Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/262006-927e-47e4-9886-6dddc8a73408/1/9GPaVpeUelnMZuPrRitg7wD-gH4.mft
File:                     9GPaVpeUelnMZuPrRitg7wD-gH4.mft (raw, json)
Hash identifier:          I4IjbDSwfebTBoQIJC+Mc5HiyxLd/LZwStHaSiNhVIY=
Subject key identifier:   58:7E:BB:69:96:E8:D9:CC:04:32:B4:77:AF:01:8E:9B:29:CC:8A:52
Authority key identifier: F4:63:DA:56:97:94:7A:59:CC:66:E3:EB:46:2B:60:EF:00:FE:80:7E
Certificate issuer:       /CN=f463da5697947a59cc66e3eb462b60ef00fe807e
Certificate serial:       0188E2F0AC040B40C2B6C08B04B01492E763
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9GPaVpeUelnMZuPrRitg7wD-gH4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/262006-927e-47e4-9886-6dddc8a73408/1/9GPaVpeUelnMZuPrRitg7wD-gH4.mft
Manifest number:          087C
Signing time:             Thu 22 Jun 2023 11:50:03 +0000
Manifest this update:     Thu 22 Jun 2023 11:50:03 +0000
Manifest next update:     Fri 23 Jun 2023 11:50:03 +0000
Files and hashes:         1: 9GPaVpeUelnMZuPrRitg7wD-gH4.crl (hash: WDM3JlREJ8YMLc/Oz9sXe4dWNop4lyc4vlEdnpaWMSI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:e2:f0:ac:04:0b:40:c2:b6:c0:8b:04:b0:14:92:e7:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f463da5697947a59cc66e3eb462b60ef00fe807e
        Validity
            Not Before: Jun 22 11:50:03 2023 GMT
            Not After : Jun 23 11:50:03 2023 GMT
        Subject: CN=587ebb6996e8d9cc0432b477af018e9b29cc8a52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:81:61:74:02:81:84:5e:9f:49:54:50:87:c8:
                    9d:4a:11:99:c7:c0:94:a1:e3:33:b8:40:56:f7:4f:
                    86:5f:6f:75:5d:5d:c5:3f:fa:11:8e:c0:68:7b:5a:
                    16:b3:50:42:98:3b:f9:8b:47:9b:fe:25:ac:68:0f:
                    23:d1:84:05:7c:62:be:08:cc:46:7c:af:d5:1b:35:
                    20:b1:0d:c9:b4:ea:42:35:f6:ad:58:11:b5:4e:42:
                    a9:05:c8:0e:9e:86:c2:78:76:1b:80:99:58:7c:62:
                    36:a6:95:a9:c4:6b:da:bf:c9:53:9a:a5:21:53:ec:
                    26:c0:a6:9c:74:11:08:6c:9c:d2:ad:3d:bb:0d:b5:
                    18:db:23:a8:ab:e2:70:75:89:0f:2b:c3:56:ff:14:
                    48:94:ea:56:8a:97:7b:2b:15:46:28:87:bf:d3:40:
                    23:72:35:b5:3d:04:98:41:13:55:0e:2d:ff:f0:f2:
                    b4:6a:63:b1:d3:16:86:3b:93:41:94:8c:fa:8a:76:
                    da:22:f6:1f:bc:e1:07:22:15:99:8e:5e:2a:07:83:
                    dd:0b:7e:c7:8c:e7:80:0f:a6:d5:db:99:19:ba:06:
                    ee:71:4f:a6:81:ca:20:5d:68:dc:3c:4b:68:05:b8:
                    63:e9:9f:86:6b:5b:6c:4c:cd:e5:ae:32:6a:3d:65:
                    21:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:7E:BB:69:96:E8:D9:CC:04:32:B4:77:AF:01:8E:9B:29:CC:8A:52
            X509v3 Authority Key Identifier:
                keyid:F4:63:DA:56:97:94:7A:59:CC:66:E3:EB:46:2B:60:EF:00:FE:80:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9GPaVpeUelnMZuPrRitg7wD-gH4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/262006-927e-47e4-9886-6dddc8a73408/1/9GPaVpeUelnMZuPrRitg7wD-gH4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/262006-927e-47e4-9886-6dddc8a73408/1/9GPaVpeUelnMZuPrRitg7wD-gH4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:48:4a:d6:86:7c:d4:9e:f0:49:17:d8:70:05:59:c0:b9:1a:
         8e:fb:2d:df:80:de:59:d8:8f:d7:83:94:1a:a9:00:84:6d:39:
         e0:41:25:d2:66:fd:ca:a4:62:95:dd:8a:e6:19:b9:ea:62:10:
         4a:03:21:c5:85:63:2d:8f:cd:c7:79:54:c3:2b:97:95:6e:4d:
         04:12:9c:9f:8c:84:8d:5d:73:cd:36:6d:2a:ca:8e:be:20:bc:
         c1:b4:b1:63:c4:a9:d3:23:a4:83:83:08:5a:79:a9:96:72:ab:
         57:a4:7c:2a:5a:39:5d:f0:b1:8e:ce:1e:3b:80:01:de:c6:49:
         6e:fd:87:66:3c:b0:05:d2:56:d0:76:4b:93:e8:bd:4a:1c:1c:
         bd:15:0d:c6:19:95:09:03:c6:30:8a:5d:75:85:5d:62:d8:db:
         74:b6:b7:fb:9d:eb:d6:d4:1b:b5:e2:40:9f:59:ea:ae:57:f7:
         35:9a:a1:36:de:c8:6f:ce:5b:44:f0:f7:5f:7c:df:f5:47:9c:
         ae:f4:53:18:15:c5:88:38:dc:1a:9d:da:6d:b6:0c:30:a9:bb:
         2c:d0:b0:4f:25:1a:b6:a2:a9:be:cf:3f:e0:84:bf:2c:ba:6b:
         6b:9b:e2:f4:a5:82:2b:f8:dc:b3:da:74:30:2e:f8:b7:2d:be:
         11:3a:ef:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----