Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/ff8d2d-cef9-4266-8cda-56902bea0b6e/1/QAqnHkqm4JDHN7JgpPokYB4gSyc.mft
File:                     QAqnHkqm4JDHN7JgpPokYB4gSyc.mft (raw, json)
Hash identifier:          kI7KKX7ubwTplDyJucNq7eFaRA/ixw/V1SwpLq4z8ik=
Subject key identifier:   D8:D2:34:A7:1D:A9:22:CC:ED:F9:15:A9:9B:19:0E:BC:C2:6B:FB:25
Authority key identifier: 40:0A:A7:1E:4A:A6:E0:90:C7:37:B2:60:A4:FA:24:60:1E:20:4B:27
Certificate issuer:       /CN=400aa71e4aa6e090c737b260a4fa24601e204b27
Certificate serial:       018A12B7C3D124350D7B692C4F68705F52EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QAqnHkqm4JDHN7JgpPokYB4gSyc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/ff8d2d-cef9-4266-8cda-56902bea0b6e/1/QAqnHkqm4JDHN7JgpPokYB4gSyc.mft
Manifest number:          73
Signing time:             Sun 20 Aug 2023 11:32:27 +0000
Manifest this update:     Sun 20 Aug 2023 11:32:27 +0000
Manifest next update:     Mon 21 Aug 2023 11:32:27 +0000
Files and hashes:         1: QAqnHkqm4JDHN7JgpPokYB4gSyc.crl (hash: 6ma9i0uhnvEsKE5FE72yWA+dFYVboD2IWe6aTnuNEE8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:12:b7:c3:d1:24:35:0d:7b:69:2c:4f:68:70:5f:52:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=400aa71e4aa6e090c737b260a4fa24601e204b27
        Validity
            Not Before: Aug 20 11:32:27 2023 GMT
            Not After : Aug 21 11:32:27 2023 GMT
        Subject: CN=d8d234a71da922ccedf915a99b190ebcc26bfb25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d6:48:ed:3e:f2:59:fa:d2:e7:c6:30:f9:a5:
                    19:8d:48:d0:49:75:53:53:18:23:ae:e9:f3:2a:e0:
                    73:6c:59:a5:23:9d:18:36:df:db:16:d2:f4:6a:40:
                    61:6b:5a:ef:53:a3:65:5d:5e:16:50:a6:04:13:21:
                    dc:2f:3b:4c:34:24:f1:2e:f1:1f:82:34:90:ff:6a:
                    56:b3:5d:68:36:18:05:9c:98:ff:da:d0:87:56:21:
                    fa:51:e3:6d:80:2e:3e:46:6c:32:4f:16:fa:c1:dc:
                    2a:f6:c1:46:33:25:74:f3:5e:2a:d8:05:19:1d:0a:
                    ed:51:0b:2d:c5:8f:63:0a:66:7d:99:90:30:fe:21:
                    7f:c4:73:fb:e5:15:f8:a7:11:d7:95:a0:a5:3e:53:
                    15:10:42:97:65:67:69:a1:45:b9:f9:65:b3:81:32:
                    8a:bd:ec:46:e2:a6:29:6f:20:5a:f0:50:20:ec:93:
                    17:22:07:62:d9:59:90:d1:fd:e3:2e:44:e8:e8:53:
                    c4:a5:ff:ed:4c:28:de:5e:69:01:a7:c3:88:e2:2e:
                    9e:5f:5a:0b:74:6c:4e:c1:5e:91:30:b6:a9:f9:6e:
                    40:cc:f2:db:7b:e4:22:26:ef:d8:79:82:8f:82:ed:
                    9b:ed:f0:62:fd:6f:8a:3c:9e:55:23:59:bc:bc:95:
                    10:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:D2:34:A7:1D:A9:22:CC:ED:F9:15:A9:9B:19:0E:BC:C2:6B:FB:25
            X509v3 Authority Key Identifier:
                keyid:40:0A:A7:1E:4A:A6:E0:90:C7:37:B2:60:A4:FA:24:60:1E:20:4B:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QAqnHkqm4JDHN7JgpPokYB4gSyc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ff8d2d-cef9-4266-8cda-56902bea0b6e/1/QAqnHkqm4JDHN7JgpPokYB4gSyc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ff8d2d-cef9-4266-8cda-56902bea0b6e/1/QAqnHkqm4JDHN7JgpPokYB4gSyc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:26:a6:2a:59:52:64:1d:e1:28:e2:66:3a:06:6f:b4:12:a8:
         f6:1d:39:8c:8b:d7:9b:08:93:be:08:1a:ec:96:82:27:28:8a:
         67:ee:d2:61:35:86:a1:1f:79:8c:d7:c9:42:01:7d:28:82:85:
         f4:8d:1f:49:b1:a0:c9:f1:ad:7d:46:63:9d:38:f7:25:e9:47:
         3f:e0:8d:b2:17:a4:c6:4b:93:11:24:80:ad:d3:fb:3d:3f:49:
         7b:b0:33:a0:e1:06:2d:c5:a8:30:ad:9f:c5:96:1c:86:02:1c:
         c2:ab:3d:60:47:cb:d4:52:85:83:68:31:1a:fb:4c:c2:b7:06:
         d6:04:2a:be:1f:6c:f9:5b:ad:ea:91:4f:52:61:6b:5a:36:02:
         8e:e8:45:73:06:0a:dd:2e:2f:ba:cd:ab:6e:6b:68:68:b1:7c:
         45:28:44:c5:1e:7e:e7:cb:4c:64:26:74:88:56:5d:48:01:0d:
         6e:16:fd:14:e0:ea:c0:63:4c:c8:22:88:f6:60:f1:2b:c5:01:
         d7:ea:e2:3e:3b:c3:81:50:e9:94:aa:ac:33:57:c6:e3:27:ed:
         1d:83:0b:49:76:07:01:09:20:ce:00:34:bd:2a:84:b2:1b:5f:
         37:84:53:5a:62:36:c0:5e:e3:03:c8:52:9a:4e:ad:a5:5f:be:
         b4:c5:d2:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----