Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/414a83-4852-40b5-9168-82d2b8a5591a/1/9QJxnD-YjkrERSoxKVZl_ZLpNAg.mft
File:                     9QJxnD-YjkrERSoxKVZl_ZLpNAg.mft (raw, json)
Hash identifier:          i1dtmmdmEdcjOLVwob2OFY+/8ZFUM53dcN2Jl3wGRvs=
Subject key identifier:   3E:0C:51:E6:E1:8F:DE:EE:A4:5B:70:F6:96:13:CF:C5:21:AA:95:7B
Authority key identifier: F5:02:71:9C:3F:98:8E:4A:C4:45:2A:31:29:56:65:FD:92:E9:34:08
Certificate issuer:       /CN=f502719c3f988e4ac4452a31295665fd92e93408
Certificate serial:       018C58890E647AC145BA4AC638AC5FF59285
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9QJxnD-YjkrERSoxKVZl_ZLpNAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/414a83-4852-40b5-9168-82d2b8a5591a/1/9QJxnD-YjkrERSoxKVZl_ZLpNAg.mft
Manifest number:          0233
Signing time:             Mon 11 Dec 2023 11:00:26 +0000
Manifest this update:     Mon 11 Dec 2023 11:00:26 +0000
Manifest next update:     Tue 12 Dec 2023 11:00:26 +0000
Files and hashes:         1: 9QJxnD-YjkrERSoxKVZl_ZLpNAg.crl (hash: lRRa83IT6kccgZhGY1sNjHqlgzTYMolWUPckbAypiEI=)
                          2: KbwlJJtQ5IsYV5ZzFssxRvHocl4.roa (hash: XmICl2JLaR1IFln4QvSv+qU0H/xZNiufgM/xLp70uXk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:58:89:0e:64:7a:c1:45:ba:4a:c6:38:ac:5f:f5:92:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f502719c3f988e4ac4452a31295665fd92e93408
        Validity
            Not Before: Dec 11 11:00:26 2023 GMT
            Not After : Dec 12 11:00:26 2023 GMT
        Subject: CN=3e0c51e6e18fdeeea45b70f69613cfc521aa957b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:53:a9:33:0c:7a:c7:41:58:c3:74:38:c4:d4:
                    e8:ef:f2:61:d6:cc:96:85:87:3f:09:df:0e:f9:d6:
                    43:3d:b4:d0:e3:0b:96:2f:6a:99:80:e9:e1:95:07:
                    5a:1d:20:0f:7e:99:e9:52:54:b8:8e:66:65:cd:d7:
                    46:18:47:f0:93:fc:67:11:83:99:e3:6e:31:08:76:
                    cc:ab:8c:da:f6:0f:72:c0:d2:45:f9:06:d0:b1:2a:
                    89:f7:16:89:e6:3e:8d:c8:1b:31:af:86:9b:ea:8c:
                    e7:2d:85:77:2e:4d:4b:a8:6f:38:30:ca:44:bb:26:
                    4a:4c:c1:75:3e:74:ae:11:8e:c6:eb:a0:f9:d5:fd:
                    e4:a0:f0:70:da:ef:3b:0a:3f:a5:ce:2b:1b:9c:4e:
                    d9:0d:fd:58:7c:11:35:f3:f9:df:e6:ae:fc:9c:29:
                    2a:8f:50:b5:3c:a9:5e:81:d8:28:57:cf:b0:d6:77:
                    18:4c:9a:04:db:a5:2c:42:9b:72:ef:db:35:42:28:
                    b2:21:b0:a1:35:3a:a8:5c:66:ed:62:2d:0b:f4:3c:
                    aa:07:05:57:1f:33:3c:cc:82:d4:95:99:33:84:7d:
                    75:88:a6:5b:36:e6:9b:f0:5e:49:82:e6:6b:26:90:
                    7f:25:9e:62:93:1b:1d:c5:e3:7d:f4:cc:dc:4b:0f:
                    ab:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:0C:51:E6:E1:8F:DE:EE:A4:5B:70:F6:96:13:CF:C5:21:AA:95:7B
            X509v3 Authority Key Identifier:
                keyid:F5:02:71:9C:3F:98:8E:4A:C4:45:2A:31:29:56:65:FD:92:E9:34:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QJxnD-YjkrERSoxKVZl_ZLpNAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/414a83-4852-40b5-9168-82d2b8a5591a/1/9QJxnD-YjkrERSoxKVZl_ZLpNAg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/414a83-4852-40b5-9168-82d2b8a5591a/1/9QJxnD-YjkrERSoxKVZl_ZLpNAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:24:b2:eb:47:f6:16:1f:f8:61:62:db:c1:fa:9e:93:dd:6d:
         cd:ea:9a:9e:54:6f:1f:e7:3b:65:b7:62:9e:a7:74:c3:05:ef:
         ed:9a:73:a0:b0:78:e8:cf:54:b2:e9:d3:b1:44:a1:f7:9c:ec:
         9c:0a:99:74:12:77:3b:2e:3b:f0:e5:76:a8:99:6f:c4:c3:f4:
         a1:63:be:bb:ec:61:19:0f:cd:78:84:38:e2:d0:3e:07:25:95:
         a4:ab:e0:26:f7:d5:34:77:e9:a0:fe:35:1f:29:b6:5e:e4:1b:
         d4:cf:7b:78:55:26:79:09:5c:4d:9c:3e:b8:45:e2:ec:f1:58:
         a2:17:2b:d8:90:7e:8b:a1:e3:67:de:12:9f:17:cb:39:7b:92:
         c0:fd:10:d3:7b:62:88:eb:f9:68:25:a4:02:98:a6:e4:ec:e5:
         07:1e:ea:a6:f9:6e:20:c2:0b:34:c6:0f:a7:ef:04:f3:1b:d8:
         3c:1c:0c:30:6f:1a:22:05:d3:73:f2:42:1e:ef:13:b3:a4:c4:
         26:e1:b4:b8:a3:02:af:87:97:f7:7a:98:46:f2:c3:2b:bb:0c:
         56:dc:fa:76:6d:8b:23:2a:86:b5:f5:f4:66:a9:00:9a:82:56:
         e5:7a:80:a7:02:72:04:25:68:96:df:0f:06:f7:67:e8:ea:f1:
         98:60:9c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----