Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/540c3c-9689-46af-b72b-a450d73ee767/1/ntGt4R1hJPnVpE7GQLcMv6Niing.mft
File:                     ntGt4R1hJPnVpE7GQLcMv6Niing.mft (raw, json)
Hash identifier:          g+WYXQHc6LBlXC2leh3SwFfRi0UMM5IsH0U62q6XzSQ=
Subject key identifier:   60:C2:0E:61:20:A1:E5:92:DE:F4:0D:0A:DC:76:0A:5C:BF:2C:72:EA
Authority key identifier: 9E:D1:AD:E1:1D:61:24:F9:D5:A4:4E:C6:40:B7:0C:BF:A3:62:8A:78
Certificate issuer:       /CN=9ed1ade11d6124f9d5a44ec640b70cbfa3628a78
Certificate serial:       018C86AC5B343FD8B59010C7741C98A17C8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ntGt4R1hJPnVpE7GQLcMv6Niing.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/540c3c-9689-46af-b72b-a450d73ee767/1/ntGt4R1hJPnVpE7GQLcMv6Niing.mft
Manifest number:          0C97
Signing time:             Wed 20 Dec 2023 10:01:31 +0000
Manifest this update:     Wed 20 Dec 2023 10:01:31 +0000
Manifest next update:     Thu 21 Dec 2023 10:01:31 +0000
Files and hashes:         1: ntGt4R1hJPnVpE7GQLcMv6Niing.crl (hash: FkhfdKeIKqdXyY1KbMPcRZOyek2v5GdoQQsHQXsQFxI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:86:ac:5b:34:3f:d8:b5:90:10:c7:74:1c:98:a1:7c:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ed1ade11d6124f9d5a44ec640b70cbfa3628a78
        Validity
            Not Before: Dec 20 10:01:31 2023 GMT
            Not After : Dec 21 10:01:31 2023 GMT
        Subject: CN=60c20e6120a1e592def40d0adc760a5cbf2c72ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:61:cf:45:fb:53:5b:21:2c:c2:6f:3b:78:9a:
                    e1:6e:26:66:ab:b9:ab:ad:99:17:29:c0:57:88:3a:
                    b2:bf:4b:f6:46:b9:23:45:61:a1:89:d7:80:69:d6:
                    b0:41:39:0b:5f:1f:44:2b:16:2e:30:e1:8f:d9:8d:
                    30:20:a6:84:32:88:ee:07:57:cd:bc:0f:3f:96:44:
                    bf:f7:00:0e:f0:f9:ce:84:69:ba:b8:2c:ca:f9:70:
                    c9:57:66:e8:8b:d0:05:83:5b:70:db:50:3d:99:e0:
                    77:56:50:e5:a4:13:55:f8:ca:74:83:ac:bc:58:03:
                    b5:d4:0e:da:0e:02:9f:fc:3e:75:6e:5b:3e:ef:d0:
                    46:f0:fd:38:86:b3:5c:78:9b:a6:56:53:8e:87:f6:
                    97:64:02:9b:4f:8c:da:39:ce:9d:e3:30:c9:d7:8f:
                    91:d9:e9:45:87:a1:8f:aa:4a:a4:8f:8e:16:f0:35:
                    ab:9f:3c:13:43:3f:38:14:ce:f8:f6:54:7d:ac:c2:
                    0c:3d:66:d1:87:3f:9e:ef:82:0d:87:16:e1:57:48:
                    68:b7:07:35:df:f4:1e:7d:c4:73:0e:12:fc:7b:54:
                    e8:c9:bd:73:fb:7d:17:be:0c:0d:a8:59:b6:0c:16:
                    b6:a5:1a:96:e9:3d:03:68:59:74:06:77:7b:36:20:
                    d7:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:C2:0E:61:20:A1:E5:92:DE:F4:0D:0A:DC:76:0A:5C:BF:2C:72:EA
            X509v3 Authority Key Identifier:
                keyid:9E:D1:AD:E1:1D:61:24:F9:D5:A4:4E:C6:40:B7:0C:BF:A3:62:8A:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ntGt4R1hJPnVpE7GQLcMv6Niing.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/540c3c-9689-46af-b72b-a450d73ee767/1/ntGt4R1hJPnVpE7GQLcMv6Niing.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/540c3c-9689-46af-b72b-a450d73ee767/1/ntGt4R1hJPnVpE7GQLcMv6Niing.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:f7:57:de:59:7c:bf:4b:48:73:0b:2a:b9:be:50:12:c0:89:
         77:71:06:38:b2:9f:88:1b:3d:ce:44:02:45:df:e2:36:29:b5:
         cb:0e:08:46:a0:32:c9:f5:da:75:8c:cc:73:24:7e:ae:2a:31:
         c3:2b:79:4a:9d:42:40:9b:9b:5b:50:78:85:0a:72:c1:1a:02:
         3a:72:24:73:6a:0b:2f:ca:ce:5b:80:77:62:0b:8f:bd:d3:d6:
         ce:f1:c0:43:d8:7b:9c:d9:14:4e:00:4b:b0:05:c0:11:25:15:
         91:14:91:18:cc:d3:eb:1f:e1:13:7d:2f:d2:d3:fd:5f:c5:26:
         28:25:e9:51:93:d3:d2:8b:34:38:7b:82:a2:7a:4e:8d:26:c7:
         cd:30:11:93:58:65:82:69:29:60:30:f3:c9:0b:00:89:90:f3:
         ca:0f:07:69:e3:5f:f9:c2:78:b7:3b:95:3b:3b:a5:5f:92:c6:
         3c:07:d0:e0:fa:d9:d3:a6:90:3a:5c:27:5c:49:b3:9d:32:9a:
         7c:fb:e6:97:76:e7:6d:e6:67:7c:8c:b4:60:64:88:2e:c0:7e:
         96:0f:1c:2a:e4:19:97:a2:07:6c:f9:7a:ef:9c:a2:59:07:50:
         34:51:fa:26:3f:d3:17:ba:1a:dd:c7:70:a4:89:05:64:31:45:
         c8:33:bd:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----