Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6491f3-f645-490e-a273-72782a4af5ef/1/XmFho06xun1_PWMw3U2ari9ZAp0.mft
File:                     XmFho06xun1_PWMw3U2ari9ZAp0.mft (raw, json)
Hash identifier:          xOf5zsWoTZZ3Pl2fBIAkMUhK/VX49b80l7FaEia8ebE=
Subject key identifier:   55:40:0C:BE:CA:B1:1E:91:26:C0:9C:88:70:02:48:7F:A9:05:1F:F6
Authority key identifier: 5E:61:61:A3:4E:B1:BA:7D:7F:3D:63:30:DD:4D:9A:AE:2F:59:02:9D
Certificate issuer:       /CN=5e6161a34eb1ba7d7f3d6330dd4d9aae2f59029d
Certificate serial:       03FA5854
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XmFho06xun1_PWMw3U2ari9ZAp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/6491f3-f645-490e-a273-72782a4af5ef/1/XmFho06xun1_PWMw3U2ari9ZAp0.mft
Manifest number:          0530
Signing time:             Tue 15 Mar 2022 01:08:21 +0000
Manifest this update:     Tue 15 Mar 2022 01:08:21 +0000
Manifest next update:     Wed 16 Mar 2022 01:08:21 +0000
Files and hashes:         1: XmFho06xun1_PWMw3U2ari9ZAp0.crl (hash: tLaI4hUpiDqVdXTHqifqCHyJh65CbJcEbot6xDf2Fgg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 66738260 (0x3fa5854)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e6161a34eb1ba7d7f3d6330dd4d9aae2f59029d
        Validity
            Not Before: Mar 15 01:08:21 2022 GMT
            Not After : Mar 16 01:08:21 2022 GMT
        Subject: CN=55400cbecab11e9126c09c887002487fa9051ff6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:57:2b:1c:55:00:8c:0d:93:09:15:8c:cf:8b:
                    58:65:a7:c9:53:3c:9c:81:b0:bc:a2:52:b5:6a:d5:
                    cc:81:21:ed:34:f8:5f:65:db:e9:ad:8e:24:b8:57:
                    bc:ff:3f:41:3f:c0:6c:77:75:2b:a4:a8:20:13:c2:
                    d4:b9:ec:62:5e:96:14:45:bf:65:71:a7:2d:71:51:
                    b2:63:2f:bf:3d:48:04:eb:4b:83:7b:38:6c:64:e1:
                    ca:19:53:72:cf:d7:31:77:ef:bc:6f:10:ce:0c:2b:
                    34:6d:81:a8:48:eb:43:cb:44:62:5f:de:21:f9:04:
                    8f:9f:8b:6e:bf:d1:d8:11:11:76:77:53:71:15:ed:
                    3a:99:2d:64:4d:f6:0d:9c:a5:fc:af:b3:6d:0f:b4:
                    83:ef:70:03:1f:72:76:a0:3d:41:21:e1:4e:c5:fe:
                    0a:6e:69:21:02:8b:93:1a:41:10:2e:ae:08:34:98:
                    22:ae:55:bf:12:4d:cb:2a:71:9c:d8:1a:9f:d7:53:
                    cb:f7:a0:d8:41:97:e3:1d:d0:9b:f5:ba:65:29:f1:
                    95:9b:ec:0b:0a:b5:67:95:64:1b:68:05:2e:70:a7:
                    5f:3a:36:2b:f5:c9:d3:c2:a7:5f:ae:57:33:c5:a1:
                    17:96:63:d7:c1:95:3f:da:62:90:a9:b9:34:35:7f:
                    d3:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:40:0C:BE:CA:B1:1E:91:26:C0:9C:88:70:02:48:7F:A9:05:1F:F6
            X509v3 Authority Key Identifier:
                keyid:5E:61:61:A3:4E:B1:BA:7D:7F:3D:63:30:DD:4D:9A:AE:2F:59:02:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XmFho06xun1_PWMw3U2ari9ZAp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6491f3-f645-490e-a273-72782a4af5ef/1/XmFho06xun1_PWMw3U2ari9ZAp0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6491f3-f645-490e-a273-72782a4af5ef/1/XmFho06xun1_PWMw3U2ari9ZAp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:88:d2:e8:04:97:af:91:b8:2b:75:58:68:61:36:35:3c:df:
         f9:09:98:af:85:55:30:dd:49:b5:6b:3b:61:78:63:14:ac:19:
         a2:96:f5:ab:93:e1:55:8d:7e:6a:a2:85:29:0f:f0:89:10:cf:
         74:ce:b2:06:c2:51:c6:0e:00:de:29:66:a2:90:38:91:4b:d0:
         2a:77:4a:17:dc:68:e4:70:3b:ec:ed:ec:c5:e1:eb:f4:c5:39:
         77:2d:da:c9:a9:61:10:55:01:24:ef:f7:fd:c6:50:11:9f:76:
         b1:cd:7e:d2:7a:f5:ec:14:50:4a:25:18:e6:52:9e:b4:75:74:
         ea:2e:26:c9:7f:55:7c:ad:e3:21:b7:58:86:f1:eb:2b:23:7f:
         93:23:c6:ee:cc:fb:a3:43:0c:0b:d4:79:e1:3c:fa:e4:16:1c:
         d2:dc:83:02:f0:cc:cb:27:08:6f:9d:76:dd:3a:f8:94:e1:c5:
         3b:1a:ee:b0:d2:f1:60:43:59:ac:02:7c:41:eb:ff:62:74:68:
         6d:f7:de:7c:ed:36:7c:5e:03:4f:56:fb:d5:21:76:6d:0f:07:
         25:51:ac:5b:c8:2f:cb:92:fa:d1:9a:c4:63:d9:b3:46:c6:cf:
         4d:b3:95:f7:a3:5f:61:0f:af:e7:8a:c2:f7:fd:c1:9e:2f:05:
         1b:f4:ac:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----