Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/c15086-b7d4-488f-846d-b5ec496ee01c/1/uxi_h61foM7AVuHXGCglbFEQIis.mft
File:                     uxi_h61foM7AVuHXGCglbFEQIis.mft (raw, json)
Hash identifier:          pm9rdfI+Siep+86i+2CzRauIEKpOYQgwWYsdE2CqG7A=
Subject key identifier:   BC:72:98:54:56:9E:36:33:87:36:54:8C:5D:B2:88:3C:A0:21:2D:59
Authority key identifier: BB:18:BF:87:AD:5F:A0:CE:C0:56:E1:D7:18:28:25:6C:51:10:22:2B
Certificate issuer:       /CN=bb18bf87ad5fa0cec056e1d71828256c5110222b
Certificate serial:       0181D3069DA17E5ABAD063475D17ECA6CBA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uxi_h61foM7AVuHXGCglbFEQIis.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/c15086-b7d4-488f-846d-b5ec496ee01c/1/uxi_h61foM7AVuHXGCglbFEQIis.mft
Manifest number:          A8
Signing time:             Wed 06 Jul 2022 10:20:34 +0000
Manifest this update:     Wed 06 Jul 2022 10:20:34 +0000
Manifest next update:     Thu 07 Jul 2022 10:20:34 +0000
Files and hashes:         1: uxi_h61foM7AVuHXGCglbFEQIis.crl (hash: Lb4Hy2P5wQwFe68Yoa7ALM4Net8+r2t5XdoLTflnsQQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:81:d3:06:9d:a1:7e:5a:ba:d0:63:47:5d:17:ec:a6:cb:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb18bf87ad5fa0cec056e1d71828256c5110222b
        Validity
            Not Before: Jul  6 10:20:34 2022 GMT
            Not After : Jul  7 10:20:34 2022 GMT
        Subject: CN=bc729854569e36338736548c5db2883ca0212d59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:2c:83:12:e8:1b:f9:02:8a:44:14:5d:16:3b:
                    2c:50:74:c1:b3:29:ce:66:a8:83:29:ce:9e:5a:58:
                    db:81:13:f2:1e:d1:f9:ef:76:34:a2:1d:a2:90:f9:
                    d2:7b:b9:c8:f6:49:2b:77:94:0a:b9:3e:91:cb:b0:
                    52:b4:f0:02:4e:c8:6b:40:6b:71:28:4e:85:65:8e:
                    0f:4f:2e:c5:3b:20:f8:e0:a1:bf:8c:d3:43:bf:3e:
                    82:87:d2:7e:f5:e5:1f:da:fc:13:49:bb:8b:c8:33:
                    26:a3:aa:39:b0:2a:8a:d4:8d:1e:61:4a:43:bc:21:
                    ff:eb:72:e4:f2:a3:ae:f5:87:5f:c8:46:4a:bf:1b:
                    59:55:3e:83:c1:38:85:f4:b6:d9:27:59:da:bd:c2:
                    46:44:4b:1c:2f:20:28:02:02:4a:b5:25:d1:37:f4:
                    d0:61:a1:17:01:7a:47:e5:09:a1:92:9e:4e:cb:09:
                    2b:1d:fe:67:95:f7:82:21:ed:55:75:9e:0d:d1:bb:
                    32:cd:e7:ab:c3:b6:0c:41:2e:c5:99:63:ad:ea:33:
                    e5:b9:02:57:5a:05:50:1e:4e:5a:5a:62:7f:6f:ad:
                    0a:b7:41:8e:c2:2f:ab:5c:f6:4c:73:46:05:0c:37:
                    99:1c:75:aa:49:de:ec:4b:06:20:31:ac:6e:46:c8:
                    78:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:72:98:54:56:9E:36:33:87:36:54:8C:5D:B2:88:3C:A0:21:2D:59
            X509v3 Authority Key Identifier:
                keyid:BB:18:BF:87:AD:5F:A0:CE:C0:56:E1:D7:18:28:25:6C:51:10:22:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uxi_h61foM7AVuHXGCglbFEQIis.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/c15086-b7d4-488f-846d-b5ec496ee01c/1/uxi_h61foM7AVuHXGCglbFEQIis.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/c15086-b7d4-488f-846d-b5ec496ee01c/1/uxi_h61foM7AVuHXGCglbFEQIis.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:7d:9a:a6:79:53:bd:37:12:71:e1:a5:59:a2:ab:48:6a:60:
         76:16:d9:9a:23:9b:a3:78:0a:d2:cd:e7:0f:c4:bf:02:9e:64:
         08:31:47:1a:27:8b:6a:4a:cc:bd:9c:c8:c9:c6:d8:7f:a8:8b:
         a0:0d:f5:8d:89:e0:14:48:54:8c:d2:91:2d:3a:44:15:bb:27:
         12:e2:f6:48:01:b8:04:cb:7c:71:64:14:bf:98:34:fd:8b:e5:
         54:d5:1d:7d:a4:b6:ee:0c:7d:20:59:9d:fe:dd:f6:9a:c4:94:
         e3:a2:b8:db:b6:18:18:bd:fe:3a:73:71:be:a6:d2:1f:fa:8c:
         fd:19:07:3f:fb:4a:9d:7e:ac:6e:c1:6d:7a:32:9f:ca:6d:55:
         e6:7b:f7:85:4f:ab:9e:4d:9f:98:86:07:9e:cd:23:db:30:90:
         fa:a8:61:19:9b:e1:b2:20:37:a0:c4:0f:01:b1:c5:23:e8:e6:
         ac:61:24:5e:d9:16:17:bd:45:af:8c:3d:7e:cb:db:86:23:92:
         e5:29:85:74:2d:e4:4c:55:a6:7f:4e:82:3a:b5:03:c3:49:0d:
         50:49:ec:ad:da:6a:bb:73:d8:cc:dc:00:db:6f:b3:a6:c7:79:
         7e:50:73:77:af:23:79:52:da:1b:ee:42:20:fe:87:be:4a:b3:
         10:6d:96:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----