Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/262006-927e-47e4-9886-6dddc8a73408/1/9GPaVpeUelnMZuPrRitg7wD-gH4.mft
File:                     9GPaVpeUelnMZuPrRitg7wD-gH4.mft (raw, json)
Hash identifier:          ibyb70ZK+z6LvjeMjc7vKeDimG9KhakYoYlWJOfhDIw=
Subject key identifier:   84:5E:73:C9:C0:EB:02:57:6F:1B:50:83:99:5B:4B:E6:B3:B2:76:12
Authority key identifier: F4:63:DA:56:97:94:7A:59:CC:66:E3:EB:46:2B:60:EF:00:FE:80:7E
Certificate issuer:       /CN=f463da5697947a59cc66e3eb462b60ef00fe807e
Certificate serial:       0188B8FCB58AE0FC2E66F680DEC8E7493A11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9GPaVpeUelnMZuPrRitg7wD-gH4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/262006-927e-47e4-9886-6dddc8a73408/1/9GPaVpeUelnMZuPrRitg7wD-gH4.mft
Manifest number:          0864
Signing time:             Wed 14 Jun 2023 08:19:09 +0000
Manifest this update:     Wed 14 Jun 2023 08:19:09 +0000
Manifest next update:     Thu 15 Jun 2023 08:19:09 +0000
Files and hashes:         1: 9GPaVpeUelnMZuPrRitg7wD-gH4.crl (hash: sAqazYnuupkNBcTMce+M/IVlHWbiAlFkMUJa9dpuwdI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:b8:fc:b5:8a:e0:fc:2e:66:f6:80:de:c8:e7:49:3a:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f463da5697947a59cc66e3eb462b60ef00fe807e
        Validity
            Not Before: Jun 14 08:19:09 2023 GMT
            Not After : Jun 15 08:19:09 2023 GMT
        Subject: CN=845e73c9c0eb02576f1b5083995b4be6b3b27612
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a8:d9:3d:a4:c9:22:6f:7d:53:e7:5e:44:6d:
                    de:b3:b4:77:08:00:1b:d1:c8:5d:8c:0a:6e:0a:b9:
                    98:14:25:5a:03:25:10:75:48:9f:1c:f0:2b:58:2d:
                    1f:d2:a2:8d:6d:91:c0:9b:0b:56:92:d3:52:ea:1f:
                    f2:83:31:87:db:e4:27:83:93:8a:14:8f:4f:5d:fb:
                    61:93:62:6b:47:c9:62:75:97:66:e9:ad:17:b4:cd:
                    a4:94:9e:22:94:e6:99:85:6e:a5:2c:e6:02:6d:67:
                    22:24:3d:8e:ff:4b:4e:09:98:97:ce:69:be:8e:fb:
                    8d:4d:a9:66:5a:cd:df:88:19:f8:25:ca:92:29:4b:
                    98:0d:71:70:ee:4c:cd:07:9f:1a:2f:e5:4c:c5:03:
                    82:57:9e:62:9e:13:da:01:bc:5f:9f:88:61:8c:bb:
                    e7:4e:e1:29:0a:33:7a:b2:e3:0d:70:ce:74:d1:6a:
                    13:5b:d0:d8:d1:80:95:e2:65:57:23:03:98:11:4b:
                    e7:42:83:7e:81:20:0a:19:70:d3:0d:35:63:3a:06:
                    6d:9d:d2:e0:96:57:83:01:ce:08:a6:88:df:11:9d:
                    52:1f:97:ce:56:25:0f:7f:73:49:f7:3e:87:51:f0:
                    01:58:22:09:bf:c4:4c:a6:6e:b4:73:58:14:03:69:
                    bc:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:5E:73:C9:C0:EB:02:57:6F:1B:50:83:99:5B:4B:E6:B3:B2:76:12
            X509v3 Authority Key Identifier:
                keyid:F4:63:DA:56:97:94:7A:59:CC:66:E3:EB:46:2B:60:EF:00:FE:80:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9GPaVpeUelnMZuPrRitg7wD-gH4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/262006-927e-47e4-9886-6dddc8a73408/1/9GPaVpeUelnMZuPrRitg7wD-gH4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/262006-927e-47e4-9886-6dddc8a73408/1/9GPaVpeUelnMZuPrRitg7wD-gH4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:cc:9c:a4:5c:a6:4c:bc:6c:33:b7:4a:6f:ed:da:b4:92:e9:
         25:ba:1d:1c:b9:ea:05:a9:25:a8:4c:83:aa:6e:02:e7:1f:bf:
         51:58:e6:22:0e:b7:89:a9:d9:89:42:9a:89:61:bc:c9:45:7d:
         08:29:e8:98:92:d7:95:89:b3:79:c0:4f:36:44:55:48:83:4e:
         5a:2b:bf:5c:33:8c:94:30:13:6e:a2:1b:0f:5c:6c:6f:1d:2a:
         fe:f9:c7:9c:79:01:42:02:9c:62:44:34:9e:00:49:14:fe:17:
         88:f1:44:34:16:1f:58:02:85:a8:af:f1:ab:73:96:a1:2a:0b:
         d7:a1:bc:ce:04:c3:2c:96:71:09:66:62:5f:a9:a0:f1:1a:aa:
         eb:86:cf:3e:01:9e:f3:5f:39:df:4e:94:0f:bc:a6:12:2f:84:
         f9:34:29:ba:9a:9a:bd:76:17:4b:71:1f:72:41:70:19:fa:a8:
         e8:5a:02:1b:f8:81:32:8b:fa:58:bc:05:ab:8f:0e:b1:db:eb:
         d2:66:0e:59:32:5a:5d:47:91:01:b8:d1:34:36:2f:9d:79:11:
         85:57:d1:c2:6c:28:3b:aa:2d:16:61:dc:08:47:85:09:09:77:
         10:d6:d6:4f:03:30:f5:86:cb:c6:9f:e7:e5:1b:42:6a:64:07:
         94:78:86:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----