Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/7c5d40-e830-42c5-91b3-f4a20893fac1/1/4DPBrPRRPx-BWqbsUrqaoXv5yWg.mft
File:                     4DPBrPRRPx-BWqbsUrqaoXv5yWg.mft (raw, json)
Hash identifier:          RCb4fjR5naSn7hmHW5BS6q4hZAvMI0bake74e71N0Yg=
Subject key identifier:   82:63:F6:EA:28:F1:75:22:D4:C6:5C:E6:5B:9F:F5:0A:D8:AB:90:09
Authority key identifier: E0:33:C1:AC:F4:51:3F:1F:81:5A:A6:EC:52:BA:9A:A1:7B:F9:C9:68
Certificate issuer:       /CN=e033c1acf4513f1f815aa6ec52ba9aa17bf9c968
Certificate serial:       018BFBA076E630D2ECA030E794B0C8D86CA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4DPBrPRRPx-BWqbsUrqaoXv5yWg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/7c5d40-e830-42c5-91b3-f4a20893fac1/1/4DPBrPRRPx-BWqbsUrqaoXv5yWg.mft
Manifest number:          0F9E
Signing time:             Thu 23 Nov 2023 10:01:19 +0000
Manifest this update:     Thu 23 Nov 2023 10:01:19 +0000
Manifest next update:     Fri 24 Nov 2023 10:01:19 +0000
Files and hashes:         1: 4DPBrPRRPx-BWqbsUrqaoXv5yWg.crl (hash: m9k7pH3m3BarZRJaDleogdhnSdfDOgtcg37ERw/MyRQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:fb:a0:76:e6:30:d2:ec:a0:30:e7:94:b0:c8:d8:6c:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e033c1acf4513f1f815aa6ec52ba9aa17bf9c968
        Validity
            Not Before: Nov 23 10:01:19 2023 GMT
            Not After : Nov 24 10:01:19 2023 GMT
        Subject: CN=8263f6ea28f17522d4c65ce65b9ff50ad8ab9009
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b5:54:67:91:6a:83:f6:65:72:ec:c0:1b:67:
                    63:a5:30:63:b1:a5:29:0c:ec:2f:e2:9c:62:1b:1f:
                    56:c7:f1:7d:03:f9:a3:3a:2b:70:c5:69:ed:31:a9:
                    df:b3:51:de:01:ab:89:b4:00:d4:45:c2:95:4d:1a:
                    44:ea:a2:49:bc:f8:2b:6f:fc:97:4c:46:db:d7:12:
                    1a:ee:aa:01:80:7f:97:53:e3:e8:98:e2:81:1f:05:
                    7d:8b:bb:42:02:11:a7:de:a7:8d:36:c7:89:07:9b:
                    bb:26:00:e9:21:7e:2e:da:ad:42:c4:7e:12:a6:8e:
                    50:31:9d:54:71:1d:f7:6b:6f:46:75:14:e8:5c:c1:
                    65:90:c0:c3:dc:e9:10:8a:cd:82:45:78:d2:81:87:
                    78:64:42:7a:9b:12:db:40:2a:af:3c:6f:6b:26:ee:
                    70:4f:ac:da:12:f4:c0:40:c5:7b:24:8a:b6:8c:f2:
                    49:e3:e7:39:22:98:7e:1d:a5:99:28:e4:10:c5:ef:
                    c3:3c:f9:4a:c5:22:e8:10:5a:82:ec:fc:8e:2a:61:
                    8d:8d:f0:30:8a:8c:f0:8e:6e:25:58:5c:96:6f:2c:
                    9f:3f:44:1b:5d:24:fc:bd:3e:50:43:b3:d3:a2:5d:
                    c6:e4:c5:a1:cb:ff:2a:9f:69:96:8e:69:b2:83:2d:
                    02:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:63:F6:EA:28:F1:75:22:D4:C6:5C:E6:5B:9F:F5:0A:D8:AB:90:09
            X509v3 Authority Key Identifier:
                keyid:E0:33:C1:AC:F4:51:3F:1F:81:5A:A6:EC:52:BA:9A:A1:7B:F9:C9:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4DPBrPRRPx-BWqbsUrqaoXv5yWg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/7c5d40-e830-42c5-91b3-f4a20893fac1/1/4DPBrPRRPx-BWqbsUrqaoXv5yWg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/7c5d40-e830-42c5-91b3-f4a20893fac1/1/4DPBrPRRPx-BWqbsUrqaoXv5yWg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:41:e9:a5:0e:c3:03:13:61:08:0a:a8:22:23:ce:d8:bb:68:
         98:d4:8e:77:d2:eb:b9:b9:34:17:53:da:bc:39:e7:c5:83:ed:
         a6:f9:1d:4f:98:21:b0:a8:14:21:1b:a3:8a:05:24:8e:42:c6:
         3f:1b:1a:e9:93:a2:86:6b:b0:79:ec:5d:30:18:ad:1c:f1:c8:
         53:af:4f:01:aa:62:c1:8f:6b:43:9f:fd:9e:f6:14:17:e9:b8:
         e4:aa:54:bc:e5:ea:79:3e:95:db:55:f6:94:d6:1c:a0:25:21:
         22:c3:10:a8:ac:60:3e:26:9f:0c:78:bc:81:3f:36:e0:52:ca:
         ef:4a:d2:96:29:30:99:42:90:e4:cf:a0:d4:ad:2d:1a:34:86:
         22:ed:1b:fa:5d:b1:7a:c6:1f:8d:b1:13:72:1a:57:0e:1f:6f:
         14:05:5b:61:b0:1e:ed:aa:6d:a3:22:83:b0:a4:4e:eb:19:22:
         6f:57:90:ec:44:aa:8c:8a:c1:ff:47:e2:23:43:4c:e5:a8:91:
         5b:b7:0a:1d:b1:ae:6a:cb:d8:92:21:a1:63:fb:c9:ff:b4:9e:
         39:0f:e3:bd:b6:72:cd:85:b9:fd:05:7d:a5:e7:a2:07:4d:88:
         0b:46:8d:09:26:f3:9b:d8:24:26:d2:ae:14:87:a2:5f:65:64:
         ba:bf:77:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----