Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/82ab60-910e-4772-a722-68948f1d3efa/1/MAqwpALjzkE7R0HPOgo2Y45MJpk.mft
File:                     MAqwpALjzkE7R0HPOgo2Y45MJpk.mft (raw, json)
Hash identifier:          nQWRB9BCxEAzYO42aFgj5k7JDVvIunQGb/mjwQxhQdo=
Subject key identifier:   3A:A8:C5:FD:77:47:09:A7:90:C3:1F:5F:75:43:EB:FA:E3:18:17:92
Authority key identifier: 30:0A:B0:A4:02:E3:CE:41:3B:47:41:CF:3A:0A:36:63:8E:4C:26:99
Certificate issuer:       /CN=300ab0a402e3ce413b4741cf3a0a36638e4c2699
Certificate serial:       01879D6F0A95092A5B236638C39652DE2EC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MAqwpALjzkE7R0HPOgo2Y45MJpk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/82ab60-910e-4772-a722-68948f1d3efa/1/MAqwpALjzkE7R0HPOgo2Y45MJpk.mft
Manifest number:          0D3A
Signing time:             Thu 20 Apr 2023 06:51:52 +0000
Manifest this update:     Thu 20 Apr 2023 06:51:52 +0000
Manifest next update:     Fri 21 Apr 2023 06:51:52 +0000
Files and hashes:         1: MAqwpALjzkE7R0HPOgo2Y45MJpk.crl (hash: 7EMZ464UST1khZNZM8OxI8fQoH9Vv9YIZT4obusSxpQ=)
                          2: kVeE_XPOq56pIVcY80jyElc_CU8.roa (hash: 3Fg4Xr9oEknC+7VM/dY9FfckUOECXzeQOdF2DQN9ops=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:9d:6f:0a:95:09:2a:5b:23:66:38:c3:96:52:de:2e:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=300ab0a402e3ce413b4741cf3a0a36638e4c2699
        Validity
            Not Before: Apr 20 06:51:52 2023 GMT
            Not After : Apr 21 06:51:52 2023 GMT
        Subject: CN=3aa8c5fd774709a790c31f5f7543ebfae3181792
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:a2:6a:7f:b7:07:f0:b5:de:b1:b9:76:65:f3:
                    c1:dc:96:3e:e9:76:c2:64:5a:ac:f6:ee:ad:f6:80:
                    24:99:7a:9f:d8:02:8c:96:da:9f:09:42:36:e4:ff:
                    8e:b3:ab:26:bf:90:28:65:a7:b1:72:91:62:17:df:
                    af:32:59:45:6f:17:73:e4:f1:5c:f3:67:db:60:93:
                    00:ae:8b:49:1f:68:8d:8c:e3:55:c7:56:3c:0d:ed:
                    59:b3:cc:5b:13:dc:ec:86:c5:a0:8c:66:dd:68:ea:
                    ca:28:21:c8:8f:1b:13:f9:46:72:7b:c0:60:88:6b:
                    bd:40:dc:47:51:4d:6b:28:ea:f4:2c:72:68:cd:15:
                    d7:9f:fe:89:82:dc:82:27:0c:7d:3b:e0:00:76:2c:
                    2b:26:99:ef:28:e6:95:64:5d:5a:b7:bd:8b:4e:1b:
                    4e:c2:1b:cd:d8:0f:d6:2d:8d:9b:b7:5e:b3:89:00:
                    5f:59:d5:2d:8c:14:b2:04:f1:7a:d2:db:67:d1:96:
                    63:d1:90:12:2e:84:bb:f5:ff:90:c7:8f:02:ec:0f:
                    94:17:1c:42:ae:e0:3e:15:66:99:fc:1f:09:47:d4:
                    2e:2d:21:fd:5f:3d:4d:74:85:d9:ec:ff:06:fd:f9:
                    f9:e4:72:6b:ef:39:3f:be:25:74:a6:a6:d8:28:87:
                    d1:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:A8:C5:FD:77:47:09:A7:90:C3:1F:5F:75:43:EB:FA:E3:18:17:92
            X509v3 Authority Key Identifier:
                keyid:30:0A:B0:A4:02:E3:CE:41:3B:47:41:CF:3A:0A:36:63:8E:4C:26:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MAqwpALjzkE7R0HPOgo2Y45MJpk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/82ab60-910e-4772-a722-68948f1d3efa/1/MAqwpALjzkE7R0HPOgo2Y45MJpk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/82ab60-910e-4772-a722-68948f1d3efa/1/MAqwpALjzkE7R0HPOgo2Y45MJpk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:59:e3:3c:8e:be:b7:f3:76:a9:6f:17:7a:c9:66:e0:03:c0:
         b3:07:41:1f:b9:9c:8d:de:35:8f:73:9b:5d:ae:3a:01:77:55:
         fc:2b:71:60:1e:46:f9:41:ef:e2:2b:72:ca:51:80:00:9c:1a:
         57:f4:d4:40:bb:d4:ac:33:66:09:78:0f:d9:34:a1:24:51:03:
         c3:f6:39:91:9e:fe:61:49:37:b7:e9:e0:ad:04:8c:44:a7:8a:
         c7:40:cc:ec:05:a4:0d:01:c3:36:72:00:3b:26:6b:d6:3c:d9:
         c1:a9:a3:80:87:42:56:b9:f4:69:de:ff:da:98:0b:d6:c3:b8:
         68:bc:e6:be:4b:40:27:c6:44:fb:74:51:a0:61:b1:5f:a0:de:
         a0:59:ec:23:5c:72:dc:eb:41:8e:b0:6a:8c:d6:30:b1:10:ef:
         c4:aa:00:67:83:a8:b0:13:81:5e:71:72:e9:7b:4f:62:62:82:
         d7:0f:63:7f:6c:7a:1e:d2:55:a6:5d:0d:74:ce:a3:c2:c6:09:
         4b:7e:75:a8:6b:b9:19:50:fe:52:8a:03:ee:bd:c9:6b:d2:6c:
         02:14:cf:b2:fe:5a:2d:fa:9d:2e:d9:58:fe:bd:31:71:30:f0:
         72:6f:93:5a:14:7f:b1:c2:bb:db:fe:3c:2d:ed:70:cc:8c:ac:
         03:c0:76:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----