Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/6e44b7-baff-45f3-a4e9-17f881f771cb/1/VmQdFiB579PFYKXenpImsvLwsJc.mft
File:                     VmQdFiB579PFYKXenpImsvLwsJc.mft (raw, json)
Hash identifier:          JFK+vX7G//xKqHpcZRzfaMViFWYGma9Pdt0YEprKJAM=
Subject key identifier:   59:40:27:8E:14:8A:B9:DA:B6:14:2D:DF:2C:2D:51:ED:80:E9:E1:14
Authority key identifier: 56:64:1D:16:20:79:EF:D3:C5:60:A5:DE:9E:92:26:B2:F2:F0:B0:97
Certificate issuer:       /CN=56641d162079efd3c560a5de9e9226b2f2f0b097
Certificate serial:       018C8B64B5980FA36F6242388558A5D06448
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VmQdFiB579PFYKXenpImsvLwsJc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/6e44b7-baff-45f3-a4e9-17f881f771cb/1/VmQdFiB579PFYKXenpImsvLwsJc.mft
Manifest number:          0937
Signing time:             Thu 21 Dec 2023 08:01:22 +0000
Manifest this update:     Thu 21 Dec 2023 08:01:22 +0000
Manifest next update:     Fri 22 Dec 2023 08:01:22 +0000
Files and hashes:         1: VmQdFiB579PFYKXenpImsvLwsJc.crl (hash: weSrVPfbzLurF/eDiKZDVI50ZmU2esye/78dpDWj28s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:8b:64:b5:98:0f:a3:6f:62:42:38:85:58:a5:d0:64:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56641d162079efd3c560a5de9e9226b2f2f0b097
        Validity
            Not Before: Dec 21 08:01:22 2023 GMT
            Not After : Dec 22 08:01:22 2023 GMT
        Subject: CN=5940278e148ab9dab6142ddf2c2d51ed80e9e114
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a8:d9:2c:28:65:04:a2:b3:0f:4e:49:24:4b:
                    b0:ff:f1:7c:56:d8:49:8f:79:92:4f:64:1c:76:66:
                    68:d1:b5:ae:e8:0c:6c:96:e5:32:c0:cd:bf:2d:cd:
                    ec:e2:d2:b0:57:90:f5:e4:bf:59:07:aa:ad:19:54:
                    c5:02:0c:83:64:5c:36:5e:4c:bc:f4:1f:00:56:cc:
                    09:15:68:f8:c9:9d:83:ab:ac:db:55:b3:04:94:3b:
                    c2:b2:fa:4f:f9:be:24:04:ea:15:02:70:2b:17:81:
                    61:10:40:e3:d0:ec:f8:4f:4a:ca:92:4e:f1:6e:15:
                    a8:cc:7d:a4:c7:33:dc:21:48:2b:1f:49:f6:1b:f0:
                    87:e2:b2:18:8d:96:cd:a6:8b:47:a9:e4:02:62:d5:
                    b5:f1:f8:9b:5a:d3:e2:4f:27:4b:40:ee:98:9b:02:
                    13:fb:e3:f7:bd:23:27:16:ca:44:3a:e3:a6:03:41:
                    f9:76:9d:f8:02:ed:bb:43:4c:59:6c:55:39:8e:13:
                    f8:91:ab:a6:73:43:3e:df:2d:c7:47:c7:69:f2:23:
                    6f:b0:c1:26:66:6a:f2:b7:90:dc:4f:89:f2:41:a0:
                    82:79:dd:16:66:68:29:27:15:35:88:88:c0:fc:42:
                    6b:90:1b:ee:36:7c:51:af:99:f6:3c:0c:b0:4f:95:
                    cd:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:40:27:8E:14:8A:B9:DA:B6:14:2D:DF:2C:2D:51:ED:80:E9:E1:14
            X509v3 Authority Key Identifier:
                keyid:56:64:1D:16:20:79:EF:D3:C5:60:A5:DE:9E:92:26:B2:F2:F0:B0:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VmQdFiB579PFYKXenpImsvLwsJc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6e44b7-baff-45f3-a4e9-17f881f771cb/1/VmQdFiB579PFYKXenpImsvLwsJc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6e44b7-baff-45f3-a4e9-17f881f771cb/1/VmQdFiB579PFYKXenpImsvLwsJc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:53:9e:72:4d:e2:a6:21:06:25:b4:03:94:f1:58:ae:5c:53:
         5d:ca:2e:bb:93:2a:e6:2f:7e:64:eb:40:2b:d6:8c:d6:7c:28:
         00:5c:c3:eb:7f:90:53:d2:5f:18:be:23:6d:e2:a1:ad:2b:0d:
         7a:fe:c6:13:6d:59:0c:60:cf:f4:e6:f6:82:f0:4c:f6:16:98:
         84:a3:68:f1:75:a7:c3:b7:6e:b0:da:9b:3e:21:63:ef:c9:64:
         a2:17:f9:ca:13:64:2c:36:9c:8b:62:9a:13:66:c7:24:d0:57:
         7d:31:93:2f:da:be:41:d8:13:7d:7b:4e:0e:67:e4:92:da:8e:
         fb:fd:67:82:97:78:6c:6c:3a:71:b0:61:7b:a9:38:98:9b:bf:
         4b:02:5d:20:c3:a1:fa:ad:92:18:9f:94:a6:f9:f0:41:46:26:
         88:44:12:6b:ae:75:fd:ee:ff:ed:ea:21:5f:64:9f:8e:ba:b9:
         3f:bf:b8:d2:dd:78:de:8c:79:35:95:be:9c:01:07:44:a8:d7:
         a6:d3:13:44:4b:f5:27:66:47:8b:51:bd:04:df:53:42:d6:e1:
         c4:66:c8:17:ec:5a:40:71:db:8d:be:81:7c:e7:46:35:58:5f:
         c3:e3:93:70:a4:d1:e9:2d:ea:dd:68:b9:34:55:d9:8c:b8:59:
         cd:ac:53:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----