Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/ba9884-818c-4bfc-b77d-1fcda48abe53/1/NQSk8r1D4PSgZzuHQ_FfvVFFmf4.mft
File:                     NQSk8r1D4PSgZzuHQ_FfvVFFmf4.mft (raw, json)
Hash identifier:          4Nb3WWfaHITIltzUlscH7pcMRk9pXcv9KEp3ERWIH5U=
Subject key identifier:   0B:B1:D5:00:EF:2B:70:D7:EE:5E:AC:D4:15:EA:1B:46:3B:1B:F5:B9
Authority key identifier: 35:04:A4:F2:BD:43:E0:F4:A0:67:3B:87:43:F1:5F:BD:51:45:99:FE
Certificate issuer:       /CN=3504a4f2bd43e0f4a0673b8743f15fbd514599fe
Certificate serial:       01870930193B7CD424282760035F2693815E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NQSk8r1D4PSgZzuHQ_FfvVFFmf4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/ba9884-818c-4bfc-b77d-1fcda48abe53/1/NQSk8r1D4PSgZzuHQ_FfvVFFmf4.mft
Manifest number:          05C7
Signing time:             Wed 22 Mar 2023 11:59:19 +0000
Manifest this update:     Wed 22 Mar 2023 11:59:19 +0000
Manifest next update:     Thu 23 Mar 2023 11:59:19 +0000
Files and hashes:         1: Ja293elo3WCrEmD6oDDSGJD6YWc.roa (hash: kWvn8Z6YGwd0lxQp6FKknYn5Ow7wWTteEivbL2SZdl4=)
                          2: NQSk8r1D4PSgZzuHQ_FfvVFFmf4.crl (hash: FLb1uadeT+ILP2BUJpSBhapFThF6fcHOP+y+ScIEaWc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:09:30:19:3b:7c:d4:24:28:27:60:03:5f:26:93:81:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3504a4f2bd43e0f4a0673b8743f15fbd514599fe
        Validity
            Not Before: Mar 22 11:59:19 2023 GMT
            Not After : Mar 23 11:59:19 2023 GMT
        Subject: CN=0bb1d500ef2b70d7ee5eacd415ea1b463b1bf5b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:78:0c:91:fc:7b:75:31:7f:c4:87:90:ea:83:
                    69:1e:28:d1:60:90:22:08:12:82:9f:77:30:a2:19:
                    12:2c:a2:14:f0:69:8a:5b:85:a6:2b:cf:88:cc:b2:
                    ca:75:91:2c:91:5e:3b:cb:33:1b:d2:96:64:9f:97:
                    5d:dc:d6:f8:51:9c:3e:3e:42:77:c5:43:93:69:5a:
                    ef:60:19:b4:dc:4b:c1:d3:c2:2e:9c:63:af:4f:bd:
                    59:17:25:99:e9:96:79:cc:36:55:ca:ec:e0:4d:4e:
                    33:b4:1a:38:8e:be:28:7d:2f:ce:cb:02:99:0d:e0:
                    b3:7c:c4:09:8b:b8:a5:98:33:66:d0:30:42:03:75:
                    01:63:5c:3e:2f:4c:66:ee:8c:72:19:02:43:c7:5e:
                    dc:31:0f:4e:7c:8e:27:e6:0b:86:eb:58:37:8f:6b:
                    d6:58:96:be:f7:98:3e:fb:98:87:a9:4a:2d:be:5b:
                    6f:d1:2c:4f:85:c3:39:19:be:fb:2f:13:fc:dd:8b:
                    cb:66:82:f5:4a:e5:8f:1f:10:9c:cb:ec:86:93:d3:
                    d1:e3:75:48:c8:62:db:cf:72:26:72:df:d8:00:1b:
                    63:66:85:8c:61:e1:bc:8a:46:cf:96:5c:cc:ab:02:
                    fa:7d:58:bf:86:14:00:f0:64:32:ff:5b:a4:07:a1:
                    b4:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:B1:D5:00:EF:2B:70:D7:EE:5E:AC:D4:15:EA:1B:46:3B:1B:F5:B9
            X509v3 Authority Key Identifier:
                keyid:35:04:A4:F2:BD:43:E0:F4:A0:67:3B:87:43:F1:5F:BD:51:45:99:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NQSk8r1D4PSgZzuHQ_FfvVFFmf4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/ba9884-818c-4bfc-b77d-1fcda48abe53/1/NQSk8r1D4PSgZzuHQ_FfvVFFmf4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/ba9884-818c-4bfc-b77d-1fcda48abe53/1/NQSk8r1D4PSgZzuHQ_FfvVFFmf4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:8a:37:43:b9:67:09:d8:7e:d4:63:84:d6:c8:eb:56:74:bc:
         47:cf:77:20:c1:c6:51:eb:42:17:49:5f:41:da:67:0f:e6:0d:
         f0:79:ed:e7:4a:25:df:85:4c:6f:94:57:7e:b4:7b:b3:76:8f:
         25:ae:7d:fc:ed:c5:b2:f6:db:36:59:4d:5c:ea:c7:00:f6:8d:
         75:90:d6:bf:c3:3d:3c:d0:8f:aa:78:5b:07:48:0c:2f:83:ac:
         20:de:f2:cc:12:96:56:1b:65:09:90:e6:6c:00:50:59:c9:bd:
         c8:ad:7f:0a:b2:9e:d7:08:55:7f:e7:93:16:e7:32:b3:81:8a:
         ab:55:05:fa:06:23:13:71:a5:bb:9b:7b:a3:54:87:d5:e5:d7:
         52:3d:d8:05:05:61:cb:19:9d:9a:16:7a:4d:06:5c:fa:31:22:
         d5:af:82:00:fd:8d:36:ec:c3:21:0c:46:39:f4:86:4a:c5:ab:
         dd:cb:66:11:ce:46:17:5b:a0:46:b1:e9:60:c9:4a:5d:28:1c:
         b3:14:00:3d:cd:0e:7c:f7:ae:a6:5e:ce:13:a9:4d:ad:b2:0a:
         ef:ab:2d:7e:05:8b:58:9c:db:a8:74:4a:a5:45:4a:78:bc:03:
         0b:a4:41:de:0c:1e:5b:f7:e5:1d:61:7b:6d:30:f0:92:f0:9d:
         30:3d:c6:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----