Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/b3b628-4c47-457e-b425-7d0dd369c764/1/3HlIOxy3Yc1rejZ0vxVOylnXTt8.mft
File:                     3HlIOxy3Yc1rejZ0vxVOylnXTt8.mft (raw, json)
Hash identifier:          1ienyHroFbsVtZ3c2t8JSrMlQkBGbD5SggkOaX9lBhI=
Subject key identifier:   18:93:AB:75:73:67:6F:3C:B2:D8:90:2C:08:FD:B0:A6:29:D5:20:C4
Authority key identifier: DC:79:48:3B:1C:B7:61:CD:6B:7A:36:74:BF:15:4E:CA:59:D7:4E:DF
Certificate issuer:       /CN=dc79483b1cb761cd6b7a3674bf154eca59d74edf
Certificate serial:       7EFD33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3HlIOxy3Yc1rejZ0vxVOylnXTt8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/b3b628-4c47-457e-b425-7d0dd369c764/1/3HlIOxy3Yc1rejZ0vxVOylnXTt8.mft
Manifest number:          A1
Signing time:             Wed 20 Apr 2022 01:56:26 +0000
Manifest this update:     Wed 20 Apr 2022 01:56:26 +0000
Manifest next update:     Thu 21 Apr 2022 01:56:26 +0000
Files and hashes:         1: 3HlIOxy3Yc1rejZ0vxVOylnXTt8.crl (hash: KlhPMEGGoU2/xAfwqTBfD7UGk5SPfdJpolbnpqQ4prU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8322355 (0x7efd33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc79483b1cb761cd6b7a3674bf154eca59d74edf
        Validity
            Not Before: Apr 20 01:56:26 2022 GMT
            Not After : Apr 21 01:56:26 2022 GMT
        Subject: CN=1893ab7573676f3cb2d8902c08fdb0a629d520c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:1e:42:f8:bb:44:a1:e9:fe:c2:5e:4c:bd:f3:
                    c2:a2:a4:6e:b3:a0:57:d2:29:3d:34:ba:28:d8:b3:
                    aa:3b:72:5f:ae:0d:fd:6d:85:da:f5:e0:22:da:17:
                    10:a7:df:41:34:50:d5:a7:d0:e9:2b:13:a2:c4:a0:
                    7d:d5:55:33:00:55:9a:fb:0d:a9:32:cd:40:8e:05:
                    97:9c:b7:88:d8:99:e7:fc:61:06:e5:77:2c:80:8d:
                    80:c2:ac:50:d3:70:01:cf:a4:ce:c9:95:4f:b0:3f:
                    64:14:6e:14:c7:8e:ac:0a:7c:1b:75:2a:a7:6f:d8:
                    db:77:b4:e5:9b:ec:76:f6:47:95:ba:5f:72:73:59:
                    22:0c:fb:df:37:83:ce:54:77:44:96:82:39:a7:d7:
                    5c:16:c3:ef:da:b3:00:b1:42:50:e7:83:7e:5d:9a:
                    46:27:03:4a:a1:9f:76:f5:e0:93:d9:72:22:d7:94:
                    45:d4:cb:d3:70:92:2c:4a:66:f4:cf:1b:99:35:e6:
                    ef:66:79:a1:1c:d9:93:73:9c:b6:14:10:fd:21:ef:
                    10:31:2c:88:fe:fe:9f:e6:9f:dd:4c:c6:a1:fb:6b:
                    c5:aa:f6:67:a1:01:37:86:e3:ea:f8:3d:b9:8e:28:
                    82:39:3d:41:dd:8a:b2:2e:b8:41:eb:17:c4:22:bf:
                    5c:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:93:AB:75:73:67:6F:3C:B2:D8:90:2C:08:FD:B0:A6:29:D5:20:C4
            X509v3 Authority Key Identifier:
                keyid:DC:79:48:3B:1C:B7:61:CD:6B:7A:36:74:BF:15:4E:CA:59:D7:4E:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HlIOxy3Yc1rejZ0vxVOylnXTt8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/b3b628-4c47-457e-b425-7d0dd369c764/1/3HlIOxy3Yc1rejZ0vxVOylnXTt8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/b3b628-4c47-457e-b425-7d0dd369c764/1/3HlIOxy3Yc1rejZ0vxVOylnXTt8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:a1:88:3b:43:9e:67:21:f7:bd:8b:7b:80:65:4d:cb:88:46:
         cb:e2:0c:bd:d5:5a:1f:4d:d5:47:a3:62:5b:f4:b9:61:a5:58:
         2a:ce:cd:2f:6c:08:ec:c4:9c:5a:a3:92:3c:96:10:04:99:7e:
         8d:5e:c9:ac:52:1d:25:57:df:93:c9:b1:03:f1:34:3b:77:7e:
         05:c7:a9:5c:dc:d9:de:d2:2a:94:63:49:89:f4:87:b2:ff:c1:
         ce:88:3a:79:2d:de:c1:f4:aa:3c:80:56:1f:3a:e8:61:b5:98:
         1f:de:3f:0a:e3:52:d0:a4:6b:a6:14:38:45:7a:70:79:17:a4:
         82:30:d8:dd:f5:31:f2:97:40:c2:f7:be:2d:3d:a2:70:aa:f0:
         6f:ed:00:fb:26:33:97:a3:70:73:25:83:46:44:d0:33:53:47:
         01:1d:e4:f5:84:bc:f4:cc:b9:17:f4:16:0c:86:ed:b7:9b:be:
         5d:ff:bd:d3:7d:7d:c3:46:35:24:37:a7:53:1b:20:8d:cc:28:
         14:7d:5d:a5:ad:0a:86:6a:87:dc:a5:36:35:4d:11:13:30:04:
         39:90:7d:d9:5b:26:46:02:25:fe:c8:b3:c5:aa:2d:ab:74:11:
         6f:dd:a9:e0:19:07:8b:d3:7c:63:38:0e:b6:18:62:4a:83:81:
         41:8e:ab:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----