Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/32d817-3b8d-4c48-b579-02ff2690c5f8/1/qc_dIPHaWIYTEkyxvDZUO2S1DIc.mft
File:                     qc_dIPHaWIYTEkyxvDZUO2S1DIc.mft (raw, json)
Hash identifier:          st4vUVUwZELVNdnDUXlkHGblkM+Q71BYHNulUP8HHsM=
Subject key identifier:   7A:84:4B:CE:C8:28:B8:1D:0E:81:97:59:21:BD:9F:A6:06:37:7E:A6
Authority key identifier: A9:CF:DD:20:F1:DA:58:86:13:12:4C:B1:BC:36:54:3B:64:B5:0C:87
Certificate issuer:       /CN=a9cfdd20f1da588613124cb1bc36543b64b50c87
Certificate serial:       0735A4B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qc_dIPHaWIYTEkyxvDZUO2S1DIc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/32d817-3b8d-4c48-b579-02ff2690c5f8/1/qc_dIPHaWIYTEkyxvDZUO2S1DIc.mft
Manifest number:          0908
Signing time:             Thu 21 Apr 2022 10:12:38 +0000
Manifest this update:     Thu 21 Apr 2022 10:12:38 +0000
Manifest next update:     Fri 22 Apr 2022 10:12:38 +0000
Files and hashes:         1: qc_dIPHaWIYTEkyxvDZUO2S1DIc.crl (hash: J31tVdVDSk1VLn4Tz0PLIwE2LOSrHcey+fi0v3F8O/A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120956082 (0x735a4b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9cfdd20f1da588613124cb1bc36543b64b50c87
        Validity
            Not Before: Apr 21 10:12:38 2022 GMT
            Not After : Apr 22 10:12:38 2022 GMT
        Subject: CN=7a844bcec828b81d0e81975921bd9fa606377ea6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:da:63:9f:79:c8:01:ef:b8:0c:83:ee:b8:a3:
                    49:3d:f8:e1:41:4f:40:6f:52:9f:a6:c6:40:77:66:
                    fc:9e:3a:f5:e8:3c:38:8d:64:8f:f0:86:ab:c4:7f:
                    95:f5:80:b8:52:1a:01:42:d4:09:e7:33:94:a6:95:
                    d6:f9:89:f0:76:41:1b:3b:38:75:ad:99:fe:2e:4a:
                    28:31:64:2a:2a:42:00:1e:c5:0f:76:70:75:7f:df:
                    80:62:92:72:1a:86:b8:a5:8f:b8:b0:a4:96:24:29:
                    a0:0e:fa:e2:da:0b:2f:35:08:37:ab:18:a6:b3:53:
                    de:a5:2e:5e:98:a8:bd:fc:79:b3:4d:ef:99:48:f7:
                    4f:45:7a:30:06:6e:a5:a3:4d:94:43:9b:ca:73:97:
                    31:0a:35:a3:9a:ce:b3:83:cf:f4:34:5e:e1:84:cc:
                    86:55:c6:12:c8:41:fc:7a:99:ff:4a:37:35:46:11:
                    d6:af:94:48:e5:82:24:17:06:56:18:67:fa:8d:29:
                    4a:46:2b:d0:6e:e8:50:47:ac:2c:ec:5e:15:72:42:
                    b8:4c:0b:3f:52:10:60:dd:01:2c:47:44:ec:73:63:
                    bc:d0:e3:dc:a7:7a:9f:7a:fc:12:99:91:99:f5:4b:
                    75:22:29:17:01:b7:5c:33:dc:ac:ed:5a:04:d7:1f:
                    3c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:84:4B:CE:C8:28:B8:1D:0E:81:97:59:21:BD:9F:A6:06:37:7E:A6
            X509v3 Authority Key Identifier:
                keyid:A9:CF:DD:20:F1:DA:58:86:13:12:4C:B1:BC:36:54:3B:64:B5:0C:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qc_dIPHaWIYTEkyxvDZUO2S1DIc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/32d817-3b8d-4c48-b579-02ff2690c5f8/1/qc_dIPHaWIYTEkyxvDZUO2S1DIc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/32d817-3b8d-4c48-b579-02ff2690c5f8/1/qc_dIPHaWIYTEkyxvDZUO2S1DIc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:0c:85:64:c6:69:53:2d:ba:19:b1:4c:4c:03:9f:78:2d:45:
         bd:b9:7e:36:15:75:cf:17:8b:58:2c:1e:f5:5a:be:d6:ee:01:
         ed:fa:1c:0f:a6:b2:81:91:04:b4:6a:ab:de:57:cc:44:4c:41:
         51:68:35:6c:44:7d:8c:ac:39:5f:61:9f:f8:d8:be:d9:f9:6f:
         aa:78:38:d9:8a:41:ff:55:8a:db:c3:d2:f5:99:05:c6:90:fa:
         ee:0b:7b:e5:5b:88:cf:df:a5:52:a6:44:ed:8f:90:b7:52:d5:
         f6:42:a0:99:89:89:a7:41:65:2b:0b:e0:00:f5:2e:95:ad:7a:
         e6:50:b4:32:51:1f:2d:82:87:62:c5:83:a4:51:a4:18:5d:9f:
         3b:ae:ca:3c:4a:bc:6f:67:96:d5:de:f1:ee:26:66:0e:9b:7b:
         fb:39:01:b0:df:0b:e2:b2:64:66:a9:ff:85:d4:49:cf:d2:97:
         12:3c:3f:d9:db:ad:ff:fe:b0:c2:58:4c:06:34:30:ae:fc:24:
         85:f4:8f:43:00:ee:90:92:3a:28:bc:a2:58:d3:f5:9f:06:18:
         52:0c:e3:7f:76:b0:c1:8f:ca:f0:c6:1e:3f:b9:0a:d3:84:0c:
         bd:4c:95:c4:96:18:34:53:9b:38:cc:48:5b:a6:c3:d8:9b:09:
         de:25:61:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----