Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/156aa7-54b5-417a-8365-d9828b495f61/1/qm8-2qZkBOfwW473306dIqOWBAc.mft
File:                     qm8-2qZkBOfwW473306dIqOWBAc.mft (raw, json)
Hash identifier:          rIIDXzihYn0ks2SNiPkSjLw8B8IEBxOXa/bFPvmwGl0=
Subject key identifier:   69:12:93:C1:A0:4B:90:40:42:1F:17:54:BA:7F:9B:98:FB:DE:A4:FE
Authority key identifier: AA:6F:3E:DA:A6:64:04:E7:F0:5B:8E:F7:DF:4E:9D:22:A3:96:04:07
Certificate issuer:       /CN=aa6f3edaa66404e7f05b8ef7df4e9d22a3960407
Certificate serial:       018EC0601DFEA2B629F326D2F67DA80D3128
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qm8-2qZkBOfwW473306dIqOWBAc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/156aa7-54b5-417a-8365-d9828b495f61/1/qm8-2qZkBOfwW473306dIqOWBAc.mft
Manifest number:          06D7
Signing time:             Tue 09 Apr 2024 01:01:48 +0000
Manifest this update:     Tue 09 Apr 2024 01:01:48 +0000
Manifest next update:     Wed 10 Apr 2024 01:01:48 +0000
Files and hashes:         1: 8g8VhBAjd-fgDYen0_Ji3cCa1hw.roa (hash: mq02kYSNAubiAf9QnW3ovVhQHj+4Be2vJPPoThcPjKM=)
                          2: qm8-2qZkBOfwW473306dIqOWBAc.crl (hash: PrW87OgEFbRdGfXx6BZ5cWitBcFF4bw1N5X15VIqSz4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:c0:60:1d:fe:a2:b6:29:f3:26:d2:f6:7d:a8:0d:31:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa6f3edaa66404e7f05b8ef7df4e9d22a3960407
        Validity
            Not Before: Apr  9 01:01:48 2024 GMT
            Not After : Apr 10 01:01:48 2024 GMT
        Subject: CN=691293c1a04b9040421f1754ba7f9b98fbdea4fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:b3:9f:87:52:8e:7a:0a:41:6b:68:fd:35:45:
                    3e:77:92:6a:e9:ca:3c:b9:b9:57:30:b0:62:8b:d6:
                    28:e1:4f:80:6f:ec:fe:b3:53:93:0f:59:46:a8:5e:
                    f0:ae:15:b9:2a:7d:cc:1a:ab:f6:d0:33:fb:3e:2e:
                    3e:88:33:3a:9d:0e:b9:3e:85:7f:af:ef:7f:2c:80:
                    d1:c6:c7:b1:76:99:14:90:d2:33:7b:40:28:f7:d8:
                    56:36:62:c8:e1:a2:6f:48:af:35:ad:c8:32:0d:0a:
                    9f:96:b1:99:9b:00:13:d4:2e:87:d4:c9:4d:c9:de:
                    6c:3d:d2:f9:45:11:2c:81:0a:ff:fb:67:f8:4d:0f:
                    db:be:d9:eb:f3:3e:17:9b:8f:5b:f8:e1:e7:e1:45:
                    c0:90:f1:9a:6e:9e:2e:a7:55:45:0d:22:3d:61:28:
                    fe:eb:d0:12:39:03:b1:ef:c1:1d:d0:d2:68:dd:98:
                    27:b0:42:14:5f:62:76:13:8f:a5:bf:38:63:d4:cb:
                    ac:23:b2:7a:2f:8a:2c:b9:97:d0:17:3d:28:31:93:
                    aa:2a:69:bd:60:b3:36:bf:e4:c3:45:31:92:d0:d1:
                    bb:8b:15:6c:8f:db:52:94:18:00:b8:3c:cf:9d:64:
                    54:cc:f2:e5:b4:71:6d:6a:4c:d7:3e:8d:2b:fb:27:
                    94:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:12:93:C1:A0:4B:90:40:42:1F:17:54:BA:7F:9B:98:FB:DE:A4:FE
            X509v3 Authority Key Identifier:
                keyid:AA:6F:3E:DA:A6:64:04:E7:F0:5B:8E:F7:DF:4E:9D:22:A3:96:04:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qm8-2qZkBOfwW473306dIqOWBAc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/156aa7-54b5-417a-8365-d9828b495f61/1/qm8-2qZkBOfwW473306dIqOWBAc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/156aa7-54b5-417a-8365-d9828b495f61/1/qm8-2qZkBOfwW473306dIqOWBAc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:48:a3:e8:fb:1c:9c:3e:35:1c:3c:65:45:b0:54:44:16:3f:
         f5:62:1c:fd:8b:5c:6a:07:d4:21:c6:60:4b:22:f8:22:f9:59:
         7e:58:69:27:29:6f:c1:2f:66:ae:a2:bb:cd:ee:3d:ff:38:a1:
         c0:db:96:9c:39:89:21:44:a2:7e:3e:88:b5:2c:f0:6f:16:41:
         6c:9d:c4:62:87:97:53:11:4c:1c:fc:25:b1:d5:4c:17:57:90:
         7c:47:81:05:a7:fd:c4:9d:a2:e7:56:14:7b:3a:7f:07:07:23:
         d8:2b:34:99:3a:7a:7f:dc:7a:af:48:d6:89:14:73:be:2d:e3:
         1a:51:b4:b3:7b:0c:3d:90:d7:06:9d:46:db:ac:38:24:20:9f:
         9c:b5:a3:1e:05:a7:2c:80:22:3b:af:8e:6a:f4:85:47:7b:03:
         04:a0:d1:bb:85:05:f6:0f:c1:88:7f:2a:b3:d4:33:31:69:2e:
         89:5c:44:44:61:b4:9d:7f:7e:74:46:28:72:0f:e1:cb:d6:2f:
         28:48:e5:b5:7b:e8:8b:71:8e:a5:36:e9:4f:c0:a1:61:9a:44:
         10:6c:2f:be:00:46:63:05:3b:74:17:09:f5:3d:53:07:dc:fa:
         80:05:74:ab:f4:7a:6f:57:b4:cb:f8:08:6d:4d:36:3e:e1:36:
         de:79:5f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----