Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/6e57a0-4817-4c97-8150-490866876627/1/6E-R1jyfOcjz6kASqZR03iWUELE.mft
File:                     6E-R1jyfOcjz6kASqZR03iWUELE.mft (raw, json)
Hash identifier:          AekyKzwMV3akX20N9dtTHptVw8j9rUe372HdnFILMaE=
Subject key identifier:   C9:DF:31:6C:B3:A8:8D:2A:80:A5:A5:5B:4F:D0:35:CD:B3:28:50:0F
Authority key identifier: E8:4F:91:D6:3C:9F:39:C8:F3:EA:40:12:A9:94:74:DE:25:94:10:B1
Certificate issuer:       /CN=e84f91d63c9f39c8f3ea4012a99474de259410b1
Certificate serial:       018A1B5BAF65C0AB3C53568B278A60102B63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6E-R1jyfOcjz6kASqZR03iWUELE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/6e57a0-4817-4c97-8150-490866876627/1/6E-R1jyfOcjz6kASqZR03iWUELE.mft
Manifest number:          0627
Signing time:             Tue 22 Aug 2023 03:48:27 +0000
Manifest this update:     Tue 22 Aug 2023 03:48:27 +0000
Manifest next update:     Wed 23 Aug 2023 03:48:27 +0000
Files and hashes:         1: 6E-R1jyfOcjz6kASqZR03iWUELE.crl (hash: GHuBo+shmZ2jo+6gX2fXq+HB7vc5HySasdSTTzqNUII=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:1b:5b:af:65:c0:ab:3c:53:56:8b:27:8a:60:10:2b:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e84f91d63c9f39c8f3ea4012a99474de259410b1
        Validity
            Not Before: Aug 22 03:48:27 2023 GMT
            Not After : Aug 23 03:48:27 2023 GMT
        Subject: CN=c9df316cb3a88d2a80a5a55b4fd035cdb328500f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:56:48:9c:34:9f:b0:50:b9:5c:35:47:f7:0b:
                    52:cb:9d:22:e9:ea:ea:ff:83:4b:ad:a2:d6:f9:32:
                    c1:99:69:78:c4:0d:e7:9d:93:0e:6f:77:6e:36:29:
                    81:56:8c:95:16:55:d6:6f:1e:7d:f7:e3:77:8d:ac:
                    95:67:7e:af:ae:dd:db:75:7e:51:a9:12:a5:6a:57:
                    b1:d4:e5:dd:92:b2:a8:d2:99:21:9b:b2:d4:28:d2:
                    cb:8b:ed:f7:ff:4b:29:7d:2c:94:6b:bc:4b:da:3d:
                    e4:86:cc:ee:04:74:d1:47:ca:a8:40:a2:ed:fb:08:
                    6c:3d:c0:50:53:23:cb:ba:79:a5:a7:7d:a6:63:aa:
                    f4:ae:8a:a3:b6:c7:9b:5b:83:ec:34:34:8d:73:e2:
                    1c:39:0d:6c:ba:62:f5:f9:06:0d:cd:be:57:22:59:
                    db:b1:39:71:de:97:9a:9c:ec:72:73:e4:20:80:f5:
                    98:aa:1d:f9:a7:40:4f:1a:10:74:f9:6f:64:28:28:
                    95:a5:b3:21:b5:d8:3a:19:a4:2e:f4:92:3d:75:17:
                    c7:b3:7f:e8:c4:07:c2:3b:66:3d:d4:f5:f7:31:f9:
                    bc:82:8b:50:88:70:d2:7f:29:8b:ed:b2:a6:ed:ad:
                    dd:86:11:5a:29:0d:ed:3e:c4:29:d3:dc:cb:29:ed:
                    65:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:DF:31:6C:B3:A8:8D:2A:80:A5:A5:5B:4F:D0:35:CD:B3:28:50:0F
            X509v3 Authority Key Identifier:
                keyid:E8:4F:91:D6:3C:9F:39:C8:F3:EA:40:12:A9:94:74:DE:25:94:10:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6E-R1jyfOcjz6kASqZR03iWUELE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/6e57a0-4817-4c97-8150-490866876627/1/6E-R1jyfOcjz6kASqZR03iWUELE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/6e57a0-4817-4c97-8150-490866876627/1/6E-R1jyfOcjz6kASqZR03iWUELE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:8a:ef:18:02:b0:7a:05:95:51:12:ee:b8:43:94:44:cb:32:
         f5:38:01:02:62:c3:12:dc:a4:26:14:c6:b0:90:3e:bb:8f:14:
         ef:39:db:51:c0:bd:04:dc:bd:92:c3:14:c8:57:9f:7b:3a:f1:
         2e:4a:54:17:96:db:94:34:66:92:17:ff:c9:03:6c:05:0c:58:
         bc:d2:43:e6:35:c2:da:b8:28:a4:ec:34:97:26:38:e9:42:25:
         f6:d5:86:c0:24:2d:5b:15:70:2f:e3:cd:33:d0:ee:cf:6c:7d:
         6d:60:4e:18:5b:57:a9:e7:3f:29:81:85:e5:68:3c:e2:55:cb:
         f8:6b:5a:86:5e:23:e0:84:b0:3a:86:36:98:75:3e:6b:16:42:
         b3:fe:13:4d:7e:f2:98:08:b9:60:c5:0c:59:d7:b5:fb:66:44:
         64:05:85:08:a1:88:5a:6d:39:12:e7:ef:ee:c7:1b:b8:07:01:
         b3:c5:c3:a5:e1:6c:d5:0c:c6:8b:6d:79:b7:01:04:5e:22:c0:
         be:42:4a:21:be:7f:bd:a5:2b:ad:2d:8b:0c:98:2a:7a:6c:01:
         65:44:88:3b:0d:90:90:0e:73:83:f1:75:1e:86:fb:b4:c4:68:
         94:ff:c1:c9:0d:9f:48:38:d7:c2:07:c4:fb:87:0f:e2:cc:55:
         34:23:20:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----