Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/2e9456-37c3-4274-bc31-64ee464b6404/1/Ox-NqcsONixCQZayDmBOlKg7yFA.mft
File:                     Ox-NqcsONixCQZayDmBOlKg7yFA.mft (raw, json)
Hash identifier:          4UfaJ+97H2oAIBCA5NsjAYStR4uZ9j0JpVjezcVCAUY=
Subject key identifier:   A6:67:C4:22:E4:27:74:9A:6B:B4:09:E1:2D:AB:C9:AB:69:3A:FA:77
Authority key identifier: 3B:1F:8D:A9:CB:0E:36:2C:42:41:96:B2:0E:60:4E:94:A8:3B:C8:50
Certificate issuer:       /CN=3b1f8da9cb0e362c424196b20e604e94a83bc850
Certificate serial:       0189FC808C0A1583A2BA69A7F1D9E3A7BB7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ox-NqcsONixCQZayDmBOlKg7yFA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/2e9456-37c3-4274-bc31-64ee464b6404/1/Ox-NqcsONixCQZayDmBOlKg7yFA.mft
Manifest number:          0869
Signing time:             Wed 16 Aug 2023 04:00:29 +0000
Manifest this update:     Wed 16 Aug 2023 04:00:29 +0000
Manifest next update:     Thu 17 Aug 2023 04:00:29 +0000
Files and hashes:         1: Ox-NqcsONixCQZayDmBOlKg7yFA.crl (hash: t/Dlp5O45EAqx91M3WD9EjZyWAdPb0tWZUOJmeGrMgc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:fc:80:8c:0a:15:83:a2:ba:69:a7:f1:d9:e3:a7:bb:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b1f8da9cb0e362c424196b20e604e94a83bc850
        Validity
            Not Before: Aug 16 04:00:29 2023 GMT
            Not After : Aug 17 04:00:29 2023 GMT
        Subject: CN=a667c422e427749a6bb409e12dabc9ab693afa77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:53:14:93:b6:06:dd:50:0f:f0:a7:65:9f:da:
                    e1:22:4d:89:ca:5f:bf:e6:3e:24:40:f2:d6:6b:25:
                    25:66:5a:4d:c7:fd:bb:c6:2a:eb:97:49:bd:de:b7:
                    18:b8:db:0b:74:b3:33:38:1f:83:d3:4c:f9:2d:ea:
                    6c:0f:8a:1e:d7:57:96:ea:43:31:c7:1d:5f:9e:e1:
                    81:ff:df:a5:25:b5:3e:74:45:07:c5:95:43:83:09:
                    e6:24:66:8b:da:cc:63:49:7d:54:3e:f9:48:b2:66:
                    c3:17:7f:ff:76:bc:35:bf:79:09:7b:99:61:82:36:
                    c7:a8:23:b1:64:89:de:ae:8d:b9:fa:22:be:85:3c:
                    90:fb:25:b3:11:8c:56:11:3b:55:23:bc:82:96:50:
                    00:b0:fb:1a:fa:ab:09:fd:80:38:2d:91:15:b1:89:
                    66:1c:69:2c:15:00:0e:f4:00:03:ef:f1:23:1e:0b:
                    ce:cd:5c:fe:3a:da:b4:d5:25:0b:71:dd:77:fe:a1:
                    32:b0:d7:2f:2c:51:ab:3e:03:d9:bc:e0:83:b9:61:
                    d0:0f:3b:b8:5b:11:f7:da:99:fd:6d:61:12:68:69:
                    b1:5f:4a:ac:bc:e2:0e:7f:9c:0a:88:6d:24:6b:ac:
                    be:f8:9c:90:85:f8:73:90:af:97:33:8a:00:7a:4e:
                    40:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:67:C4:22:E4:27:74:9A:6B:B4:09:E1:2D:AB:C9:AB:69:3A:FA:77
            X509v3 Authority Key Identifier:
                keyid:3B:1F:8D:A9:CB:0E:36:2C:42:41:96:B2:0E:60:4E:94:A8:3B:C8:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ox-NqcsONixCQZayDmBOlKg7yFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/2e9456-37c3-4274-bc31-64ee464b6404/1/Ox-NqcsONixCQZayDmBOlKg7yFA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/2e9456-37c3-4274-bc31-64ee464b6404/1/Ox-NqcsONixCQZayDmBOlKg7yFA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:50:82:62:1e:21:bf:86:46:34:69:71:f2:52:d1:db:99:9b:
         83:9a:8e:a1:3d:3c:ac:40:e5:0e:59:e8:5c:47:ad:15:3b:81:
         e5:f7:9b:76:d3:29:44:9c:95:77:a0:17:bf:42:7b:dd:d5:c7:
         6f:d8:93:d3:2c:88:d6:36:a7:18:50:0a:eb:ea:45:12:7d:88:
         cd:a4:9c:a8:6b:73:02:e5:ea:bd:3a:ff:89:b6:bf:65:df:70:
         bf:cb:c5:2e:c1:3f:57:a7:28:68:4a:5e:e9:93:37:9b:55:12:
         9c:9e:9c:2a:0f:93:a2:21:81:b6:01:cf:61:28:0d:31:bb:4a:
         d1:7b:fc:9b:d5:9c:0c:c3:e9:91:f5:cd:db:33:44:d1:37:ee:
         1b:75:2f:10:a8:2e:f6:31:52:be:0f:c7:98:86:1a:97:a2:94:
         66:d8:a2:31:9b:f0:fb:0c:bf:2e:a3:ca:f9:6e:32:b3:b6:42:
         9b:5b:c9:e1:78:46:7e:0d:78:a4:c4:79:d2:37:f4:2c:5a:cd:
         a1:31:b8:33:75:9d:02:db:74:3b:57:20:c3:fa:ae:c0:4e:d5:
         97:10:e0:8e:6e:77:d8:6f:a5:3b:e5:b1:20:84:4d:c3:65:ae:
         0d:7d:87:6f:1a:e2:a3:60:86:03:3b:4b:83:d4:9b:03:f5:5a:
         00:ce:3d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----