Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/915ae2-e7db-40d4-a736-30bf378fb2e7/1/NG1P6kf7OeyMLjqpO-YGhtzq6kU.mft
File:                     NG1P6kf7OeyMLjqpO-YGhtzq6kU.mft (raw, json)
Hash identifier:          2rXP4mirCLqB68LdFnY3s8WDWsnG2d9mYuGAZbp11bU=
Subject key identifier:   D2:66:F2:AD:49:9E:73:FF:64:ED:98:1D:45:B2:2B:6C:5B:5B:9C:3D
Authority key identifier: 34:6D:4F:EA:47:FB:39:EC:8C:2E:3A:A9:3B:E6:06:86:DC:EA:EA:45
Certificate issuer:       /CN=346d4fea47fb39ec8c2e3aa93be60686dceaea45
Certificate serial:       018C66B2F23A175CF78DFD65525372C5BF21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NG1P6kf7OeyMLjqpO-YGhtzq6kU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/915ae2-e7db-40d4-a736-30bf378fb2e7/1/NG1P6kf7OeyMLjqpO-YGhtzq6kU.mft
Manifest number:          0931
Signing time:             Thu 14 Dec 2023 05:00:52 +0000
Manifest this update:     Thu 14 Dec 2023 05:00:52 +0000
Manifest next update:     Fri 15 Dec 2023 05:00:52 +0000
Files and hashes:         1: BskfCL0mnyq1vxW4axtUmc16dT0.roa (hash: u+H+o0AANNyRAMwSzizprHaT+23a0GzG8OuPeTFElYo=)
                          2: NG1P6kf7OeyMLjqpO-YGhtzq6kU.crl (hash: h84L74gBthxdHQzyEtMNd4neeA0/Cs3jydFVgIBmjZg=)
                          3: q-ZzU7UB7ja9MPVz6z9YevmrkQU.roa (hash: uX1orAruthYvOtiBokIvtNfRDTiA9qhlnJaYi8YLgnM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:66:b2:f2:3a:17:5c:f7:8d:fd:65:52:53:72:c5:bf:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=346d4fea47fb39ec8c2e3aa93be60686dceaea45
        Validity
            Not Before: Dec 14 05:00:52 2023 GMT
            Not After : Dec 15 05:00:52 2023 GMT
        Subject: CN=d266f2ad499e73ff64ed981d45b22b6c5b5b9c3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:e8:96:95:3f:13:ef:4f:89:7a:f6:5f:2f:0b:
                    a1:df:bb:1d:d8:a6:84:aa:1b:ce:a1:47:f4:e2:a4:
                    83:75:63:51:be:bc:fb:13:36:d8:f1:05:3d:ab:6c:
                    a9:f2:fa:ab:5e:0b:69:d8:a2:e6:9d:3a:35:ba:6e:
                    d8:19:86:31:a0:f1:cb:35:07:bf:f9:a7:1e:51:70:
                    4d:1f:07:e9:98:b7:d4:60:17:3d:13:03:88:1b:85:
                    14:04:a7:19:9e:c4:6a:6e:05:17:89:fc:60:b0:79:
                    66:cf:2b:49:1b:6b:c8:06:24:55:9c:cc:cc:12:bc:
                    5c:58:e7:e7:e4:79:31:df:67:73:e7:77:31:bd:f5:
                    cb:3d:da:39:a7:f1:49:0d:40:e3:3e:a2:33:dc:19:
                    34:e3:55:3f:5b:59:47:27:8f:aa:86:ee:0c:0a:57:
                    77:75:9f:45:97:de:d9:02:40:5c:57:d4:0d:53:07:
                    91:00:c6:45:8d:55:f7:58:d2:a8:e2:c0:34:7c:e9:
                    53:5c:e7:c0:a9:0f:63:13:1f:d0:ff:17:79:60:7a:
                    de:46:18:2c:8b:93:c3:f7:52:ba:2b:57:dc:c5:19:
                    13:6d:5e:c7:8d:86:99:ef:a4:06:79:92:ce:d5:19:
                    e3:fa:dd:6b:e7:cc:d7:aa:b5:1e:1f:45:41:50:93:
                    c6:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:66:F2:AD:49:9E:73:FF:64:ED:98:1D:45:B2:2B:6C:5B:5B:9C:3D
            X509v3 Authority Key Identifier:
                keyid:34:6D:4F:EA:47:FB:39:EC:8C:2E:3A:A9:3B:E6:06:86:DC:EA:EA:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NG1P6kf7OeyMLjqpO-YGhtzq6kU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/915ae2-e7db-40d4-a736-30bf378fb2e7/1/NG1P6kf7OeyMLjqpO-YGhtzq6kU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/915ae2-e7db-40d4-a736-30bf378fb2e7/1/NG1P6kf7OeyMLjqpO-YGhtzq6kU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:ae:47:97:9d:e5:6e:9d:53:3e:42:45:5e:d4:8b:19:76:44:
         35:cc:64:2b:f3:dd:a5:d4:c1:4e:56:58:04:97:c0:81:fa:4a:
         01:54:24:ff:26:d2:84:bf:90:0f:00:1a:be:28:e9:d5:96:c3:
         d9:7d:c1:97:bc:99:54:8f:17:7f:b2:cd:ea:e2:a2:27:a9:db:
         d8:bd:dc:b4:bf:a0:22:ba:58:a6:9d:cd:e3:35:aa:83:71:a2:
         ad:dd:8c:90:02:0d:b0:50:c2:1a:f8:a6:ad:d3:33:fd:6b:55:
         87:fd:ac:78:3a:3f:9a:3c:cf:62:05:4e:1d:ce:f4:d8:17:a4:
         68:3f:df:0f:cd:ac:d0:30:97:c9:fa:cf:53:64:44:d2:9b:e9:
         54:b4:41:25:48:8a:79:ad:fc:d8:e5:93:55:b1:8c:e7:35:f6:
         57:97:d4:30:30:28:f1:a2:11:2d:1b:72:09:f1:b4:4c:f8:6e:
         10:27:3b:6a:47:3d:45:b8:d0:0f:9d:16:15:44:ad:82:89:3e:
         02:96:b7:52:0c:d0:4e:b7:c6:cd:8a:96:ef:ec:af:f1:e1:18:
         76:44:f6:39:9f:fd:fb:68:ce:72:fb:09:79:11:b4:02:84:1b:
         00:7d:64:17:95:86:f3:c3:9a:50:a9:19:82:cd:10:63:ac:8b:
         92:e8:8a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----