Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/9fb1dc-02e8-43d6-8cab-b226e1426672/1/OQEjiStlbgtxfgTK6AGfqVqvwWk.mft
File:                     OQEjiStlbgtxfgTK6AGfqVqvwWk.mft (raw, json)
Hash identifier:          qogPU0ALQ2YMd5OtLahlNBqBIkVrnyYSE//gOhEgOYA=
Subject key identifier:   F1:BB:33:E0:74:C2:59:D9:83:B8:4C:73:9C:60:49:7D:48:22:8D:80
Authority key identifier: 39:01:23:89:2B:65:6E:0B:71:7E:04:CA:E8:01:9F:A9:5A:AF:C1:69
Certificate issuer:       /CN=390123892b656e0b717e04cae8019fa95aafc169
Certificate serial:       018904E3C9B2F041824350773CEF4250B7BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OQEjiStlbgtxfgTK6AGfqVqvwWk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/9fb1dc-02e8-43d6-8cab-b226e1426672/1/OQEjiStlbgtxfgTK6AGfqVqvwWk.mft
Manifest number:          0E07
Signing time:             Thu 29 Jun 2023 02:03:04 +0000
Manifest this update:     Thu 29 Jun 2023 02:03:04 +0000
Manifest next update:     Fri 30 Jun 2023 02:03:04 +0000
Files and hashes:         1: OQEjiStlbgtxfgTK6AGfqVqvwWk.crl (hash: +56pYEWO5K8Ayj8QJYvaswtSj1f83kduWN6ET53of+c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:04:e3:c9:b2:f0:41:82:43:50:77:3c:ef:42:50:b7:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=390123892b656e0b717e04cae8019fa95aafc169
        Validity
            Not Before: Jun 29 02:03:04 2023 GMT
            Not After : Jun 30 02:03:04 2023 GMT
        Subject: CN=f1bb33e074c259d983b84c739c60497d48228d80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:74:5b:cf:cb:86:82:91:35:e4:1b:74:a1:fc:
                    85:a3:de:8e:50:44:7c:56:68:a2:11:14:ba:dc:1d:
                    9a:e9:85:59:a4:da:ca:fc:5c:fb:da:d6:86:53:9d:
                    7a:99:66:78:17:1e:22:9f:72:5b:50:b5:aa:20:1c:
                    0b:6d:40:78:99:18:fd:92:7b:78:30:24:c2:fc:86:
                    61:e4:80:db:43:b0:16:b6:f4:2e:c2:ed:08:9d:76:
                    47:a2:bb:7f:05:ef:e0:c2:6e:77:9a:33:fd:39:6e:
                    3e:c7:dc:a5:0e:cc:9a:96:42:d8:54:0a:d8:a4:58:
                    a5:fc:19:71:c1:9b:4e:13:dc:54:b7:b0:fb:22:d8:
                    23:1e:35:82:b4:20:c1:b7:19:bc:81:e3:0d:53:9c:
                    e1:50:22:5a:ac:9a:f7:36:38:e6:33:5b:d6:8d:a0:
                    ce:fe:61:b4:76:be:57:58:a7:40:4d:89:16:fa:c9:
                    2c:7f:61:09:af:dc:f8:f0:19:1a:93:1b:19:34:9a:
                    3b:95:f1:f4:29:5c:38:f2:a6:be:5b:fa:f6:7f:93:
                    82:ff:28:75:28:88:6a:41:11:f0:53:60:8f:b3:db:
                    56:bc:ba:26:c3:b6:9b:f0:43:76:c6:f5:95:88:40:
                    b0:08:f1:c0:5c:dc:12:e3:8b:98:57:0d:aa:80:b1:
                    5f:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:BB:33:E0:74:C2:59:D9:83:B8:4C:73:9C:60:49:7D:48:22:8D:80
            X509v3 Authority Key Identifier:
                keyid:39:01:23:89:2B:65:6E:0B:71:7E:04:CA:E8:01:9F:A9:5A:AF:C1:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQEjiStlbgtxfgTK6AGfqVqvwWk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9fb1dc-02e8-43d6-8cab-b226e1426672/1/OQEjiStlbgtxfgTK6AGfqVqvwWk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9fb1dc-02e8-43d6-8cab-b226e1426672/1/OQEjiStlbgtxfgTK6AGfqVqvwWk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:9d:bf:b1:fb:87:e3:f9:18:1a:6e:e3:db:40:36:40:1f:17:
         75:00:f7:93:b2:f7:29:6d:c6:ad:3e:89:b2:06:54:bd:b5:e1:
         e2:cb:96:8a:8e:e4:d1:0c:7e:c0:3f:fa:6f:3e:5a:44:8b:6a:
         47:56:c2:aa:79:6a:6f:9a:93:07:9e:38:14:53:ce:5a:ad:4f:
         bb:35:d3:73:04:ff:41:e8:7f:2a:2c:0d:92:fd:38:84:d7:6c:
         2d:ca:cb:e2:22:58:af:75:c1:5a:39:01:5c:56:22:a8:58:0a:
         20:26:20:fb:09:cf:6e:e1:a8:5d:17:93:73:24:e1:ce:a2:f9:
         c7:23:15:7a:16:f5:b1:bb:8a:28:4f:06:cd:3d:de:bd:d6:db:
         b7:69:ff:9f:8e:92:b6:1c:70:95:7c:dc:7b:ce:2a:11:2b:25:
         a5:cc:85:b8:2c:eb:bf:67:f3:ad:4a:24:35:b7:00:bb:ea:74:
         27:74:24:88:3a:4d:6f:2b:0e:88:7a:63:6d:8a:c7:e9:d9:bc:
         a5:32:aa:ac:2a:17:2a:d3:c7:97:5f:00:57:ea:f2:e4:53:2a:
         0b:07:cf:ad:3f:59:63:16:0d:38:ce:8c:54:e4:95:ec:2a:23:
         63:0b:dd:8d:0c:28:93:cd:19:cb:6f:bf:e9:ca:c4:00:44:03:
         42:1e:20:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----