Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ef3216-a310-469c-b3a8-2382e7ba72d8/1/jTRYrcugihzQ6_GxO0Wgv6yH19Q.mft
File:                     jTRYrcugihzQ6_GxO0Wgv6yH19Q.mft (raw, json)
Hash identifier:          KG+u1G5ze0onUmta6w4bVJ0QQtkpnsrhvlZQ3KKFp2U=
Subject key identifier:   9C:0A:12:C1:8E:E1:A0:E5:61:5D:92:5B:8B:F7:44:1A:88:7E:1A:3E
Authority key identifier: 8D:34:58:AD:CB:A0:8A:1C:D0:EB:F1:B1:3B:45:A0:BF:AC:87:D7:D4
Certificate issuer:       /CN=8d3458adcba08a1cd0ebf1b13b45a0bfac87d7d4
Certificate serial:       01840E55507A9ED07878EEF3D85736236855
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jTRYrcugihzQ6_GxO0Wgv6yH19Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/ef3216-a310-469c-b3a8-2382e7ba72d8/1/jTRYrcugihzQ6_GxO0Wgv6yH19Q.mft
Manifest number:          0B32
Signing time:             Tue 25 Oct 2022 08:49:42 +0000
Manifest this update:     Tue 25 Oct 2022 08:49:42 +0000
Manifest next update:     Wed 26 Oct 2022 08:49:42 +0000
Files and hashes:         1: jTRYrcugihzQ6_GxO0Wgv6yH19Q.crl (hash: 0iAJwZcsWL5NGEhRRxkFb6Oph44rljfaWLqsMvTuNiM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:0e:55:50:7a:9e:d0:78:78:ee:f3:d8:57:36:23:68:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d3458adcba08a1cd0ebf1b13b45a0bfac87d7d4
        Validity
            Not Before: Oct 25 08:49:42 2022 GMT
            Not After : Oct 26 08:49:42 2022 GMT
        Subject: CN=9c0a12c18ee1a0e5615d925b8bf7441a887e1a3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:11:78:b6:95:f1:52:79:31:35:dd:fb:b6:f4:
                    68:b8:4e:a7:ba:9d:22:ba:fb:09:ab:68:3a:c6:2d:
                    27:b6:87:2b:e1:5d:4b:96:bd:cc:23:5c:c4:b7:94:
                    ba:f3:7e:48:a5:fd:5a:89:db:26:5d:e7:32:83:a4:
                    f3:c0:a7:aa:5d:87:a0:4a:46:36:83:a7:db:78:61:
                    56:e9:27:c8:fe:77:45:8e:13:35:b7:e4:0f:53:ef:
                    e8:02:8f:fb:fd:75:f4:85:eb:a7:ec:68:fd:b3:0a:
                    75:81:0b:b8:f0:c9:32:77:69:37:26:06:39:31:ee:
                    59:ce:7d:9c:c8:ef:a9:da:42:f3:43:25:08:03:ed:
                    ae:25:33:9a:85:85:8f:aa:44:b2:51:e5:07:36:cd:
                    d7:61:54:e5:3b:11:d9:0b:65:8b:06:8a:35:c1:03:
                    26:f4:23:6e:74:f0:a5:50:3c:aa:2f:30:09:85:48:
                    f0:41:75:dc:08:c1:92:2d:63:75:aa:91:7d:19:35:
                    75:64:47:2b:84:3d:10:61:38:e5:f5:5b:b6:78:5a:
                    a8:fa:0c:55:02:a5:eb:91:8e:59:53:dc:84:af:4d:
                    ac:a5:ea:27:96:ec:a0:ea:d4:01:1f:5b:33:df:f3:
                    ba:0b:d7:65:c7:30:9d:bc:f7:a5:14:00:62:1d:b4:
                    f3:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:0A:12:C1:8E:E1:A0:E5:61:5D:92:5B:8B:F7:44:1A:88:7E:1A:3E
            X509v3 Authority Key Identifier:
                keyid:8D:34:58:AD:CB:A0:8A:1C:D0:EB:F1:B1:3B:45:A0:BF:AC:87:D7:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTRYrcugihzQ6_GxO0Wgv6yH19Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ef3216-a310-469c-b3a8-2382e7ba72d8/1/jTRYrcugihzQ6_GxO0Wgv6yH19Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ef3216-a310-469c-b3a8-2382e7ba72d8/1/jTRYrcugihzQ6_GxO0Wgv6yH19Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:0b:2b:ea:17:ce:90:9d:10:9f:fb:16:e7:a5:02:29:c0:00:
         1f:6c:b4:96:69:0b:8c:e5:e7:d8:11:f0:c9:b6:01:fa:0d:fd:
         89:ed:fd:86:3d:81:28:e7:13:cd:e8:fc:20:0d:21:6b:97:4b:
         8e:84:88:51:b4:51:d9:a7:32:95:1a:87:7b:35:5f:86:84:43:
         62:62:66:c5:14:a6:18:8b:a1:14:cb:82:0b:c1:1c:79:0c:a7:
         43:b1:c2:de:35:7e:88:92:f7:45:db:3a:4e:cd:19:17:7a:e7:
         df:39:1e:26:6c:a3:df:f3:8f:ce:d0:0e:63:80:ee:cc:72:c8:
         42:86:5f:c8:f2:af:48:72:52:9e:63:4d:df:70:10:e4:1f:c1:
         53:df:3c:1d:f5:21:b9:d1:f5:81:5d:f1:b7:d9:26:0c:2e:78:
         4d:1f:4d:b4:f2:4c:1c:c2:66:49:d7:46:7b:2e:bf:ee:7a:9d:
         a4:c6:3b:2d:2d:07:ae:c5:5b:b0:4f:f1:86:7e:8d:4a:54:65:
         9d:f0:cb:1e:8b:18:ba:f4:c5:66:b0:5c:e7:6e:86:e9:8a:60:
         f2:ae:49:55:b5:70:04:ac:ce:36:71:20:97:12:88:99:88:85:
         17:e4:ac:76:b9:ae:f2:e5:b4:fe:59:0e:0b:46:76:69:b6:22:
         2e:fe:c5:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----