Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/bba23f-1096-4bdd-be81-e080bbe10192/1/88XmOnb8i-eWOp76miR-PyX_Qoc.mft
File:                     88XmOnb8i-eWOp76miR-PyX_Qoc.mft (raw, json)
Hash identifier:          OMUC/BtVBPL4cA+6rTL6NvjK+sphoojuyB0x+yD21RA=
Subject key identifier:   4F:D0:5A:7E:92:E7:07:AD:11:6E:89:DD:1A:1B:8E:FA:50:BA:78:17
Authority key identifier: F3:C5:E6:3A:76:FC:8B:E7:96:3A:9E:FA:9A:24:7E:3F:25:FF:42:87
Certificate issuer:       /CN=f3c5e63a76fc8be7963a9efa9a247e3f25ff4287
Certificate serial:       0187C67D47760F50245D74BDF85352A3139A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/88XmOnb8i-eWOp76miR-PyX_Qoc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/bba23f-1096-4bdd-be81-e080bbe10192/1/88XmOnb8i-eWOp76miR-PyX_Qoc.mft
Manifest number:          0D50
Signing time:             Fri 28 Apr 2023 06:11:51 +0000
Manifest this update:     Fri 28 Apr 2023 06:11:51 +0000
Manifest next update:     Sat 29 Apr 2023 06:11:51 +0000
Files and hashes:         1: 88XmOnb8i-eWOp76miR-PyX_Qoc.crl (hash: HxNAwhUGWa1xllWifdSxp4Q/hA6XisLdf5607B4r6Pg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:c6:7d:47:76:0f:50:24:5d:74:bd:f8:53:52:a3:13:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3c5e63a76fc8be7963a9efa9a247e3f25ff4287
        Validity
            Not Before: Apr 28 06:11:51 2023 GMT
            Not After : Apr 29 06:11:51 2023 GMT
        Subject: CN=4fd05a7e92e707ad116e89dd1a1b8efa50ba7817
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c4:c8:e3:a4:ac:c8:5a:2c:b4:2d:32:34:b4:
                    41:20:9a:93:e2:61:99:cf:b2:76:11:d9:9f:75:dd:
                    b7:9c:7b:ae:fe:15:29:ea:50:f8:10:2d:bd:cd:ca:
                    d4:6b:df:5a:48:bb:ce:dd:53:06:8f:47:cb:02:c1:
                    7e:37:87:4f:87:d8:ea:4c:0d:a5:1c:17:9e:27:08:
                    ce:cc:56:b4:ec:e9:b1:63:15:fb:7d:58:77:93:5e:
                    a6:5a:c4:1f:37:9f:a1:3b:3e:96:2a:5d:d8:86:b8:
                    70:78:13:45:4c:b3:bf:e1:70:1c:45:69:ac:bb:bb:
                    8c:81:13:6e:e1:32:9c:99:f4:4b:15:67:4e:28:8b:
                    3f:64:78:d7:e0:11:d7:a6:38:34:a8:fd:3b:c3:13:
                    66:98:5c:2b:69:0b:3b:cf:1a:a2:cb:bb:0e:ea:04:
                    e6:42:8b:f3:60:79:93:40:8e:d2:55:77:48:b5:c9:
                    ac:7d:09:b8:fe:d5:a9:97:9d:ba:e2:eb:48:c3:74:
                    41:36:a4:e9:28:a0:c1:52:5e:0a:3e:19:dc:fe:77:
                    83:fb:18:ce:fa:97:7a:0c:8e:31:83:42:bc:99:d1:
                    3d:e9:7b:29:55:c4:9a:60:5b:5f:b9:d6:30:8f:8d:
                    dc:84:f1:6e:a9:5b:a6:77:b0:63:87:f2:f4:07:25:
                    a7:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:D0:5A:7E:92:E7:07:AD:11:6E:89:DD:1A:1B:8E:FA:50:BA:78:17
            X509v3 Authority Key Identifier:
                keyid:F3:C5:E6:3A:76:FC:8B:E7:96:3A:9E:FA:9A:24:7E:3F:25:FF:42:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/88XmOnb8i-eWOp76miR-PyX_Qoc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/bba23f-1096-4bdd-be81-e080bbe10192/1/88XmOnb8i-eWOp76miR-PyX_Qoc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/bba23f-1096-4bdd-be81-e080bbe10192/1/88XmOnb8i-eWOp76miR-PyX_Qoc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:05:d6:0b:d4:e7:80:44:75:33:2e:e0:50:44:4f:08:07:a0:
         85:f0:61:ae:98:d5:b1:ad:03:41:94:d1:7e:83:af:97:c0:9b:
         05:b8:89:24:a5:57:de:39:09:17:81:25:cb:2e:52:fc:8a:0a:
         06:d6:bb:6a:bf:44:79:b0:18:ec:c7:fc:f8:9c:80:c7:0e:09:
         25:26:ec:c5:df:8a:58:63:8b:dd:9d:05:4e:82:d5:90:20:87:
         8f:d4:52:ed:92:de:48:82:65:16:22:5f:f3:c1:f6:04:92:4f:
         da:7f:5e:f2:a0:a0:4d:c4:56:80:e7:d0:ae:30:3b:2b:73:f4:
         f1:c1:9b:5b:70:20:d2:e7:98:3f:40:e9:49:43:f9:04:54:0e:
         61:42:a8:c3:09:bd:6d:7a:21:ee:af:ab:95:60:f2:22:c4:a8:
         1d:38:01:6a:c1:be:d8:cf:cc:04:53:b2:3d:d0:71:ba:4c:eb:
         8e:2c:be:35:7d:09:fa:d2:91:d8:a1:4b:77:f4:c0:8e:ba:d7:
         ca:99:11:55:12:d2:51:00:97:22:ac:0d:24:55:13:7d:cc:c6:
         82:3b:f9:ec:17:d4:d1:8b:78:2b:07:0b:fc:e1:a5:f1:88:6e:
         99:b7:80:85:ea:39:1f:8c:85:4b:d5:7e:19:e5:bd:6f:36:7a:
         e9:33:46:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----