Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/dfd605-10da-46a2-9677-41401008a70c/1/naqfFPl9Ta2MAEwlOl4c58fdfEs.mft
File:                     naqfFPl9Ta2MAEwlOl4c58fdfEs.mft (raw, json)
Hash identifier:          gu33/2s6rbJqDT7NjLQzRwSesrwXtg5su69QuCIcuek=
Subject key identifier:   97:A3:FB:21:58:AD:37:2E:3C:43:76:D5:27:63:1E:2E:F5:EC:A6:AE
Authority key identifier: 9D:AA:9F:14:F9:7D:4D:AD:8C:00:4C:25:3A:5E:1C:E7:C7:DD:7C:4B
Certificate issuer:       /CN=9daa9f14f97d4dad8c004c253a5e1ce7c7dd7c4b
Certificate serial:       018C78825E30F74450C8976359D68BC9BC99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/naqfFPl9Ta2MAEwlOl4c58fdfEs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/dfd605-10da-46a2-9677-41401008a70c/1/naqfFPl9Ta2MAEwlOl4c58fdfEs.mft
Manifest number:          0A75
Signing time:             Sun 17 Dec 2023 16:00:58 +0000
Manifest this update:     Sun 17 Dec 2023 16:00:58 +0000
Manifest next update:     Mon 18 Dec 2023 16:00:58 +0000
Files and hashes:         1: 4BEOVQrsThFlGW0cZQAMw7zNXnw.roa (hash: 1TD7G2NjptDutIrZRBPS5Ex61KQxeiu7HZ9sUIa00i4=)
                          2: 7F3mYOrWGB-6qHPjEOO4kBXTmqg.roa (hash: AoHJAalnH7vaNCpkVl7A8GEE9QKHWcjpNtfnmqdRSog=)
                          3: JSg59Gm640r8dWgml9Co1-rQrCY.roa (hash: VyAs8rr5DwgnaSj4kXkWUxShzrI9I8yRYtnITz9N27E=)
                          4: ZsWmFJ1EiVTJogxd50yhIk_zokY.roa (hash: XGMpeAsDeOG5riF8IPxFXzSP6+wSwQB/CP9CdX5ElLI=)
                          5: naqfFPl9Ta2MAEwlOl4c58fdfEs.crl (hash: LBDoixAgl0o+i3H+/nerXmXQqalDgnWwJ6cOdooUhJM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:78:82:5e:30:f7:44:50:c8:97:63:59:d6:8b:c9:bc:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9daa9f14f97d4dad8c004c253a5e1ce7c7dd7c4b
        Validity
            Not Before: Dec 17 16:00:58 2023 GMT
            Not After : Dec 18 16:00:58 2023 GMT
        Subject: CN=97a3fb2158ad372e3c4376d527631e2ef5eca6ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:fe:35:1e:ec:94:04:59:16:33:bb:d0:4b:54:
                    53:cd:8d:4e:b1:b2:2a:67:0b:c4:18:01:74:97:aa:
                    76:b5:10:88:96:9c:48:f1:29:b8:0b:12:12:24:38:
                    c9:6a:73:60:f6:ea:1c:cb:e2:cd:5b:b5:32:91:f8:
                    f2:95:ee:cd:25:dd:90:de:de:89:28:a8:59:a3:1b:
                    9d:8f:f3:dc:c0:bc:b1:76:24:19:e8:3f:55:b4:00:
                    90:4e:40:29:61:50:34:f1:65:f1:ec:48:93:11:57:
                    ed:3b:bc:93:3f:29:be:a9:7c:0b:c4:80:c0:1e:68:
                    7d:f1:b6:ff:b4:30:75:06:e8:a1:ee:a8:22:c6:1d:
                    06:76:86:25:d9:6e:62:05:f8:03:76:d9:87:31:bc:
                    8c:bd:34:2c:ef:d3:f5:8b:57:5d:5b:85:af:8d:95:
                    3d:d4:04:27:26:de:a5:5a:1a:dc:d1:ce:24:53:bf:
                    b6:8b:7e:fa:ae:19:df:da:43:a9:a4:67:45:3c:08:
                    39:a8:6f:5d:d6:58:44:68:fc:ed:ce:6a:97:55:cf:
                    ee:09:5e:7b:4d:be:67:11:a0:da:20:8c:8f:f7:cc:
                    7d:9d:6b:59:8c:60:5a:8a:82:cc:c2:b0:ac:7a:0a:
                    fb:9e:44:0a:21:ab:f5:66:1e:e0:3f:57:89:0e:fc:
                    e2:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:A3:FB:21:58:AD:37:2E:3C:43:76:D5:27:63:1E:2E:F5:EC:A6:AE
            X509v3 Authority Key Identifier:
                keyid:9D:AA:9F:14:F9:7D:4D:AD:8C:00:4C:25:3A:5E:1C:E7:C7:DD:7C:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naqfFPl9Ta2MAEwlOl4c58fdfEs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/dfd605-10da-46a2-9677-41401008a70c/1/naqfFPl9Ta2MAEwlOl4c58fdfEs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/dfd605-10da-46a2-9677-41401008a70c/1/naqfFPl9Ta2MAEwlOl4c58fdfEs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:3e:43:1d:fb:28:27:64:d3:fb:41:46:9c:71:f1:26:5b:a3:
         ed:e7:80:e8:e9:f6:84:93:b5:1f:5a:3c:21:04:c6:8b:e9:53:
         0a:3c:dc:e5:e1:41:47:db:01:8f:2c:a2:83:c6:57:71:e9:70:
         a6:32:c4:9c:c3:c3:22:b0:21:8c:96:cc:a0:4a:5b:55:fd:46:
         29:30:ca:33:30:23:7f:80:ed:0c:0f:d1:8d:f1:9d:22:f5:d6:
         c5:08:55:77:2c:61:58:45:62:a0:4e:63:0c:b9:7c:99:d9:14:
         8e:4a:c8:e0:be:c1:5a:f2:15:8d:0b:74:76:54:f2:47:78:f7:
         f4:39:88:c8:cd:fe:ba:d9:0b:95:b7:24:54:f1:43:27:25:16:
         12:3b:7b:ab:13:41:ec:ab:87:d2:9c:0b:23:15:f9:66:9f:d9:
         f5:59:77:22:1e:5d:bc:bb:6e:91:ef:d2:78:8c:3b:8f:58:a2:
         15:31:13:4a:f8:4f:3f:c2:c2:92:c4:24:3d:ba:63:34:f8:4e:
         79:26:53:fe:76:25:67:e7:3d:f7:2d:68:49:ee:73:cd:b6:6b:
         94:50:c2:1c:4b:9e:be:92:55:36:c8:c2:dc:b9:8b:10:4f:ea:
         54:6f:50:1d:93:4c:58:9a:79:2a:cf:3e:7a:ad:1c:33:06:09:
         1e:af:d5:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----