Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/ba5fe9-c7c8-4f8c-92fd-1977f1f6409f/1/SDq0LHTtTmIaUWvTOvdsFnw2_z4.mft
File:                     SDq0LHTtTmIaUWvTOvdsFnw2_z4.mft (raw, json)
Hash identifier:          JXuWi9cw0ntKiJMe9ejaXsOxd9jawgeRMiH3n7VDT8g=
Subject key identifier:   CC:15:3A:61:1E:9A:F2:5D:AB:56:DB:FD:56:D6:D9:4B:9D:DD:50:42
Authority key identifier: 48:3A:B4:2C:74:ED:4E:62:1A:51:6B:D3:3A:F7:6C:16:7C:36:FF:3E
Certificate issuer:       /CN=483ab42c74ed4e621a516bd33af76c167c36ff3e
Certificate serial:       0183F28A1DC9DE34815CB3B7DC57605DE11B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SDq0LHTtTmIaUWvTOvdsFnw2_z4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/ba5fe9-c7c8-4f8c-92fd-1977f1f6409f/1/SDq0LHTtTmIaUWvTOvdsFnw2_z4.mft
Manifest number:          0B20
Signing time:             Wed 19 Oct 2022 23:18:01 +0000
Manifest this update:     Wed 19 Oct 2022 23:18:01 +0000
Manifest next update:     Thu 20 Oct 2022 23:18:01 +0000
Files and hashes:         1: SDq0LHTtTmIaUWvTOvdsFnw2_z4.crl (hash: MBT656wJLk3ZnvNqf6d3+NlAP5bV4pcDm87KUx8/xOs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:f2:8a:1d:c9:de:34:81:5c:b3:b7:dc:57:60:5d:e1:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=483ab42c74ed4e621a516bd33af76c167c36ff3e
        Validity
            Not Before: Oct 19 23:18:01 2022 GMT
            Not After : Oct 20 23:18:01 2022 GMT
        Subject: CN=cc153a611e9af25dab56dbfd56d6d94b9ddd5042
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:10:e5:74:07:85:ca:9a:83:f5:59:9c:f8:5b:
                    48:cc:a2:4f:8b:a4:20:34:08:63:a3:99:a4:2a:6b:
                    7e:79:e9:64:92:14:b8:0c:a5:08:48:30:42:b7:1f:
                    28:38:00:2e:f9:f3:4c:a0:ca:7e:16:47:f6:28:6c:
                    69:4e:81:fd:e6:8b:a5:dc:3a:b9:a5:ba:37:f8:67:
                    88:7d:17:e4:76:75:d5:a4:5b:07:10:61:3f:33:44:
                    83:bd:8d:50:32:7a:cd:c6:74:ad:2d:bc:a7:af:03:
                    aa:b9:a5:39:94:87:c8:21:e3:f2:00:ab:c3:f5:da:
                    1b:95:b3:a9:86:46:bf:be:ad:58:b9:fd:fa:0a:bc:
                    b5:12:0d:5d:75:47:3b:0d:78:28:88:5c:fc:61:1c:
                    d5:7a:6d:c2:45:c4:11:e5:b1:51:37:04:36:da:f4:
                    27:8e:48:7e:b8:e1:5b:de:ba:b7:af:89:65:19:12:
                    8d:8e:c5:37:6c:2d:95:7c:7c:b0:b8:2b:18:af:1c:
                    1b:56:aa:10:3a:f6:54:62:0e:49:0c:3d:4c:c4:1e:
                    68:da:c2:38:49:8d:fc:0c:45:af:7c:a8:4b:38:41:
                    e6:28:be:6b:c8:11:94:44:00:34:a5:0e:05:b6:31:
                    52:6f:65:1a:74:00:1b:f3:02:b8:f1:50:9d:f0:7b:
                    b9:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:15:3A:61:1E:9A:F2:5D:AB:56:DB:FD:56:D6:D9:4B:9D:DD:50:42
            X509v3 Authority Key Identifier:
                keyid:48:3A:B4:2C:74:ED:4E:62:1A:51:6B:D3:3A:F7:6C:16:7C:36:FF:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SDq0LHTtTmIaUWvTOvdsFnw2_z4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/ba5fe9-c7c8-4f8c-92fd-1977f1f6409f/1/SDq0LHTtTmIaUWvTOvdsFnw2_z4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/ba5fe9-c7c8-4f8c-92fd-1977f1f6409f/1/SDq0LHTtTmIaUWvTOvdsFnw2_z4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:2b:b1:61:e3:cd:80:11:f8:07:ef:00:d5:79:19:e6:d1:fa:
         90:61:d0:2d:c1:91:1d:7a:07:cb:7f:61:dd:bb:6c:c6:42:0d:
         46:3e:99:b6:6a:27:b9:c4:f4:91:3b:f4:74:d3:fc:41:07:04:
         ad:6f:d7:ee:ae:b7:9a:e3:d5:d9:48:16:e1:dd:53:5d:97:e4:
         8a:c5:69:d9:94:04:ee:d3:78:0c:51:c0:cb:9b:f7:98:9f:77:
         58:f9:b5:85:89:ed:d0:0a:88:2b:c1:93:76:cc:7b:77:25:ff:
         b3:c2:8f:3f:9d:e6:e2:da:60:3c:5d:2a:b6:3e:47:a5:a0:af:
         9a:e0:d1:3c:b4:ab:54:1a:0c:ec:37:12:86:b1:cf:b0:17:5e:
         53:cf:7c:1c:c3:87:96:3d:aa:67:33:47:1a:e8:9b:eb:8b:6a:
         f9:98:3d:67:6b:98:5b:df:e9:7d:64:c0:4e:f1:55:ab:54:d3:
         da:80:24:45:a7:57:be:38:71:8e:2a:48:12:a2:a8:cb:1d:bc:
         53:f2:1c:52:95:bd:05:d5:a3:a5:80:89:87:a2:ed:94:12:9d:
         91:e3:2a:e9:30:15:a8:30:7b:ea:a5:df:99:80:0e:c8:b5:3d:
         26:20:52:9a:77:58:63:48:03:b3:bc:ee:2c:eb:97:76:63:d4:
         d6:ed:69:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----