Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/3f9886-04ee-4cd3-8a71-9d9624f54e91/1/1-0-QOr8JOa4qI1prfcRD4bmOvj4.mft
File:                     1-0-QOr8JOa4qI1prfcRD4bmOvj4.mft (raw, json)
Hash identifier:          LNuYu/7pRUvOKRsaRuBDpVyTBzYEm9JBzCIkie14buc=
Subject key identifier:   A9:B4:2C:9D:33:5C:68:7B:71:B5:57:86:05:B5:3D:DC:7B:C5:EC:F9
Authority key identifier: FB:4F:90:3A:BF:09:39:AE:2A:23:5A:6B:7D:C4:43:E1:B9:8E:BE:3E
Certificate issuer:       /CN=fb4f903abf0939ae2a235a6b7dc443e1b98ebe3e
Certificate serial:       018A2A9C56DC2B0EF7090882F3E85694B57E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-0-QOr8JOa4qI1prfcRD4bmOvj4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/3f9886-04ee-4cd3-8a71-9d9624f54e91/1/1-0-QOr8JOa4qI1prfcRD4bmOvj4.mft
Manifest number:          09AD
Signing time:             Fri 25 Aug 2023 02:53:23 +0000
Manifest this update:     Fri 25 Aug 2023 02:53:23 +0000
Manifest next update:     Sat 26 Aug 2023 02:53:23 +0000
Files and hashes:         1: 1-0-QOr8JOa4qI1prfcRD4bmOvj4.crl (hash: JdUmsXyugystkqMFGetOfoN/F8Ui0P5r7miHeL/YiLY=)
                          2: IYPs6gX1YiRngBMUFbEc4VMrX1w.roa (hash: bjmN+t6ZgDZnnss026SG6UYNQT9+P5hK9f0C868LEkE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:2a:9c:56:dc:2b:0e:f7:09:08:82:f3:e8:56:94:b5:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb4f903abf0939ae2a235a6b7dc443e1b98ebe3e
        Validity
            Not Before: Aug 25 02:53:23 2023 GMT
            Not After : Aug 26 02:53:23 2023 GMT
        Subject: CN=a9b42c9d335c687b71b5578605b53ddc7bc5ecf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ca:90:40:1e:ed:e9:f9:23:3f:aa:35:09:59:
                    7c:72:cf:d0:59:1a:15:52:d2:82:21:ac:4a:ab:e0:
                    77:c1:da:02:9b:c0:87:09:b0:e0:06:01:34:d9:30:
                    eb:ab:7f:70:04:b2:64:52:14:e7:b0:85:e6:7a:2c:
                    5c:86:53:26:30:93:7f:cc:7f:eb:0d:c2:92:b2:ee:
                    a7:97:dc:27:d6:c6:17:73:7a:10:cf:7d:a6:8e:30:
                    3b:2e:75:f0:d9:12:18:e3:c6:50:a8:3e:c1:98:01:
                    f4:b1:33:95:da:d7:57:71:68:1d:15:75:d4:c1:d7:
                    d8:eb:f6:2d:43:ae:7b:a2:1c:0c:ae:eb:9a:38:30:
                    36:03:2b:16:b1:e6:88:53:29:0c:ac:9f:00:7c:9b:
                    65:e6:66:e9:91:24:7c:bb:ae:8a:d0:93:d9:89:06:
                    6d:b7:c3:6e:7c:8a:fb:9d:f3:99:67:8f:b0:69:b8:
                    6a:61:10:3d:c1:cf:4a:1b:8a:76:3f:07:54:13:42:
                    26:57:aa:2f:5a:d8:06:da:13:b9:c4:17:7a:b0:7b:
                    d3:43:4c:9d:27:2d:25:84:a4:be:33:1c:7a:bd:8e:
                    b0:c5:52:a2:d6:0e:96:f7:cf:6b:1f:5b:11:eb:09:
                    8d:04:26:ce:db:29:9e:a5:a1:5d:1c:99:e9:12:f3:
                    0b:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:B4:2C:9D:33:5C:68:7B:71:B5:57:86:05:B5:3D:DC:7B:C5:EC:F9
            X509v3 Authority Key Identifier:
                keyid:FB:4F:90:3A:BF:09:39:AE:2A:23:5A:6B:7D:C4:43:E1:B9:8E:BE:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-0-QOr8JOa4qI1prfcRD4bmOvj4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3f9886-04ee-4cd3-8a71-9d9624f54e91/1/1-0-QOr8JOa4qI1prfcRD4bmOvj4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3f9886-04ee-4cd3-8a71-9d9624f54e91/1/1-0-QOr8JOa4qI1prfcRD4bmOvj4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:0d:fb:d8:e6:03:7b:c0:be:21:1e:85:2e:d4:22:74:f8:aa:
         3b:03:fe:00:83:80:93:15:40:58:09:2e:a2:aa:3f:01:e8:76:
         b4:93:4d:56:8f:25:89:07:9f:df:6d:5f:3c:3f:3d:df:5c:0d:
         fa:24:aa:a1:50:51:f8:f0:b3:a6:33:3f:41:0e:66:e5:fd:fe:
         08:4b:26:0a:73:6f:ab:78:95:8c:7e:59:bf:5a:a7:41:56:63:
         e4:9f:e7:5f:99:ba:dc:cd:2a:5b:38:fa:26:b5:73:0c:c5:f5:
         68:1a:77:12:98:cb:9e:85:da:86:fa:ed:4f:05:f8:92:38:20:
         67:05:77:69:f3:43:aa:14:5b:72:7e:f1:c0:1b:4d:f9:08:bb:
         5d:a4:1b:d9:9a:53:0e:81:80:ad:e8:1f:d7:f1:28:f4:55:bd:
         53:f7:7f:c2:25:e3:77:82:c0:94:1e:4d:d4:9a:a6:bc:18:c8:
         96:82:fb:f6:18:a3:56:76:e1:97:c8:1a:cf:4b:cd:f1:75:e1:
         41:97:8c:1d:eb:97:a3:56:1c:a1:56:12:d8:c6:75:10:fb:8d:
         85:ba:29:e5:8a:04:c2:1e:af:c5:7e:6d:2c:b1:4a:02:f4:4f:
         e4:0c:e9:2c:e2:bd:65:77:19:46:fd:94:a9:21:5a:0f:f6:5a:
         62:2a:09:a5
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAYoqnFbcKw73CQiC8+hWlLV+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiNGY5MDNhYmYwOTM5YWUyYTIzNWE2YjdkYzQ0M2UxYjk4
ZWJlM2UwHhcNMjMwODI1MDI1MzIzWhcNMjMwODI2MDI1MzIzWjAzMTEwLwYDVQQD
EyhhOWI0MmM5ZDMzNWM2ODdiNzFiNTU3ODYwNWI1M2RkYzdiYzVlY2Y5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8qQQB7t6fkjP6o1CVl8cs/QWRoV
UtKCIaxKq+B3wdoCm8CHCbDgBgE02TDrq39wBLJkUhTnsIXmeixchlMmMJN/zH/r
DcKSsu6nl9wn1sYXc3oQz32mjjA7LnXw2RIY48ZQqD7BmAH0sTOV2tdXcWgdFXXU
wdfY6/YtQ657ohwMruuaODA2AysWseaIUykMrJ8AfJtl5mbpkSR8u66K0JPZiQZt
t8NufIr7nfOZZ4+wabhqYRA9wc9KG4p2PwdUE0ImV6ovWtgG2hO5xBd6sHvTQ0yd
Jy0lhKS+Mxx6vY6wxVKi1g6W989rH1sR6wmNBCbO2ymepaFdHJnpEvMLVwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFKm0LJ0zXGh7cbVXhgW1Pdx7xez5MB8GA1UdIwQY
MBaAFPtPkDq/CTmuKiNaa33EQ+G5jr4+MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS0wLVFPcjhKT2E0cUkxcHJmY1JENGJtT3ZqNC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDUvM2Y5ODg2LTA0ZWUtNGNkMy04YTcx
LTlkOTYyNGY1NGU5MS8xLzEtMC1RT3I4Sk9hNHFJMXByZmNSRDRibU92ajQubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzQ1LzNmOTg4Ni0wNGVlLTRjZDMtOGE3MS05ZDk2MjRmNTRl
OTEvMS8xLTAtUU9yOEpPYTRxSTFwcmZjUkQ0Ym1Pdmo0LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVA37
2OYDe8C+IR6FLtQidPiqOwP+AIOAkxVAWAkuoqo/Aeh2tJNNVo8liQef321fPD89
31wN+iSqoVBR+PCzpjM/QQ5m5f3+CEsmCnNvq3iVjH5Zv1qnQVZj5J/nX5m63M0q
Wzj6JrVzDMX1aBp3EpjLnoXahvrtTwX4kjggZwV3afNDqhRbcn7xwBtN+Qi7XaQb
2ZpTDoGAregf1/Eo9FW9U/d/wiXjd4LAlB5N1JqmvBjIloL79hijVnbhl8gaz0vN
8XXhQZeMHeuXo1YcoVYS2MZ1EPuNhbop5YoEwh6vxX5tLLFKAvRP5AzpLOK9ZXcZ
Rv2UqSFaD/ZaYioJpQ==
-----END CERTIFICATE-----