Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/24516f-cbb9-4c34-b177-66d3b8bef481/1/13HnL4WIdAoYhEK-z9BNNBC27kY.mft
File:                     13HnL4WIdAoYhEK-z9BNNBC27kY.mft (raw, json)
Hash identifier:          ZnWUj2SDPKU+kYyQ1PR2LraLQgKuA/ldiBebfHKHDgM=
Subject key identifier:   FB:60:6B:53:18:34:31:A8:80:AA:A6:18:96:A2:13:32:39:14:EC:9B
Authority key identifier: D7:71:E7:2F:85:88:74:0A:18:84:42:BE:CF:D0:4D:34:10:B6:EE:46
Certificate issuer:       /CN=d771e72f8588740a188442becfd04d3410b6ee46
Certificate serial:       075D5CAB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/13HnL4WIdAoYhEK-z9BNNBC27kY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/24516f-cbb9-4c34-b177-66d3b8bef481/1/13HnL4WIdAoYhEK-z9BNNBC27kY.mft
Manifest number:          08C7
Signing time:             Wed 30 Mar 2022 06:00:21 +0000
Manifest this update:     Wed 30 Mar 2022 06:00:21 +0000
Manifest next update:     Thu 31 Mar 2022 06:00:21 +0000
Files and hashes:         1: 13HnL4WIdAoYhEK-z9BNNBC27kY.crl (hash: c2io0C1KjulOWJgm/pYI3ONBIp+BVhd6Bf977hr/lQk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123559083 (0x75d5cab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d771e72f8588740a188442becfd04d3410b6ee46
        Validity
            Not Before: Mar 30 06:00:21 2022 GMT
            Not After : Mar 31 06:00:21 2022 GMT
        Subject: CN=fb606b53183431a880aaa61896a213323914ec9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:b5:95:12:4e:ea:74:6f:07:00:28:16:95:bf:
                    15:e4:c8:26:f3:81:d6:8b:98:44:4f:38:a1:ff:c1:
                    ca:56:d9:2e:4c:21:4e:0e:ec:52:d8:a1:52:a7:14:
                    90:2f:fa:00:be:b5:53:91:fd:e5:cd:6f:a4:c4:96:
                    50:0f:02:a3:36:3a:93:de:9e:fa:6b:85:bd:38:f6:
                    d0:48:73:6c:b3:02:51:c1:a2:54:e2:76:4a:04:d3:
                    ff:a1:d2:f1:9c:c4:2a:64:7e:62:74:2a:61:86:bf:
                    87:20:5e:86:3b:57:de:7e:ed:59:6e:41:40:ca:ce:
                    19:c5:1b:13:e8:c2:25:4a:d8:ea:b7:7f:c3:e4:45:
                    c7:dc:6d:a8:07:cd:fa:2d:f9:9e:f7:56:5e:36:4f:
                    1a:5f:44:f5:11:4c:ad:8a:8b:8f:68:50:88:bb:56:
                    ff:8c:c9:d0:97:09:4e:02:01:a4:6c:05:9a:c9:1f:
                    55:c4:f2:e7:c3:21:be:de:e6:37:87:57:dc:f5:08:
                    88:62:17:eb:77:f3:9d:41:f6:4d:2b:c2:33:e4:66:
                    1e:62:2b:04:b1:03:c8:37:70:b7:f8:df:3c:3d:16:
                    44:b6:43:bf:29:f9:b8:8c:e1:1d:06:82:52:aa:87:
                    ef:f2:9f:3a:96:6b:4d:eb:6d:76:d1:c6:80:ab:12:
                    8b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:60:6B:53:18:34:31:A8:80:AA:A6:18:96:A2:13:32:39:14:EC:9B
            X509v3 Authority Key Identifier:
                keyid:D7:71:E7:2F:85:88:74:0A:18:84:42:BE:CF:D0:4D:34:10:B6:EE:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13HnL4WIdAoYhEK-z9BNNBC27kY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/24516f-cbb9-4c34-b177-66d3b8bef481/1/13HnL4WIdAoYhEK-z9BNNBC27kY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/24516f-cbb9-4c34-b177-66d3b8bef481/1/13HnL4WIdAoYhEK-z9BNNBC27kY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:93:29:a1:13:12:ae:a2:0b:6c:e0:69:3a:01:ca:e9:13:fc:
         e4:07:d1:4f:1a:ca:52:f1:95:95:cf:e0:f0:6c:bf:68:d1:d0:
         5d:8a:cf:0f:5b:87:81:76:ad:f8:cf:8a:f3:52:cf:16:22:01:
         3e:0e:f1:ea:3e:68:3e:8b:80:fb:dc:26:9b:63:a9:60:fe:dc:
         f1:4f:1d:1e:8c:7e:20:65:a1:a3:36:ff:7a:fb:d3:e4:96:d4:
         29:cd:ca:1e:44:69:81:65:fb:bc:aa:9f:a3:c0:89:ee:02:4d:
         80:75:0f:78:16:5c:e0:e8:c9:0d:eb:d7:9a:19:37:14:4c:7e:
         02:be:0c:c2:fb:10:b9:99:e6:aa:e1:89:f1:42:08:46:e2:b7:
         37:0c:73:b4:18:b0:f5:06:84:5d:aa:d2:34:5a:d7:2f:cb:88:
         f3:21:43:bb:10:09:49:50:b7:25:d7:5f:f1:87:03:5a:79:07:
         e3:50:0c:8e:ff:9f:33:ed:96:a6:74:af:4a:ef:f8:15:80:33:
         38:2e:da:95:4d:ec:c5:8e:2d:b8:1e:49:9a:d5:3b:b0:d1:08:
         e4:05:ed:86:16:4c:61:c1:cf:36:fa:2a:d4:da:af:0c:f3:d3:
         f8:19:11:56:86:e8:50:96:36:63:e6:d7:e1:34:8b:42:ae:de:
         e8:1e:2f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----