Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/c77fb5-cfb9-43a8-a95d-f48502778801/1/D1i7txE6h-IRK_ENDlHFf0olNAA.mft
File:                     D1i7txE6h-IRK_ENDlHFf0olNAA.mft (raw, json)
Hash identifier:          V0eL9qdVm8oGE8PQXpoz/7asG6vmXOH7Hf4dyShuEb8=
Subject key identifier:   1F:89:0F:28:97:70:EA:DD:30:61:13:4A:56:78:09:C3:C7:B0:43:EE
Authority key identifier: 0F:58:BB:B7:11:3A:87:E2:11:2B:F1:0D:0E:51:C5:7F:4A:25:34:00
Certificate issuer:       /CN=0f58bbb7113a87e2112bf10d0e51c57f4a253400
Certificate serial:       0186EAB71E06F8ADBD2520EAFA51E5532187
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D1i7txE6h-IRK_ENDlHFf0olNAA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/c77fb5-cfb9-43a8-a95d-f48502778801/1/D1i7txE6h-IRK_ENDlHFf0olNAA.mft
Manifest number:          0759
Signing time:             Thu 16 Mar 2023 13:58:34 +0000
Manifest this update:     Thu 16 Mar 2023 13:58:34 +0000
Manifest next update:     Fri 17 Mar 2023 13:58:34 +0000
Files and hashes:         1: D1i7txE6h-IRK_ENDlHFf0olNAA.crl (hash: G3kAfR/1bBBx0AqG1XpjEQktk6pk1S3BFkNgQeKdzhc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:ea:b7:1e:06:f8:ad:bd:25:20:ea:fa:51:e5:53:21:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f58bbb7113a87e2112bf10d0e51c57f4a253400
        Validity
            Not Before: Mar 16 13:58:34 2023 GMT
            Not After : Mar 17 13:58:34 2023 GMT
        Subject: CN=1f890f289770eadd3061134a567809c3c7b043ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:42:60:ba:4a:49:e0:1a:88:6b:12:9c:99:0f:
                    7b:53:97:7d:13:ff:d8:1c:92:92:fa:5d:15:60:fd:
                    9f:ef:cd:9f:33:58:99:d2:af:4f:3f:ea:ff:a1:f2:
                    ee:c9:55:73:cf:fc:c8:b6:6e:37:4f:c0:ab:6c:4e:
                    9f:5a:ba:41:81:05:03:f3:b3:9d:e4:c3:b9:a9:21:
                    ec:60:4f:74:22:65:8b:72:1f:9a:27:7f:d5:b7:1e:
                    86:a7:88:31:c9:55:20:53:20:9f:c9:24:ca:94:88:
                    9f:c1:fa:44:ba:a8:3c:22:5f:9a:cf:c1:18:e5:44:
                    fe:7b:6c:42:c1:5d:16:75:b0:98:3b:77:26:c6:21:
                    ac:c3:f9:ec:6a:9d:b2:73:d0:fc:ff:14:65:c3:27:
                    9b:f2:3c:f3:84:50:d7:5d:2d:14:d5:3c:cf:e8:65:
                    f3:0c:d7:43:fc:5d:c1:7c:20:fe:26:6d:a9:4b:ef:
                    5a:e8:de:6a:ca:d5:c8:f5:90:b7:5d:53:31:be:e8:
                    c5:4d:fc:b2:ba:bd:74:d5:39:4a:2d:2a:69:7b:e8:
                    32:59:a2:98:64:56:e4:54:c4:3e:c6:de:a4:9f:d4:
                    28:17:26:45:22:81:92:04:95:04:80:0d:04:b6:f4:
                    95:03:3a:fb:48:f8:07:e0:e9:02:8c:fa:2f:aa:71:
                    96:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:89:0F:28:97:70:EA:DD:30:61:13:4A:56:78:09:C3:C7:B0:43:EE
            X509v3 Authority Key Identifier:
                keyid:0F:58:BB:B7:11:3A:87:E2:11:2B:F1:0D:0E:51:C5:7F:4A:25:34:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1i7txE6h-IRK_ENDlHFf0olNAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c77fb5-cfb9-43a8-a95d-f48502778801/1/D1i7txE6h-IRK_ENDlHFf0olNAA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c77fb5-cfb9-43a8-a95d-f48502778801/1/D1i7txE6h-IRK_ENDlHFf0olNAA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:03:a5:e4:cf:b8:69:39:13:18:de:dc:76:90:2f:a8:d7:ac:
         84:84:7a:b0:b6:18:96:76:51:b7:4e:6d:18:41:d7:5a:36:d9:
         a3:a6:35:a5:4a:ee:ad:d9:c9:54:9a:8f:fb:e6:f1:2c:12:c6:
         e3:e4:ae:99:f1:f1:6f:6c:19:db:37:0b:12:cc:92:23:e8:0e:
         60:a4:18:c4:49:2c:7d:bd:47:90:65:49:4e:92:d6:16:bb:c5:
         31:97:85:64:bd:e0:40:b4:c9:36:09:fc:88:59:b5:27:ba:2c:
         45:28:3f:0e:1f:e0:76:7b:6c:d5:00:4c:fa:e4:0d:a5:6b:f3:
         48:e3:b7:e3:aa:96:2b:56:57:ea:e0:90:d4:40:c9:d0:1c:48:
         ca:91:83:3d:13:73:df:7e:8e:e5:0a:14:97:9f:d6:eb:fa:1b:
         f2:9e:b7:0f:f7:7f:c4:0d:85:ab:67:08:28:6f:f2:85:c0:e5:
         52:e2:13:82:c4:70:d1:0d:75:3f:fa:46:08:c4:53:1f:74:a3:
         56:4b:ba:a8:ca:3f:1d:9b:6d:02:76:d8:41:b7:85:7f:b4:da:
         b2:7b:65:db:0a:c0:83:69:c4:f7:fc:5d:2a:c3:ba:ff:40:eb:
         6d:66:f2:1f:d6:2e:97:49:b8:df:93:50:d3:f5:36:34:7a:bf:
         dc:11:aa:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----