Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/c696d0-7ee0-4bd3-8cd0-510102f6282a/1/aq-Y2PhLCy87EpVQfm52OztsMbk.mft
File:                     aq-Y2PhLCy87EpVQfm52OztsMbk.mft (raw, json)
Hash identifier:          KJBT1V2epRqUACKT9Ea0sF0ZKYlZlfw1i93XYaLTezc=
Subject key identifier:   08:93:2B:54:FC:1D:CC:53:78:A3:4D:ED:CA:11:33:DB:B8:E9:04:FA
Authority key identifier: 6A:AF:98:D8:F8:4B:0B:2F:3B:12:95:50:7E:6E:76:3B:3B:6C:31:B9
Certificate issuer:       /CN=6aaf98d8f84b0b2f3b1295507e6e763b3b6c31b9
Certificate serial:       018BD3498F8D5BF57F24BFDE57BE7B266AC7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aq-Y2PhLCy87EpVQfm52OztsMbk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/c696d0-7ee0-4bd3-8cd0-510102f6282a/1/aq-Y2PhLCy87EpVQfm52OztsMbk.mft
Manifest number:          084C
Signing time:             Wed 15 Nov 2023 14:01:35 +0000
Manifest this update:     Wed 15 Nov 2023 14:01:35 +0000
Manifest next update:     Thu 16 Nov 2023 14:01:35 +0000
Files and hashes:         1: aq-Y2PhLCy87EpVQfm52OztsMbk.crl (hash: P1jqt8WL0A+sTT7sz2fcQR3lQuCOdJYEwhsO7IZYNHA=)
                          2: j0yNuKMtyLvPwoaTcOdGjda9TBA.roa (hash: N0BqmsOGWPL21iyvDkDABhD/5bB23/Bu3bwXD+hD+so=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:d3:49:8f:8d:5b:f5:7f:24:bf:de:57:be:7b:26:6a:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6aaf98d8f84b0b2f3b1295507e6e763b3b6c31b9
        Validity
            Not Before: Nov 15 14:01:35 2023 GMT
            Not After : Nov 16 14:01:35 2023 GMT
        Subject: CN=08932b54fc1dcc5378a34dedca1133dbb8e904fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:80:af:82:98:18:bd:8a:dd:34:fc:6b:28:05:
                    73:91:6f:c2:a7:b2:07:77:c3:77:cb:32:8d:fc:15:
                    e5:71:75:52:28:af:82:1a:01:bb:43:4b:4d:b2:40:
                    e5:72:65:99:3f:6b:97:0b:32:3b:b7:fb:92:d8:a6:
                    8a:54:98:63:20:40:7d:a1:42:02:d1:49:bf:ea:2c:
                    27:a4:75:57:b4:1a:d7:df:6e:22:ce:a8:f7:34:cd:
                    1b:bc:6a:cf:99:e2:1d:0f:10:75:dd:b7:f9:f0:48:
                    76:3e:52:7f:48:5e:22:d2:f6:c4:6c:e8:18:91:51:
                    f8:28:3e:38:6e:6e:65:c5:e2:58:f1:49:19:d0:90:
                    0a:71:b8:87:bd:49:66:ff:c9:54:57:4d:52:b6:e7:
                    05:d6:23:b3:40:ea:8d:ad:ab:58:68:8b:e7:28:25:
                    05:fc:54:1b:8c:1b:55:8d:76:d3:d7:00:b1:82:a0:
                    04:c1:8a:75:50:e6:ec:ef:ef:65:63:ba:0b:95:82:
                    7c:6e:20:5f:1c:8a:7e:1a:58:a8:d9:82:22:bd:c9:
                    89:54:7e:cd:c8:23:62:b7:84:80:26:6b:f7:ee:29:
                    b7:1f:5e:b7:56:eb:5d:69:0b:e2:0f:b8:71:51:c6:
                    c2:4d:26:81:c1:f9:99:b5:38:b9:06:6c:6a:22:ad:
                    6e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:93:2B:54:FC:1D:CC:53:78:A3:4D:ED:CA:11:33:DB:B8:E9:04:FA
            X509v3 Authority Key Identifier:
                keyid:6A:AF:98:D8:F8:4B:0B:2F:3B:12:95:50:7E:6E:76:3B:3B:6C:31:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aq-Y2PhLCy87EpVQfm52OztsMbk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c696d0-7ee0-4bd3-8cd0-510102f6282a/1/aq-Y2PhLCy87EpVQfm52OztsMbk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c696d0-7ee0-4bd3-8cd0-510102f6282a/1/aq-Y2PhLCy87EpVQfm52OztsMbk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:29:f5:a0:b3:a2:64:05:74:9c:11:de:3b:56:82:4e:22:cf:
         39:dd:26:e9:43:45:6e:2b:33:07:42:23:78:bb:a8:3f:58:a0:
         6f:e2:53:10:7e:55:b0:aa:e7:dd:3b:2b:3d:88:c8:48:02:11:
         7d:b2:2a:dc:24:d7:33:29:16:49:df:b0:10:9b:38:d4:c4:be:
         f3:e3:ad:67:1e:76:ce:2f:f0:2d:d9:4e:93:13:5f:a6:41:1f:
         94:fc:1e:f1:26:b2:b1:d8:8e:aa:80:2f:e8:c8:89:03:c4:ad:
         f0:2f:91:62:29:c8:46:56:57:28:99:26:cf:e8:c5:b3:3b:ed:
         39:04:87:5a:cb:48:a6:3f:48:cd:a3:62:d9:30:a4:0b:05:a1:
         93:d5:d8:4e:41:b5:73:d8:04:5d:e3:dc:44:fe:7a:56:75:70:
         3c:4c:e0:94:b9:f3:c2:01:9e:c8:67:84:b3:b7:0f:80:d0:32:
         de:c4:a5:cd:b6:43:61:a6:15:56:32:1b:0e:c5:0e:e9:f7:45:
         b5:cd:42:88:69:7a:e2:ef:d5:3c:5c:a4:a2:d3:61:fe:dc:2d:
         ec:8f:91:51:d0:3f:c0:02:60:04:6d:f1:a5:db:a1:f0:78:00:
         67:b2:39:7c:f3:17:81:a6:43:6d:14:71:ca:fa:05:01:3d:18:
         f8:fc:8a:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYvTSY+NW/V/JL/eV757JmrHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhYWY5OGQ4Zjg0YjBiMmYzYjEyOTU1MDdlNmU3NjNiM2I2
YzMxYjkwHhcNMjMxMTE1MTQwMTM1WhcNMjMxMTE2MTQwMTM1WjAzMTEwLwYDVQQD
EygwODkzMmI1NGZjMWRjYzUzNzhhMzRkZWRjYTExMzNkYmI4ZTkwNGZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmICvgpgYvYrdNPxrKAVzkW/Cp7IH
d8N3yzKN/BXlcXVSKK+CGgG7Q0tNskDlcmWZP2uXCzI7t/uS2KaKVJhjIEB9oUIC
0Um/6iwnpHVXtBrX324izqj3NM0bvGrPmeIdDxB13bf58Eh2PlJ/SF4i0vbEbOgY
kVH4KD44bm5lxeJY8UkZ0JAKcbiHvUlm/8lUV01StucF1iOzQOqNratYaIvnKCUF
/FQbjBtVjXbT1wCxgqAEwYp1UObs7+9lY7oLlYJ8biBfHIp+Glio2YIivcmJVH7N
yCNit4SAJmv37im3H163VutdaQviD7hxUcbCTSaBwfmZtTi5BmxqIq1u2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAiTK1T8HcxTeKNN7coRM9u46QT6MB8GA1UdIwQY
MBaAFGqvmNj4SwsvOxKVUH5udjs7bDG5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXEtWTJQaExDeTg3RXBWUWZtNTJPenRzTWJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9jNjk2ZDAtN2VlMC00YmQzLThjZDAt
NTEwMTAyZjYyODJhLzEvYXEtWTJQaExDeTg3RXBWUWZtNTJPenRzTWJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS9jNjk2ZDAtN2VlMC00YmQzLThjZDAtNTEwMTAyZjYyODJh
LzEvYXEtWTJQaExDeTg3RXBWUWZtNTJPenRzTWJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeSn1oLOi
ZAV0nBHeO1aCTiLPOd0m6UNFbiszB0IjeLuoP1igb+JTEH5VsKrn3TsrPYjISAIR
fbIq3CTXMykWSd+wEJs41MS+8+OtZx52zi/wLdlOkxNfpkEflPwe8SaysdiOqoAv
6MiJA8St8C+RYinIRlZXKJkmz+jFszvtOQSHWstIpj9IzaNi2TCkCwWhk9XYTkG1
c9gEXePcRP56VnVwPEzglLnzwgGeyGeEs7cPgNAy3sSlzbZDYaYVVjIbDsUO6fdF
tc1CiGl64u/VPFykotNh/twt7I+RUdA/wAJgBG3xpduh8HgAZ7I5fPMXgaZDbRRx
yvoFAT0Y+PyKjA==
-----END CERTIFICATE-----