Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f75c65-885e-417d-8076-bf7d8fca46e1/1/Q7AQW8y55gkxIHZzVKi4STy-TNY.mft
File:                     Q7AQW8y55gkxIHZzVKi4STy-TNY.mft (raw, json)
Hash identifier:          Tfn8qgpzqgwMWf/1WF6f+LWmUHL1AbXh8bZ/Cpy0NcM=
Subject key identifier:   30:7C:8E:7F:F6:F6:9E:33:FB:77:46:C4:42:F2:67:B7:FB:8C:70:04
Authority key identifier: 43:B0:10:5B:CC:B9:E6:09:31:20:76:73:54:A8:B8:49:3C:BE:4C:D6
Certificate issuer:       /CN=43b0105bccb9e6093120767354a8b8493cbe4cd6
Certificate serial:       018C677BCB3A51561397D5510E906226F643
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q7AQW8y55gkxIHZzVKi4STy-TNY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/f75c65-885e-417d-8076-bf7d8fca46e1/1/Q7AQW8y55gkxIHZzVKi4STy-TNY.mft
Manifest number:          0FDF
Signing time:             Thu 14 Dec 2023 08:40:15 +0000
Manifest this update:     Thu 14 Dec 2023 08:40:15 +0000
Manifest next update:     Fri 15 Dec 2023 08:40:15 +0000
Files and hashes:         1: Bz6VDpB03faNu8VYncirv62zdYE.roa (hash: d5lvdsSvibgPm/oBwtjaj8XFW6/6VOV6eVy71uBIgts=)
                          2: Q7AQW8y55gkxIHZzVKi4STy-TNY.crl (hash: dlIDTYZABgSo5w9Kr/DHJCHyDNNxt0Yp4J7Bk4kCKII=)
                          3: h8DWih6oPrC1bOu2oOXvAPbtuck.roa (hash: dIUzGddBOgsAFzz9TYJLsy6J3CEfCdcXwKryuE5aLus=)
                          4: ibmUhirYWmTNDxuousec5SUL5xw.roa (hash: N0C+KGV1b1EiSj5YejU366BPPmbN5j+yd+N7bXxHQ60=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:67:7b:cb:3a:51:56:13:97:d5:51:0e:90:62:26:f6:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43b0105bccb9e6093120767354a8b8493cbe4cd6
        Validity
            Not Before: Dec 14 08:40:15 2023 GMT
            Not After : Dec 15 08:40:15 2023 GMT
        Subject: CN=307c8e7ff6f69e33fb7746c442f267b7fb8c7004
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:7c:9a:56:46:85:a3:60:3a:ef:1b:b1:9e:be:
                    b9:a2:dd:12:0f:01:b5:ca:b4:e7:aa:e2:13:62:25:
                    c4:f4:ab:9b:28:ae:99:cd:0c:75:ed:d2:10:a5:1f:
                    9d:0d:59:39:b2:37:76:86:fc:4a:1f:6a:fc:cf:74:
                    6d:ab:7f:1e:97:6b:a9:f7:99:45:04:05:13:75:68:
                    f5:16:09:e0:3f:ce:d0:36:bc:93:fc:08:15:ad:30:
                    60:c6:2b:f9:4e:2c:ca:ee:fe:87:b5:28:4d:b9:32:
                    bb:69:79:e4:1c:49:80:8a:12:57:06:80:77:64:9f:
                    0e:51:c8:78:35:60:ba:ea:ee:28:0c:e0:f5:4d:66:
                    b1:7b:9c:34:92:2b:9b:92:d0:e3:1b:ab:73:00:d4:
                    08:79:42:79:84:a0:f3:56:84:26:db:e6:ae:3d:0d:
                    30:05:15:d3:8a:24:f7:d1:36:29:ce:b4:e2:65:99:
                    fe:a1:53:78:6b:97:fb:e1:26:a3:87:99:19:39:18:
                    6c:26:85:1d:9e:4f:3a:21:2f:87:ba:7a:2c:b5:a5:
                    f1:84:fa:c3:92:a3:ad:0d:bd:3b:ef:ba:39:c7:9d:
                    21:17:d5:30:2e:28:78:b2:a7:85:5a:9d:84:9b:72:
                    5a:d9:9a:05:07:e4:e9:4b:09:66:2e:13:b2:71:1a:
                    b6:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:7C:8E:7F:F6:F6:9E:33:FB:77:46:C4:42:F2:67:B7:FB:8C:70:04
            X509v3 Authority Key Identifier:
                keyid:43:B0:10:5B:CC:B9:E6:09:31:20:76:73:54:A8:B8:49:3C:BE:4C:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q7AQW8y55gkxIHZzVKi4STy-TNY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f75c65-885e-417d-8076-bf7d8fca46e1/1/Q7AQW8y55gkxIHZzVKi4STy-TNY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f75c65-885e-417d-8076-bf7d8fca46e1/1/Q7AQW8y55gkxIHZzVKi4STy-TNY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:44:d4:ef:33:f7:90:43:b1:8d:58:11:b0:d4:de:36:d4:fc:
         6d:fe:68:bb:0b:52:22:3a:42:17:31:4c:76:ac:f7:15:f6:e1:
         f1:3e:8b:10:34:c7:0f:5c:45:b4:01:68:e1:24:e9:0c:7a:98:
         5a:ac:eb:2e:d0:d9:d3:e1:fa:0d:9d:63:78:68:ac:aa:b8:c9:
         8d:7d:96:d8:1e:65:78:78:e9:7a:47:80:9e:78:8f:ba:f7:95:
         4c:40:73:0a:10:b9:e1:cf:90:15:84:94:2d:7b:66:7d:e2:5d:
         b7:78:42:f7:9f:22:63:71:1a:1f:c0:9e:69:3a:99:c2:25:5d:
         a3:77:03:27:66:75:49:ce:4b:8c:62:46:af:c8:fe:0a:c6:9f:
         08:7d:79:84:13:04:48:33:6d:ca:7f:ac:19:21:07:ec:8b:44:
         45:dd:e3:a0:b3:25:cc:d5:23:c9:4e:17:9e:76:e6:dc:07:25:
         d8:a1:70:4f:ca:2f:1b:58:93:27:1c:7d:d3:78:2c:db:42:fa:
         04:2c:69:a4:e0:69:a4:e9:96:17:b5:e4:42:dd:5d:04:ed:7f:
         6a:c9:85:c0:7e:d2:24:69:76:ab:c6:9e:2c:af:c1:51:70:87:
         ce:31:6b:5d:75:d2:25:50:8b:13:1e:7b:5a:5f:3c:91:4e:a6:
         a3:f2:81:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----