Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/d8f6ab-1c9e-482d-8298-4b150e99834a/1/QBwJ_-dLK8gS7JWivdEVYQI9F3c.mft
File:                     QBwJ_-dLK8gS7JWivdEVYQI9F3c.mft (raw, json)
Hash identifier:          HplgeoMlvhrJzG1k1mia3+Tcf4X01Wf1go1TK6HVC7I=
Subject key identifier:   CC:68:6A:36:4B:B5:D0:75:43:E8:DB:5B:72:CF:0D:D6:34:68:92:CE
Authority key identifier: 40:1C:09:FF:E7:4B:2B:C8:12:EC:95:A2:BD:D1:15:61:02:3D:17:77
Certificate issuer:       /CN=401c09ffe74b2bc812ec95a2bdd11561023d1777
Certificate serial:       018B7FD0C137D4D18707C69B1F18274C0A0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QBwJ_-dLK8gS7JWivdEVYQI9F3c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/d8f6ab-1c9e-482d-8298-4b150e99834a/1/QBwJ_-dLK8gS7JWivdEVYQI9F3c.mft
Manifest number:          0861
Signing time:             Mon 30 Oct 2023 09:01:09 +0000
Manifest this update:     Mon 30 Oct 2023 09:01:09 +0000
Manifest next update:     Tue 31 Oct 2023 09:01:09 +0000
Files and hashes:         1: QBwJ_-dLK8gS7JWivdEVYQI9F3c.crl (hash: FowGHSTxMzsZOtY9e2Sid1VhJZ+Ugxbugep7TaXXQiA=)
                          2: qBEbKvWb2ztSKMdh5IB7Muo75tI.roa (hash: FQvufer8v1gAvFH0F0L1XnsjGPy3KSBoUwuMG+aPoKI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:7f:d0:c1:37:d4:d1:87:07:c6:9b:1f:18:27:4c:0a:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=401c09ffe74b2bc812ec95a2bdd11561023d1777
        Validity
            Not Before: Oct 30 09:01:09 2023 GMT
            Not After : Oct 31 09:01:09 2023 GMT
        Subject: CN=cc686a364bb5d07543e8db5b72cf0dd6346892ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ae:10:bd:4f:71:4d:30:a1:89:f9:a3:13:e9:
                    b3:66:19:40:44:c6:b2:b9:43:dd:a7:f5:94:1f:db:
                    57:0f:29:98:ea:85:2a:55:16:5a:d1:46:21:da:a9:
                    f7:5a:32:73:cf:23:c2:bc:e8:73:f0:9b:4f:eb:97:
                    53:0c:67:da:3d:dd:36:17:54:3e:de:fd:e2:42:3f:
                    bd:de:a8:91:56:eb:98:c2:c0:cc:57:75:2d:7e:f6:
                    ab:90:e4:9e:71:ea:08:d3:2b:8e:5c:55:d2:9c:48:
                    ae:0d:1a:ae:00:ca:ad:2a:3f:e6:bc:b7:ff:a9:07:
                    77:6c:14:72:f7:7e:6f:ed:af:4a:63:9f:69:54:f1:
                    01:5f:9e:54:28:be:77:a8:fa:1b:c7:9b:fd:57:a9:
                    c2:1d:fb:81:c8:44:b2:e0:50:22:24:49:47:ef:86:
                    0c:56:9c:87:16:8b:01:1b:03:f4:c6:30:a8:02:ca:
                    22:07:4b:17:9e:c7:50:6a:94:dd:3c:c8:57:a5:f3:
                    d1:7b:bd:45:af:e1:de:2f:d3:5d:d3:b8:12:8b:14:
                    73:50:96:b3:0a:a0:15:f3:de:b2:50:f9:4d:39:20:
                    08:7b:ce:32:9f:9a:c3:e6:e2:f1:b9:29:43:5f:db:
                    8e:85:4c:03:a1:4e:56:11:21:26:4e:94:94:00:fd:
                    8e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:68:6A:36:4B:B5:D0:75:43:E8:DB:5B:72:CF:0D:D6:34:68:92:CE
            X509v3 Authority Key Identifier:
                keyid:40:1C:09:FF:E7:4B:2B:C8:12:EC:95:A2:BD:D1:15:61:02:3D:17:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QBwJ_-dLK8gS7JWivdEVYQI9F3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d8f6ab-1c9e-482d-8298-4b150e99834a/1/QBwJ_-dLK8gS7JWivdEVYQI9F3c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d8f6ab-1c9e-482d-8298-4b150e99834a/1/QBwJ_-dLK8gS7JWivdEVYQI9F3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:06:cb:52:ae:dd:c3:12:cc:8e:82:b1:69:b2:eb:b8:2d:04:
         86:26:7f:4a:7c:4d:c5:de:6b:f8:51:21:c1:72:4c:0d:f0:e0:
         f5:72:57:50:58:78:58:fb:24:de:8b:58:d6:21:c2:01:59:8b:
         4c:c9:c1:4f:28:6a:92:76:d9:c1:d2:3c:44:c2:4b:59:15:4b:
         c6:45:73:a5:5f:79:4a:36:69:69:1c:4a:f7:d8:c8:44:48:a5:
         87:fc:58:ad:89:f5:24:b0:b8:0b:70:3e:3b:cb:16:31:4a:a5:
         7a:c4:be:ef:65:81:ae:ae:6a:7a:3c:34:56:64:97:e1:e0:54:
         9e:62:ae:b0:8e:90:fb:c8:56:73:44:0c:db:5f:f3:ab:88:01:
         4b:96:d5:a2:67:0d:8b:e4:70:12:aa:9f:bf:d6:51:0e:cd:17:
         ea:d7:f4:e0:1a:c5:e6:28:1a:e5:1c:0f:37:5e:97:48:bf:5e:
         41:08:93:fd:4f:96:fa:64:41:91:94:f2:2e:22:7d:78:13:50:
         04:dc:8d:f5:90:c3:a2:21:c5:85:d8:07:42:87:56:cb:56:ee:
         e0:e8:9b:ec:eb:e5:2f:2a:1e:40:17:0a:8b:37:4f:5c:9b:6c:
         ba:0c:d5:75:21:80:91:fd:e2:78:7d:64:9b:5b:63:37:ea:60:
         4e:ca:d8:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----