Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/6eafd1-4314-40a5-b7b3-bc4795a27266/1/fbRbh0VC2SLvIbqkh6wj8QrhvT0.mft
File:                     fbRbh0VC2SLvIbqkh6wj8QrhvT0.mft (raw, json)
Hash identifier:          8gDrVER9ts46/k4JDYrbYbK/kqDgvq5kkONxIgs2LPM=
Subject key identifier:   69:9C:89:2C:55:A0:79:3F:2A:17:6A:8C:88:E1:BE:AC:3E:64:99:6A
Authority key identifier: 7D:B4:5B:87:45:42:D9:22:EF:21:BA:A4:87:AC:23:F1:0A:E1:BD:3D
Certificate issuer:       /CN=7db45b874542d922ef21baa487ac23f10ae1bd3d
Certificate serial:       0572C36C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fbRbh0VC2SLvIbqkh6wj8QrhvT0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/6eafd1-4314-40a5-b7b3-bc4795a27266/1/fbRbh0VC2SLvIbqkh6wj8QrhvT0.mft
Manifest number:          0707
Signing time:             Fri 24 Jun 2022 08:16:18 +0000
Manifest this update:     Fri 24 Jun 2022 08:16:18 +0000
Manifest next update:     Sat 25 Jun 2022 08:16:18 +0000
Files and hashes:         1: fbRbh0VC2SLvIbqkh6wj8QrhvT0.crl (hash: N5tAEtLSjni/6wnr4twmt8BNMm3luyrq/bCC349jOsQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 91407212 (0x572c36c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7db45b874542d922ef21baa487ac23f10ae1bd3d
        Validity
            Not Before: Jun 24 08:16:18 2022 GMT
            Not After : Jun 25 08:16:18 2022 GMT
        Subject: CN=699c892c55a0793f2a176a8c88e1beac3e64996a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ff:31:5f:4c:ec:71:20:59:63:0d:78:3a:37:
                    51:c2:99:27:e9:d2:23:6c:d3:17:31:44:fc:7d:39:
                    41:8f:13:58:7c:0b:7c:e4:66:9c:25:89:c5:d2:76:
                    3b:87:2b:aa:12:57:83:48:ea:f2:a1:9c:2a:c2:8b:
                    c9:fc:38:ee:01:da:86:38:3a:7b:6f:9a:0d:f2:fa:
                    6c:d4:87:2d:11:c0:6c:86:4a:f6:cc:0c:66:21:12:
                    15:c6:42:f5:1b:0e:ac:15:f8:92:f5:df:fe:63:16:
                    cf:d5:5a:d1:c3:48:cc:fd:c2:d5:f8:03:02:fa:aa:
                    aa:4b:20:78:78:53:af:8e:e2:78:f5:70:3b:f7:6f:
                    57:46:d3:4c:6e:46:f3:09:4d:8b:a2:0d:f5:af:21:
                    a0:0b:5d:26:e4:80:15:28:81:e6:9f:01:34:55:74:
                    f4:c2:35:83:50:a9:9b:50:31:69:9a:62:7f:f0:58:
                    f0:be:6d:d1:fb:c8:50:48:c2:e1:b0:3d:73:36:14:
                    ac:c4:13:72:6e:d9:97:c5:07:1c:3c:55:35:5b:79:
                    1a:27:0b:65:a2:86:2a:f5:66:24:f3:fe:20:e5:8e:
                    56:b6:03:5e:fa:04:18:2f:33:7b:00:e3:c7:92:13:
                    37:23:4e:e3:3d:0f:e0:d7:36:b1:57:83:bc:43:29:
                    bb:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:9C:89:2C:55:A0:79:3F:2A:17:6A:8C:88:E1:BE:AC:3E:64:99:6A
            X509v3 Authority Key Identifier:
                keyid:7D:B4:5B:87:45:42:D9:22:EF:21:BA:A4:87:AC:23:F1:0A:E1:BD:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fbRbh0VC2SLvIbqkh6wj8QrhvT0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/6eafd1-4314-40a5-b7b3-bc4795a27266/1/fbRbh0VC2SLvIbqkh6wj8QrhvT0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/6eafd1-4314-40a5-b7b3-bc4795a27266/1/fbRbh0VC2SLvIbqkh6wj8QrhvT0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:a0:9f:70:d9:f5:c7:4f:d1:23:69:87:ae:d6:16:1d:06:a1:
         c9:0d:0c:35:5a:57:1d:17:71:d1:43:b0:4b:24:90:12:b9:5f:
         6c:38:ab:c1:7b:a3:11:a6:c1:3b:85:6c:0e:6a:61:6f:86:b2:
         06:f6:1a:6f:14:ed:ba:1e:91:ae:98:91:79:d9:8e:82:f7:98:
         e5:49:b0:d4:7a:fd:c3:cb:a8:87:1d:4c:66:e9:ea:d3:3c:eb:
         ab:b4:09:f0:5a:51:1b:63:09:89:8f:0c:e0:19:3e:43:6a:2d:
         a9:bf:f0:40:43:32:44:f2:4b:fb:00:7d:a4:42:26:00:2f:75:
         fe:f0:7e:60:f2:77:51:34:c4:1b:6d:ea:fd:7b:11:5a:8d:92:
         10:ce:6d:28:ef:d4:02:94:4c:cb:ce:cd:32:ef:44:a5:e8:ca:
         9c:31:97:28:89:ed:e0:af:eb:7d:ae:d8:9c:19:0f:b2:61:39:
         51:09:b3:39:6c:09:c2:12:db:5e:72:f0:40:19:a1:d3:8e:15:
         25:d0:77:06:d9:c2:84:fe:bb:fe:f0:6c:19:a6:31:ef:d1:51:
         9f:bb:63:ac:37:98:90:b2:a6:51:67:77:a5:1a:c6:6f:6e:a0:
         bd:93:9f:0b:0c:6a:56:e8:a6:36:1b:c4:bd:cf:5b:04:8b:23:
         75:ba:fa:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----