Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ce9779-3ada-4b03-a9ea-662b194869c0/1/lqjXJVLlupQq2dlL2_ECiV6pbuQ.mft
File:                     lqjXJVLlupQq2dlL2_ECiV6pbuQ.mft (raw, json)
Hash identifier:          ZXzrfMaAkPejMxw4SY9OzXa996AMRwwHRtkTK7sj+jc=
Subject key identifier:   EA:80:F6:76:87:1B:AA:B8:2B:09:4F:6B:7C:6D:43:0B:84:6D:6E:6D
Authority key identifier: 96:A8:D7:25:52:E5:BA:94:2A:D9:D9:4B:DB:F1:02:89:5E:A9:6E:E4
Certificate issuer:       /CN=96a8d72552e5ba942ad9d94bdbf102895ea96ee4
Certificate serial:       018BD6B871BA66884B6DD00B42028F4ED667
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lqjXJVLlupQq2dlL2_ECiV6pbuQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/ce9779-3ada-4b03-a9ea-662b194869c0/1/lqjXJVLlupQq2dlL2_ECiV6pbuQ.mft
Manifest number:          0F8E
Signing time:             Thu 16 Nov 2023 06:01:33 +0000
Manifest this update:     Thu 16 Nov 2023 06:01:33 +0000
Manifest next update:     Fri 17 Nov 2023 06:01:33 +0000
Files and hashes:         1: 6KA0T179NK-20PIbAl-TFqQH1m0.roa (hash: yw7aKj1F1A6tD3Da5u03oV0M1RyFKf8EaTIJ0JeIVfU=)
                          2: K_tIJnf2uVJRdbrs9gLpq3Z2YO4.roa (hash: zOmiSicPkCaCYyLrQpVc1KJ5QLd7Yn8FYcW9Cc7Zg1k=)
                          3: ktCcGQUXCBv5IFrNjWRY3opSagc.roa (hash: yzLpzmIh53krBilq3g+ACs87b0QD7a6iTrWFYX/B04A=)
                          4: lqjXJVLlupQq2dlL2_ECiV6pbuQ.crl (hash: eiNGwqMtdKkAQHPtRFSn7cEOAdZ0G3YBnxR2j7vo14s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:d6:b8:71:ba:66:88:4b:6d:d0:0b:42:02:8f:4e:d6:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96a8d72552e5ba942ad9d94bdbf102895ea96ee4
        Validity
            Not Before: Nov 16 06:01:33 2023 GMT
            Not After : Nov 17 06:01:33 2023 GMT
        Subject: CN=ea80f676871baab82b094f6b7c6d430b846d6e6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:6d:dc:3e:6d:f4:ce:a0:7f:ab:eb:dc:95:f6:
                    5b:db:a6:d5:3e:d4:59:e2:5e:cc:0e:69:df:f4:2b:
                    2a:79:0a:26:c4:ed:91:79:fd:18:32:c6:2a:16:c5:
                    e8:a5:56:c7:c5:06:72:fc:34:18:43:ff:00:71:9a:
                    85:20:2d:b2:fd:ec:0c:25:88:4b:c6:48:99:77:2a:
                    ba:d6:57:47:ea:3e:75:74:76:7c:40:7e:28:2e:ad:
                    28:95:ad:93:07:2d:aa:2b:33:99:38:70:16:a8:98:
                    7c:88:bd:22:22:22:1c:be:3e:6d:f3:0e:a1:e3:4c:
                    64:25:1f:ca:8a:3c:8d:c8:00:de:4f:35:8d:79:c5:
                    d2:9d:a2:54:4b:f8:33:9c:7c:75:ee:8a:8b:cf:f4:
                    e8:6e:25:55:7f:e1:e9:1d:3e:34:e7:d7:b2:1b:3e:
                    e2:ec:08:97:1a:f0:7e:54:07:eb:55:83:16:88:85:
                    29:ce:2f:71:a8:7e:fb:e6:b0:f3:6e:07:e5:4c:35:
                    77:56:87:37:0e:c8:d1:6d:0a:d3:bc:76:67:0e:8a:
                    a8:26:54:f6:31:4e:8b:52:a8:5c:03:5e:67:08:87:
                    23:c8:df:e4:6b:d5:15:11:e1:12:cf:37:d5:e6:f8:
                    c6:94:17:e9:ff:3c:d7:7d:51:14:8d:0c:78:0c:75:
                    30:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:80:F6:76:87:1B:AA:B8:2B:09:4F:6B:7C:6D:43:0B:84:6D:6E:6D
            X509v3 Authority Key Identifier:
                keyid:96:A8:D7:25:52:E5:BA:94:2A:D9:D9:4B:DB:F1:02:89:5E:A9:6E:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lqjXJVLlupQq2dlL2_ECiV6pbuQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ce9779-3ada-4b03-a9ea-662b194869c0/1/lqjXJVLlupQq2dlL2_ECiV6pbuQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ce9779-3ada-4b03-a9ea-662b194869c0/1/lqjXJVLlupQq2dlL2_ECiV6pbuQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:08:74:83:c2:93:18:da:58:a5:b8:ca:20:bd:2c:a9:58:70:
         7f:c7:e1:7c:40:58:9b:61:c3:13:3c:88:11:64:26:27:79:50:
         84:5e:7b:4a:74:cb:e3:5a:06:1a:38:59:4c:b8:0b:32:2f:89:
         c8:dd:7e:6d:a5:15:5b:ab:b5:57:4c:fa:98:6b:41:45:4b:ce:
         4c:a8:70:d1:d7:28:32:4f:f0:6b:bb:91:40:ca:5d:96:76:f3:
         1a:95:a9:20:f9:71:9f:8c:0f:a2:22:0f:da:8f:1f:1b:d6:e6:
         f2:52:81:3f:5f:ac:41:f2:53:e4:66:05:b8:0c:e1:12:70:6a:
         a9:fa:6f:12:4a:98:f9:6d:f3:5d:c6:58:d5:81:5a:83:90:04:
         25:b4:26:99:c9:b7:a4:99:bd:d5:ca:f0:11:3a:43:b7:c4:5a:
         b2:04:f6:3c:b8:b7:92:f9:e8:da:df:2e:75:b6:d4:64:16:fa:
         e8:19:42:4b:d8:b2:4b:a2:07:4c:14:81:82:49:99:ec:46:61:
         fc:65:1e:f9:01:d0:cc:0a:fc:58:bd:d7:c6:45:2d:13:49:b8:
         88:9e:cf:49:7d:36:2f:f0:10:d2:ed:6b:e9:aa:cf:d2:2a:e2:
         89:95:09:9c:bc:40:86:49:7c:5b:07:c6:a3:c8:fe:41:e3:5b:
         4f:97:dc:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----