t7_6eM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/ed29fc-1839-4eb7-b27a-f2fc239ce0d0/1/1ZX4qSRgo8N2VbY8B1PH6t7_6eM.mft
Manifest number:          0885
Signing time:             Thu 21 Sep 2023 08:01:14 +0000
Manifest this update:     Thu 21 Sep 2023 08:01:14 +0000
Manifest next update:     Fri 22 Sep 2023 08:01:14 +0000
Files and hashes:         1: 1ZX4qSRgo8N2VbY8B1PH6t7_6eM.crl (hash: Shak95zWVefB6GmMfV5D4y4arzLFPNVPULz2WY/yETA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:b6:c1:e3:65:ff:d0:5e:f2:28:34:96:7d:c2:e9:77:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d595f8a92460a3c37655b63c0753c7eadeffe9e3
        Validity
            Not Before: Sep 21 08:01:14 2023 GMT
            Not After : Sep 22 08:01:14 2023 GMT
        Subject: CN=5fbf258b31c5e6f84de3ba474a1442125d6f2964
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4d:92:28:11:78:24:3a:57:30:f5:59:85:10:
                    c3:04:ad:8f:a2:ba:ca:77:4b:1b:30:7c:ef:a9:6b:
                    c1:01:ce:38:18:cf:d5:9b:ef:ee:b5:ff:3c:c3:a7:
                    81:73:56:33:80:7c:bf:9d:a7:22:10:61:df:b5:2e:
                    96:cc:a1:ef:18:29:27:2a:cf:d1:0c:16:47:1b:b0:
                    ec:77:d3:ad:d1:f6:45:63:9d:d7:0b:d1:8a:d4:58:
                    75:cc:3f:ab:3b:58:5e:97:9c:9a:bf:9b:e1:1b:66:
                    9c:49:8d:5c:d6:b8:25:8a:98:3f:ad:82:7e:ef:37:
                    ba:59:43:94:cf:f3:cd:3e:c6:62:46:d5:f1:5d:93:
                    61:82:ed:81:4a:18:12:c9:f5:41:da:cb:87:78:e9:
                    47:38:3c:d7:e2:d5:d0:66:c8:10:b1:44:f6:9f:cf:
                    9e:fc:12:fe:c6:25:3d:c5:74:a1:65:14:1a:d9:e8:
                    f0:e9:b3:74:58:be:5b:3a:20:f1:55:e5:1e:d5:9f:
                    7f:78:39:e4:30:c4:45:f4:11:c4:86:a3:5e:63:e2:
                    7f:73:36:13:7a:b1:ba:84:70:62:af:4f:65:ad:b5:
                    c6:cd:dd:42:42:58:6b:89:49:39:e2:96:b6:95:b1:
                    01:c0:52:02:6c:5b:9c:5b:ed:3d:ac:8b:01:b0:ee:
                    cb:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:BF:25:8B:31:C5:E6:F8:4D:E3:BA:47:4A:14:42:12:5D:6F:29:64
            X509v3 Authority Key Identifier:
                keyid:D5:95:F8:A9:24:60:A3:C3:76:55:B6:3C:07:53:C7:EA:DE:FF:E9:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ZX4qSRgo8N2VbY8B1PH6t7_6eM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/ed29fc-1839-4eb7-b27a-f2fc239ce0d0/1/1ZX4qSRgo8N2VbY8B1PH6t7_6eM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/ed29fc-1839-4eb7-b27a-f2fc239ce0d0/1/1ZX4qSRgo8N2VbY8B1PH6t7_6eM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:0d:67:11:9a:d8:8e:df:48:56:13:42:62:d4:3b:1a:75:7d:
         3a:83:e0:c9:30:15:6f:91:fb:b8:8d:df:69:56:a3:cc:0a:1e:
         b4:dc:e6:37:fb:fc:ad:17:ca:75:e6:c2:00:7d:9e:4a:ce:32:
         9e:4a:9a:ff:00:b8:d6:0c:05:e0:4f:9c:38:2c:3b:cf:06:93:
         b2:75:da:de:11:72:5b:e8:1a:91:3b:7f:12:c1:c2:01:3f:0f:
         6c:3e:e5:2b:e9:9e:58:a5:76:2d:d3:13:6a:a7:15:88:a3:83:
         76:b6:aa:cb:28:20:cb:2e:24:f8:3d:96:52:96:3a:0a:b4:61:
         da:4c:a6:8e:de:88:a7:a2:d6:49:df:88:30:06:89:b1:7a:43:
         e5:d7:3b:7f:b5:40:00:35:ab:9e:09:d8:12:2f:2a:3c:87:89:
         a5:4a:74:62:d8:fb:fc:be:d9:1b:43:75:bd:54:c9:50:84:93:
         4b:0d:16:c9:7d:29:7c:32:d2:8e:c8:6a:2a:61:6b:1f:0c:5d:
         1e:82:a6:04:34:5d:6d:e4:0e:d0:cc:74:c8:6e:4a:f9:6b:c6:
         67:04:11:a7:1e:b6:47:61:57:0c:b0:80:ff:59:3d:9c:a6:87:
         42:8e:86:42:85:0c:d9:fc:f7:76:90:1a:9e:15:cd:08:66:cb:
         53:6b:ee:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----