Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/d72bbb-46a8-4b6d-a2e3-eb8600485272/1/XYNPhNFKibbd5dqFo9secm46gkI.mft
File:                     XYNPhNFKibbd5dqFo9secm46gkI.mft (raw, json)
Hash identifier:          byQ4Vy/UHtv76qX8NDx4/o0yPZHzZHNiKJoXcmQ8pBY=
Subject key identifier:   E9:90:BB:50:EE:AA:7C:30:5B:8A:63:13:57:FC:87:30:AE:25:08:A9
Authority key identifier: 5D:83:4F:84:D1:4A:89:B6:DD:E5:DA:85:A3:DB:1E:72:6E:3A:82:42
Certificate issuer:       /CN=5d834f84d14a89b6dde5da85a3db1e726e3a8242
Certificate serial:       20A30E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XYNPhNFKibbd5dqFo9secm46gkI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/d72bbb-46a8-4b6d-a2e3-eb8600485272/1/XYNPhNFKibbd5dqFo9secm46gkI.mft
Manifest number:          2B
Signing time:             Tue 22 Feb 2022 22:56:58 +0000
Manifest this update:     Tue 22 Feb 2022 22:56:58 +0000
Manifest next update:     Wed 23 Feb 2022 22:56:58 +0000
Files and hashes:         1: XYNPhNFKibbd5dqFo9secm46gkI.crl (hash: EVY3h0NwAKS0uAwlyCq/8bavyFRWvIW5leUpxNyEhTY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2138894 (0x20a30e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d834f84d14a89b6dde5da85a3db1e726e3a8242
        Validity
            Not Before: Feb 22 22:56:58 2022 GMT
            Not After : Feb 23 22:56:58 2022 GMT
        Subject: CN=e990bb50eeaa7c305b8a631357fc8730ae2508a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e6:a4:dd:68:fb:da:76:2c:ba:16:7d:e9:e8:
                    ab:0d:cf:96:51:52:4d:bc:53:c0:c5:f2:c1:8d:65:
                    3d:4b:4f:d9:4c:1a:af:cc:e1:9a:c9:54:1f:d2:fd:
                    c7:94:89:b7:7d:21:6c:49:e4:c9:10:d0:b5:d1:3c:
                    6c:dc:50:7d:28:b8:a8:02:e4:e4:fb:7c:a0:54:66:
                    7b:dd:6a:c0:cf:35:0f:af:7c:0f:09:9b:87:e2:98:
                    f3:8b:82:83:24:ca:06:39:ee:ed:45:d9:25:24:e6:
                    9d:ed:ee:ba:8f:72:33:77:3c:2c:64:fb:45:fb:c6:
                    c6:45:d8:b3:fa:4e:3b:e4:c7:24:0e:f1:cd:20:3b:
                    0a:4a:b6:f5:30:dc:c1:0f:b2:a0:e6:c2:9b:8a:0c:
                    26:23:22:0e:02:10:17:6a:44:fb:17:22:69:92:7d:
                    96:e0:a8:db:46:65:9a:1b:87:78:cd:28:26:12:ae:
                    59:07:1f:07:1c:6f:6d:c0:15:7a:17:d6:91:c3:1c:
                    dc:f1:58:19:17:40:6b:2e:62:08:b0:0e:e6:5d:7e:
                    6e:fc:33:2f:c4:db:72:80:af:f2:8d:bd:10:ba:cc:
                    8d:32:ca:60:9f:e0:a1:c3:39:af:91:bd:e2:19:28:
                    90:0c:70:7d:7b:eb:2e:f2:05:7c:da:95:04:43:ea:
                    33:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:90:BB:50:EE:AA:7C:30:5B:8A:63:13:57:FC:87:30:AE:25:08:A9
            X509v3 Authority Key Identifier:
                keyid:5D:83:4F:84:D1:4A:89:B6:DD:E5:DA:85:A3:DB:1E:72:6E:3A:82:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYNPhNFKibbd5dqFo9secm46gkI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/d72bbb-46a8-4b6d-a2e3-eb8600485272/1/XYNPhNFKibbd5dqFo9secm46gkI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/d72bbb-46a8-4b6d-a2e3-eb8600485272/1/XYNPhNFKibbd5dqFo9secm46gkI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:85:92:6e:b1:f9:0b:1f:39:07:7c:b9:ee:74:ba:89:42:aa:
         36:57:85:c0:e9:f4:7d:5d:e6:0d:b1:47:cf:91:3b:2e:9c:a5:
         52:66:b4:e0:0b:f2:1a:b9:c2:ab:a0:61:79:59:0d:cb:f2:31:
         61:21:49:cb:05:d7:f0:f6:a6:c4:be:74:09:19:09:37:d3:2d:
         fc:2b:4b:e3:45:0f:15:27:1a:0b:25:7e:6e:44:1a:7f:06:4c:
         b1:ff:80:9c:ed:7a:e5:a6:ad:ed:d8:71:fc:ff:37:9a:2e:16:
         60:22:4d:fa:0a:dc:07:cb:79:ad:72:71:7d:be:37:15:d2:7c:
         47:66:54:bf:1b:12:fd:a3:f5:62:47:d6:34:dc:8c:cb:d2:4a:
         d3:37:fc:a0:d5:67:46:a9:44:25:3c:99:7d:b4:5a:f5:20:b9:
         c9:25:97:75:9c:7a:15:ab:dc:82:e0:82:21:c6:ca:b1:3e:b9:
         d5:23:fb:d2:32:cf:75:f1:90:f7:f1:2a:b9:36:e4:c4:32:14:
         40:09:d2:b0:86:66:8e:e5:f3:10:e2:4c:9d:af:55:8c:9e:18:
         03:06:e2:e2:67:a8:d6:b2:d5:f3:4b:8e:3d:29:63:63:1d:c6:
         eb:8d:a2:3e:4b:ef:94:3e:94:bb:c8:f5:b5:9d:34:17:ce:b0:
         ec:cd:90:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----