Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/db02f4-3908-4674-a0c4-0364cbe9bab8/1/Q-bso03HDB8b8cTdGwqCCTs1S3I.mft
File:                     Q-bso03HDB8b8cTdGwqCCTs1S3I.mft (raw, json)
Hash identifier:          zC3vTL0M+0C5C7YghZFuznWccChkuoGuj+Cp3X9KuXQ=
Subject key identifier:   58:27:F8:2A:54:5B:19:D3:96:FD:E0:47:0A:EC:56:7F:D6:D4:25:3B
Authority key identifier: 43:E6:EC:A3:4D:C7:0C:1F:1B:F1:C4:DD:1B:0A:82:09:3B:35:4B:72
Certificate issuer:       /CN=43e6eca34dc70c1f1bf1c4dd1b0a82093b354b72
Certificate serial:       018D58F577D9D39BA534C73C56F10C412813
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q-bso03HDB8b8cTdGwqCCTs1S3I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/db02f4-3908-4674-a0c4-0364cbe9bab8/1/Q-bso03HDB8b8cTdGwqCCTs1S3I.mft
Manifest number:          086F
Signing time:             Tue 30 Jan 2024 06:01:38 +0000
Manifest this update:     Tue 30 Jan 2024 06:01:38 +0000
Manifest next update:     Wed 31 Jan 2024 06:01:38 +0000
Files and hashes:         1: Q-bso03HDB8b8cTdGwqCCTs1S3I.crl (hash: jhq/w7egUAyuqZscNtSg6rXuMf32PPcp3tMGodM96Gk=)
                          2: tMfTjZP8nLQCbWv8dmXe8DBeGd8.roa (hash: RIxZJ/ivhyvbAr/8c7+n+p5X9j4e+zDfx0ZmuMmHkf4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:58:f5:77:d9:d3:9b:a5:34:c7:3c:56:f1:0c:41:28:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43e6eca34dc70c1f1bf1c4dd1b0a82093b354b72
        Validity
            Not Before: Jan 30 06:01:38 2024 GMT
            Not After : Jan 31 06:01:38 2024 GMT
        Subject: CN=5827f82a545b19d396fde0470aec567fd6d4253b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ef:ff:30:4f:be:ca:ea:e6:ae:12:a8:1b:46:
                    22:17:a9:03:7b:68:91:d2:73:31:69:ec:74:32:71:
                    34:5f:3a:95:22:0d:49:51:9b:8b:e7:50:9c:a9:b7:
                    a0:1c:65:63:8a:66:8e:ec:b3:cc:6d:ee:5b:93:e8:
                    0e:bf:a6:7f:dc:b8:47:81:69:ed:0c:1b:b9:99:7b:
                    f8:68:4a:9b:f1:48:93:0a:be:11:a0:34:26:0e:09:
                    b9:11:24:34:eb:d3:69:3e:dd:17:5d:ae:09:58:c4:
                    6c:19:0f:20:d9:18:07:90:49:f8:b3:22:8a:b8:b7:
                    cd:71:26:02:b4:57:e8:3f:6d:2c:3c:75:cc:b3:3d:
                    f6:e2:95:7f:65:2d:f5:e8:3c:f5:b8:3d:58:b0:8d:
                    84:2f:eb:6a:91:06:81:ca:95:ee:c7:b3:7d:06:4f:
                    31:bf:f6:35:e6:0e:60:ae:b2:d6:9e:8f:1e:15:3f:
                    c6:16:f3:5c:b9:e1:da:33:9b:ad:ad:bc:3b:64:b0:
                    f5:41:28:d1:31:4c:df:45:4b:6d:24:a0:f4:ac:46:
                    b6:e0:bd:26:8e:00:a5:7d:90:44:7a:59:52:ce:cf:
                    c5:fb:0b:ba:01:cb:0f:2e:8e:54:2c:49:ed:53:e4:
                    e3:04:ac:71:40:52:19:ad:97:bc:59:56:f8:0d:40:
                    e1:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:27:F8:2A:54:5B:19:D3:96:FD:E0:47:0A:EC:56:7F:D6:D4:25:3B
            X509v3 Authority Key Identifier:
                keyid:43:E6:EC:A3:4D:C7:0C:1F:1B:F1:C4:DD:1B:0A:82:09:3B:35:4B:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q-bso03HDB8b8cTdGwqCCTs1S3I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/db02f4-3908-4674-a0c4-0364cbe9bab8/1/Q-bso03HDB8b8cTdGwqCCTs1S3I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/db02f4-3908-4674-a0c4-0364cbe9bab8/1/Q-bso03HDB8b8cTdGwqCCTs1S3I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:30:77:a4:c1:48:eb:1c:76:c9:aa:c8:9e:3c:d4:c0:f2:5e:
         06:7a:71:4a:66:99:3a:ac:e9:15:5b:f6:2d:f3:eb:f6:15:75:
         93:ad:ea:07:f6:1f:6f:31:e6:cc:a4:79:33:18:0f:99:3a:f8:
         6c:67:0b:ad:8e:f8:57:01:ea:8b:82:28:31:41:28:3c:44:9f:
         75:bc:ef:87:53:f7:fb:59:ab:62:1b:bf:f7:19:ba:22:ee:8e:
         95:e2:e4:57:24:a3:29:1e:19:ac:27:b5:bf:7c:19:a6:0c:c4:
         78:ab:ac:83:0d:9d:23:26:3c:db:62:cb:03:f2:ef:99:89:d6:
         53:9a:ff:0e:dc:eb:f9:a0:20:93:52:cc:72:83:37:05:7c:93:
         09:36:33:a4:4d:78:ca:5b:1b:59:14:4d:c6:92:a6:6a:4e:54:
         c4:82:cc:5d:f3:57:6d:52:b3:4a:f2:dc:ab:11:72:43:22:77:
         6d:48:09:66:71:44:bd:60:57:ee:68:ae:c2:f1:11:2b:6e:6c:
         4e:77:0b:90:1c:fe:90:db:6a:94:5e:74:f0:df:b3:8d:31:00:
         fe:08:a2:8a:6b:06:ec:5e:c3:c1:7d:02:8c:eb:f6:63:79:74:
         40:ad:b4:82:4e:5d:d4:26:ad:6d:ae:ca:88:0d:e5:b8:1b:ac:
         e4:78:68:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----