Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/2636a5-eee0-4a07-bcf3-535b697e1c62/1/1uWY1JymNy7Fg-2HeVAW8Tv9Ffk.mft
File:                     1uWY1JymNy7Fg-2HeVAW8Tv9Ffk.mft (raw, json)
Hash identifier:          42wBXyl6N6g4fW4XAdTZHJGRrAiLpM+MF8kuTa2xO0k=
Subject key identifier:   3C:F6:C4:EF:16:58:A4:6A:64:BF:AC:77:1C:95:CB:CE:06:B1:89:52
Authority key identifier: D6:E5:98:D4:9C:A6:37:2E:C5:83:ED:87:79:50:16:F1:3B:FD:15:F9
Certificate issuer:       /CN=d6e598d49ca6372ec583ed87795016f13bfd15f9
Certificate serial:       01879976CD5944738571BBAAB654CEAEA23E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1uWY1JymNy7Fg-2HeVAW8Tv9Ffk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/2636a5-eee0-4a07-bcf3-535b697e1c62/1/1uWY1JymNy7Fg-2HeVAW8Tv9Ffk.mft
Manifest number:          09CB
Signing time:             Wed 19 Apr 2023 12:21:52 +0000
Manifest this update:     Wed 19 Apr 2023 12:21:52 +0000
Manifest next update:     Thu 20 Apr 2023 12:21:52 +0000
Files and hashes:         1: 1uWY1JymNy7Fg-2HeVAW8Tv9Ffk.crl (hash: x0Mq/kA9Kpc5w/4UHjR9wusZThplurK7ThXFGmn+hVQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:99:76:cd:59:44:73:85:71:bb:aa:b6:54:ce:ae:a2:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6e598d49ca6372ec583ed87795016f13bfd15f9
        Validity
            Not Before: Apr 19 12:21:52 2023 GMT
            Not After : Apr 20 12:21:52 2023 GMT
        Subject: CN=3cf6c4ef1658a46a64bfac771c95cbce06b18952
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:82:ea:76:86:44:c0:23:a7:00:84:88:1e:19:
                    7d:65:6a:91:2c:04:49:5e:fc:64:83:31:06:b8:36:
                    6f:df:a2:5b:51:36:1b:66:03:47:c2:db:68:39:00:
                    d3:4a:33:cc:cc:84:00:65:77:0e:e5:2f:18:b2:c3:
                    8b:4c:a5:56:3a:f4:2f:fd:cb:4b:4e:75:d3:35:ee:
                    e6:01:ff:ed:e9:f8:87:f7:5e:3c:07:95:5e:38:2f:
                    54:3d:d4:e6:43:de:0f:fe:70:47:d1:cf:07:6a:e7:
                    c9:a4:8b:a2:56:99:bb:b8:20:1d:b5:95:57:01:52:
                    91:54:77:b9:71:8d:3f:af:82:9c:18:5d:f8:85:45:
                    6a:e5:94:14:a6:8d:1a:cb:c1:cf:05:05:24:79:71:
                    6a:75:a9:1b:88:db:44:0e:33:e1:08:13:08:73:c2:
                    28:5d:4e:ff:9e:ce:10:3c:a7:b4:ef:c1:74:85:65:
                    63:6b:44:d3:0d:20:d4:3a:93:fd:a9:e4:07:c7:07:
                    d6:51:66:5a:9f:00:ad:02:16:94:39:c5:6e:14:1a:
                    9d:6f:a5:c8:5c:5f:93:77:8d:26:c5:ed:aa:2e:0c:
                    f0:c8:f5:f2:28:8c:49:92:c5:cb:2d:e0:ef:63:e5:
                    a1:d7:bb:d1:06:c9:5c:e2:6d:61:9b:0f:4e:2a:02:
                    cc:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:F6:C4:EF:16:58:A4:6A:64:BF:AC:77:1C:95:CB:CE:06:B1:89:52
            X509v3 Authority Key Identifier:
                keyid:D6:E5:98:D4:9C:A6:37:2E:C5:83:ED:87:79:50:16:F1:3B:FD:15:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1uWY1JymNy7Fg-2HeVAW8Tv9Ffk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/2636a5-eee0-4a07-bcf3-535b697e1c62/1/1uWY1JymNy7Fg-2HeVAW8Tv9Ffk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/2636a5-eee0-4a07-bcf3-535b697e1c62/1/1uWY1JymNy7Fg-2HeVAW8Tv9Ffk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:b1:df:7f:85:93:09:34:24:bb:10:f7:92:38:d3:5f:b7:1a:
         57:92:8f:e9:d5:87:d1:55:bb:ce:59:59:d4:40:94:a8:e1:1a:
         b9:c2:6c:fc:13:1f:73:47:8d:c1:da:89:69:4f:3c:8e:6d:e1:
         d6:fa:9a:1f:25:a5:fc:1a:f8:83:a2:04:7a:4e:ed:07:0c:5b:
         3e:9b:79:28:ec:3c:9c:72:93:5e:5e:25:1b:9d:1e:00:95:79:
         3e:f6:db:06:a2:77:9f:e9:44:42:f2:10:71:1d:5a:bf:de:ef:
         60:3b:6d:0b:bd:cd:89:7f:7a:84:ad:b7:b8:d1:ca:10:43:dc:
         be:e7:fe:6c:1a:7b:23:e2:f3:5f:77:c4:e1:ab:d5:0d:5b:31:
         7b:3a:ab:21:d1:82:3e:71:64:6c:ff:0e:25:a6:b8:9a:e3:d1:
         f8:b9:2c:42:fe:6e:48:28:6d:27:5e:ba:de:4e:1b:1c:9b:9a:
         0c:33:74:c7:a2:1b:b5:8b:fe:c2:03:b3:11:78:09:ff:27:ba:
         2f:05:25:bb:1e:b4:88:19:1e:3c:b9:56:a8:35:94:2c:ef:6a:
         a0:55:30:d4:1f:6d:2d:96:de:4a:b4:d7:84:02:39:c9:21:e5:
         52:d5:f1:e0:ae:5b:44:ab:ab:49:20:f5:e0:cc:50:2c:d4:3f:
         7d:7e:a4:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----