Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/eaa7ce-0df1-47f1-bb81-d3dc7522e08d/1/Q6CttbPEw7j6aQ0ed_Bgs3HnNkY.mft
File:                     Q6CttbPEw7j6aQ0ed_Bgs3HnNkY.mft (raw, json)
Hash identifier:          tOPwaoIjFck9aEt1CFQTebTEkqUCx3wHYOvS7ntvubw=
Subject key identifier:   89:A0:65:68:61:8E:FF:70:62:8E:C7:80:0B:3E:7D:EB:89:C5:BE:D6
Authority key identifier: 43:A0:AD:B5:B3:C4:C3:B8:FA:69:0D:1E:77:F0:60:B3:71:E7:36:46
Certificate issuer:       /CN=43a0adb5b3c4c3b8fa690d1e77f060b371e73646
Certificate serial:       0186FF6C106C59DB7FE8C4B109D0213DA86E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q6CttbPEw7j6aQ0ed_Bgs3HnNkY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/eaa7ce-0df1-47f1-bb81-d3dc7522e08d/1/Q6CttbPEw7j6aQ0ed_Bgs3HnNkY.mft
Manifest number:          0892
Signing time:             Mon 20 Mar 2023 14:28:37 +0000
Manifest this update:     Mon 20 Mar 2023 14:28:37 +0000
Manifest next update:     Tue 21 Mar 2023 14:28:37 +0000
Files and hashes:         1: OsWB95sZbfV7L7bEf7kO-Rw_37s.roa (hash: ax895pR1tiZ64idrgsDKVOoWUm03Sb2ktcWETmm4gTE=)
                          2: Q6CttbPEw7j6aQ0ed_Bgs3HnNkY.crl (hash: EaMdD3hLwlG3h78yNxxXvEvtuDpLGpO1rE6VZf1jDQY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:ff:6c:10:6c:59:db:7f:e8:c4:b1:09:d0:21:3d:a8:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43a0adb5b3c4c3b8fa690d1e77f060b371e73646
        Validity
            Not Before: Mar 20 14:28:37 2023 GMT
            Not After : Mar 21 14:28:37 2023 GMT
        Subject: CN=89a06568618eff70628ec7800b3e7deb89c5bed6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e6:a9:c2:2d:48:8d:83:02:b7:bf:e7:9f:b9:
                    e1:62:b6:08:88:e6:99:e6:82:67:f7:22:4a:11:4a:
                    86:94:f4:89:b1:9c:7c:7d:bc:a5:17:9f:1c:80:b4:
                    61:34:35:9d:ab:6e:c0:85:88:0e:34:60:df:69:42:
                    c0:2a:d3:66:40:da:a0:d7:5f:e3:be:61:da:ac:a9:
                    06:a1:b9:cd:07:ff:30:e6:1e:d9:46:0a:b8:e0:5a:
                    f8:ae:be:0b:f5:bc:28:7b:3b:96:87:2f:cf:d0:9b:
                    d1:d6:8b:bf:3a:a6:fd:ac:64:24:59:0a:f0:f4:d0:
                    9f:a2:e3:05:3b:3d:73:57:e4:4a:18:74:c2:04:7d:
                    98:bc:85:33:f2:da:e3:99:ad:13:53:b5:49:3d:01:
                    cb:42:a4:ab:1b:66:ee:c3:6b:9d:13:b2:80:1e:1a:
                    5d:bf:ec:34:2a:e6:af:0f:2d:f7:a8:d4:32:a5:1d:
                    07:2f:c7:15:b7:3a:fb:da:54:39:5f:c8:3f:e9:a0:
                    72:03:d5:82:5a:3a:73:d9:7a:03:d2:48:f5:62:00:
                    64:7f:e7:f2:aa:12:f6:5b:33:8d:ab:b5:a0:0b:ce:
                    d3:07:6f:ad:95:ad:54:00:be:85:d3:14:9b:1f:cf:
                    64:66:cf:f5:59:3c:19:8a:76:69:b6:0f:f3:bf:e2:
                    50:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:A0:65:68:61:8E:FF:70:62:8E:C7:80:0B:3E:7D:EB:89:C5:BE:D6
            X509v3 Authority Key Identifier:
                keyid:43:A0:AD:B5:B3:C4:C3:B8:FA:69:0D:1E:77:F0:60:B3:71:E7:36:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6CttbPEw7j6aQ0ed_Bgs3HnNkY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/eaa7ce-0df1-47f1-bb81-d3dc7522e08d/1/Q6CttbPEw7j6aQ0ed_Bgs3HnNkY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/eaa7ce-0df1-47f1-bb81-d3dc7522e08d/1/Q6CttbPEw7j6aQ0ed_Bgs3HnNkY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:9e:88:7f:b3:45:1f:23:91:cd:d6:f5:8a:24:bb:b5:80:de:
         1b:5e:f9:2c:28:0a:20:40:c9:82:52:eb:18:10:7f:8c:37:89:
         f5:ad:e5:12:e7:bb:e1:87:49:ce:47:c0:97:25:db:5f:89:08:
         bf:91:29:90:a4:d3:eb:a4:4c:da:0e:bd:86:33:7c:8e:5b:fb:
         91:a3:a7:17:6a:4a:e4:88:76:de:39:66:30:ce:68:ea:a0:59:
         c8:25:f5:41:31:4f:77:6c:9a:c3:81:76:5c:90:12:0b:37:8b:
         69:e7:61:ef:95:33:64:6c:fc:bc:27:e3:76:8b:4b:66:fb:29:
         c4:17:4e:fa:6b:d6:23:70:e2:b1:39:8d:37:c4:2d:f8:76:b8:
         d7:2f:05:7e:e4:fd:19:f5:08:13:dc:fd:5d:28:1c:4a:bf:a5:
         7f:80:d5:43:30:8d:74:4a:74:f5:65:c8:55:67:72:de:d1:e5:
         f6:42:2f:28:2c:c6:c7:f7:b9:ee:6a:f2:8d:1d:72:9c:cb:74:
         55:b9:e4:82:49:a6:f1:71:4a:ef:6a:2b:bc:03:95:ab:12:be:
         b2:57:77:5b:37:e6:f8:9b:3f:38:0d:94:46:51:9c:8d:02:e5:
         05:8c:30:00:72:46:79:30:39:ca:37:29:c5:77:b3:83:0c:8f:
         77:20:11:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:27 2023 by rpki-client on console-ams.rpki-client.org