Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/da7825-2abb-4640-a782-b483e8ec1734/1/25i5nRXlBcNFte1faOuMW7_if5o.mft
File:                     25i5nRXlBcNFte1faOuMW7_if5o.mft (raw, json)
Hash identifier:          g93HDI+R+3Qr6iEPOQTFF7Os/0YTP3+hAXuzOINSErw=
Subject key identifier:   8E:C8:39:74:CB:C6:F1:7B:E7:42:F3:90:08:EB:93:81:4F:16:84:AD
Authority key identifier: DB:98:B9:9D:15:E5:05:C3:45:B5:ED:5F:68:EB:8C:5B:BF:E2:7F:9A
Certificate issuer:       /CN=db98b99d15e505c345b5ed5f68eb8c5bbfe27f9a
Certificate serial:       018281EC71A26F0D45569B81655FFB9D6C14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/25i5nRXlBcNFte1faOuMW7_if5o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/da7825-2abb-4640-a782-b483e8ec1734/1/25i5nRXlBcNFte1faOuMW7_if5o.mft
Manifest number:          0A4E
Signing time:             Tue 09 Aug 2022 09:25:32 +0000
Manifest this update:     Tue 09 Aug 2022 09:25:32 +0000
Manifest next update:     Wed 10 Aug 2022 09:25:32 +0000
Files and hashes:         1: 25i5nRXlBcNFte1faOuMW7_if5o.crl (hash: AhvOBmJQSjl0DPnhQXTaE23OI8r+FstsqnQcXFyublQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:81:ec:71:a2:6f:0d:45:56:9b:81:65:5f:fb:9d:6c:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db98b99d15e505c345b5ed5f68eb8c5bbfe27f9a
        Validity
            Not Before: Aug  9 09:25:32 2022 GMT
            Not After : Aug 10 09:25:32 2022 GMT
        Subject: CN=8ec83974cbc6f17be742f39008eb93814f1684ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:dd:1f:5b:c9:f8:b5:0e:14:3c:52:df:f1:dc:
                    e6:69:8f:f3:33:87:6e:77:44:3d:da:3c:83:a7:5c:
                    87:05:94:0e:8c:16:08:12:38:bc:80:d2:4c:2e:fe:
                    31:5a:21:ec:f3:3b:58:59:bb:4a:6e:df:67:41:f6:
                    3f:54:eb:be:41:14:2c:78:31:37:e1:6b:3f:eb:e6:
                    ba:92:e1:99:f1:40:27:02:46:73:cd:23:da:07:98:
                    89:75:82:89:b3:3d:1b:84:61:b4:d2:c2:29:95:f3:
                    bc:0a:76:97:5a:f8:02:f6:bd:df:b4:64:47:bf:32:
                    57:ef:c5:aa:93:90:ec:19:f8:ff:5e:90:93:12:2d:
                    32:ca:8c:c1:32:ac:df:14:ba:97:a8:60:ba:ba:04:
                    1e:8f:54:11:52:9a:bd:30:c9:32:9e:bb:dc:26:97:
                    0a:a9:64:89:d7:d4:df:65:75:58:28:b4:2d:ed:61:
                    43:a2:fe:b3:99:b9:e7:18:e1:5e:84:c6:f8:1a:88:
                    ca:95:9e:77:37:72:62:d2:3f:20:ba:8d:7c:eb:ef:
                    e2:d3:59:3b:cd:05:24:a1:04:b0:3a:ad:7a:bd:a7:
                    82:40:99:df:86:e2:2d:c0:5f:0a:69:72:49:3d:3b:
                    30:cd:fc:0a:a5:1b:12:66:e5:3f:91:ca:f0:f9:ed:
                    d7:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:C8:39:74:CB:C6:F1:7B:E7:42:F3:90:08:EB:93:81:4F:16:84:AD
            X509v3 Authority Key Identifier:
                keyid:DB:98:B9:9D:15:E5:05:C3:45:B5:ED:5F:68:EB:8C:5B:BF:E2:7F:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25i5nRXlBcNFte1faOuMW7_if5o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/da7825-2abb-4640-a782-b483e8ec1734/1/25i5nRXlBcNFte1faOuMW7_if5o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/da7825-2abb-4640-a782-b483e8ec1734/1/25i5nRXlBcNFte1faOuMW7_if5o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:d9:a5:9e:11:fa:12:15:16:f3:44:cc:a3:d2:ba:af:64:92:
         d5:f4:ef:11:24:b6:cc:69:b6:14:70:1f:38:76:aa:61:4c:ff:
         69:07:a3:d2:55:b3:e7:82:29:20:a0:45:e5:15:0d:03:de:44:
         68:be:79:02:9e:f4:b1:07:73:e2:c3:30:5d:2b:6e:08:7e:1f:
         bb:14:a1:a2:5d:04:50:df:30:6b:68:bc:2b:ea:88:84:0f:ef:
         04:3c:70:9f:aa:0e:db:cf:63:49:34:88:91:a5:d3:06:15:ef:
         e9:8e:c9:65:1d:eb:7e:be:3e:e7:f9:de:4a:11:55:4c:7e:83:
         3b:98:4f:f7:58:8a:7b:bd:8b:03:89:49:8f:7f:d6:02:54:88:
         ab:cb:ed:5a:25:43:7b:ac:08:bf:89:42:30:c8:72:f5:50:31:
         d3:fb:b2:ef:42:3c:42:95:f8:d2:c6:ed:0a:eb:42:3d:95:56:
         f5:5b:e0:b9:3e:38:ff:93:8c:93:8a:9b:03:56:af:b6:83:ca:
         a1:be:60:a4:a6:27:57:d8:b4:ea:e8:45:63:4b:31:17:37:d6:
         df:6e:01:5c:02:ec:ad:e2:2e:df:ce:9c:be:f9:bc:e0:61:6d:
         c9:c6:31:05:82:6b:65:d0:38:db:2d:0b:96:b1:97:39:fe:bb:
         63:2c:37:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----