Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9d3e62-588a-4067-84e3-f036b62c965f/1/NtAOt1th3SwEDMIAoCPjddEumvQ.mft
File:                     NtAOt1th3SwEDMIAoCPjddEumvQ.mft (raw, json)
Hash identifier:          9y/N/qvJBWloeFMAvhwT24/cRbZyXHVJNOW9IwQxVJQ=
Subject key identifier:   35:FC:B9:BA:AD:F7:D6:F7:C5:87:27:15:47:28:B7:E3:03:C4:50:5C
Authority key identifier: 36:D0:0E:B7:5B:61:DD:2C:04:0C:C2:00:A0:23:E3:75:D1:2E:9A:F4
Certificate issuer:       /CN=36d00eb75b61dd2c040cc200a023e375d12e9af4
Certificate serial:       018708B8E001DD897AD86C808679C25D42AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NtAOt1th3SwEDMIAoCPjddEumvQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/9d3e62-588a-4067-84e3-f036b62c965f/1/NtAOt1th3SwEDMIAoCPjddEumvQ.mft
Manifest number:          05BA
Signing time:             Wed 22 Mar 2023 09:49:06 +0000
Manifest this update:     Wed 22 Mar 2023 09:49:06 +0000
Manifest next update:     Thu 23 Mar 2023 09:49:06 +0000
Files and hashes:         1: NtAOt1th3SwEDMIAoCPjddEumvQ.crl (hash: xgP13y8YSSk3/AKVW47OZIEh4+iuRu5Uzqw2SusqIOI=)
                          2: nnCtaU-IlsvejRD165i2Z_v8VgM.roa (hash: QLR08CyC5LM0rXmk2AdRWKpEcBxzVRswr2e3KTmsSX0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:08:b8:e0:01:dd:89:7a:d8:6c:80:86:79:c2:5d:42:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36d00eb75b61dd2c040cc200a023e375d12e9af4
        Validity
            Not Before: Mar 22 09:49:06 2023 GMT
            Not After : Mar 23 09:49:06 2023 GMT
        Subject: CN=35fcb9baadf7d6f7c58727154728b7e303c4505c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3c:0d:b0:03:ec:9d:6e:19:ab:9d:d8:94:fc:
                    d4:b5:75:bb:35:bd:ae:21:2f:9f:d2:5c:ac:2d:29:
                    ba:31:86:c5:db:28:9d:22:4d:3b:e7:e5:0d:29:23:
                    41:0b:e1:3a:c0:f6:28:0e:8c:6e:9f:75:95:2d:63:
                    87:7f:1c:f9:ff:77:64:0a:ab:ff:46:5d:a8:31:05:
                    7c:61:aa:12:1b:bb:a5:56:81:f8:3b:26:c6:2a:fb:
                    57:58:fe:0d:30:b7:e1:c0:8b:9e:42:9e:75:d0:0d:
                    7a:11:d4:b9:79:7b:5e:dd:6a:2e:2d:c4:5b:51:39:
                    94:31:0b:9e:b7:ea:6f:3b:6b:49:5a:31:0f:be:6f:
                    f9:52:53:65:74:f7:f3:e6:b9:b1:af:d0:0c:20:33:
                    59:03:55:95:bc:38:ca:4d:64:b8:2b:65:f8:ee:20:
                    31:1b:71:51:51:9f:55:b5:00:1a:41:fb:cd:7e:35:
                    48:6b:fe:71:d1:05:48:ab:7e:bf:76:65:11:98:b8:
                    35:7d:9c:52:2d:37:e0:43:01:9d:7f:87:7b:37:24:
                    09:7c:0e:3e:52:a1:25:f6:d5:f1:f7:c6:3f:51:ab:
                    0f:43:90:0e:99:dc:42:cb:2e:ae:4e:53:e2:ad:67:
                    e2:93:ab:59:42:ac:db:10:b7:dd:ba:79:c1:7d:03:
                    40:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:FC:B9:BA:AD:F7:D6:F7:C5:87:27:15:47:28:B7:E3:03:C4:50:5C
            X509v3 Authority Key Identifier:
                keyid:36:D0:0E:B7:5B:61:DD:2C:04:0C:C2:00:A0:23:E3:75:D1:2E:9A:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NtAOt1th3SwEDMIAoCPjddEumvQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9d3e62-588a-4067-84e3-f036b62c965f/1/NtAOt1th3SwEDMIAoCPjddEumvQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9d3e62-588a-4067-84e3-f036b62c965f/1/NtAOt1th3SwEDMIAoCPjddEumvQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:ac:4e:1f:10:be:1f:7e:38:11:02:c7:80:d1:31:5d:23:1b:
         0e:5b:36:55:63:a7:ec:9e:82:81:bf:38:55:78:df:a0:ca:16:
         c3:83:18:3d:22:c5:22:b9:57:68:c4:c3:d7:69:04:3a:c1:9f:
         71:7f:7f:73:df:c2:f3:01:b6:3b:2b:fc:95:c9:f1:b7:13:a4:
         4e:0d:97:da:c8:76:1b:91:22:d3:83:73:b7:13:54:92:c1:df:
         0a:22:20:44:89:1e:3b:f1:74:01:fe:c9:60:57:8c:4f:df:f6:
         4b:ca:da:ac:c1:93:6c:c2:2e:3b:95:03:51:cf:67:c8:17:e2:
         26:6b:dd:7a:a3:7c:52:c1:0e:e5:c1:37:86:96:99:49:1a:81:
         90:11:54:d5:0b:b0:0b:57:23:88:b2:ce:bb:5c:f6:48:89:5b:
         e7:c0:72:46:47:38:db:cc:cb:de:d3:22:76:cf:ee:8a:2c:3a:
         e1:eb:f4:a0:7e:51:9f:8a:f8:e8:85:eb:91:09:dc:64:ba:63:
         75:02:38:1f:8c:06:29:05:9a:fc:d1:55:42:bd:ac:0f:ca:23:
         cc:bd:e0:cc:62:97:3e:eb:c5:5d:57:7e:3b:20:91:d5:10:f8:
         3f:e3:5f:35:bb:46:51:1e:9f:a3:68:90:62:98:12:27:eb:b8:
         38:f8:68:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----