Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/5cf3fd-e77d-4c82-b4c7-521556be813a/1/QUZ8dpv2atp9V4Cmnc4Tcb6YSd4.mft
File:                     QUZ8dpv2atp9V4Cmnc4Tcb6YSd4.mft (raw, json)
Hash identifier:          5UU65ktSt8pdeVhPn+j/IeUXo9Pprufi8ijlfffO4v8=
Subject key identifier:   04:CA:99:06:7D:8B:64:83:AA:56:60:C5:E1:BC:7F:AD:8E:F2:03:A8
Authority key identifier: 41:46:7C:76:9B:F6:6A:DA:7D:57:80:A6:9D:CE:13:71:BE:98:49:DE
Certificate issuer:       /CN=41467c769bf66ada7d5780a69dce1371be9849de
Certificate serial:       01852EC321842FE31775894D718215A4D6F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QUZ8dpv2atp9V4Cmnc4Tcb6YSd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/5cf3fd-e77d-4c82-b4c7-521556be813a/1/QUZ8dpv2atp9V4Cmnc4Tcb6YSd4.mft
Manifest number:          0BE7
Signing time:             Tue 20 Dec 2022 09:00:17 +0000
Manifest this update:     Tue 20 Dec 2022 09:00:17 +0000
Manifest next update:     Wed 21 Dec 2022 09:00:17 +0000
Files and hashes:         1: QUZ8dpv2atp9V4Cmnc4Tcb6YSd4.crl (hash: 9JxlLcVfB2wjIzgG0GV5bHxWnvOIhgahHLLRVa4rj7w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:2e:c3:21:84:2f:e3:17:75:89:4d:71:82:15:a4:d6:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41467c769bf66ada7d5780a69dce1371be9849de
        Validity
            Not Before: Dec 20 09:00:17 2022 GMT
            Not After : Dec 21 09:00:17 2022 GMT
        Subject: CN=04ca99067d8b6483aa5660c5e1bc7fad8ef203a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:47:5b:5c:aa:61:a3:1b:4d:3a:15:82:3a:93:
                    f0:a4:08:50:eb:64:01:ba:04:4c:1c:8a:b6:fd:c5:
                    e9:04:2e:c1:a3:22:46:27:6c:ec:53:87:93:de:4f:
                    8b:56:fa:9e:12:53:b2:a5:88:8e:a4:28:71:18:a1:
                    61:8f:13:6a:0c:37:92:94:1f:bf:0e:10:0c:9c:68:
                    95:a7:5e:79:e2:4e:09:60:77:9a:53:d8:6a:29:ab:
                    0a:8a:22:4f:df:29:33:8d:a2:ed:fd:4e:c1:2b:c7:
                    86:f9:71:06:0a:ce:8c:87:65:6c:f9:e9:2f:ef:e2:
                    6f:cd:83:96:15:b2:ec:b3:96:e4:23:78:94:7e:23:
                    5a:3a:e4:0b:72:51:d6:c8:2e:0a:9e:27:c3:66:db:
                    5b:28:e9:5c:ab:6a:bf:b3:93:c1:fc:b5:21:f6:36:
                    f1:0d:42:7a:80:bd:3a:d5:23:e4:74:3e:a4:43:9e:
                    b8:a4:ab:ae:34:b2:cd:13:5b:bf:44:9e:11:bf:b1:
                    97:de:73:a5:21:1b:ea:be:ae:96:37:02:c9:af:e9:
                    0d:87:89:1d:e5:19:cc:3f:ed:6e:30:1c:c0:52:65:
                    28:40:90:20:e2:14:3d:05:e1:24:3c:e7:1e:0c:31:
                    61:16:ce:ca:26:8f:fa:f1:d1:99:79:78:16:1d:35:
                    5b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:CA:99:06:7D:8B:64:83:AA:56:60:C5:E1:BC:7F:AD:8E:F2:03:A8
            X509v3 Authority Key Identifier:
                keyid:41:46:7C:76:9B:F6:6A:DA:7D:57:80:A6:9D:CE:13:71:BE:98:49:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QUZ8dpv2atp9V4Cmnc4Tcb6YSd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5cf3fd-e77d-4c82-b4c7-521556be813a/1/QUZ8dpv2atp9V4Cmnc4Tcb6YSd4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5cf3fd-e77d-4c82-b4c7-521556be813a/1/QUZ8dpv2atp9V4Cmnc4Tcb6YSd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:f6:a1:f3:cc:27:45:46:47:02:b9:31:e8:14:a0:79:a5:1a:
         6d:06:fa:1d:23:bb:32:9f:48:0f:c7:ef:ba:21:e8:04:e1:b2:
         84:c2:28:54:ae:7c:50:70:35:21:80:46:50:f9:50:bd:dd:44:
         85:11:6e:18:6c:79:2f:d0:63:0b:dc:8e:30:73:1d:80:51:fe:
         2a:77:17:a6:c4:35:e5:74:be:fb:ea:ab:24:52:e5:15:48:50:
         75:4c:1b:75:d6:62:d8:7b:93:85:0e:1a:6f:0c:fc:30:2b:19:
         fe:e3:e4:b2:f9:4a:b2:b7:97:61:3b:4c:3f:af:5c:19:b7:6e:
         6e:79:64:54:7a:af:e1:93:7c:76:1b:cc:b1:63:bc:3b:81:94:
         b2:19:55:cc:d2:8a:28:61:6e:5e:1e:1c:e2:93:2f:4d:97:a9:
         4f:db:d5:71:e4:d8:1c:9b:b0:29:6d:d6:f8:78:4c:d5:47:38:
         2a:e8:42:d9:f3:07:7b:a9:1f:f4:49:fb:27:8f:1b:a0:34:25:
         f0:2e:c3:50:61:9e:5e:50:f9:2a:52:3e:1a:57:bf:cc:05:2c:
         ee:e4:5b:aa:ed:02:33:48:5b:a5:3d:fa:b0:ca:8c:ca:21:ac:
         d4:bf:ea:61:7f:55:a2:22:b5:45:4a:0e:9e:de:af:b2:d5:5d:
         c2:08:8a:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----