Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/4b43b5-0d95-4d42-8068-480e27adc79a/1/j6yhpbFwFeHRY929UaIX675Y5Gs.mft
File:                     j6yhpbFwFeHRY929UaIX675Y5Gs.mft (raw, json)
Hash identifier:          +gJT7++AIKRcIiiRE03MmziviR/WfV66hoKpiSBaQno=
Subject key identifier:   AA:B8:5C:96:5F:6C:82:D4:02:75:22:6B:03:5B:DE:CA:37:2A:ED:ED
Authority key identifier: 8F:AC:A1:A5:B1:70:15:E1:D1:63:DD:BD:51:A2:17:EB:BE:58:E4:6B
Certificate issuer:       /CN=8faca1a5b17015e1d163ddbd51a217ebbe58e46b
Certificate serial:       018BCB9018CF5E965CC1E730D8E1AA310510
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j6yhpbFwFeHRY929UaIX675Y5Gs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/4b43b5-0d95-4d42-8068-480e27adc79a/1/j6yhpbFwFeHRY929UaIX675Y5Gs.mft
Manifest number:          0705
Signing time:             Tue 14 Nov 2023 02:01:40 +0000
Manifest this update:     Tue 14 Nov 2023 02:01:40 +0000
Manifest next update:     Wed 15 Nov 2023 02:01:40 +0000
Files and hashes:         1: 1-bsSLCGQbbBmhmMjW6k6LwFr1FM.roa (hash: CGq87yPaDZPT7VFhizhfdy/j3ZnEJa+fN8bsPvCXuP8=)
                          2: BOD3NTRChY0pYytpo5j1KmgX43s.roa (hash: mPIKg+Sc7dkV8KQjEF5AKNYhhxbOGos4VuZwIOE4mX4=)
                          3: j6yhpbFwFeHRY929UaIX675Y5Gs.crl (hash: lD5qpk2toOxmAWTMLBSuvqjK2/fWF9t6x2Yzpaz03P0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:cb:90:18:cf:5e:96:5c:c1:e7:30:d8:e1:aa:31:05:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8faca1a5b17015e1d163ddbd51a217ebbe58e46b
        Validity
            Not Before: Nov 14 02:01:40 2023 GMT
            Not After : Nov 15 02:01:40 2023 GMT
        Subject: CN=aab85c965f6c82d40275226b035bdeca372aeded
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:87:cb:ab:0d:46:52:a5:7e:b4:57:a8:d9:8b:
                    88:11:f7:05:45:0b:46:e3:d2:4c:83:e1:40:90:9c:
                    df:62:ff:20:e2:29:6b:a5:87:9b:ee:2a:15:1e:30:
                    c3:b9:25:47:0e:7b:85:5c:ba:2e:51:bf:0d:a9:76:
                    22:30:74:93:4e:41:2c:f3:73:b8:33:07:80:70:a5:
                    c5:2f:0b:19:ea:25:d0:e4:d1:6c:e9:95:f3:98:14:
                    2b:23:24:30:06:3e:94:ad:6b:5f:aa:61:6c:14:09:
                    61:ef:4c:e3:44:a0:84:57:fd:56:d8:4b:7e:44:33:
                    04:9b:7e:82:71:39:1d:e5:94:64:90:60:87:45:37:
                    67:ac:8b:81:6b:7f:69:f4:4d:12:ff:ca:92:59:56:
                    08:20:d5:fa:f0:0c:92:2e:73:52:6d:10:86:6b:21:
                    f1:8a:82:23:f2:92:3b:16:6c:07:d3:aa:d4:12:a1:
                    25:7e:c9:fc:39:86:ed:e4:56:b2:35:0c:a3:f9:71:
                    b8:e3:45:e9:7c:19:89:ef:05:34:da:f9:5a:8f:4f:
                    b4:7f:db:01:9d:0a:e9:60:33:5b:9e:9f:ce:18:39:
                    ee:44:3e:a0:bb:2b:e2:02:3f:00:55:16:21:d7:34:
                    33:60:cd:82:86:1c:7a:00:c7:8d:83:ad:9d:6b:fe:
                    41:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:B8:5C:96:5F:6C:82:D4:02:75:22:6B:03:5B:DE:CA:37:2A:ED:ED
            X509v3 Authority Key Identifier:
                keyid:8F:AC:A1:A5:B1:70:15:E1:D1:63:DD:BD:51:A2:17:EB:BE:58:E4:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j6yhpbFwFeHRY929UaIX675Y5Gs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4b43b5-0d95-4d42-8068-480e27adc79a/1/j6yhpbFwFeHRY929UaIX675Y5Gs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4b43b5-0d95-4d42-8068-480e27adc79a/1/j6yhpbFwFeHRY929UaIX675Y5Gs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:46:73:74:1d:82:12:31:70:3f:19:12:bc:0a:be:e0:9e:5f:
         1f:1f:03:37:37:2f:ad:31:25:04:0f:1d:e4:2e:2b:2f:ed:b8:
         80:3c:22:46:d2:77:f3:f0:7d:13:b4:d3:c0:3d:4c:d8:f7:39:
         a8:67:1f:29:9d:e0:b5:a3:9c:b3:a6:87:c8:72:af:c5:f6:52:
         9b:38:65:4f:58:fe:21:f8:51:fe:82:7e:6e:1b:fe:ab:f2:d3:
         d8:4d:91:53:f4:43:8b:05:e5:52:c9:6d:52:f7:e7:e1:72:5a:
         14:2a:25:7e:93:a7:fd:45:7c:ad:33:19:e1:c2:a2:9c:99:9e:
         05:b4:8d:c7:c2:72:b2:47:fe:fb:97:83:50:60:15:1c:cb:85:
         e6:e4:88:1e:31:91:ad:a6:bb:e3:0d:8a:32:b4:84:62:2c:9a:
         1e:38:af:09:1d:a6:88:3e:5e:c2:07:80:dc:94:bb:bb:77:bc:
         e3:4f:2c:fb:d0:ef:3a:3e:0d:bc:0f:c1:96:18:24:87:f2:2f:
         25:3b:15:20:e4:93:32:2d:67:9d:2b:88:01:a3:8d:e4:ff:ee:
         89:1a:84:d7:70:80:c2:1f:4a:57:30:ce:23:ea:5d:3d:04:96:
         bf:fc:f4:62:12:95:e1:69:8c:53:69:b0:22:80:7e:38:e9:c2:
         66:ff:ce:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYvLkBjPXpZcwecw2OGqMQUQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmYWNhMWE1YjE3MDE1ZTFkMTYzZGRiZDUxYTIxN2ViYmU1
OGU0NmIwHhcNMjMxMTE0MDIwMTQwWhcNMjMxMTE1MDIwMTQwWjAzMTEwLwYDVQQD
EyhhYWI4NWM5NjVmNmM4MmQ0MDI3NTIyNmIwMzViZGVjYTM3MmFlZGVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4fLqw1GUqV+tFeo2YuIEfcFRQtG
49JMg+FAkJzfYv8g4ilrpYeb7ioVHjDDuSVHDnuFXLouUb8NqXYiMHSTTkEs83O4
MweAcKXFLwsZ6iXQ5NFs6ZXzmBQrIyQwBj6UrWtfqmFsFAlh70zjRKCEV/1W2Et+
RDMEm36CcTkd5ZRkkGCHRTdnrIuBa39p9E0S/8qSWVYIINX68AySLnNSbRCGayHx
ioIj8pI7FmwH06rUEqElfsn8OYbt5FayNQyj+XG440XpfBmJ7wU02vlaj0+0f9sB
nQrpYDNbnp/OGDnuRD6guyviAj8AVRYh1zQzYM2Chhx6AMeNg62da/5BEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKq4XJZfbILUAnUiawNb3so3Ku3tMB8GA1UdIwQY
MBaAFI+soaWxcBXh0WPdvVGiF+u+WORrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajZ5aHBiRndGZUhSWTkyOVVhSVg2NzVZNUdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy80YjQzYjUtMGQ5NS00ZDQyLTgwNjgt
NDgwZTI3YWRjNzlhLzEvajZ5aHBiRndGZUhSWTkyOVVhSVg2NzVZNUdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy80YjQzYjUtMGQ5NS00ZDQyLTgwNjgtNDgwZTI3YWRjNzlh
LzEvajZ5aHBiRndGZUhSWTkyOVVhSVg2NzVZNUdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARkZzdB2C
EjFwPxkSvAq+4J5fHx8DNzcvrTElBA8d5C4rL+24gDwiRtJ38/B9E7TTwD1M2Pc5
qGcfKZ3gtaOcs6aHyHKvxfZSmzhlT1j+IfhR/oJ+bhv+q/LT2E2RU/RDiwXlUslt
Uvfn4XJaFColfpOn/UV8rTMZ4cKinJmeBbSNx8Jyskf++5eDUGAVHMuF5uSIHjGR
raa74w2KMrSEYiyaHjivCR2miD5ewgeA3JS7u3e8408s+9DvOj4NvA/Blhgkh/Iv
JTsVIOSTMi1nnSuIAaON5P/uiRqE13CAwh9KVzDOI+pdPQSWv/z0YhKV4WmMU2mw
IoB+OOnCZv/O8Q==
-----END CERTIFICATE-----