Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/610382-7b89-4f70-a777-71ae5fc126bf/1/l3Q9NGNWRptLaTlGPJbfK4o5Blw.mft
File:                     l3Q9NGNWRptLaTlGPJbfK4o5Blw.mft (raw, json)
Hash identifier:          0I94vZ7HIdmCyp6Le4ExFlDke7XRvhXBGAWwz+3u4qo=
Subject key identifier:   62:FB:90:8E:66:96:09:55:06:EA:83:42:E2:B7:26:AE:26:64:A7:79
Authority key identifier: 97:74:3D:34:63:56:46:9B:4B:69:39:46:3C:96:DF:2B:8A:39:06:5C
Certificate issuer:       /CN=97743d346356469b4b6939463c96df2b8a39065c
Certificate serial:       018C8AC049CEC35CDF4650E00E93A4578B76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l3Q9NGNWRptLaTlGPJbfK4o5Blw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/610382-7b89-4f70-a777-71ae5fc126bf/1/l3Q9NGNWRptLaTlGPJbfK4o5Blw.mft
Manifest number:          08A8
Signing time:             Thu 21 Dec 2023 05:01:46 +0000
Manifest this update:     Thu 21 Dec 2023 05:01:46 +0000
Manifest next update:     Fri 22 Dec 2023 05:01:46 +0000
Files and hashes:         1: TO4FbAg8xxDDqv-O_xlox_1F-oE.roa (hash: P6mUV83txgndejcAxyktaEeEgmVivYZ1tKbDvbe9WvI=)
                          2: l3Q9NGNWRptLaTlGPJbfK4o5Blw.crl (hash: jq51kwZQ8BiiyPMRE/Lhu88nzT/MFLOzD6BsIii3Kac=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:8a:c0:49:ce:c3:5c:df:46:50:e0:0e:93:a4:57:8b:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97743d346356469b4b6939463c96df2b8a39065c
        Validity
            Not Before: Dec 21 05:01:46 2023 GMT
            Not After : Dec 22 05:01:46 2023 GMT
        Subject: CN=62fb908e6696095506ea8342e2b726ae2664a779
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:90:37:a2:72:f8:3c:9c:1b:af:4a:4d:ac:3c:
                    a5:8b:e7:9b:80:4a:42:d1:e0:30:32:7f:c7:01:fd:
                    ac:af:b9:ad:87:aa:ca:a4:3e:bc:94:ad:55:41:db:
                    36:1f:8b:b9:3c:bb:66:19:b2:f8:8c:83:8d:43:f2:
                    32:be:96:4f:11:06:bf:48:9a:8b:46:c3:f1:f0:c9:
                    bc:32:2b:02:b4:3a:21:80:ea:7a:32:a5:ca:9a:1e:
                    df:67:41:5b:e1:71:c2:f6:b1:1e:5b:d5:fb:a9:a0:
                    a1:9d:26:3d:6d:2b:2a:c6:8f:eb:76:60:89:02:96:
                    33:8f:9f:dc:78:85:c5:6a:2e:fe:3d:0c:dc:08:d8:
                    69:ba:90:6d:61:3a:dd:b4:56:37:6d:3c:9c:45:b7:
                    af:75:04:c1:dd:e7:52:13:6d:4f:e8:6a:28:24:d4:
                    79:1c:8b:e4:0e:28:db:62:12:91:bd:c5:9a:b1:cb:
                    76:79:d8:f4:3f:c0:b9:38:f1:00:34:d6:ae:8f:bb:
                    2d:6d:34:96:2b:7e:66:0c:0e:65:b3:46:9d:f3:61:
                    50:c3:31:ab:60:bc:28:55:4f:9a:7b:35:95:b8:3d:
                    db:5c:3d:09:36:57:ff:e6:15:3b:a7:2e:f5:7b:17:
                    af:45:ec:5e:d3:1e:a9:81:40:70:da:1d:4f:01:1c:
                    95:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:FB:90:8E:66:96:09:55:06:EA:83:42:E2:B7:26:AE:26:64:A7:79
            X509v3 Authority Key Identifier:
                keyid:97:74:3D:34:63:56:46:9B:4B:69:39:46:3C:96:DF:2B:8A:39:06:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3Q9NGNWRptLaTlGPJbfK4o5Blw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/610382-7b89-4f70-a777-71ae5fc126bf/1/l3Q9NGNWRptLaTlGPJbfK4o5Blw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/610382-7b89-4f70-a777-71ae5fc126bf/1/l3Q9NGNWRptLaTlGPJbfK4o5Blw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:93:c5:b1:64:a0:f7:a5:e9:01:9c:69:4a:a9:52:74:04:aa:
         31:66:06:5b:ac:94:91:3e:0b:3a:d0:5c:d3:65:c3:95:86:95:
         a5:1e:63:6b:e3:05:8b:15:b4:8e:74:60:d0:f1:89:8b:0c:3e:
         c9:fc:a0:6f:c0:24:7b:cb:48:49:83:af:95:95:14:63:c3:36:
         2e:5f:20:e4:62:a7:33:be:19:de:dd:ac:dc:73:dd:d8:1c:2a:
         56:2a:b2:96:9a:b7:c2:38:13:df:a3:b8:28:0a:34:35:49:77:
         c0:b2:f6:0f:ed:61:cd:22:b5:60:c9:82:01:79:90:55:02:e8:
         e1:1f:61:14:52:50:04:f5:87:56:16:58:f5:2e:0a:90:69:22:
         ba:de:a1:75:7b:2d:ba:5f:26:13:6f:da:28:8b:e6:88:c2:a0:
         5b:70:dd:21:14:fa:e0:f8:13:77:c5:cb:29:70:54:a7:e5:3c:
         a3:58:26:28:8f:f7:7b:bd:82:1e:67:25:34:29:6e:b8:74:f1:
         a5:38:6f:87:68:d0:c0:9e:c0:71:91:f8:f7:a9:c8:4c:4a:9f:
         01:02:7a:1a:84:bd:dd:21:09:f9:30:82:81:2c:c1:ac:a3:f8:
         85:3c:41:dc:fd:18:17:8d:f8:10:57:28:10:e6:74:1e:36:63:
         05:f9:4a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----