Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/40d627-ac45-466c-a9fd-0cb65dfa1c7c/1/8LfiHQbWIS4HnAY6shJpKLpPj9Y.mft
File:                     8LfiHQbWIS4HnAY6shJpKLpPj9Y.mft (raw, json)
Hash identifier:          GZouKPqinNHITymgtzpsuGM1W+mCsfmDPxdoPoy7Fb0=
Subject key identifier:   8E:32:53:03:1C:50:CD:45:CD:2A:A7:F6:79:89:48:31:9A:1E:66:7C
Authority key identifier: F0:B7:E2:1D:06:D6:21:2E:07:9C:06:3A:B2:12:69:28:BA:4F:8F:D6
Certificate issuer:       /CN=f0b7e21d06d6212e079c063ab2126928ba4f8fd6
Certificate serial:       01876FD429D45308B57BC8E4D9D2E3510D66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8LfiHQbWIS4HnAY6shJpKLpPj9Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/40d627-ac45-466c-a9fd-0cb65dfa1c7c/1/8LfiHQbWIS4HnAY6shJpKLpPj9Y.mft
Manifest number:          06AD
Signing time:             Tue 11 Apr 2023 10:19:47 +0000
Manifest this update:     Tue 11 Apr 2023 10:19:47 +0000
Manifest next update:     Wed 12 Apr 2023 10:19:47 +0000
Files and hashes:         1: 8LfiHQbWIS4HnAY6shJpKLpPj9Y.crl (hash: O2Kn9XPoerfgOJsQj3cXMxNYITu1+564pKtHzMbQatc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:6f:d4:29:d4:53:08:b5:7b:c8:e4:d9:d2:e3:51:0d:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0b7e21d06d6212e079c063ab2126928ba4f8fd6
        Validity
            Not Before: Apr 11 10:19:47 2023 GMT
            Not After : Apr 12 10:19:47 2023 GMT
        Subject: CN=8e3253031c50cd45cd2aa7f6798948319a1e667c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:41:13:9c:7b:f7:8f:3c:c6:be:b5:17:e5:8c:
                    1a:2d:9d:72:ee:fb:c3:30:c3:f7:00:a9:2c:1c:31:
                    d5:e0:92:43:1a:a2:77:52:04:19:40:14:7a:7b:98:
                    4f:77:34:97:2f:95:42:11:99:f1:ba:8d:cb:3a:f3:
                    f4:00:75:ed:2f:5d:1c:47:38:63:2c:71:45:60:3c:
                    47:37:74:19:67:85:5e:5a:c3:3c:34:2d:8a:32:91:
                    24:16:c9:4b:b5:94:ff:a4:25:f8:c0:7b:d9:25:1b:
                    28:cc:24:cd:ea:86:ea:ba:fa:17:2f:e0:45:a8:d6:
                    07:08:9a:bf:83:0d:82:d4:b4:66:68:48:1a:5b:84:
                    66:f9:d8:34:0f:f2:e3:6d:de:43:ed:e5:7f:d9:2c:
                    c9:0e:20:93:66:d2:a6:e5:8a:95:18:5f:e9:5e:bc:
                    18:92:a7:22:14:ee:10:95:ab:3f:72:eb:77:8a:ef:
                    10:71:87:54:35:75:c1:f5:f7:53:5d:29:18:4d:66:
                    2d:08:3c:e7:12:11:e4:26:50:6f:47:3f:9d:55:88:
                    8d:51:da:a2:15:19:1d:5c:ad:cb:6c:8d:d3:6d:03:
                    10:39:87:5e:f4:16:02:86:0b:61:f5:f8:54:29:3f:
                    c8:f4:13:88:f8:7e:96:5b:85:6c:ee:61:68:ea:d4:
                    90:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:32:53:03:1C:50:CD:45:CD:2A:A7:F6:79:89:48:31:9A:1E:66:7C
            X509v3 Authority Key Identifier:
                keyid:F0:B7:E2:1D:06:D6:21:2E:07:9C:06:3A:B2:12:69:28:BA:4F:8F:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8LfiHQbWIS4HnAY6shJpKLpPj9Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/40d627-ac45-466c-a9fd-0cb65dfa1c7c/1/8LfiHQbWIS4HnAY6shJpKLpPj9Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/40d627-ac45-466c-a9fd-0cb65dfa1c7c/1/8LfiHQbWIS4HnAY6shJpKLpPj9Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:85:ad:da:23:47:bd:2f:7d:c6:f7:cc:05:15:cf:fe:7e:a6:
         58:0d:64:42:7c:ea:7e:66:18:8b:e2:7e:fa:a4:87:8a:a7:43:
         bb:a5:d0:c4:70:6f:b5:ce:10:69:ca:86:21:7a:f3:20:cd:74:
         06:67:a5:e4:c4:8e:b8:12:b3:68:f5:88:b4:14:d7:b1:44:be:
         08:ef:72:7e:ef:58:7e:16:36:05:31:df:c9:7f:ea:9c:e2:89:
         83:93:c7:3c:b2:12:0a:a2:39:6f:3b:9a:36:e8:af:7b:e1:2e:
         2c:77:d0:61:f4:1c:c9:9b:3c:a8:71:18:44:a1:36:4e:46:91:
         4f:99:ba:37:8f:cc:81:f8:9a:29:6c:8f:48:e3:d1:1d:c3:d0:
         35:80:81:05:42:d6:45:5a:91:48:f1:9b:d0:92:5a:4f:35:40:
         fe:6d:61:42:8b:df:47:4e:73:d0:db:b9:e6:2d:22:42:cc:b4:
         69:93:42:f2:58:fd:2f:1b:5d:9e:b0:a6:4d:46:20:d7:ce:22:
         42:fc:ca:84:6f:5e:a3:f5:4f:8c:e8:d1:d9:95:8f:b6:7a:c6:
         d6:22:08:28:ce:cc:0a:bb:b1:b9:4d:eb:ad:54:2a:55:28:c1:
         cd:6c:13:c9:26:06:94:41:cf:37:7e:89:87:e4:c2:75:ca:16:
         6a:0c:f0:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----