Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/91a1ad-f4a3-4ad5-909a-a853977b6457/1/1O7ABkCAiadThoJzqrvVN5aaIho.mft
File:                     1O7ABkCAiadThoJzqrvVN5aaIho.mft (raw, json)
Hash identifier:          mpMc17F7ehm8kKFlIsiBvuDhRB8YGwVe9L9+5XOM574=
Subject key identifier:   63:EA:42:C4:DB:95:EA:9D:81:01:79:1B:B7:52:9C:A7:E3:37:10:95
Authority key identifier: D4:EE:C0:06:40:80:89:A7:53:86:82:73:AA:BB:D5:37:96:9A:22:1A
Certificate issuer:       /CN=d4eec006408089a753868273aabbd537969a221a
Certificate serial:       0B8A7CA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1O7ABkCAiadThoJzqrvVN5aaIho.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/91a1ad-f4a3-4ad5-909a-a853977b6457/1/1O7ABkCAiadThoJzqrvVN5aaIho.mft
Manifest number:          08E0
Signing time:             Wed 06 Apr 2022 02:39:49 +0000
Manifest this update:     Wed 06 Apr 2022 02:39:49 +0000
Manifest next update:     Thu 07 Apr 2022 02:39:49 +0000
Files and hashes:         1: 1O7ABkCAiadThoJzqrvVN5aaIho.crl (hash: Ij/32yt1GfK98ngKqcHFuL+O9c4DDkmVzIx9rISHSPY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 193625252 (0xb8a7ca4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4eec006408089a753868273aabbd537969a221a
        Validity
            Not Before: Apr  6 02:39:49 2022 GMT
            Not After : Apr  7 02:39:49 2022 GMT
        Subject: CN=63ea42c4db95ea9d8101791bb7529ca7e3371095
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:80:23:75:ac:07:2d:bc:5e:42:5c:1d:89:61:
                    f8:4f:71:76:a0:12:e9:9d:06:e3:a4:b8:6e:73:ff:
                    f2:e3:e4:13:6e:ad:76:75:e6:a3:a4:b9:ec:e1:ce:
                    0c:23:91:47:fd:e1:68:4b:65:86:33:6f:5f:16:7c:
                    79:b8:17:dc:46:0c:7d:0c:65:19:e8:9e:c5:03:3b:
                    a0:04:d4:a9:14:3b:98:8c:1e:fa:c9:de:19:e4:92:
                    d3:72:e3:52:8b:03:3e:5f:a4:dc:b6:fa:87:b2:13:
                    0e:7e:eb:13:77:d1:8f:59:e4:3a:41:b4:6d:69:e5:
                    13:0b:48:86:ba:c2:c3:b3:de:02:41:ff:ac:d0:6d:
                    36:b9:cd:f0:58:44:c1:3b:cd:ab:2e:e5:ab:d9:1f:
                    ec:b2:44:52:a1:b5:92:34:e3:30:93:9a:31:3b:ad:
                    b7:1f:6d:b8:42:49:fd:f9:07:7b:4d:b4:dc:2b:10:
                    bd:ba:ec:88:d1:58:2f:cb:55:6a:6f:f3:0a:4b:26:
                    dc:ef:80:03:dd:53:c6:b9:55:ae:0f:b0:24:93:b7:
                    4e:c5:d5:7d:b5:78:8e:18:00:51:29:27:b8:96:5a:
                    ce:7c:ca:77:39:be:9e:9f:9d:94:c5:95:fc:10:67:
                    51:2f:45:3f:f2:29:cc:e3:57:50:e0:64:d8:7b:e8:
                    70:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:EA:42:C4:DB:95:EA:9D:81:01:79:1B:B7:52:9C:A7:E3:37:10:95
            X509v3 Authority Key Identifier:
                keyid:D4:EE:C0:06:40:80:89:A7:53:86:82:73:AA:BB:D5:37:96:9A:22:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1O7ABkCAiadThoJzqrvVN5aaIho.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91a1ad-f4a3-4ad5-909a-a853977b6457/1/1O7ABkCAiadThoJzqrvVN5aaIho.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91a1ad-f4a3-4ad5-909a-a853977b6457/1/1O7ABkCAiadThoJzqrvVN5aaIho.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:f4:0a:e2:0b:d8:26:b9:56:13:20:25:55:c0:7c:e1:f1:54:
         44:4a:a8:4f:f5:1b:48:d5:d3:62:31:58:73:6a:d1:a9:94:c2:
         1c:16:3a:b1:29:d1:b0:b6:4d:e1:dc:5a:6f:ce:12:35:a4:9a:
         21:41:3c:f6:9d:6e:b8:6c:48:d3:c6:ca:97:d0:98:21:df:35:
         76:f8:af:73:1c:6d:2d:ed:2e:53:6c:e3:50:2f:da:00:db:3c:
         e7:7a:6e:f7:6f:43:7f:f0:0a:b4:94:f5:74:57:9d:58:68:30:
         ec:bb:55:bd:bc:03:63:99:c5:58:5a:86:29:61:24:57:2b:c6:
         22:93:99:4c:54:b2:32:8f:5f:97:c8:53:1b:e2:a8:d5:16:8b:
         fb:90:f3:f3:40:3f:e9:07:dc:e4:6c:44:d9:6f:eb:0f:c5:be:
         d9:66:85:41:2b:4d:44:32:da:c0:e0:ed:8f:76:a3:8a:f0:4d:
         ed:d0:f8:73:68:ab:59:7c:fd:df:ed:94:00:04:b2:3d:e5:24:
         91:2b:d8:4a:32:aa:0c:4a:3c:d6:36:16:88:1f:16:56:89:d8:
         3f:f1:02:32:73:bd:89:b5:f6:69:84:76:cc:78:71:71:38:9b:
         53:89:04:29:c8:5a:75:06:12:48:a9:c9:82:b4:52:af:94:e8:
         c6:14:32:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----