Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/f57ac9-ede3-4c55-83c5-a4e0a74f52f8/1/uq2i-ppfoh_LFg2RQdMZedULMFw.mft
File:                     uq2i-ppfoh_LFg2RQdMZedULMFw.mft (raw, json)
Hash identifier:          TifXXQMCyGbali6Mad9SgqnNv8txmtgtxkz7ELvMW4Y=
Subject key identifier:   CD:98:48:4F:E3:15:C7:E4:D3:38:2D:CF:A8:5E:39:CC:02:29:94:62
Authority key identifier: BA:AD:A2:FA:9A:5F:A2:1F:CB:16:0D:91:41:D3:19:79:D5:0B:30:5C
Certificate issuer:       /CN=baada2fa9a5fa21fcb160d9141d31979d50b305c
Certificate serial:       018BD12448BBF76BB48348A9C1AB2D52B2BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uq2i-ppfoh_LFg2RQdMZedULMFw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/f57ac9-ede3-4c55-83c5-a4e0a74f52f8/1/uq2i-ppfoh_LFg2RQdMZedULMFw.mft
Manifest number:          0847
Signing time:             Wed 15 Nov 2023 04:01:37 +0000
Manifest this update:     Wed 15 Nov 2023 04:01:37 +0000
Manifest next update:     Thu 16 Nov 2023 04:01:37 +0000
Files and hashes:         1: G_ZkfGV1DMLrZL3OBHAk5MtdW_U.roa (hash: 1pDl96gbL9SGp/8QdkXU34a+ZAVaJK6kFFPAAbw6/Zc=)
                          2: uq2i-ppfoh_LFg2RQdMZedULMFw.crl (hash: SDM8bGg4l6L704z34yiAH3Ux1uu1NjDeQMz+op2b9tg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:d1:24:48:bb:f7:6b:b4:83:48:a9:c1:ab:2d:52:b2:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=baada2fa9a5fa21fcb160d9141d31979d50b305c
        Validity
            Not Before: Nov 15 04:01:37 2023 GMT
            Not After : Nov 16 04:01:37 2023 GMT
        Subject: CN=cd98484fe315c7e4d3382dcfa85e39cc02299462
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:54:83:99:99:ae:e1:51:e5:d0:ac:02:ab:0d:
                    5e:6f:04:a4:96:68:a9:a7:72:4f:7a:ce:6a:9d:08:
                    a6:d0:99:c4:8b:cd:65:d2:de:96:1b:bc:76:18:6c:
                    bf:7b:e7:24:46:a4:86:b5:65:6c:06:d3:89:3a:8d:
                    54:dd:c6:9a:b5:4a:ae:c6:71:d1:84:b7:d1:51:f2:
                    ec:71:a6:8e:fd:37:56:01:16:be:06:5e:3d:07:01:
                    14:e0:68:98:7a:8e:be:ea:13:bf:c6:4a:32:fc:db:
                    41:00:8a:e0:63:76:8c:7d:4b:08:d3:12:26:02:bd:
                    c8:69:c9:9c:f4:81:fa:0f:5c:66:4f:9a:d1:fa:f1:
                    c6:5e:1d:2a:9e:8e:13:27:65:92:3e:51:3b:1f:32:
                    bd:14:43:9e:7d:fe:31:62:aa:40:ea:76:c0:7d:d4:
                    43:d6:6b:f3:1d:aa:56:1b:94:13:1e:8c:2c:c8:28:
                    b6:5a:fe:b2:fa:3e:3f:b5:b5:72:1a:02:32:c3:2e:
                    3b:ac:13:4d:69:52:36:e0:41:da:21:57:49:c4:86:
                    18:96:af:99:0a:14:3a:a8:6d:8f:83:91:4a:ec:7c:
                    56:d5:9e:58:e4:67:7b:fb:fb:b8:93:fe:d1:e5:db:
                    22:21:7f:67:09:6f:4f:36:81:02:ff:ec:48:08:cd:
                    a4:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:98:48:4F:E3:15:C7:E4:D3:38:2D:CF:A8:5E:39:CC:02:29:94:62
            X509v3 Authority Key Identifier:
                keyid:BA:AD:A2:FA:9A:5F:A2:1F:CB:16:0D:91:41:D3:19:79:D5:0B:30:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uq2i-ppfoh_LFg2RQdMZedULMFw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f57ac9-ede3-4c55-83c5-a4e0a74f52f8/1/uq2i-ppfoh_LFg2RQdMZedULMFw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f57ac9-ede3-4c55-83c5-a4e0a74f52f8/1/uq2i-ppfoh_LFg2RQdMZedULMFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:76:dd:8e:33:e6:ec:4a:74:40:be:05:6c:ea:39:45:55:7f:
         e2:1a:c2:92:91:99:df:75:11:17:ce:7d:dc:3c:94:d7:c7:9e:
         42:0d:48:e2:0c:53:34:6b:c9:71:74:84:c7:71:ce:0e:c8:35:
         01:07:67:52:46:10:af:f0:82:49:98:f3:69:74:20:3f:28:f5:
         80:bb:1a:a0:75:8e:20:59:72:5f:e0:29:ae:f0:5a:f1:22:5c:
         0d:8e:68:e0:38:81:4f:5e:1a:bf:8d:87:2a:39:03:c6:c8:30:
         68:b3:13:84:04:4d:f5:4e:c8:8a:7f:35:c3:32:0c:26:d3:a4:
         b9:73:60:19:a1:6a:1c:6a:4b:b5:4a:2e:03:28:e3:c0:5d:61:
         0b:18:72:e7:7b:7a:1d:37:65:ab:08:e4:3a:bf:a9:ac:e8:29:
         df:74:23:c2:e0:de:e6:03:8f:29:bc:12:c4:1f:11:1f:c5:2c:
         64:e0:ef:ba:5c:83:37:90:60:85:ff:a2:d3:bd:33:28:59:9f:
         a6:80:c8:d3:d8:0f:26:41:d5:16:d4:ad:4b:cd:79:36:d2:de:
         08:3a:8a:1b:7e:e3:20:e4:86:d4:7f:2d:62:e1:e5:88:6c:8e:
         d5:ab:86:ca:d2:65:bc:f4:9b:27:6b:3e:32:82:64:3f:d4:cb:
         5c:45:9f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----