Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/4b97c4-de0c-45d7-8f17-5d0ae14563d7/1/ewqeoIbYHu1NKd5GPWApCI_jvsE.mft
File:                     ewqeoIbYHu1NKd5GPWApCI_jvsE.mft (raw, json)
Hash identifier:          gnpW+tic/fY3c/fcyyg1THFLbO8diRIiUZ1Y3+P771A=
Subject key identifier:   4C:1F:FE:A9:94:88:D6:6E:24:12:6D:5B:5F:09:ED:9A:29:82:F4:21
Authority key identifier: 7B:0A:9E:A0:86:D8:1E:ED:4D:29:DE:46:3D:60:29:08:8F:E3:BE:C1
Certificate issuer:       /CN=7b0a9ea086d81eed4d29de463d6029088fe3bec1
Certificate serial:       018BB809AF439AE321103FAD8AF59A237CB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ewqeoIbYHu1NKd5GPWApCI_jvsE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/4b97c4-de0c-45d7-8f17-5d0ae14563d7/1/ewqeoIbYHu1NKd5GPWApCI_jvsE.mft
Manifest number:          08BA
Signing time:             Fri 10 Nov 2023 07:02:04 +0000
Manifest this update:     Fri 10 Nov 2023 07:02:04 +0000
Manifest next update:     Sat 11 Nov 2023 07:02:04 +0000
Files and hashes:         1: G0-C8TdNuXWBFsgsTEs47CzrikY.roa (hash: EflKomNnjUqNqzfSW/owLI9W+Np4WaG2h8eIR8Zvs2c=)
                          2: ewqeoIbYHu1NKd5GPWApCI_jvsE.crl (hash: zZeBtIecwcPhmkIs/v0+ZuGz53pNqqSuhQv9wHAC1uk=)
                          3: j7DtpUFBvknr7iQmKjqpeynnKUs.roa (hash: KqRW4tuF9obdNVkJ7HEbzxsqsCw93BhTC/RhRXOgCbM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:b8:09:af:43:9a:e3:21:10:3f:ad:8a:f5:9a:23:7c:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b0a9ea086d81eed4d29de463d6029088fe3bec1
        Validity
            Not Before: Nov 10 07:02:04 2023 GMT
            Not After : Nov 11 07:02:04 2023 GMT
        Subject: CN=4c1ffea99488d66e24126d5b5f09ed9a2982f421
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:bb:bc:07:ec:ed:74:6b:73:12:20:92:6a:06:
                    c9:ce:b6:52:4e:7b:0b:3e:67:b3:aa:94:13:04:94:
                    eb:4d:c5:06:d6:e0:b7:01:20:fd:b9:d4:1a:50:91:
                    60:0b:80:0f:44:d5:a9:77:18:02:25:52:1c:29:7b:
                    32:c9:cd:88:e5:af:71:eb:39:5e:0b:ed:39:ff:07:
                    0e:c6:50:7f:6c:7f:ae:de:83:8b:6b:66:ea:f3:9f:
                    2e:36:ec:d8:48:87:b2:d7:2b:33:61:c9:8a:38:ce:
                    09:3b:f1:0d:ad:43:d2:4e:07:be:53:a1:10:f8:e8:
                    08:d9:c0:cd:f5:be:a8:87:04:71:bd:9b:2b:fb:ba:
                    5f:52:3c:6e:a8:8e:5e:29:59:19:2e:4e:a0:94:fa:
                    97:e3:e0:df:34:d4:3e:8f:b2:a4:cf:bc:5f:eb:9c:
                    be:58:28:87:3d:87:99:cb:2f:d8:fc:ce:8f:bd:be:
                    37:ae:0c:38:69:90:9c:71:07:68:1f:23:07:e0:c6:
                    8e:51:0d:92:56:cd:22:ca:ae:cf:ff:3c:b1:6a:b8:
                    b0:a3:33:fb:54:49:f5:a7:e1:02:3a:b1:03:4c:8b:
                    14:a4:29:7b:fb:c6:ca:71:fe:6e:a8:eb:0a:a9:dd:
                    78:f2:08:62:f3:19:d0:12:b9:38:4f:f2:1d:44:88:
                    b8:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:1F:FE:A9:94:88:D6:6E:24:12:6D:5B:5F:09:ED:9A:29:82:F4:21
            X509v3 Authority Key Identifier:
                keyid:7B:0A:9E:A0:86:D8:1E:ED:4D:29:DE:46:3D:60:29:08:8F:E3:BE:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ewqeoIbYHu1NKd5GPWApCI_jvsE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/4b97c4-de0c-45d7-8f17-5d0ae14563d7/1/ewqeoIbYHu1NKd5GPWApCI_jvsE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/4b97c4-de0c-45d7-8f17-5d0ae14563d7/1/ewqeoIbYHu1NKd5GPWApCI_jvsE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:78:cb:33:ae:75:1d:87:db:e0:2e:0d:89:98:fd:5a:4f:c1:
         a4:0d:c1:31:6a:d1:1f:95:ec:47:e7:1b:22:16:45:95:a6:6c:
         77:e0:66:31:c9:66:8d:6c:63:ae:9b:69:46:aa:23:41:3c:a5:
         09:65:88:1f:2e:34:0c:17:10:d0:9e:32:7b:78:87:37:12:0f:
         23:fa:7b:31:69:15:16:15:e2:29:57:b0:00:01:5e:7b:55:7c:
         81:07:d4:71:02:b9:95:ec:92:5a:43:9c:ed:a9:3f:8e:06:59:
         0a:c4:fa:7e:69:6c:b4:0b:d4:c7:e2:d0:4f:9a:8c:4e:e6:f2:
         07:68:ad:e7:64:c6:de:ab:d2:16:c2:7a:d8:df:e4:51:0d:68:
         38:1d:58:5f:fb:28:39:4d:e1:fb:6f:ca:25:27:69:e1:b7:d1:
         b0:0c:39:75:c3:d1:8a:81:02:03:96:fe:e1:af:68:ba:d1:be:
         be:5a:7b:a0:21:ac:3b:85:9b:0f:a1:d3:0c:be:13:a9:bc:c9:
         c7:3c:00:ac:f3:4c:dc:17:54:48:41:08:b0:95:6f:7e:4c:c7:
         38:a1:f2:30:a6:81:2e:e3:13:4a:9d:54:c0:2e:82:d4:f9:6b:
         4a:db:70:f8:12:b2:6b:80:1b:ea:ff:63:bd:04:2e:5b:3d:61:
         59:84:db:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYu4Ca9DmuMhED+tivWaI3y5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiMGE5ZWEwODZkODFlZWQ0ZDI5ZGU0NjNkNjAyOTA4OGZl
M2JlYzEwHhcNMjMxMTEwMDcwMjA0WhcNMjMxMTExMDcwMjA0WjAzMTEwLwYDVQQD
Eyg0YzFmZmVhOTk0ODhkNjZlMjQxMjZkNWI1ZjA5ZWQ5YTI5ODJmNDIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Lu8B+ztdGtzEiCSagbJzrZSTnsL
PmezqpQTBJTrTcUG1uC3ASD9udQaUJFgC4APRNWpdxgCJVIcKXsyyc2I5a9x6zle
C+05/wcOxlB/bH+u3oOLa2bq858uNuzYSIey1yszYcmKOM4JO/ENrUPSTge+U6EQ
+OgI2cDN9b6ohwRxvZsr+7pfUjxuqI5eKVkZLk6glPqX4+DfNNQ+j7Kkz7xf65y+
WCiHPYeZyy/Y/M6Pvb43rgw4aZCccQdoHyMH4MaOUQ2SVs0iyq7P/zyxariwozP7
VEn1p+ECOrEDTIsUpCl7+8bKcf5uqOsKqd148ghi8xnQErk4T/IdRIi47QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEwf/qmUiNZuJBJtW18J7ZopgvQhMB8GA1UdIwQY
MBaAFHsKnqCG2B7tTSneRj1gKQiP477BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXdxZW9JYllIdTFOS2Q1R1BXQXBDSV9qdnNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS80Yjk3YzQtZGUwYy00NWQ3LThmMTct
NWQwYWUxNDU2M2Q3LzEvZXdxZW9JYllIdTFOS2Q1R1BXQXBDSV9qdnNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS80Yjk3YzQtZGUwYy00NWQ3LThmMTctNWQwYWUxNDU2M2Q3
LzEvZXdxZW9JYllIdTFOS2Q1R1BXQXBDSV9qdnNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIXjLM651
HYfb4C4NiZj9Wk/BpA3BMWrRH5XsR+cbIhZFlaZsd+BmMclmjWxjrptpRqojQTyl
CWWIHy40DBcQ0J4ye3iHNxIPI/p7MWkVFhXiKVewAAFee1V8gQfUcQK5leySWkOc
7ak/jgZZCsT6fmlstAvUx+LQT5qMTubyB2it52TG3qvSFsJ62N/kUQ1oOB1YX/so
OU3h+2/KJSdp4bfRsAw5dcPRioECA5b+4a9outG+vlp7oCGsO4WbD6HTDL4TqbzJ
xzwArPNM3BdUSEEIsJVvfkzHOKHyMKaBLuMTSp1UwC6C1PlrSttw+BKya4Ab6v9j
vQQuWz1hWYTbpA==
-----END CERTIFICATE-----