Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/qE4-G-zzC0SkaYFf0PjAacVi-ZY.mft
File:                     qE4-G-zzC0SkaYFf0PjAacVi-ZY.mft (raw, json)
Hash identifier:          c9zEwKMTV6Uwvv14rp7mEUVtZGHA20MZQtXiDsu+mH8=
Subject key identifier:   D5:2F:89:04:3D:B0:02:6E:BA:05:6B:EC:D6:32:91:A7:B3:E8:6D:D8
Authority key identifier: A8:4E:3E:1B:EC:F3:0B:44:A4:69:81:5F:D0:F8:C0:69:C5:62:F9:96
Certificate issuer:       /CN=a84e3e1becf30b44a469815fd0f8c069c562f996
Certificate serial:       018BA7B949156FAFFE937D4DD47B78A0665C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qE4-G-zzC0SkaYFf0PjAacVi-ZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/qE4-G-zzC0SkaYFf0PjAacVi-ZY.mft
Manifest number:          01E6
Signing time:             Tue 07 Nov 2023 03:00:19 +0000
Manifest this update:     Tue 07 Nov 2023 03:00:19 +0000
Manifest next update:     Wed 08 Nov 2023 03:00:19 +0000
Files and hashes:         1: 88jR03WFR6s74xUFqRK9_sF0Gws.roa (hash: WjRZHkWue3gD9jGA6ikeme61fgKJgb6TS3e2yuYR2NA=)
                          2: FI7Z6yvyxDFRqlHMsOLt6qmVJXA.roa (hash: PLzLUFpzsOFgbqzgH46w2dwNTziPEejDroZh60hsXdQ=)
                          3: K96_AOWKgkKZdHJ9ane8UdRb5Sw.roa (hash: zREZvoItfcA93n89RVfS/RVFz4iZrqtpBKPkhtfCKUk=)
                          4: ZjeNlcWBudEdSLjshKKHqmFZ9ls.roa (hash: gjoOKBoQR4q/aRbaUsRk5cUyA6R9yBs2MMQlmFuB4/k=)
                          5: i7PbseldxKF0r8BCCswEYkAUmFE.roa (hash: wpsgdMrlYXm4+ZrosxpXCe4eyIHa0kN+hb4CrulkWKQ=)
                          6: qE4-G-zzC0SkaYFf0PjAacVi-ZY.crl (hash: YLzBdkeJZVI8xsxwsb8igatQ1tE9KiNYXz2ez537meM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:a7:b9:49:15:6f:af:fe:93:7d:4d:d4:7b:78:a0:66:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a84e3e1becf30b44a469815fd0f8c069c562f996
        Validity
            Not Before: Nov  7 03:00:19 2023 GMT
            Not After : Nov  8 03:00:19 2023 GMT
        Subject: CN=d52f89043db0026eba056becd63291a7b3e86dd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:eb:d9:fd:5b:d5:ba:0d:30:90:5f:68:3a:3a:
                    8d:a5:79:58:86:43:2d:12:00:c6:7f:e9:af:7a:c7:
                    11:64:be:33:84:82:bc:e8:85:97:59:23:9d:31:5d:
                    1e:54:63:fb:93:b4:45:f9:f5:83:0f:98:69:53:ff:
                    82:18:00:94:06:e7:a0:b7:d2:f1:d8:e8:d6:3c:1e:
                    a9:f0:cf:d6:d9:0f:b4:ce:7b:35:43:8f:a8:4a:79:
                    af:85:1f:98:9c:33:5b:fc:94:96:85:f4:4b:c6:26:
                    0f:80:77:c2:98:9a:24:b2:7b:03:ad:cb:ef:7d:59:
                    19:37:cb:2d:d7:ba:85:d5:78:9f:3d:32:11:25:62:
                    2c:63:71:3d:e0:d9:76:57:6a:52:18:a1:e2:82:8b:
                    d9:90:03:2e:a8:3e:be:64:d0:4a:26:34:0f:33:5d:
                    82:bb:e6:4d:b3:80:46:b1:9f:a1:e7:ab:30:c3:46:
                    6b:bc:00:46:3b:4a:c8:2a:94:e6:48:aa:24:34:00:
                    07:9e:6d:42:7e:6d:69:a6:94:e2:6d:a6:f8:59:e9:
                    a4:c7:4d:18:66:26:49:70:86:b5:8c:59:3e:10:e9:
                    e9:f5:d0:c1:6f:06:f0:92:6a:0c:89:cf:70:ae:57:
                    e5:45:df:92:99:f6:0e:00:c9:70:b3:0b:03:82:0f:
                    4d:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:2F:89:04:3D:B0:02:6E:BA:05:6B:EC:D6:32:91:A7:B3:E8:6D:D8
            X509v3 Authority Key Identifier:
                keyid:A8:4E:3E:1B:EC:F3:0B:44:A4:69:81:5F:D0:F8:C0:69:C5:62:F9:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qE4-G-zzC0SkaYFf0PjAacVi-ZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/qE4-G-zzC0SkaYFf0PjAacVi-ZY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9ddebe-372f-4258-ba0f-cc4fe6323fec/1/qE4-G-zzC0SkaYFf0PjAacVi-ZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:2c:4d:98:21:ed:91:ff:8a:53:7a:88:63:54:2d:a5:e7:05:
         e5:64:6b:e4:c8:bc:3c:a7:29:1f:67:4a:a0:2b:db:44:1b:be:
         03:61:93:25:33:b4:4a:e1:77:80:84:fd:4c:c6:15:a4:b0:95:
         1a:20:84:41:54:d7:c0:12:d0:b6:4d:da:1b:de:8f:28:cb:16:
         77:9c:78:1e:86:cc:f7:70:0f:35:34:c8:98:fe:fe:3e:85:fd:
         2c:a0:bd:15:d9:c7:c2:70:b7:3a:2c:6c:5d:56:78:aa:2d:52:
         08:da:18:ad:c8:db:6c:53:26:96:82:a6:59:ab:8e:c7:52:97:
         2b:bd:3b:2a:7f:40:50:5b:1e:d2:85:dc:26:25:eb:50:bb:5e:
         fd:10:3e:b7:7e:aa:e9:ef:b0:3b:25:ff:0f:84:12:a9:28:3a:
         b7:ff:c8:1a:3e:bd:c8:6a:85:a2:17:3c:3d:1a:b4:8a:2f:a4:
         e0:df:62:eb:72:0a:cc:c6:5a:fc:07:4b:dd:fd:30:74:74:d4:
         1d:67:27:f7:ee:85:f4:2a:59:b4:43:1f:78:51:46:03:4b:34:
         24:59:31:0b:ab:ee:23:7b:a4:ca:0a:d0:a1:8c:62:ef:9a:c2:
         2a:e2:48:5b:90:52:33:8a:77:92:3f:a3:73:e2:0b:1d:c8:4d:
         60:75:2e:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----