Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/24a954-f979-4812-8a66-5c1a04b341cb/1/ftBiFxsfOnPBWgVxI8WZdys_T1A.mft
File:                     ftBiFxsfOnPBWgVxI8WZdys_T1A.mft (raw, json)
Hash identifier:          LiuSqaCFPES7cLBCWUZaE/VCqdyk1t9MVNXKz7bsmB8=
Subject key identifier:   17:FF:00:CF:8E:3E:23:5A:F5:6B:D0:E1:0D:B6:6A:30:A2:B8:FE:AB
Authority key identifier: 7E:D0:62:17:1B:1F:3A:73:C1:5A:05:71:23:C5:99:77:2B:3F:4F:50
Certificate issuer:       /CN=7ed062171b1f3a73c15a057123c599772b3f4f50
Certificate serial:       0188B7BC31DAE6EF05044271677F392F9DCA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ftBiFxsfOnPBWgVxI8WZdys_T1A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/24a954-f979-4812-8a66-5c1a04b341cb/1/ftBiFxsfOnPBWgVxI8WZdys_T1A.mft
Manifest number:          06F3
Signing time:             Wed 14 Jun 2023 02:29:03 +0000
Manifest this update:     Wed 14 Jun 2023 02:29:03 +0000
Manifest next update:     Thu 15 Jun 2023 02:29:03 +0000
Files and hashes:         1: ftBiFxsfOnPBWgVxI8WZdys_T1A.crl (hash: FUfEroNHyePr/6skr2hWiXklgTE+erTN+F0l5gD/UsY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:b7:bc:31:da:e6:ef:05:04:42:71:67:7f:39:2f:9d:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ed062171b1f3a73c15a057123c599772b3f4f50
        Validity
            Not Before: Jun 14 02:29:03 2023 GMT
            Not After : Jun 15 02:29:03 2023 GMT
        Subject: CN=17ff00cf8e3e235af56bd0e10db66a30a2b8feab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6f:96:ab:62:ad:43:b4:60:6a:ed:6b:88:49:
                    4d:d2:80:f4:ed:23:a9:a3:e6:6b:8d:0f:54:03:07:
                    4f:bd:d5:29:2f:4f:ff:91:d4:cf:dc:1f:4c:e8:a7:
                    5d:7c:19:b6:34:2e:97:5b:ea:09:82:21:d3:8f:47:
                    76:02:75:99:24:96:6d:55:15:1e:b2:88:1e:a5:7b:
                    61:2f:d5:01:ce:78:03:95:82:85:07:73:75:ac:e9:
                    1e:97:5e:e1:d0:49:11:1e:57:2c:ab:78:0f:bf:80:
                    ee:65:e6:85:48:d5:c3:e7:70:43:75:86:14:31:b7:
                    62:28:72:12:c8:f8:a3:05:99:e0:7f:98:61:90:27:
                    2d:de:d5:d0:da:31:a5:63:0a:f3:e8:2f:68:67:0e:
                    d6:6a:a9:6c:dd:47:4c:8b:dd:94:02:43:d6:2d:67:
                    0b:30:16:15:6b:63:18:f2:d4:3a:9e:85:c2:1d:c0:
                    15:73:2e:80:6b:b0:61:4e:c1:e8:c2:db:15:56:a1:
                    e6:08:61:1e:07:6a:cb:8c:b5:52:81:c9:fa:dd:f6:
                    d6:7f:dd:cb:c6:f0:eb:0d:55:d2:ba:4a:8b:6e:07:
                    29:22:90:32:e2:86:d3:0e:b5:41:b7:80:3e:c1:39:
                    bc:d8:dd:c7:33:b1:20:e7:c8:d4:bc:62:55:2f:e4:
                    b6:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:FF:00:CF:8E:3E:23:5A:F5:6B:D0:E1:0D:B6:6A:30:A2:B8:FE:AB
            X509v3 Authority Key Identifier:
                keyid:7E:D0:62:17:1B:1F:3A:73:C1:5A:05:71:23:C5:99:77:2B:3F:4F:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ftBiFxsfOnPBWgVxI8WZdys_T1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/24a954-f979-4812-8a66-5c1a04b341cb/1/ftBiFxsfOnPBWgVxI8WZdys_T1A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/24a954-f979-4812-8a66-5c1a04b341cb/1/ftBiFxsfOnPBWgVxI8WZdys_T1A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:c3:f3:5c:46:81:03:2f:26:bd:e8:2b:b6:20:78:03:06:36:
         63:0b:ad:d5:9d:c9:45:8b:50:63:19:3c:86:8f:56:00:aa:69:
         52:fc:c7:c4:b8:df:4d:d8:02:8c:86:30:b4:78:36:83:08:b2:
         81:1c:09:d5:ab:bd:8d:70:0a:c4:03:66:e6:15:52:84:94:55:
         d2:7b:69:58:3e:af:fd:3b:67:64:82:a6:b2:28:bf:8f:ea:5d:
         5b:7a:2b:db:b1:b9:0e:66:97:92:4c:d3:20:64:83:ad:d5:67:
         2f:34:c3:cb:97:c2:bc:8f:a4:52:55:2d:c1:74:de:ca:2d:c3:
         af:01:a3:37:a6:f2:a8:67:f6:61:ac:f0:f5:be:35:05:00:81:
         b3:0f:51:04:f8:7c:65:e3:4b:61:a1:3c:d8:89:86:95:4e:57:
         ea:aa:e4:53:c1:8f:2f:fb:10:f2:b2:ed:f1:f0:68:57:ae:dc:
         27:ad:7c:00:97:62:d3:54:b7:d2:dd:56:75:22:fd:db:e0:59:
         3c:54:2e:05:62:96:25:4d:a9:ef:92:2a:78:b2:a0:64:df:d3:
         fd:cf:33:68:37:0f:80:51:d4:fd:28:77:03:2d:6f:9e:a8:4f:
         44:36:75:0f:fe:f9:d4:0f:82:dd:d3:02:2b:7f:53:ad:f5:1c:
         dc:01:53:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----