Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c79f9d-fbb2-42d9-aa12-0e2daf0b9996/1/6qodwaOrKLNLx7D21MD7CVTAi4E.mft
File:                     6qodwaOrKLNLx7D21MD7CVTAi4E.mft (raw, json)
Hash identifier:          9us07jfD1zwjS41QfkUe9rT8VM8FhjHFdtra6NC2uAE=
Subject key identifier:   E9:FC:7D:00:7F:D7:35:AA:F3:08:3D:5D:3A:75:EA:0C:4D:E0:21:2C
Authority key identifier: EA:AA:1D:C1:A3:AB:28:B3:4B:C7:B0:F6:D4:C0:FB:09:54:C0:8B:81
Certificate issuer:       /CN=eaaa1dc1a3ab28b34bc7b0f6d4c0fb0954c08b81
Certificate serial:       018CA9018BF335A347488E074BE02B409343
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6qodwaOrKLNLx7D21MD7CVTAi4E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/c79f9d-fbb2-42d9-aa12-0e2daf0b9996/1/6qodwaOrKLNLx7D21MD7CVTAi4E.mft
Manifest number:          0948
Signing time:             Wed 27 Dec 2023 02:01:39 +0000
Manifest this update:     Wed 27 Dec 2023 02:01:39 +0000
Manifest next update:     Thu 28 Dec 2023 02:01:39 +0000
Files and hashes:         1: 6qodwaOrKLNLx7D21MD7CVTAi4E.crl (hash: dK58CyQVfQTOodp804TMWmweGKyUlZ1sd8OWx6GimoM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:a9:01:8b:f3:35:a3:47:48:8e:07:4b:e0:2b:40:93:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eaaa1dc1a3ab28b34bc7b0f6d4c0fb0954c08b81
        Validity
            Not Before: Dec 27 02:01:39 2023 GMT
            Not After : Dec 28 02:01:39 2023 GMT
        Subject: CN=e9fc7d007fd735aaf3083d5d3a75ea0c4de0212c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:2c:7d:2f:84:ca:d4:f7:b2:6b:a0:78:ff:5d:
                    34:06:ba:47:58:71:af:44:57:bc:20:12:41:1d:34:
                    96:89:70:30:a1:74:78:9d:b4:48:51:e6:fa:6c:5c:
                    67:e3:d9:4d:17:f2:dd:12:0d:70:06:46:62:aa:14:
                    ac:87:39:02:7d:c9:49:96:48:59:79:ac:ab:18:14:
                    14:f9:62:fa:03:fe:58:74:09:c4:22:03:3d:76:8e:
                    ff:3e:a7:7e:05:7a:b3:c5:4e:65:6b:69:33:f3:61:
                    04:90:13:20:5c:c9:12:b7:28:72:c7:d4:c3:e0:3d:
                    1e:4d:4a:26:01:b1:c9:6e:c8:6b:40:28:32:d2:d1:
                    9a:4b:80:c8:a4:e6:fb:18:72:82:f1:a1:7c:16:7d:
                    fa:c5:dd:14:a5:8e:94:05:cc:2c:ad:cf:a1:33:32:
                    35:b4:38:2f:94:c6:ac:30:ee:03:65:d5:a7:9d:07:
                    36:82:cc:f2:ab:e3:86:2a:38:10:49:3d:f5:bb:1f:
                    ae:f8:43:b8:21:79:b3:d0:a8:0c:f1:e9:c6:56:f0:
                    16:03:e8:5d:b6:9b:eb:15:0f:2e:18:a1:1a:a8:85:
                    7b:ee:48:69:0c:47:d0:3e:19:90:5b:4f:fd:e9:2a:
                    83:b3:80:c2:67:03:a9:ff:90:bc:54:3f:5c:7a:39:
                    d3:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:FC:7D:00:7F:D7:35:AA:F3:08:3D:5D:3A:75:EA:0C:4D:E0:21:2C
            X509v3 Authority Key Identifier:
                keyid:EA:AA:1D:C1:A3:AB:28:B3:4B:C7:B0:F6:D4:C0:FB:09:54:C0:8B:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qodwaOrKLNLx7D21MD7CVTAi4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c79f9d-fbb2-42d9-aa12-0e2daf0b9996/1/6qodwaOrKLNLx7D21MD7CVTAi4E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c79f9d-fbb2-42d9-aa12-0e2daf0b9996/1/6qodwaOrKLNLx7D21MD7CVTAi4E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:13:bd:3e:26:a4:a9:86:0b:da:e2:5a:f3:c1:a3:0a:87:38:
         7b:7f:ce:d6:d5:92:db:c9:55:be:b1:4a:7f:7f:7c:1d:94:b5:
         87:a4:c5:5c:c9:67:c9:9d:c0:60:ca:e5:46:32:82:98:ae:b8:
         79:8c:4d:7d:d5:80:e2:39:35:e0:8f:bb:b2:0d:c8:53:6e:12:
         fc:82:1f:d0:7e:82:9f:0e:18:e4:ba:42:5a:8f:6c:c7:36:59:
         26:03:4e:f0:0a:88:83:71:a0:11:ee:0a:5f:40:d5:e3:e4:b9:
         d9:35:88:6c:5d:8e:bc:53:b3:4a:98:db:15:e3:1d:a1:39:f7:
         62:be:9b:ac:f2:ca:1e:e6:0d:4f:2f:fb:b2:16:87:46:26:8d:
         69:34:a4:a3:55:49:90:91:a5:8a:33:5e:e6:73:9b:01:47:66:
         7f:dc:ad:4b:ff:0a:6e:7b:66:69:a5:df:d9:6a:1e:85:49:f6:
         8e:cb:56:a3:95:2d:c9:77:53:ed:6e:25:0e:af:1e:43:35:b2:
         c3:27:d8:31:44:69:7b:aa:f0:29:fd:22:54:32:35:da:8f:c3:
         d6:71:4d:ff:2b:38:27:c3:c5:8d:5a:de:fa:23:82:4b:08:9e:
         3a:f4:e1:6d:a7:2b:a4:84:61:ae:5f:a6:2c:d0:42:75:b9:8b:
         c3:f2:e7:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYypAYvzNaNHSI4HS+ArQJNDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhYWExZGMxYTNhYjI4YjM0YmM3YjBmNmQ0YzBmYjA5NTRj
MDhiODEwHhcNMjMxMjI3MDIwMTM5WhcNMjMxMjI4MDIwMTM5WjAzMTEwLwYDVQQD
EyhlOWZjN2QwMDdmZDczNWFhZjMwODNkNWQzYTc1ZWEwYzRkZTAyMTJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCx9L4TK1Peya6B4/100BrpHWHGv
RFe8IBJBHTSWiXAwoXR4nbRIUeb6bFxn49lNF/LdEg1wBkZiqhSshzkCfclJlkhZ
eayrGBQU+WL6A/5YdAnEIgM9do7/Pqd+BXqzxU5la2kz82EEkBMgXMkStyhyx9TD
4D0eTUomAbHJbshrQCgy0tGaS4DIpOb7GHKC8aF8Fn36xd0UpY6UBcwsrc+hMzI1
tDgvlMasMO4DZdWnnQc2gszyq+OGKjgQST31ux+u+EO4IXmz0KgM8enGVvAWA+hd
tpvrFQ8uGKEaqIV77khpDEfQPhmQW0/96SqDs4DCZwOp/5C8VD9cejnTNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOn8fQB/1zWq8wg9XTp16gxN4CEsMB8GA1UdIwQY
MBaAFOqqHcGjqyizS8ew9tTA+wlUwIuBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnFvZHdhT3JLTE5MeDdEMjFNRDdDVlRBaTRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9jNzlmOWQtZmJiMi00MmQ5LWFhMTIt
MGUyZGFmMGI5OTk2LzEvNnFvZHdhT3JLTE5MeDdEMjFNRDdDVlRBaTRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS9jNzlmOWQtZmJiMi00MmQ5LWFhMTItMGUyZGFmMGI5OTk2
LzEvNnFvZHdhT3JLTE5MeDdEMjFNRDdDVlRBaTRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKBO9Piak
qYYL2uJa88GjCoc4e3/O1tWS28lVvrFKf398HZS1h6TFXMlnyZ3AYMrlRjKCmK64
eYxNfdWA4jk14I+7sg3IU24S/IIf0H6Cnw4Y5LpCWo9sxzZZJgNO8AqIg3GgEe4K
X0DV4+S52TWIbF2OvFOzSpjbFeMdoTn3Yr6brPLKHuYNTy/7shaHRiaNaTSko1VJ
kJGlijNe5nObAUdmf9ytS/8KbntmaaXf2WoehUn2jstWo5UtyXdT7W4lDq8eQzWy
wyfYMURpe6rwKf0iVDI12o/D1nFN/ys4J8PFjVre+iOCSwieOvThbacrpIRhrl+m
LNBCdbmLw/LntA==
-----END CERTIFICATE-----