Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/7b155d-e71c-40b3-98ee-b3b4b1f77176/1/l7h2vHZS2vq2VG26qy2doR-sCHU.mft
File:                     l7h2vHZS2vq2VG26qy2doR-sCHU.mft (raw, json)
Hash identifier:          ELqxYKYb8nNp+CR1b09FETBksNISp+g3tOgFJ+Qd5tI=
Subject key identifier:   74:D4:70:05:74:FD:DE:39:C8:5B:2B:4F:15:37:A0:EB:B7:6C:43:8E
Authority key identifier: 97:B8:76:BC:76:52:DA:FA:B6:54:6D:BA:AB:2D:9D:A1:1F:AC:08:75
Certificate issuer:       /CN=97b876bc7652dafab6546dbaab2d9da11fac0875
Certificate serial:       01877A77F247E65D8DEC181537237C6E407A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l7h2vHZS2vq2VG26qy2doR-sCHU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/7b155d-e71c-40b3-98ee-b3b4b1f77176/1/l7h2vHZS2vq2VG26qy2doR-sCHU.mft
Manifest number:          0238
Signing time:             Thu 13 Apr 2023 11:54:53 +0000
Manifest this update:     Thu 13 Apr 2023 11:54:53 +0000
Manifest next update:     Fri 14 Apr 2023 11:54:53 +0000
Files and hashes:         1: l7h2vHZS2vq2VG26qy2doR-sCHU.crl (hash: IkliMZXR1tlIoZwHKRzTaNprZHXtaCO7QV76hiyVTG0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:7a:77:f2:47:e6:5d:8d:ec:18:15:37:23:7c:6e:40:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97b876bc7652dafab6546dbaab2d9da11fac0875
        Validity
            Not Before: Apr 13 11:54:53 2023 GMT
            Not After : Apr 14 11:54:53 2023 GMT
        Subject: CN=74d4700574fdde39c85b2b4f1537a0ebb76c438e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:fc:b9:27:ec:26:d5:07:49:5f:47:8c:fe:9f:
                    f4:f4:53:ff:a8:b3:34:e0:56:63:5d:f7:ab:07:8d:
                    ff:90:d3:ff:c4:b8:f1:c1:9d:bf:6c:45:da:b4:22:
                    d4:8d:cc:84:85:57:5b:77:7e:30:3a:b4:a8:d5:d5:
                    f7:d7:8b:a1:46:fc:77:d9:53:93:19:ab:94:2c:34:
                    ac:f1:f3:f2:9c:e5:3d:2e:da:f8:64:60:96:1b:53:
                    29:2e:df:00:f8:dc:82:93:25:0a:11:20:94:a2:14:
                    e7:fa:4b:3b:55:ae:cd:86:be:c0:43:9f:a5:4c:af:
                    47:00:98:be:2b:af:83:80:63:3c:19:8c:85:e7:70:
                    8c:90:e1:c2:b5:ab:36:45:9d:f7:09:df:b5:ec:c6:
                    0a:22:6b:2d:65:dd:8c:d9:28:fb:6a:e2:7e:76:c7:
                    5b:9d:4f:77:48:00:17:93:d3:0b:a5:2d:bd:77:94:
                    a6:33:65:12:9f:5c:6b:c3:d4:57:c1:07:50:87:ee:
                    3a:61:c7:b2:31:63:23:55:21:6f:f7:bd:5b:6e:91:
                    19:a4:d5:73:66:08:a6:27:89:88:0a:3e:70:bc:7f:
                    ad:16:b5:96:d0:1a:0c:8d:05:0e:b4:46:e5:f4:98:
                    66:4a:30:cd:7a:c2:62:d2:e0:9a:21:e6:8c:ac:17:
                    d2:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:D4:70:05:74:FD:DE:39:C8:5B:2B:4F:15:37:A0:EB:B7:6C:43:8E
            X509v3 Authority Key Identifier:
                keyid:97:B8:76:BC:76:52:DA:FA:B6:54:6D:BA:AB:2D:9D:A1:1F:AC:08:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l7h2vHZS2vq2VG26qy2doR-sCHU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7b155d-e71c-40b3-98ee-b3b4b1f77176/1/l7h2vHZS2vq2VG26qy2doR-sCHU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7b155d-e71c-40b3-98ee-b3b4b1f77176/1/l7h2vHZS2vq2VG26qy2doR-sCHU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:11:60:de:41:b5:1a:8c:65:2c:56:a4:57:1f:7d:54:78:d2:
         36:8a:eb:b0:61:f4:47:d3:63:4b:be:00:b6:af:16:f0:ad:6d:
         2e:50:46:84:02:3e:1e:47:49:2a:4a:c5:b7:91:bc:0c:aa:4a:
         e1:51:52:37:2f:e3:2e:6c:64:0a:cb:a7:84:fa:eb:25:70:af:
         6b:5e:51:49:9b:a2:de:b6:ca:d4:10:d7:ef:1b:01:66:ba:75:
         23:ff:99:c9:37:98:0f:9f:d1:9b:99:09:f5:c9:35:8e:77:a1:
         34:7b:2f:84:c7:3d:6b:61:70:6d:22:0e:bc:1f:6a:1d:9c:16:
         83:d2:a8:f0:33:0c:18:d3:81:ba:80:df:9b:cf:f5:6e:3d:51:
         e8:16:83:26:98:1b:03:93:c5:f6:b6:9c:88:6c:e9:a9:d7:90:
         41:39:fd:8f:67:f9:6a:af:b1:90:42:25:5a:c9:a0:3f:6e:57:
         56:1f:d7:44:4c:05:75:44:5c:89:36:c0:79:b3:1b:a4:85:13:
         d1:04:89:b6:c8:d1:14:b2:97:6d:4b:0f:fd:11:04:1c:8d:05:
         bb:bb:90:30:d6:41:9f:ec:7d:d9:86:b8:95:4b:51:53:77:3c:
         60:67:0f:88:04:2c:9a:ff:f2:29:b6:17:70:dd:fa:84:72:2d:
         dc:be:17:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----