Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/f2be12-5020-4329-ad3c-1e00622a1bfa/1/67Ou39VOyTClYI3ktql6QgazfGQ.mft
File:                     67Ou39VOyTClYI3ktql6QgazfGQ.mft (raw, json)
Hash identifier:          l+f0eQQ1KKtv3NYUAxuAQE/hhzzPwyLFlQ7uLwyuE3g=
Subject key identifier:   38:59:5B:6D:B1:3E:92:C2:27:87:99:E2:6D:AE:EA:F7:8E:BA:65:E6
Authority key identifier: EB:B3:AE:DF:D5:4E:C9:30:A5:60:8D:E4:B6:A9:7A:42:06:B3:7C:64
Certificate issuer:       /CN=ebb3aedfd54ec930a5608de4b6a97a4206b37c64
Certificate serial:       0182B510653166564D737D0B8252142FF54B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/67Ou39VOyTClYI3ktql6QgazfGQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/f2be12-5020-4329-ad3c-1e00622a1bfa/1/67Ou39VOyTClYI3ktql6QgazfGQ.mft
Manifest number:          0203
Signing time:             Fri 19 Aug 2022 07:45:26 +0000
Manifest this update:     Fri 19 Aug 2022 07:45:26 +0000
Manifest next update:     Sat 20 Aug 2022 07:45:26 +0000
Files and hashes:         1: 67Ou39VOyTClYI3ktql6QgazfGQ.crl (hash: zEGrIDrUaZSr4OScKIxshElvqncKiwgM+H+/vd4zssY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:b5:10:65:31:66:56:4d:73:7d:0b:82:52:14:2f:f5:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebb3aedfd54ec930a5608de4b6a97a4206b37c64
        Validity
            Not Before: Aug 19 07:45:26 2022 GMT
            Not After : Aug 20 07:45:26 2022 GMT
        Subject: CN=38595b6db13e92c2278799e26daeeaf78eba65e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:97:48:f6:dc:f2:9a:14:6f:e4:64:8f:6d:01:
                    c5:20:84:09:7d:cf:d4:65:80:a2:bd:57:a5:03:7e:
                    08:04:8d:e2:48:b0:ca:22:53:0e:6b:01:c1:1f:25:
                    00:0b:a1:7a:39:4d:85:be:29:9a:c2:3c:73:2e:73:
                    b6:95:b8:f4:fc:2e:82:80:d0:68:f7:54:6f:1d:be:
                    fa:c2:64:d8:5f:f0:e5:9c:80:0b:2c:0f:cb:ef:5a:
                    6c:7c:5f:52:91:bc:23:4b:89:10:6b:1c:14:20:fb:
                    5e:1d:29:51:75:56:81:74:28:7f:29:79:7e:85:d2:
                    95:f6:cc:b9:98:e7:f4:1f:dd:26:85:49:78:57:bb:
                    6c:5c:4a:9d:5d:ed:d5:33:ae:55:9f:35:28:80:88:
                    aa:6d:12:3c:69:2e:1a:46:36:d2:91:dc:ff:f0:24:
                    78:90:bc:3f:08:a1:a5:21:0c:00:f9:63:99:e2:ce:
                    25:e2:dd:e3:50:b1:50:44:cb:b1:8d:59:4c:c4:8a:
                    4c:33:7a:e5:5b:ac:89:64:19:0f:d3:c4:50:ff:89:
                    67:7d:5b:f0:8c:e1:cd:ef:8f:61:7a:1d:8d:66:96:
                    1b:45:14:15:f1:51:c7:b2:26:cc:c3:90:90:e4:25:
                    d7:11:90:7f:96:b1:8b:c4:4a:da:21:e9:f9:84:ce:
                    8b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:59:5B:6D:B1:3E:92:C2:27:87:99:E2:6D:AE:EA:F7:8E:BA:65:E6
            X509v3 Authority Key Identifier:
                keyid:EB:B3:AE:DF:D5:4E:C9:30:A5:60:8D:E4:B6:A9:7A:42:06:B3:7C:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67Ou39VOyTClYI3ktql6QgazfGQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f2be12-5020-4329-ad3c-1e00622a1bfa/1/67Ou39VOyTClYI3ktql6QgazfGQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f2be12-5020-4329-ad3c-1e00622a1bfa/1/67Ou39VOyTClYI3ktql6QgazfGQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:84:6f:b9:04:80:fb:91:62:64:38:aa:ca:69:3a:92:39:9a:
         33:07:05:c9:e9:f6:25:5f:e4:ab:51:01:09:c0:f9:c1:ac:bf:
         dc:1e:87:ef:92:46:fa:d4:f9:0d:64:34:4b:e9:76:a1:64:2d:
         e9:63:80:83:2f:4f:44:e7:0f:0c:d3:e7:dc:e3:45:99:fe:cf:
         73:c1:93:53:c4:c7:ef:db:cd:f4:10:84:00:ef:75:23:77:4f:
         5c:30:c2:4d:64:54:7d:20:b4:ea:b9:05:77:8e:90:33:bf:0c:
         4a:fd:ab:d4:98:eb:31:f4:a9:99:33:a3:54:9e:2f:78:67:7a:
         9e:01:68:38:d6:02:47:a3:d9:50:04:28:23:e0:b0:2e:13:02:
         8b:85:d2:a3:36:dc:8d:db:1b:ab:a4:e2:55:c1:40:f6:8e:7e:
         77:f6:42:8c:f0:40:80:70:29:12:72:57:61:f4:a0:76:e6:c7:
         e9:a0:7b:e8:ea:a3:8f:47:d7:ff:f7:4c:91:5b:97:2f:fb:da:
         0e:58:2f:44:fc:7b:39:2e:44:fb:43:a1:45:4b:b8:99:ce:21:
         12:f6:13:47:ee:47:d3:e4:36:f9:c0:2c:46:1f:2c:f8:9c:6c:
         ae:17:f8:4c:a9:cf:7c:2f:76:e6:3e:42:9d:b6:e3:2b:94:dc:
         e3:80:f1:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----