Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/92aa15-eb62-4f4a-b0d7-24e22482aee6/1/IUgmljhosmUc8L2URThRShIA8oU.mft
File:                     IUgmljhosmUc8L2URThRShIA8oU.mft (raw, json)
Hash identifier:          aJpzS4/TXy0gRQ9Jmvd5mpcUWZdtggS742UkF0RMZDc=
Subject key identifier:   BB:EF:D5:A9:4C:C6:B6:D0:14:40:ED:71:39:88:4F:82:FB:4C:6C:1E
Authority key identifier: 21:48:26:96:38:68:B2:65:1C:F0:BD:94:45:38:51:4A:12:00:F2:85
Certificate issuer:       /CN=214826963868b2651cf0bd944538514a1200f285
Certificate serial:       018D5D08910A7A492D8080E53168E70EA9A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IUgmljhosmUc8L2URThRShIA8oU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/92aa15-eb62-4f4a-b0d7-24e22482aee6/1/IUgmljhosmUc8L2URThRShIA8oU.mft
Manifest number:          07BC
Signing time:             Wed 31 Jan 2024 01:00:58 +0000
Manifest this update:     Wed 31 Jan 2024 01:00:58 +0000
Manifest next update:     Thu 01 Feb 2024 01:00:58 +0000
Files and hashes:         1: IUgmljhosmUc8L2URThRShIA8oU.crl (hash: fIpLl/2eQ7z7AwRTn3l95JHuLEJQVYsLU41wOPdLOZY=)
                          2: WyRGYT9yAZfTbJifGYQHg2GPskg.roa (hash: ppdPhzeRp/kaBs6Yos6J3eTkyqLKPCUCf84SmI0NTFc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:5d:08:91:0a:7a:49:2d:80:80:e5:31:68:e7:0e:a9:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=214826963868b2651cf0bd944538514a1200f285
        Validity
            Not Before: Jan 31 01:00:58 2024 GMT
            Not After : Feb  1 01:00:58 2024 GMT
        Subject: CN=bbefd5a94cc6b6d01440ed7139884f82fb4c6c1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:57:16:28:f4:94:ce:2c:ea:b7:fd:bf:f5:71:
                    90:78:14:b7:9d:75:91:aa:6a:eb:83:b6:2d:2e:9e:
                    39:c5:f5:9a:0b:6f:d5:f6:bf:4f:83:06:b2:90:8e:
                    05:ef:c7:7d:98:a9:96:64:8d:5e:17:cd:26:26:de:
                    00:a3:5a:1b:3a:f1:cc:bb:01:e6:68:92:12:60:bb:
                    34:b2:28:2b:c5:f0:fc:df:d0:f0:75:7c:71:f9:91:
                    40:6e:fb:fd:16:e6:d3:77:08:46:9e:21:ba:33:a1:
                    4d:d3:59:6c:dc:83:4a:dc:50:4f:ec:9d:e4:4e:34:
                    27:f4:dd:42:b5:8f:85:ca:5d:0f:87:94:3c:07:14:
                    43:e6:3e:a0:f6:7e:9f:de:10:28:31:02:1d:28:80:
                    55:4b:8f:8b:9b:39:26:d1:a5:03:44:4d:cd:76:d3:
                    08:77:8d:16:cb:22:56:eb:6e:5f:79:21:45:4a:2b:
                    e0:41:9a:f5:bf:df:69:c3:cb:11:bc:a1:59:02:5d:
                    be:26:77:04:fd:69:b0:a0:77:0f:19:b8:cb:66:db:
                    bb:41:16:45:a1:d5:61:cd:65:24:e8:4b:62:b7:aa:
                    6d:0e:7a:51:0b:fb:36:54:b1:fc:f6:c7:72:7d:bf:
                    c4:61:30:0f:6a:05:c5:2c:87:1e:88:a6:fe:92:e8:
                    0c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:EF:D5:A9:4C:C6:B6:D0:14:40:ED:71:39:88:4F:82:FB:4C:6C:1E
            X509v3 Authority Key Identifier:
                keyid:21:48:26:96:38:68:B2:65:1C:F0:BD:94:45:38:51:4A:12:00:F2:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IUgmljhosmUc8L2URThRShIA8oU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/92aa15-eb62-4f4a-b0d7-24e22482aee6/1/IUgmljhosmUc8L2URThRShIA8oU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/92aa15-eb62-4f4a-b0d7-24e22482aee6/1/IUgmljhosmUc8L2URThRShIA8oU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:83:cf:23:45:00:75:c7:b1:9f:3c:a9:08:8c:b5:31:c8:64:
         c4:1a:cf:51:11:46:ed:91:7b:52:68:2a:ee:b7:4b:bd:be:b7:
         a7:49:82:80:ce:73:5c:4e:6c:44:22:96:0d:76:67:02:84:90:
         a8:39:0b:33:7d:7a:10:0d:fb:0b:c4:e2:6d:6e:0e:6f:66:bc:
         04:8b:49:02:9f:e0:44:7d:bd:be:42:c8:43:de:4b:57:67:55:
         f5:f2:24:40:5a:2c:33:6e:b0:47:11:c4:d1:05:70:a0:d3:db:
         62:33:36:c6:1d:6a:8e:ea:46:0b:17:57:ec:71:b9:4d:1f:81:
         85:ac:70:21:fe:41:60:a3:ea:93:be:c3:0b:37:a6:f9:48:ba:
         a2:61:9b:24:2f:7c:c4:a6:d2:c0:20:18:39:63:b0:e7:59:ff:
         89:ca:bd:ed:1c:06:67:42:a7:64:37:cc:93:f7:6b:c6:b0:6a:
         aa:16:b6:c1:48:5d:5f:80:6e:45:83:61:e8:f9:bf:e7:33:e8:
         42:d2:ee:9d:76:ae:97:cb:bb:e5:d7:8b:48:54:2d:14:19:8e:
         73:b7:a1:bc:0b:ad:6e:3e:98:c6:00:75:f3:aa:8e:82:c4:44:
         d5:10:9d:c5:37:17:7a:e4:85:7a:90:2b:ef:4f:83:1e:6c:11:
         13:8a:aa:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY1dCJEKekktgIDlMWjnDqmiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxNDgyNjk2Mzg2OGIyNjUxY2YwYmQ5NDQ1Mzg1MTRhMTIw
MGYyODUwHhcNMjQwMTMxMDEwMDU4WhcNMjQwMjAxMDEwMDU4WjAzMTEwLwYDVQQD
EyhiYmVmZDVhOTRjYzZiNmQwMTQ0MGVkNzEzOTg4NGY4MmZiNGM2YzFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFcWKPSUzizqt/2/9XGQeBS3nXWR
qmrrg7YtLp45xfWaC2/V9r9PgwaykI4F78d9mKmWZI1eF80mJt4Ao1obOvHMuwHm
aJISYLs0sigrxfD839DwdXxx+ZFAbvv9FubTdwhGniG6M6FN01ls3INK3FBP7J3k
TjQn9N1CtY+Fyl0Ph5Q8BxRD5j6g9n6f3hAoMQIdKIBVS4+Lmzkm0aUDRE3NdtMI
d40WyyJW625feSFFSivgQZr1v99pw8sRvKFZAl2+JncE/WmwoHcPGbjLZtu7QRZF
odVhzWUk6Etit6ptDnpRC/s2VLH89sdyfb/EYTAPagXFLIceiKb+kugMwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLvv1alMxrbQFEDtcTmIT4L7TGweMB8GA1UdIwQY
MBaAFCFIJpY4aLJlHPC9lEU4UUoSAPKFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVVnbWxqaG9zbVVjOEwyVVJUaFJTaElBOG9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC85MmFhMTUtZWI2Mi00ZjRhLWIwZDct
MjRlMjI0ODJhZWU2LzEvSVVnbWxqaG9zbVVjOEwyVVJUaFJTaElBOG9VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC85MmFhMTUtZWI2Mi00ZjRhLWIwZDctMjRlMjI0ODJhZWU2
LzEvSVVnbWxqaG9zbVVjOEwyVVJUaFJTaElBOG9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeIPPI0UA
dcexnzypCIy1MchkxBrPURFG7ZF7Umgq7rdLvb63p0mCgM5zXE5sRCKWDXZnAoSQ
qDkLM316EA37C8TibW4Ob2a8BItJAp/gRH29vkLIQ95LV2dV9fIkQFosM26wRxHE
0QVwoNPbYjM2xh1qjupGCxdX7HG5TR+BhaxwIf5BYKPqk77DCzem+Ui6omGbJC98
xKbSwCAYOWOw51n/icq97RwGZ0KnZDfMk/drxrBqqha2wUhdX4BuRYNh6Pm/5zPo
QtLunXaul8u75deLSFQtFBmOc7ehvAutbj6YxgB186qOgsRE1RCdxTcXeuSFepAr
70+DHmwRE4qqiQ==
-----END CERTIFICATE-----