Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/a785f6-e9cf-42bf-849c-8156e30fcd1d/1/ssGP3S8IB91bq17XDdco53H8bMc.mft
File:                     ssGP3S8IB91bq17XDdco53H8bMc.mft (raw, json)
Hash identifier:          5OeOK5dfTufL6seX97HQ9ZppK1Q55tS8BT+EgMTuDQQ=
Subject key identifier:   6E:A9:5C:9E:C3:1C:C1:33:7E:05:A8:93:4C:24:41:32:6A:05:78:13
Authority key identifier: B2:C1:8F:DD:2F:08:07:DD:5B:AB:5E:D7:0D:D7:28:E7:71:FC:6C:C7
Certificate issuer:       /CN=b2c18fdd2f0807dd5bab5ed70dd728e771fc6cc7
Certificate serial:       018A2C0AA631404858AB56E23D43E8556D5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ssGP3S8IB91bq17XDdco53H8bMc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/a785f6-e9cf-42bf-849c-8156e30fcd1d/1/ssGP3S8IB91bq17XDdco53H8bMc.mft
Manifest number:          0845
Signing time:             Fri 25 Aug 2023 09:33:29 +0000
Manifest this update:     Fri 25 Aug 2023 09:33:29 +0000
Manifest next update:     Sat 26 Aug 2023 09:33:29 +0000
Files and hashes:         1: ssGP3S8IB91bq17XDdco53H8bMc.crl (hash: LuRbDwCWx9t+qb13r4j5P2bhkdD1QoT/EMKl/56IR9A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:2c:0a:a6:31:40:48:58:ab:56:e2:3d:43:e8:55:6d:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2c18fdd2f0807dd5bab5ed70dd728e771fc6cc7
        Validity
            Not Before: Aug 25 09:33:29 2023 GMT
            Not After : Aug 26 09:33:29 2023 GMT
        Subject: CN=6ea95c9ec31cc1337e05a8934c2441326a057813
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:3f:e6:17:cf:53:a0:68:da:e2:eb:ae:93:a0:
                    d2:88:a3:9d:4d:ae:8a:65:12:57:ae:f4:77:ec:7a:
                    c1:11:c2:45:18:f6:13:82:4f:97:d3:05:c4:92:84:
                    18:19:a3:4f:7a:c8:2a:03:6d:5e:0e:74:98:69:ee:
                    c0:07:23:4f:83:02:e0:3f:9b:84:75:bb:2e:bf:2c:
                    fc:b7:10:50:f8:42:db:0f:15:b1:f2:75:ca:27:62:
                    6c:95:bb:09:1c:30:de:40:ba:70:1e:5b:c8:b7:86:
                    85:6a:c1:fa:96:dc:02:80:4f:dd:98:56:9e:4c:c5:
                    99:53:3a:64:45:b8:3c:60:ef:ff:22:d2:0a:64:55:
                    c2:2a:f0:54:c3:65:95:cb:f9:2c:e3:bb:34:c7:9c:
                    93:68:f3:79:da:a8:6a:d5:b2:f5:5c:08:83:63:c7:
                    61:e2:5e:a1:3a:fe:55:22:6e:bc:6d:48:3f:42:82:
                    cc:21:c6:d3:31:c3:65:6a:81:69:70:e2:be:cf:cb:
                    ea:37:42:e7:17:b8:39:1f:ac:a4:cb:db:1e:9f:0c:
                    02:26:27:7d:0e:15:03:7f:b9:bc:d5:fc:9d:98:83:
                    69:87:86:1a:7c:67:ab:ed:c5:b5:fe:02:72:80:8e:
                    b7:78:82:54:da:e8:ae:91:18:bb:b9:64:4c:e4:2c:
                    ad:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:A9:5C:9E:C3:1C:C1:33:7E:05:A8:93:4C:24:41:32:6A:05:78:13
            X509v3 Authority Key Identifier:
                keyid:B2:C1:8F:DD:2F:08:07:DD:5B:AB:5E:D7:0D:D7:28:E7:71:FC:6C:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ssGP3S8IB91bq17XDdco53H8bMc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a785f6-e9cf-42bf-849c-8156e30fcd1d/1/ssGP3S8IB91bq17XDdco53H8bMc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a785f6-e9cf-42bf-849c-8156e30fcd1d/1/ssGP3S8IB91bq17XDdco53H8bMc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:7d:57:d7:20:3b:b5:a6:8d:d2:41:79:15:87:20:06:a0:80:
         62:37:a7:05:d4:87:74:2d:5a:9b:95:9f:e0:8d:30:61:a0:e4:
         d5:17:b9:d8:39:f2:50:45:41:b2:cb:45:45:de:12:a4:02:0f:
         48:64:20:fc:db:60:4e:8f:6a:0d:f6:88:df:e4:cb:fe:a0:30:
         a8:1b:74:fd:27:e0:40:33:99:4f:c5:ea:1a:66:1a:ee:1d:7c:
         ef:69:cf:c7:00:18:d0:44:0a:80:66:72:92:e2:00:31:79:de:
         7e:59:a0:5b:66:28:9a:87:9d:68:da:83:e1:cc:4b:5d:ef:47:
         11:17:4c:02:9b:d6:bc:b7:d3:89:f8:87:fa:b2:e3:7e:70:b9:
         1d:e0:f4:94:b3:27:46:82:85:7b:26:bd:b3:87:14:e0:34:5d:
         cd:aa:7c:01:ef:c3:7b:26:6d:36:47:3c:ff:e7:7d:e8:59:93:
         7b:68:5b:5f:b6:55:3c:23:46:7c:63:cd:96:a2:ef:3c:5c:19:
         c9:69:dc:80:fd:46:25:c8:76:df:49:24:21:4d:6b:35:8c:44:
         1d:60:19:c4:c3:4f:8d:eb:35:7e:b0:da:1a:e7:06:f4:4e:7a:
         20:54:c7:ce:b4:a2:46:87:bd:40:ce:29:0d:1f:2c:35:a5:2c:
         f0:51:18:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----