Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/717e33-132d-48cd-927e-24dcb9d4d901/1/YAs3ELcgGZcxZjJqUEmgEznN8Ss.mft
File:                     YAs3ELcgGZcxZjJqUEmgEznN8Ss.mft (raw, json)
Hash identifier:          ncIvrq3KGUhkF1eHSwOAsF8lvRuh3OqV2ikLlpqjha8=
Subject key identifier:   13:FF:56:C8:9B:C9:16:C3:3C:C4:0F:73:6D:8C:24:2F:6A:02:BF:39
Authority key identifier: 60:0B:37:10:B7:20:19:97:31:66:32:6A:50:49:A0:13:39:CD:F1:2B
Certificate issuer:       /CN=600b3710b72019973166326a5049a01339cdf12b
Certificate serial:       03AF1EFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YAs3ELcgGZcxZjJqUEmgEznN8Ss.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/717e33-132d-48cd-927e-24dcb9d4d901/1/YAs3ELcgGZcxZjJqUEmgEznN8Ss.mft
Manifest number:          04BE
Signing time:             Tue 22 Mar 2022 09:00:22 +0000
Manifest this update:     Tue 22 Mar 2022 09:00:22 +0000
Manifest next update:     Wed 23 Mar 2022 09:00:22 +0000
Files and hashes:         1: YAs3ELcgGZcxZjJqUEmgEznN8Ss.crl (hash: g+qPBviIi3+/9cBC/EICOmYdTxFpgniIqIuNr9UdOkA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61808379 (0x3af1efb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=600b3710b72019973166326a5049a01339cdf12b
        Validity
            Not Before: Mar 22 09:00:22 2022 GMT
            Not After : Mar 23 09:00:22 2022 GMT
        Subject: CN=13ff56c89bc916c33cc40f736d8c242f6a02bf39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:11:fe:cc:6a:e3:2a:81:17:97:60:af:14:4b:
                    b5:45:82:27:06:7e:bc:72:70:bf:08:cd:88:f9:39:
                    be:99:c3:68:5f:e0:28:8e:07:19:5a:21:57:71:5c:
                    9d:10:a2:b6:88:f7:5d:eb:32:19:2d:d5:e5:c8:c9:
                    37:70:cf:0f:ea:42:63:95:f9:c6:5b:e0:58:8e:25:
                    ac:58:6c:3c:a9:4e:93:1d:4c:84:f2:ab:b0:f0:e0:
                    e9:f1:e1:5b:e2:56:0d:82:27:26:42:b1:4c:f8:1c:
                    88:bf:ec:9c:92:e6:ef:b2:2b:f4:11:cc:60:ef:cd:
                    12:04:0a:1c:cf:4b:17:7b:e4:14:05:0e:8e:c8:0d:
                    58:4a:4b:a4:26:34:3b:01:86:43:65:7d:5f:00:4b:
                    74:1b:b9:68:1d:b2:29:63:ab:35:31:f8:5a:59:1c:
                    bc:f1:fc:47:11:6f:94:13:2e:6f:9d:33:72:46:0d:
                    49:6c:83:2c:d4:d2:2e:26:69:fc:0a:22:52:ec:dc:
                    83:bc:39:30:7f:53:93:19:88:4e:3f:bd:7e:de:17:
                    bf:01:d3:ce:88:e3:29:52:b7:81:89:6c:37:64:82:
                    48:f7:ca:0c:a9:e1:d8:08:56:c9:91:37:76:7f:4e:
                    5f:a7:c3:14:f1:39:ca:7b:c8:ef:13:f9:66:2e:48:
                    94:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:FF:56:C8:9B:C9:16:C3:3C:C4:0F:73:6D:8C:24:2F:6A:02:BF:39
            X509v3 Authority Key Identifier:
                keyid:60:0B:37:10:B7:20:19:97:31:66:32:6A:50:49:A0:13:39:CD:F1:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAs3ELcgGZcxZjJqUEmgEznN8Ss.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/717e33-132d-48cd-927e-24dcb9d4d901/1/YAs3ELcgGZcxZjJqUEmgEznN8Ss.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/717e33-132d-48cd-927e-24dcb9d4d901/1/YAs3ELcgGZcxZjJqUEmgEznN8Ss.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:14:e5:89:2e:1c:53:3c:6b:e8:fd:b7:00:0b:bf:e6:19:83:
         bb:91:0c:a3:e6:ec:28:8f:2a:ac:e7:ba:d1:b4:a1:b0:80:df:
         37:2f:9d:f0:5f:54:dd:7a:fc:e7:0e:24:42:77:55:56:f0:50:
         35:71:4b:5d:a9:59:c3:0b:b8:d7:e6:69:ab:a5:6e:dc:21:59:
         06:1c:9a:85:de:7c:d1:8d:da:78:9e:72:58:49:00:57:6e:0c:
         3c:33:e4:1b:1c:69:69:60:a8:13:aa:f6:76:a3:a3:ff:01:92:
         51:15:e4:90:3e:7b:ef:51:12:1c:40:98:2d:7d:bf:8a:4c:44:
         79:40:18:79:dc:56:d2:0b:02:84:76:51:62:fe:fd:e7:79:e5:
         1e:b2:1f:ff:7b:69:4d:8c:56:91:f7:1f:50:6a:d4:c0:88:4e:
         69:1b:4f:2b:8c:8e:d0:91:9d:0a:62:df:41:79:28:31:60:da:
         d0:4d:92:28:7e:8e:af:81:c4:30:11:e9:e6:9e:c0:38:82:4c:
         63:f9:68:7f:be:cf:d1:53:33:aa:a5:7a:2e:25:d7:c6:8c:53:
         ba:3e:64:e3:5a:d2:7b:40:66:13:a6:48:be:a8:1a:f1:02:a3:
         01:bd:4c:df:7f:27:ae:02:87:66:21:0d:5d:20:bc:6e:25:e0:
         4c:a0:95:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----