Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/5070be-d190-4ec0-ace8-d03b37bedace/1/38TsIRjIDPl7XhkEK6j73QOFMUE.mft
File:                     38TsIRjIDPl7XhkEK6j73QOFMUE.mft (raw, json)
Hash identifier:          wnOhEEJdIa86Z7kjJ8MnLTnLebz5jZF5coh3B5L1BqE=
Subject key identifier:   EB:DF:59:A5:DD:A7:BE:F6:5D:D2:86:DC:11:BF:18:FD:0B:88:38:CC
Authority key identifier: DF:C4:EC:21:18:C8:0C:F9:7B:5E:19:04:2B:A8:FB:DD:03:85:31:41
Certificate issuer:       /CN=dfc4ec2118c80cf97b5e19042ba8fbdd03853141
Certificate serial:       01848426F94391589A293D212D813128047C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/38TsIRjIDPl7XhkEK6j73QOFMUE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/5070be-d190-4ec0-ace8-d03b37bedace/1/38TsIRjIDPl7XhkEK6j73QOFMUE.mft
Manifest number:          0323
Signing time:             Thu 17 Nov 2022 05:54:17 +0000
Manifest this update:     Thu 17 Nov 2022 05:54:17 +0000
Manifest next update:     Fri 18 Nov 2022 05:54:17 +0000
Files and hashes:         1: 38TsIRjIDPl7XhkEK6j73QOFMUE.crl (hash: VE49ts6q20GE1IYU4IozcNetYmr1MEsY2o+fhFBJ2qs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:84:26:f9:43:91:58:9a:29:3d:21:2d:81:31:28:04:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfc4ec2118c80cf97b5e19042ba8fbdd03853141
        Validity
            Not Before: Nov 17 05:54:17 2022 GMT
            Not After : Nov 18 05:54:17 2022 GMT
        Subject: CN=ebdf59a5dda7bef65dd286dc11bf18fd0b8838cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:1b:c7:34:39:c3:bf:86:19:84:47:1e:f4:09:
                    07:6f:49:ca:64:cf:60:cb:c8:ce:5f:e4:d9:51:51:
                    11:d8:65:19:0e:4f:94:cc:7b:32:db:b6:03:79:58:
                    26:42:b7:5a:8f:e0:0a:dd:e6:13:aa:5b:50:bb:c1:
                    4a:8b:6c:5f:12:03:3e:b1:57:d7:c3:01:4d:29:c6:
                    a8:49:ca:36:5d:b4:d3:f7:f2:4c:83:f1:d6:b3:a0:
                    e4:de:e5:4e:bb:d0:01:4c:e2:04:b4:cb:08:66:33:
                    e0:b8:36:62:73:33:d0:7f:9e:fb:dc:18:22:92:24:
                    3b:ef:ed:be:43:d2:d7:33:7e:c0:43:39:26:3b:db:
                    89:33:f0:b6:4c:70:1c:7a:d9:7b:80:9b:bd:50:35:
                    3d:90:f0:70:25:8d:75:64:97:a8:27:6e:5a:b6:92:
                    7e:ba:85:86:a5:72:d2:02:8d:8f:a2:f4:d8:cb:51:
                    08:c0:52:a6:00:7b:e8:80:0c:50:91:50:df:32:b5:
                    84:f7:67:37:18:fb:2e:d2:95:e2:e3:fb:a6:1d:dd:
                    a3:39:0c:fc:fa:87:8e:0c:53:1c:d5:f9:f5:ed:2c:
                    a3:d3:0b:94:53:9a:37:f1:29:31:68:9a:64:67:1f:
                    63:9f:9f:b2:da:bb:50:64:b5:1a:b2:27:72:e6:2f:
                    2d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:DF:59:A5:DD:A7:BE:F6:5D:D2:86:DC:11:BF:18:FD:0B:88:38:CC
            X509v3 Authority Key Identifier:
                keyid:DF:C4:EC:21:18:C8:0C:F9:7B:5E:19:04:2B:A8:FB:DD:03:85:31:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/38TsIRjIDPl7XhkEK6j73QOFMUE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/5070be-d190-4ec0-ace8-d03b37bedace/1/38TsIRjIDPl7XhkEK6j73QOFMUE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/5070be-d190-4ec0-ace8-d03b37bedace/1/38TsIRjIDPl7XhkEK6j73QOFMUE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:c7:6b:e1:6e:83:52:e4:60:cb:dd:f1:8c:be:d4:6a:26:b5:
         e7:a9:91:92:35:5d:d8:fa:80:a9:86:da:06:ae:58:d8:c7:aa:
         2b:90:f6:77:12:ca:91:4d:07:ba:3a:c4:f6:1f:88:d3:91:d6:
         84:7b:27:20:76:2f:ba:63:fb:43:1c:2a:f3:14:18:cd:01:13:
         47:93:c0:e2:a3:02:cc:f3:46:ff:f2:95:6f:41:97:57:1f:28:
         9a:88:50:ad:20:3c:33:3d:9c:8a:03:d9:08:2e:59:4e:88:e3:
         b6:a2:d5:05:50:53:3b:20:6e:02:c0:ce:1c:5b:48:69:c6:84:
         97:32:e5:e6:0a:79:43:da:1a:ca:fa:05:07:d2:32:0f:37:46:
         13:6f:5e:9d:f0:ea:27:72:88:93:ce:8c:2e:ba:d4:0e:f2:70:
         37:08:ec:e8:b8:ec:07:39:c8:42:c5:a0:bb:ab:ed:ac:67:83:
         2e:ff:ab:bb:f3:99:6a:f5:32:fe:12:10:3d:e3:94:7e:6e:14:
         84:f0:ce:64:73:ce:b0:94:c8:ad:d6:36:a0:77:05:0d:18:ec:
         01:30:08:e6:a9:cc:10:b6:99:24:10:30:cf:48:bd:4e:d8:ff:
         84:4c:e0:90:b6:3b:5b:fb:49:95:c5:2b:e0:25:e3:1e:68:de:
         a0:73:95:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----