Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/977667-a165-495c-a89e-9be8fb47a522/1/q7VYaZIHKXQ4CQy-4Z8CK27quYI.mft
File:                     q7VYaZIHKXQ4CQy-4Z8CK27quYI.mft (raw, json)
Hash identifier:          TFguwdoFIKxiSNmBIo2KLANy0OCrIumbeAYUgLrX170=
Subject key identifier:   98:3B:59:74:ED:49:F5:E7:D4:C0:3E:2B:82:54:67:9B:3C:58:28:3B
Authority key identifier: AB:B5:58:69:92:07:29:74:38:09:0C:BE:E1:9F:02:2B:6E:EA:B9:82
Certificate issuer:       /CN=abb558699207297438090cbee19f022b6eeab982
Certificate serial:       018C57E487C6A451470F67F6D19A6AE4D84F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q7VYaZIHKXQ4CQy-4Z8CK27quYI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/977667-a165-495c-a89e-9be8fb47a522/1/q7VYaZIHKXQ4CQy-4Z8CK27quYI.mft
Manifest number:          082E
Signing time:             Mon 11 Dec 2023 08:00:43 +0000
Manifest this update:     Mon 11 Dec 2023 08:00:43 +0000
Manifest next update:     Tue 12 Dec 2023 08:00:43 +0000
Files and hashes:         1: MiYZAJ2SqYkH6U06gPjQqRSbRiA.roa (hash: YgF0ATi2lG6u2e7J2viveDRJv41+DMFJtbrfZfEgrrw=)
                          2: q7VYaZIHKXQ4CQy-4Z8CK27quYI.crl (hash: lWY2GDq0RtDbndfX5LOeOrkaUzcgg5BJnuKpy0NGXs4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:57:e4:87:c6:a4:51:47:0f:67:f6:d1:9a:6a:e4:d8:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abb558699207297438090cbee19f022b6eeab982
        Validity
            Not Before: Dec 11 08:00:43 2023 GMT
            Not After : Dec 12 08:00:43 2023 GMT
        Subject: CN=983b5974ed49f5e7d4c03e2b8254679b3c58283b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f4:89:6f:50:f1:4f:ac:c0:8b:46:f0:04:11:
                    2d:c3:9e:4d:b3:e6:bb:13:a4:b3:8d:b7:a5:52:01:
                    1f:d6:e6:b2:62:d2:ef:74:1b:13:1c:c3:bf:e7:1f:
                    8e:f4:d8:71:d9:35:d7:33:ed:37:50:d2:11:6d:47:
                    2e:c3:58:e9:89:c6:06:a2:67:b3:a2:99:05:d5:4a:
                    2c:ae:8f:9d:6c:ab:77:8e:e3:9f:ff:e5:3b:ec:8b:
                    a8:5f:d9:04:fd:fe:69:26:ec:19:0d:8b:6c:53:7f:
                    31:0b:9d:47:b5:ff:a1:6e:1b:a2:da:9b:72:2e:94:
                    d1:eb:23:9e:fe:d2:ae:d2:bf:10:16:94:a9:04:e7:
                    91:c4:7d:0c:05:b0:35:ac:93:67:c7:91:b0:01:78:
                    fc:f1:a0:b2:27:47:fe:25:46:91:50:3c:73:99:ef:
                    8f:f0:b6:39:84:68:1f:07:da:03:90:48:ed:3c:f1:
                    fc:6d:d4:a9:2a:d1:1d:0e:df:26:d0:37:a7:e7:8b:
                    74:e9:23:1b:ca:a0:c7:c1:5b:c4:82:5d:7d:f7:73:
                    c1:5c:9a:06:3e:47:04:2c:fd:3a:97:3d:1f:59:d6:
                    c4:7b:0c:3f:3a:0f:2f:73:e7:f1:a3:7a:c1:24:50:
                    87:e1:f8:70:11:e2:ca:10:19:35:6b:b8:b8:28:4c:
                    91:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:3B:59:74:ED:49:F5:E7:D4:C0:3E:2B:82:54:67:9B:3C:58:28:3B
            X509v3 Authority Key Identifier:
                keyid:AB:B5:58:69:92:07:29:74:38:09:0C:BE:E1:9F:02:2B:6E:EA:B9:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q7VYaZIHKXQ4CQy-4Z8CK27quYI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/977667-a165-495c-a89e-9be8fb47a522/1/q7VYaZIHKXQ4CQy-4Z8CK27quYI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/977667-a165-495c-a89e-9be8fb47a522/1/q7VYaZIHKXQ4CQy-4Z8CK27quYI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:18:d8:92:98:c9:3a:fe:5d:50:71:db:50:34:23:e4:98:39:
         ff:c0:94:10:5b:cb:6c:7b:f5:0a:b2:22:6b:1e:63:06:1d:7b:
         35:28:f6:f9:1c:1e:40:e3:8a:45:59:a6:81:01:bd:3a:ca:89:
         d5:ab:c5:06:7d:9f:e1:43:e9:14:9c:7e:bc:11:f1:00:98:40:
         3b:fe:31:09:59:3d:f7:84:f1:fa:49:a5:39:58:30:62:5f:dc:
         46:96:da:a0:67:ec:b9:38:e1:bb:55:c8:2e:95:69:97:84:3d:
         9f:91:a5:99:40:f8:e6:8b:1c:56:b1:b2:5c:43:ac:8c:b0:72:
         e8:c3:c8:82:89:8f:f2:71:7c:1d:61:3f:f2:52:cd:51:3f:96:
         89:b0:a3:37:07:b9:b1:e5:f5:e1:d7:42:a7:89:e2:75:47:54:
         2f:4b:e6:e0:50:98:52:e6:99:82:cb:fb:c3:82:4d:a8:87:50:
         da:b7:f6:4d:f9:e5:d4:03:68:17:0b:49:57:e0:e2:8b:58:f7:
         a0:71:6a:6f:55:c3:dd:af:65:99:35:85:50:d8:16:41:fa:74:
         a4:59:01:06:f6:de:f3:f9:27:b1:78:eb:26:4e:ec:fa:6f:80:
         11:da:f2:ed:72:ec:83:ea:a0:67:17:61:06:40:20:8a:cf:bf:
         72:2d:94:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----