Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/9ae6d0-d731-454d-b870-5286384ae236/1/vqXCo0VC6nZ-YtT6XaWQcUZ74aw.mft
File:                     vqXCo0VC6nZ-YtT6XaWQcUZ74aw.mft (raw, json)
Hash identifier:          BmwphzUoEb9cWcKmHdlh8YwYU6oMp9GGjeSGk+J3SQQ=
Subject key identifier:   5F:A2:21:76:F9:4F:3D:96:29:55:E3:29:19:60:A9:28:59:05:28:F7
Authority key identifier: BE:A5:C2:A3:45:42:EA:76:7E:62:D4:FA:5D:A5:90:71:46:7B:E1:AC
Certificate issuer:       /CN=bea5c2a34542ea767e62d4fa5da59071467be1ac
Certificate serial:       018B366E4969F972B5018053A1E0173B49EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vqXCo0VC6nZ-YtT6XaWQcUZ74aw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/9ae6d0-d731-454d-b870-5286384ae236/1/vqXCo0VC6nZ-YtT6XaWQcUZ74aw.mft
Manifest number:          057D
Signing time:             Mon 16 Oct 2023 03:01:19 +0000
Manifest this update:     Mon 16 Oct 2023 03:01:19 +0000
Manifest next update:     Tue 17 Oct 2023 03:01:19 +0000
Files and hashes:         1: rBqbXbn-j3W5QIF8eJSwHLcjrqo.roa (hash: n8K4a4+Y7wxAiJS4o4URQXT2+8bix0xEQMxhHBEsWY8=)
                          2: vqXCo0VC6nZ-YtT6XaWQcUZ74aw.crl (hash: 3SAR+jHAhHBBDn19Lu2/sS35bCfYpeN5s6n3GxJX32I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:36:6e:49:69:f9:72:b5:01:80:53:a1:e0:17:3b:49:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bea5c2a34542ea767e62d4fa5da59071467be1ac
        Validity
            Not Before: Oct 16 03:01:19 2023 GMT
            Not After : Oct 17 03:01:19 2023 GMT
        Subject: CN=5fa22176f94f3d962955e3291960a928590528f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:31:ae:b6:85:00:98:1a:8e:00:c8:4c:9c:de:
                    7f:55:27:03:e3:1b:10:67:f4:4a:9f:63:64:50:e1:
                    aa:54:31:6a:00:7a:d9:0a:ea:db:81:23:2b:a9:87:
                    ad:3c:da:c5:16:91:84:c4:10:ef:95:f5:fe:a0:e6:
                    5b:eb:77:08:c0:b8:d5:42:ca:fe:8c:61:fb:8c:54:
                    95:38:c0:99:11:d6:dd:4b:71:f5:be:63:cb:b4:29:
                    e5:6d:9c:85:5c:e5:aa:b4:f8:80:eb:30:96:0b:d3:
                    b5:46:49:8d:f4:a4:6a:d2:a4:1c:fa:98:aa:d4:91:
                    5a:18:36:23:a0:68:02:63:6f:92:7a:81:35:6d:21:
                    48:24:31:74:4e:e1:f6:21:b9:66:73:94:57:4b:e3:
                    00:3c:56:8e:15:fb:da:f1:0c:b0:84:5d:1f:53:1a:
                    7a:74:23:e5:55:57:41:ba:ea:70:9c:4a:18:c4:4c:
                    d5:ae:5a:21:62:9f:dc:ea:30:5c:c6:f0:3e:b5:32:
                    cf:97:ad:7f:45:c0:1b:c1:69:91:4a:d6:64:38:20:
                    77:63:fc:cc:64:59:5e:41:05:54:db:97:6e:0c:ab:
                    f3:6c:40:29:d9:23:8c:53:9a:e8:43:9d:d5:01:de:
                    fc:d1:60:48:02:70:e6:89:36:cd:29:d3:2f:25:a2:
                    37:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:A2:21:76:F9:4F:3D:96:29:55:E3:29:19:60:A9:28:59:05:28:F7
            X509v3 Authority Key Identifier:
                keyid:BE:A5:C2:A3:45:42:EA:76:7E:62:D4:FA:5D:A5:90:71:46:7B:E1:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqXCo0VC6nZ-YtT6XaWQcUZ74aw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/9ae6d0-d731-454d-b870-5286384ae236/1/vqXCo0VC6nZ-YtT6XaWQcUZ74aw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/9ae6d0-d731-454d-b870-5286384ae236/1/vqXCo0VC6nZ-YtT6XaWQcUZ74aw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:7a:24:8a:48:68:30:19:b0:20:61:5b:7c:4f:b8:60:7b:43:
         ed:9a:e1:b1:29:ec:8e:b5:9a:ea:27:2c:41:e0:b7:e9:f4:8a:
         9e:13:7c:82:40:23:01:59:8b:81:d3:50:7a:12:b7:b5:39:15:
         d3:e4:01:81:ed:a8:2d:63:c4:31:87:ff:88:06:80:1a:82:d1:
         bd:95:6b:23:28:8c:28:ab:78:c0:05:91:a6:2e:6d:26:75:19:
         74:78:a0:e1:d7:59:37:af:be:e0:fa:8b:3b:f7:ab:af:af:14:
         4b:c3:da:c3:7e:8a:cf:34:4d:63:8a:7f:28:d7:69:61:0d:8e:
         1b:f3:35:1e:00:48:01:ad:a4:f1:c1:b9:d5:7a:1c:79:2d:e4:
         0c:5f:04:c7:cd:ab:1c:ba:16:78:d7:e5:d5:36:f7:f0:e2:ab:
         c6:16:fe:a9:e9:ec:3d:c3:a8:df:19:3a:61:87:f8:39:ec:0f:
         8e:dc:91:b4:c6:42:5b:83:85:81:eb:b4:c9:bb:de:8e:36:ee:
         36:f1:22:d6:27:47:2a:fa:60:e4:f3:92:40:95:62:7c:c4:6a:
         86:59:15:4b:a6:fc:71:3b:60:ed:06:9b:19:69:62:a9:36:bb:
         7d:f5:dc:46:05:58:5a:16:a5:81:21:f2:02:7f:0a:4c:6f:bd:
         6d:17:b2:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYs2bklp+XK1AYBToeAXO0nvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlYTVjMmEzNDU0MmVhNzY3ZTYyZDRmYTVkYTU5MDcxNDY3
YmUxYWMwHhcNMjMxMDE2MDMwMTE5WhcNMjMxMDE3MDMwMTE5WjAzMTEwLwYDVQQD
Eyg1ZmEyMjE3NmY5NGYzZDk2Mjk1NWUzMjkxOTYwYTkyODU5MDUyOGY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijGutoUAmBqOAMhMnN5/VScD4xsQ
Z/RKn2NkUOGqVDFqAHrZCurbgSMrqYetPNrFFpGExBDvlfX+oOZb63cIwLjVQsr+
jGH7jFSVOMCZEdbdS3H1vmPLtCnlbZyFXOWqtPiA6zCWC9O1RkmN9KRq0qQc+piq
1JFaGDYjoGgCY2+SeoE1bSFIJDF0TuH2Iblmc5RXS+MAPFaOFfva8QywhF0fUxp6
dCPlVVdBuupwnEoYxEzVrlohYp/c6jBcxvA+tTLPl61/RcAbwWmRStZkOCB3Y/zM
ZFleQQVU25duDKvzbEAp2SOMU5roQ53VAd780WBIAnDmiTbNKdMvJaI3qwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF+iIXb5Tz2WKVXjKRlgqShZBSj3MB8GA1UdIwQY
MBaAFL6lwqNFQup2fmLU+l2lkHFGe+GsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnFYQ28wVkM2blotWXRUNlhhV1FjVVo3NGF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi85YWU2ZDAtZDczMS00NTRkLWI4NzAt
NTI4NjM4NGFlMjM2LzEvdnFYQ28wVkM2blotWXRUNlhhV1FjVVo3NGF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi85YWU2ZDAtZDczMS00NTRkLWI4NzAtNTI4NjM4NGFlMjM2
LzEvdnFYQ28wVkM2blotWXRUNlhhV1FjVVo3NGF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASnokikho
MBmwIGFbfE+4YHtD7ZrhsSnsjrWa6icsQeC36fSKnhN8gkAjAVmLgdNQehK3tTkV
0+QBge2oLWPEMYf/iAaAGoLRvZVrIyiMKKt4wAWRpi5tJnUZdHig4ddZN6++4PqL
O/err68US8Paw36KzzRNY4p/KNdpYQ2OG/M1HgBIAa2k8cG51XoceS3kDF8Ex82r
HLoWeNfl1Tb38OKrxhb+qensPcOo3xk6YYf4OewPjtyRtMZCW4OFgeu0ybvejjbu
NvEi1idHKvpg5POSQJVifMRqhlkVS6b8cTtg7QabGWliqTa7ffXcRgVYWhalgSHy
An8KTG+9bRey4Q==
-----END CERTIFICATE-----