Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/K-gWIR8hUSF0b5cPLvjMQL1_Ils.mft
File:                     K-gWIR8hUSF0b5cPLvjMQL1_Ils.mft (raw, json)
Hash identifier:          auONma0u2O6YYttnagO1XxWjyI3UtrwwGvJ58AAomFk=
Subject key identifier:   D8:F7:30:FC:7D:8C:9E:CF:98:44:08:C1:96:28:67:63:DA:9F:B8:F2
Authority key identifier: 2B:E8:16:21:1F:21:51:21:74:6F:97:0F:2E:F8:CC:40:BD:7F:22:5B
Certificate issuer:       /CN=2be816211f215121746f970f2ef8cc40bd7f225b
Certificate serial:       018B7F997B84FE5569969C8B1AD7BBB3ECE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K-gWIR8hUSF0b5cPLvjMQL1_Ils.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/K-gWIR8hUSF0b5cPLvjMQL1_Ils.mft
Manifest number:          CA
Signing time:             Mon 30 Oct 2023 08:00:46 +0000
Manifest this update:     Mon 30 Oct 2023 08:00:46 +0000
Manifest next update:     Tue 31 Oct 2023 08:00:46 +0000
Files and hashes:         1: K-gWIR8hUSF0b5cPLvjMQL1_Ils.crl (hash: ZTWNgCoe6KPvvtdWNJ55QV6p0AFxO5kvp14ynFGadz4=)
                          2: bSjWBIYFdSgtaLQwPCUrggKGERw.roa (hash: sdu1Z/kI/356UB2deXMBoaVfS4vW8Jde/O3C8z5gFMI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:7f:99:7b:84:fe:55:69:96:9c:8b:1a:d7:bb:b3:ec:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2be816211f215121746f970f2ef8cc40bd7f225b
        Validity
            Not Before: Oct 30 08:00:46 2023 GMT
            Not After : Oct 31 08:00:46 2023 GMT
        Subject: CN=d8f730fc7d8c9ecf984408c196286763da9fb8f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:6d:8c:a8:b0:b7:1f:ba:0e:5e:38:4c:39:4e:
                    80:0a:8e:77:3a:58:5d:2e:18:be:69:a6:25:5e:ab:
                    05:e7:34:39:b4:89:c5:ee:45:0f:e2:83:8b:3f:04:
                    b0:c9:8d:1b:9f:81:3b:26:cc:03:15:b8:29:ea:1e:
                    00:51:00:43:a3:61:0d:fa:46:1e:79:b9:19:fe:36:
                    90:ae:79:af:4f:8c:b2:c4:3d:bb:e6:84:c4:38:4a:
                    07:b3:a2:be:75:0b:d0:b0:a4:50:18:d6:c9:be:10:
                    32:bf:68:87:32:77:fb:b4:da:a7:af:48:a3:3f:65:
                    fe:ce:6e:1d:4a:4a:62:83:28:00:03:28:d5:88:90:
                    cc:1c:4d:21:e4:14:5c:78:95:54:7a:cf:ac:a8:5d:
                    6e:94:ed:16:ab:c5:fd:3f:23:0b:6b:aa:4f:eb:fe:
                    08:51:73:d9:16:4b:64:23:9e:1a:d3:e3:e2:91:65:
                    35:ce:2e:e0:e5:f0:89:f5:2e:58:76:7d:92:36:1e:
                    38:93:b8:b1:64:70:8b:e5:39:71:2c:00:ca:35:9e:
                    4e:e1:da:73:8d:ac:00:2c:3b:d8:f6:a4:b9:d1:5e:
                    99:1b:b1:3f:e1:07:9a:b1:65:e0:36:e7:5d:65:5a:
                    9c:db:13:7c:9b:b5:c7:c0:23:e6:35:f1:e2:26:b0:
                    04:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:F7:30:FC:7D:8C:9E:CF:98:44:08:C1:96:28:67:63:DA:9F:B8:F2
            X509v3 Authority Key Identifier:
                keyid:2B:E8:16:21:1F:21:51:21:74:6F:97:0F:2E:F8:CC:40:BD:7F:22:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K-gWIR8hUSF0b5cPLvjMQL1_Ils.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/K-gWIR8hUSF0b5cPLvjMQL1_Ils.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/K-gWIR8hUSF0b5cPLvjMQL1_Ils.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:cc:ef:1f:ae:8e:71:2a:a8:af:5c:34:18:a8:cc:90:ae:d1:
         4d:3e:91:e5:ba:c8:8f:96:b1:8e:dc:89:56:2d:43:c0:9b:52:
         71:34:96:f7:97:91:61:0b:30:e0:03:75:09:5f:b7:db:0f:e7:
         ee:df:5d:15:4d:ff:1d:70:92:b9:72:57:84:e8:3b:cf:7f:30:
         c6:88:59:c1:c7:7e:cb:a5:68:e7:f1:6d:d9:c4:00:28:21:85:
         c3:f6:cb:eb:be:ee:93:3a:4c:73:9f:f8:1d:a0:c7:b8:fe:04:
         81:71:3f:3e:fa:45:7d:2b:65:44:1e:30:5e:36:b3:24:64:b4:
         4d:88:50:e1:20:f8:91:c4:7c:7b:a6:36:18:fc:fc:69:cf:a9:
         8f:32:8d:b0:11:2a:bf:88:83:7b:16:16:4c:c4:bc:54:9f:b6:
         ff:16:83:95:d9:c4:fc:6a:11:7f:b3:72:86:a9:7f:06:5e:37:
         c8:06:e7:54:87:0a:db:3d:50:e1:7e:31:1f:b4:1a:60:10:77:
         85:1d:22:a3:08:a2:b8:55:5e:85:06:f2:54:82:26:08:9e:b7:
         99:1b:f3:4f:30:75:78:15:33:17:84:ab:cf:cc:83:0b:19:0e:
         3b:a5:90:6a:59:5a:20:d9:b0:aa:ec:d4:53:1c:f2:44:fb:64:
         fb:37:93:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYt/mXuE/lVplpyLGte7s+zjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiZTgxNjIxMWYyMTUxMjE3NDZmOTcwZjJlZjhjYzQwYmQ3
ZjIyNWIwHhcNMjMxMDMwMDgwMDQ2WhcNMjMxMDMxMDgwMDQ2WjAzMTEwLwYDVQQD
EyhkOGY3MzBmYzdkOGM5ZWNmOTg0NDA4YzE5NjI4Njc2M2RhOWZiOGYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApm2MqLC3H7oOXjhMOU6ACo53Olhd
Lhi+aaYlXqsF5zQ5tInF7kUP4oOLPwSwyY0bn4E7JswDFbgp6h4AUQBDo2EN+kYe
ebkZ/jaQrnmvT4yyxD275oTEOEoHs6K+dQvQsKRQGNbJvhAyv2iHMnf7tNqnr0ij
P2X+zm4dSkpigygAAyjViJDMHE0h5BRceJVUes+sqF1ulO0Wq8X9PyMLa6pP6/4I
UXPZFktkI54a0+PikWU1zi7g5fCJ9S5Ydn2SNh44k7ixZHCL5TlxLADKNZ5O4dpz
jawALDvY9qS50V6ZG7E/4QeasWXgNuddZVqc2xN8m7XHwCPmNfHiJrAEiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNj3MPx9jJ7PmEQIwZYoZ2Pan7jyMB8GA1UdIwQY
MBaAFCvoFiEfIVEhdG+XDy74zEC9fyJbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSy1nV0lSOGhVU0YwYjVjUEx2ak1RTDFfSWxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS83YTFhNjItZTQ4MS00YTE0LWFkNmUt
MzViZmY5NmRhNGM1LzEvSy1nV0lSOGhVU0YwYjVjUEx2ak1RTDFfSWxzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS83YTFhNjItZTQ4MS00YTE0LWFkNmUtMzViZmY5NmRhNGM1
LzEvSy1nV0lSOGhVU0YwYjVjUEx2ak1RTDFfSWxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlMzvH66O
cSqor1w0GKjMkK7RTT6R5brIj5axjtyJVi1DwJtScTSW95eRYQsw4AN1CV+32w/n
7t9dFU3/HXCSuXJXhOg7z38wxohZwcd+y6Vo5/Ft2cQAKCGFw/bL677ukzpMc5/4
HaDHuP4EgXE/PvpFfStlRB4wXjazJGS0TYhQ4SD4kcR8e6Y2GPz8ac+pjzKNsBEq
v4iDexYWTMS8VJ+2/xaDldnE/GoRf7Nyhql/Bl43yAbnVIcK2z1Q4X4xH7QaYBB3
hR0iowiiuFVehQbyVIImCJ63mRvzTzB1eBUzF4Srz8yDCxkOO6WQallaINmwquzU
UxzyRPtk+zeTaw==
-----END CERTIFICATE-----