Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/a032ef-9b9f-487c-887a-7a8ff25fe1f6/1/1-iWf4SzxR56qxV02dmb3-9P7Ur4.mft
File:                     1-iWf4SzxR56qxV02dmb3-9P7Ur4.mft (raw, json)
Hash identifier:          MgoTQ8uRzJxZTmPRq3L972Q5Kwj99QFP89howToqpWQ=
Subject key identifier:   6A:89:11:EE:C2:69:F2:E6:76:40:17:8C:2E:27:52:32:D3:89:11:D4
Authority key identifier: FA:25:9F:E1:2C:F1:47:9E:AA:C5:5D:36:76:66:F7:FB:D3:FB:52:BE
Certificate issuer:       /CN=fa259fe12cf1479eaac55d367666f7fbd3fb52be
Certificate serial:       018C0F5DF908C5320772B4225BF240F3D1ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-iWf4SzxR56qxV02dmb3-9P7Ur4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/a032ef-9b9f-487c-887a-7a8ff25fe1f6/1/1-iWf4SzxR56qxV02dmb3-9P7Ur4.mft
Manifest number:          03D2
Signing time:             Mon 27 Nov 2023 06:01:05 +0000
Manifest this update:     Mon 27 Nov 2023 06:01:05 +0000
Manifest next update:     Tue 28 Nov 2023 06:01:05 +0000
Files and hashes:         1: 1-iWf4SzxR56qxV02dmb3-9P7Ur4.crl (hash: exx9kMhEOjO6nyTcD3hsB8J2irv1d3sUkH1NBMmaqQ0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:0f:5d:f9:08:c5:32:07:72:b4:22:5b:f2:40:f3:d1:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa259fe12cf1479eaac55d367666f7fbd3fb52be
        Validity
            Not Before: Nov 27 06:01:05 2023 GMT
            Not After : Nov 28 06:01:05 2023 GMT
        Subject: CN=6a8911eec269f2e67640178c2e275232d38911d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:b7:e7:73:8b:40:cc:ae:ae:79:89:a7:d1:c2:
                    de:ad:95:7c:7f:00:db:ea:e9:92:ea:f6:fa:59:3c:
                    38:2c:df:4d:c7:d6:59:d8:d8:b4:4b:6b:91:27:65:
                    41:96:bf:42:83:49:bb:3e:d3:32:77:50:54:c9:53:
                    47:d8:a6:48:81:94:b3:7e:15:f8:47:b0:8e:bd:9b:
                    f5:bd:ac:ca:fc:4d:7a:96:cb:4c:21:98:92:72:68:
                    57:8b:d0:c8:11:55:c3:de:9a:01:5a:3c:c3:13:5a:
                    fc:e1:8f:00:15:79:6b:1d:fb:60:33:29:ca:35:aa:
                    aa:15:be:38:cb:84:66:20:39:4a:cf:35:f8:4f:10:
                    e6:19:ba:17:50:b0:77:99:8a:60:a1:69:a9:1c:4e:
                    06:2c:07:44:7c:69:8a:04:0d:c0:9e:69:d0:09:e6:
                    a5:de:e6:f5:97:7f:6f:8a:a8:8a:df:28:68:42:a5:
                    64:4e:c9:41:53:45:47:7e:03:7f:a1:a5:bb:58:0a:
                    26:0e:6e:7b:66:f1:bc:51:a6:ec:73:48:1a:b7:5b:
                    20:c7:69:0b:82:e3:81:49:18:1b:7f:a3:96:a3:4e:
                    5b:94:ca:e3:34:e3:6a:8c:a4:05:0a:01:22:6f:25:
                    fb:08:41:ca:5f:2a:fa:43:b1:f2:e3:2a:9b:f9:03:
                    97:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:89:11:EE:C2:69:F2:E6:76:40:17:8C:2E:27:52:32:D3:89:11:D4
            X509v3 Authority Key Identifier:
                keyid:FA:25:9F:E1:2C:F1:47:9E:AA:C5:5D:36:76:66:F7:FB:D3:FB:52:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-iWf4SzxR56qxV02dmb3-9P7Ur4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a032ef-9b9f-487c-887a-7a8ff25fe1f6/1/1-iWf4SzxR56qxV02dmb3-9P7Ur4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a032ef-9b9f-487c-887a-7a8ff25fe1f6/1/1-iWf4SzxR56qxV02dmb3-9P7Ur4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:56:04:25:5f:65:53:83:d8:14:8e:f1:1c:f3:f2:54:a2:35:
         56:97:4c:25:39:b5:5f:4a:94:6b:22:bf:27:ec:73:21:87:c9:
         62:05:21:01:e7:58:9f:78:20:2c:6b:c2:d5:4a:8e:bd:11:1f:
         35:01:9e:ef:72:cc:bd:49:22:e0:a8:8d:02:91:fc:90:8d:f1:
         89:c7:d7:dd:03:b3:45:e8:a2:01:ae:e9:f4:52:05:86:a0:0f:
         93:e2:d1:da:27:2d:cd:15:33:4d:fb:2c:fc:49:0f:0a:e5:70:
         ac:1d:03:a8:b6:f7:2d:d9:33:df:06:75:55:2c:63:50:f7:ce:
         31:29:4d:c9:5e:ba:f2:20:43:f0:95:c7:d8:54:d7:06:08:03:
         2b:e7:cc:fd:28:c9:25:9e:87:c7:81:8f:54:fe:bd:e2:1a:bc:
         e6:ad:15:e7:27:95:4a:13:a7:51:c3:58:63:80:77:ec:3c:31:
         80:2b:4c:d2:f8:31:e4:04:10:ac:8d:ad:31:2f:6f:fa:0a:83:
         f0:03:8c:14:7c:9c:0a:63:02:e5:80:12:12:05:6d:c0:d4:e8:
         52:d3:50:61:aa:9e:ee:1c:9d:74:a1:d9:03:20:ad:31:d4:c5:
         dd:c9:a7:26:19:1e:77:a6:47:17:ba:78:ae:e5:cc:89:8a:5a:
         c3:7d:a4:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----