Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/f9bee6-ada6-4981-bdd2-0c1eccf04a5e/1/QkR6d9gvW6NSFlNhXJgghLYhBpQ.mft
File:                     QkR6d9gvW6NSFlNhXJgghLYhBpQ.mft (raw, json)
Hash identifier:          yQYcF5X7tdaavNbPrEy2slGib3P0maNbSU+QEc3jEg4=
Subject key identifier:   FE:E5:26:DF:59:BC:E0:A0:45:4D:71:D9:DC:CA:63:1B:80:97:07:F3
Authority key identifier: 42:44:7A:77:D8:2F:5B:A3:52:16:53:61:5C:98:20:84:B6:21:06:94
Certificate issuer:       /CN=42447a77d82f5ba3521653615c982084b6210694
Certificate serial:       01856121D96C110A6D1F61188D3C44413C8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QkR6d9gvW6NSFlNhXJgghLYhBpQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/f9bee6-ada6-4981-bdd2-0c1eccf04a5e/1/QkR6d9gvW6NSFlNhXJgghLYhBpQ.mft
Manifest number:          0BF4
Signing time:             Fri 30 Dec 2022 03:44:45 +0000
Manifest this update:     Fri 30 Dec 2022 03:44:45 +0000
Manifest next update:     Sat 31 Dec 2022 03:44:45 +0000
Files and hashes:         1: 3Vlz4osvXPbRFy4bPwE1pxBFH0Y.roa (hash: omandrLLfxEL6NB/6kbA3/WFjc5rZ+BbgPYXoiKoaMs=)
                          2: 4zjovBCq7osHbkOS4mjH1aQTHL0.roa (hash: ItOGAU/vFrPqNZi3jPV8Q3fy+XPX+Qy5R4HqSATLYpU=)
                          3: QkR6d9gvW6NSFlNhXJgghLYhBpQ.crl (hash: L6uBIqYU6Z2WgD4wcAFTGpn2qQSbIgBnBFob4a5eWrg=)
                          4: _qnZf_aG4DX3LPNGkdGs06FQReY.roa (hash: 1JcFMBKgEJpTUrcY0ZT1tLRWVR7yh8NctUa3wfJD+jg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:61:21:d9:6c:11:0a:6d:1f:61:18:8d:3c:44:41:3c:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42447a77d82f5ba3521653615c982084b6210694
        Validity
            Not Before: Dec 30 03:44:45 2022 GMT
            Not After : Dec 31 03:44:45 2022 GMT
        Subject: CN=fee526df59bce0a0454d71d9dcca631b809707f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:21:45:7b:9b:97:cc:b4:03:d5:6f:28:22:22:
                    91:6a:95:e0:39:14:5e:c3:70:ce:7c:4e:c8:9c:28:
                    dd:3d:c9:2a:84:7b:41:b3:7c:ca:49:c8:31:84:01:
                    09:c7:08:c1:11:8d:31:99:bf:2f:95:57:63:e2:75:
                    a5:1d:46:c2:a5:74:24:39:88:69:d2:cd:2b:c0:76:
                    26:0d:14:a8:cb:30:f0:a4:b9:c9:47:7a:6a:a6:78:
                    cc:e3:23:67:7d:bd:d4:70:0d:c2:f8:75:22:fd:f0:
                    b8:09:73:ed:0f:43:21:a4:d8:5f:71:e1:d7:45:d9:
                    46:67:43:a4:87:ae:d7:d7:17:32:cf:8f:5b:9e:75:
                    03:45:4e:ac:f2:96:84:80:35:3a:4c:d4:76:94:93:
                    77:a7:64:07:ce:46:6e:7c:57:02:b0:ad:d7:65:cd:
                    ce:71:e1:1e:2a:f0:9c:d9:ff:0d:f3:a4:93:0c:df:
                    3b:2e:69:82:d7:aa:9e:95:40:b8:53:27:d5:2e:9c:
                    e7:5d:15:fe:9b:26:a3:2a:20:0e:a2:70:c7:92:8a:
                    a0:7a:3b:44:07:99:cf:61:2a:86:ec:35:a9:22:3b:
                    05:d8:e8:34:3a:2c:3f:7a:ad:29:3d:80:c6:79:64:
                    1a:90:af:4f:4f:59:ef:80:7f:4e:f0:9f:af:3b:0b:
                    1e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:E5:26:DF:59:BC:E0:A0:45:4D:71:D9:DC:CA:63:1B:80:97:07:F3
            X509v3 Authority Key Identifier:
                keyid:42:44:7A:77:D8:2F:5B:A3:52:16:53:61:5C:98:20:84:B6:21:06:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QkR6d9gvW6NSFlNhXJgghLYhBpQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/f9bee6-ada6-4981-bdd2-0c1eccf04a5e/1/QkR6d9gvW6NSFlNhXJgghLYhBpQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/f9bee6-ada6-4981-bdd2-0c1eccf04a5e/1/QkR6d9gvW6NSFlNhXJgghLYhBpQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:62:66:70:9b:5f:a5:62:ab:44:a6:b0:9d:32:b5:01:f9:47:
         e9:ee:e1:ca:0b:47:4f:8a:aa:94:cf:b9:1f:e6:d9:40:b1:5d:
         66:97:e6:ac:49:8c:ed:ac:29:18:74:d5:fa:f5:61:47:55:a4:
         52:0a:a5:b3:8d:16:2f:5a:a8:9f:e2:65:31:9c:f0:1f:9d:2b:
         57:fc:72:fd:6b:22:14:46:b0:9d:5b:5e:d2:cb:eb:3a:51:b6:
         77:1f:d2:4a:0b:fa:99:0b:d5:82:18:1f:7c:c6:9d:38:75:c6:
         d4:3d:79:5d:ef:66:06:56:b7:23:a3:83:9d:b5:4f:ff:06:5e:
         ee:0d:b9:29:9f:cb:79:42:ea:19:63:b0:14:a2:e2:35:25:e3:
         78:a8:12:bd:a9:e5:c4:b3:f2:af:75:16:71:5a:0f:44:66:c3:
         25:83:47:1a:ea:af:bb:44:1a:f1:c4:9f:03:83:fc:8c:48:98:
         e5:cb:10:5c:a9:76:4b:04:c6:23:9a:30:61:e6:dc:67:b9:c7:
         10:a3:52:aa:34:e0:80:a6:fe:4b:b7:6c:9e:65:0b:74:4b:04:
         0a:39:23:74:8e:48:0f:5d:1d:ca:0c:80:9b:26:0e:a2:5e:e7:
         9d:50:1c:d7:51:8d:26:86:01:81:ac:21:d7:c7:cf:5d:7e:de:
         25:b7:90:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----