Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/89b5e2-5c38-4f79-a03e-f193b9a36b5a/1/FUnxxKhu2QyvgZXdhNBA6sihm4g.mft
File:                     FUnxxKhu2QyvgZXdhNBA6sihm4g.mft (raw, json)
Hash identifier:          WNt+5Z/YeXarsI54xmzevOefQd8VubRJSgFOpmvzHMs=
Subject key identifier:   35:28:D9:E0:B9:EE:8B:A1:84:17:6D:3D:FE:39:11:D3:AE:0D:28:71
Authority key identifier: 15:49:F1:C4:A8:6E:D9:0C:AF:81:95:DD:84:D0:40:EA:C8:A1:9B:88
Certificate issuer:       /CN=1549f1c4a86ed90caf8195dd84d040eac8a19b88
Certificate serial:       018BEB88510F09B668DE0307EF79914DB2FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FUnxxKhu2QyvgZXdhNBA6sihm4g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/89b5e2-5c38-4f79-a03e-f193b9a36b5a/1/FUnxxKhu2QyvgZXdhNBA6sihm4g.mft
Manifest number:          0856
Signing time:             Mon 20 Nov 2023 07:01:01 +0000
Manifest this update:     Mon 20 Nov 2023 07:01:01 +0000
Manifest next update:     Tue 21 Nov 2023 07:01:01 +0000
Files and hashes:         1: FUnxxKhu2QyvgZXdhNBA6sihm4g.crl (hash: ptEiWDQ6NFh0Zk0VxmXIBiEU+ndRvOHcOdufX1H8/NY=)
                          2: VS6A9Nbd5sl9Hf2TdN7cMgdngfY.roa (hash: Svc2ldKL+Y1ZgSQNM8lK7XoXfQs5duEl69yOb3AypNo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:eb:88:51:0f:09:b6:68:de:03:07:ef:79:91:4d:b2:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1549f1c4a86ed90caf8195dd84d040eac8a19b88
        Validity
            Not Before: Nov 20 07:01:01 2023 GMT
            Not After : Nov 21 07:01:01 2023 GMT
        Subject: CN=3528d9e0b9ee8ba184176d3dfe3911d3ae0d2871
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:13:e1:9c:40:08:e1:74:3d:46:45:6f:b6:da:
                    98:4b:a4:d0:15:d8:9f:e3:d2:38:8f:1b:cf:88:5d:
                    07:86:5c:48:54:1d:6c:a8:77:1d:22:7e:8c:76:28:
                    f0:22:94:b2:94:15:f3:9b:b8:d9:6a:e3:71:d1:21:
                    14:be:db:d7:b6:e4:bb:25:38:c5:a1:72:fc:6f:b6:
                    2f:f3:46:32:38:72:ea:3e:b4:1a:53:95:31:b9:69:
                    c2:64:1d:4e:dc:2c:bb:23:66:6f:8b:dd:c0:18:ca:
                    92:c5:74:a3:6d:84:ab:cc:77:2c:25:6d:4c:11:71:
                    8c:15:69:68:a8:0b:b2:a0:f5:53:6d:fa:65:c8:8f:
                    54:02:5a:8f:28:ab:91:21:46:cc:02:68:b7:ff:c0:
                    3c:78:e6:f4:fd:55:51:fd:3e:54:86:ec:50:ae:a4:
                    ae:dd:19:a9:44:72:ad:d1:de:34:e1:ff:46:b6:31:
                    00:fe:71:af:23:30:8c:ff:e4:e3:ee:89:b5:53:25:
                    fb:e2:3b:8a:0d:da:c2:0c:18:1d:d1:22:28:a5:c3:
                    57:47:fe:2a:4e:0d:a7:e9:85:e8:cd:86:3b:42:9e:
                    6d:40:9e:b6:1c:8d:fe:db:a3:28:0a:fd:02:73:a7:
                    e6:c6:fb:b8:10:e7:2a:32:91:d2:28:35:19:9c:24:
                    4d:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:28:D9:E0:B9:EE:8B:A1:84:17:6D:3D:FE:39:11:D3:AE:0D:28:71
            X509v3 Authority Key Identifier:
                keyid:15:49:F1:C4:A8:6E:D9:0C:AF:81:95:DD:84:D0:40:EA:C8:A1:9B:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FUnxxKhu2QyvgZXdhNBA6sihm4g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/89b5e2-5c38-4f79-a03e-f193b9a36b5a/1/FUnxxKhu2QyvgZXdhNBA6sihm4g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/89b5e2-5c38-4f79-a03e-f193b9a36b5a/1/FUnxxKhu2QyvgZXdhNBA6sihm4g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:60:2b:87:b1:29:73:9c:94:8d:fa:84:fb:c5:f5:fe:f8:fa:
         33:57:84:0a:34:14:b5:42:1f:e3:3f:dc:94:2f:68:32:ad:5f:
         1a:27:0c:60:8a:c3:38:f6:32:f6:1b:99:ec:1e:95:5f:d5:c6:
         27:c5:e5:6d:61:15:8a:33:53:4c:fa:b7:f1:20:88:d2:9d:1d:
         58:5d:4b:b7:0b:bf:81:ac:3b:ee:c5:17:db:66:da:4e:84:0e:
         84:0b:e4:b0:a2:b1:9f:a3:59:57:3a:a2:04:a7:69:4b:dc:95:
         ed:42:7d:25:78:d1:ee:30:f0:6b:81:cf:4c:a5:ab:f8:de:1c:
         5b:56:27:ef:b9:84:89:61:a8:fa:1c:f0:ce:63:10:ce:d1:65:
         c2:83:27:fb:04:92:71:29:e6:a4:8a:a6:f9:e8:55:8f:bd:83:
         9b:1f:58:e7:15:0f:86:52:3b:6d:6e:a7:8b:d8:43:4d:ae:2a:
         c7:d6:79:cc:89:24:19:ae:09:b1:7e:b7:ef:cf:0d:67:47:0b:
         ac:e2:28:43:98:74:8f:bb:68:bf:a9:6a:10:c4:be:df:3d:06:
         5d:31:39:bb:6f:97:51:d7:df:e7:36:91:69:0c:00:30:f7:0c:
         2e:82:d5:63:3e:e5:5a:34:9e:dd:ed:29:1f:e7:59:ed:94:36:
         a2:9a:bc:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYvriFEPCbZo3gMH73mRTbL/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1NDlmMWM0YTg2ZWQ5MGNhZjgxOTVkZDg0ZDA0MGVhYzhh
MTliODgwHhcNMjMxMTIwMDcwMTAxWhcNMjMxMTIxMDcwMTAxWjAzMTEwLwYDVQQD
EygzNTI4ZDllMGI5ZWU4YmExODQxNzZkM2RmZTM5MTFkM2FlMGQyODcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhPhnEAI4XQ9RkVvttqYS6TQFdif
49I4jxvPiF0HhlxIVB1sqHcdIn6MdijwIpSylBXzm7jZauNx0SEUvtvXtuS7JTjF
oXL8b7Yv80YyOHLqPrQaU5UxuWnCZB1O3Cy7I2Zvi93AGMqSxXSjbYSrzHcsJW1M
EXGMFWloqAuyoPVTbfplyI9UAlqPKKuRIUbMAmi3/8A8eOb0/VVR/T5UhuxQrqSu
3RmpRHKt0d404f9GtjEA/nGvIzCM/+Tj7om1UyX74juKDdrCDBgd0SIopcNXR/4q
Tg2n6YXozYY7Qp5tQJ62HI3+26MoCv0Cc6fmxvu4EOcqMpHSKDUZnCRNuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDUo2eC57ouhhBdtPf45EdOuDShxMB8GA1UdIwQY
MBaAFBVJ8cSobtkMr4GV3YTQQOrIoZuIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlVueHhLaHUyUXl2Z1pYZGhOQkE2c2lobTRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi84OWI1ZTItNWMzOC00Zjc5LWEwM2Ut
ZjE5M2I5YTM2YjVhLzEvRlVueHhLaHUyUXl2Z1pYZGhOQkE2c2lobTRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi84OWI1ZTItNWMzOC00Zjc5LWEwM2UtZjE5M2I5YTM2YjVh
LzEvRlVueHhLaHUyUXl2Z1pYZGhOQkE2c2lobTRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx2Arh7Ep
c5yUjfqE+8X1/vj6M1eECjQUtUIf4z/clC9oMq1fGicMYIrDOPYy9huZ7B6VX9XG
J8XlbWEVijNTTPq38SCI0p0dWF1Ltwu/gaw77sUX22baToQOhAvksKKxn6NZVzqi
BKdpS9yV7UJ9JXjR7jDwa4HPTKWr+N4cW1Yn77mEiWGo+hzwzmMQztFlwoMn+wSS
cSnmpIqm+ehVj72Dmx9Y5xUPhlI7bW6ni9hDTa4qx9Z5zIkkGa4JsX63788NZ0cL
rOIoQ5h0j7tov6lqEMS+3z0GXTE5u2+XUdff5zaRaQwAMPcMLoLVYz7lWjSe3e0p
H+dZ7ZQ2opq8kw==
-----END CERTIFICATE-----