Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/16571f-c485-4e73-9cdf-cc3db54f6a47/1/GaaFfFuj9R2-OPTEoMd8hP8Ps1U.mft
File:                     GaaFfFuj9R2-OPTEoMd8hP8Ps1U.mft (raw, json)
Hash identifier:          A+KsKxRUJKUjMTKm215JilJD1pDxj9B1+oiGBrpDGOQ=
Subject key identifier:   D9:A2:60:C5:EB:52:FD:04:82:F2:A7:E4:A6:06:40:C8:C4:81:72:91
Authority key identifier: 19:A6:85:7C:5B:A3:F5:1D:BE:38:F4:C4:A0:C7:7C:84:FF:0F:B3:55
Certificate issuer:       /CN=19a6857c5ba3f51dbe38f4c4a0c77c84ff0fb355
Certificate serial:       018B89E5F081663380CE3472F251C2A87BFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GaaFfFuj9R2-OPTEoMd8hP8Ps1U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/16571f-c485-4e73-9cdf-cc3db54f6a47/1/GaaFfFuj9R2-OPTEoMd8hP8Ps1U.mft
Manifest number:          0D07
Signing time:             Wed 01 Nov 2023 08:00:29 +0000
Manifest this update:     Wed 01 Nov 2023 08:00:29 +0000
Manifest next update:     Thu 02 Nov 2023 08:00:29 +0000
Files and hashes:         1: GaaFfFuj9R2-OPTEoMd8hP8Ps1U.crl (hash: +yq5Qb2ICrQ5prYgRe6Y5c3wi073TLrT1TYUrbCFlXI=)
                          2: Z7JW630MafIizMxpzswUxgC1WAc.roa (hash: yCt+kaT8QoAV8B9cXJOxUh1TB3vipteylGtsOpZBHK8=)
                          3: i1FsIeYT3Zair0TQKi4yCM6IOG0.roa (hash: mZ9vVUXkP1hNQNf7dg5Nl1KDoZy9tsDYGbmJpJypCM0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:89:e5:f0:81:66:33:80:ce:34:72:f2:51:c2:a8:7b:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19a6857c5ba3f51dbe38f4c4a0c77c84ff0fb355
        Validity
            Not Before: Nov  1 08:00:29 2023 GMT
            Not After : Nov  2 08:00:29 2023 GMT
        Subject: CN=d9a260c5eb52fd0482f2a7e4a60640c8c4817291
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:de:44:22:e2:ba:65:9b:48:7c:8b:6f:63:b6:
                    4b:4f:fe:f3:b1:dd:c1:e6:cd:05:40:05:74:d9:6c:
                    84:19:25:48:a8:ee:0f:6a:01:55:bb:23:32:bd:e2:
                    3e:dd:9e:10:57:e5:08:de:86:4f:bf:a1:6c:70:b6:
                    8a:99:37:20:58:d7:56:c6:65:da:03:a3:7b:16:a7:
                    3f:33:91:09:c6:78:3f:23:58:20:55:f1:23:f7:78:
                    8e:8c:54:d9:c0:6d:79:28:d7:89:f8:37:72:d7:b9:
                    42:52:7a:5b:4c:cd:89:eb:c9:80:51:54:b1:a8:f4:
                    3b:d8:d6:ba:f8:e5:8f:34:ee:5b:f5:ff:83:52:11:
                    f7:ef:32:bb:f1:d7:05:f5:c7:89:f7:5f:32:b6:08:
                    45:47:1e:88:dc:4a:1f:9a:88:3e:0c:bc:7d:49:c5:
                    cd:44:93:ca:5b:70:f6:34:c6:65:26:89:65:ed:f4:
                    1f:ab:d1:f5:72:ce:3b:cc:b1:85:0e:be:a6:ed:a0:
                    e0:00:96:18:68:04:12:64:ae:d4:61:96:b9:ac:b2:
                    ba:11:37:79:a0:41:d4:38:c8:33:b8:26:b1:43:98:
                    8d:94:7a:bf:ee:5f:18:3f:b0:93:76:4b:99:26:33:
                    56:19:36:e4:41:b0:96:d2:1f:f1:b5:f2:02:4b:77:
                    2e:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:A2:60:C5:EB:52:FD:04:82:F2:A7:E4:A6:06:40:C8:C4:81:72:91
            X509v3 Authority Key Identifier:
                keyid:19:A6:85:7C:5B:A3:F5:1D:BE:38:F4:C4:A0:C7:7C:84:FF:0F:B3:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GaaFfFuj9R2-OPTEoMd8hP8Ps1U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/16571f-c485-4e73-9cdf-cc3db54f6a47/1/GaaFfFuj9R2-OPTEoMd8hP8Ps1U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/16571f-c485-4e73-9cdf-cc3db54f6a47/1/GaaFfFuj9R2-OPTEoMd8hP8Ps1U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:6a:a3:79:37:6a:a6:bb:b6:ab:c5:e8:95:d2:1a:c4:01:09:
         d7:bc:d0:3e:83:13:41:3c:91:1e:14:d6:3c:69:8c:ed:43:03:
         ca:1e:60:e0:40:b9:a0:7a:54:bb:66:ab:1f:ce:cf:1c:58:41:
         e6:45:a2:c7:74:29:d5:de:9b:7e:57:88:ea:a7:4a:96:5e:e1:
         b9:3e:27:da:f4:3e:b9:31:ce:85:7e:f6:eb:7b:b8:54:8d:75:
         1a:92:d7:a4:b9:e7:aa:b1:c0:9f:24:b8:52:cd:ab:a8:41:a0:
         0e:27:c0:ab:e3:36:a8:af:7a:b5:5e:ac:70:fa:5d:bd:42:45:
         dc:21:d3:f4:15:a0:86:f7:5e:3d:3d:17:a5:89:02:a4:4d:59:
         65:f7:db:8d:61:18:ca:c2:69:59:32:50:d0:3f:b2:5f:a3:ac:
         8d:e4:63:e4:9e:6e:4d:fa:61:4b:0f:f2:f7:ec:11:95:54:85:
         c5:1c:13:00:a8:e8:08:5e:30:28:f7:fe:8f:c2:dc:f8:6b:76:
         45:6e:18:3d:95:33:02:25:32:f5:2e:b1:9d:55:5b:76:f9:0b:
         88:e7:1e:35:87:ec:cc:52:96:65:5d:16:27:8a:d8:ff:39:80:
         6f:b2:82:c5:3b:c7:74:a9:96:d7:ab:0b:77:ed:9f:dc:28:c5:
         29:b5:ad:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYuJ5fCBZjOAzjRy8lHCqHv7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5YTY4NTdjNWJhM2Y1MWRiZTM4ZjRjNGEwYzc3Yzg0ZmYw
ZmIzNTUwHhcNMjMxMTAxMDgwMDI5WhcNMjMxMTAyMDgwMDI5WjAzMTEwLwYDVQQD
EyhkOWEyNjBjNWViNTJmZDA0ODJmMmE3ZTRhNjA2NDBjOGM0ODE3MjkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvt5EIuK6ZZtIfItvY7ZLT/7zsd3B
5s0FQAV02WyEGSVIqO4PagFVuyMyveI+3Z4QV+UI3oZPv6FscLaKmTcgWNdWxmXa
A6N7Fqc/M5EJxng/I1ggVfEj93iOjFTZwG15KNeJ+Ddy17lCUnpbTM2J68mAUVSx
qPQ72Na6+OWPNO5b9f+DUhH37zK78dcF9ceJ918ytghFRx6I3Eofmog+DLx9ScXN
RJPKW3D2NMZlJoll7fQfq9H1cs47zLGFDr6m7aDgAJYYaAQSZK7UYZa5rLK6ETd5
oEHUOMgzuCaxQ5iNlHq/7l8YP7CTdkuZJjNWGTbkQbCW0h/xtfICS3cu6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNmiYMXrUv0EgvKn5KYGQMjEgXKRMB8GA1UdIwQY
MBaAFBmmhXxbo/Udvjj0xKDHfIT/D7NVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2FhRmZGdWo5UjItT1BURW9NZDhoUDhQczFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS8xNjU3MWYtYzQ4NS00ZTczLTljZGYt
Y2MzZGI1NGY2YTQ3LzEvR2FhRmZGdWo5UjItT1BURW9NZDhoUDhQczFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS8xNjU3MWYtYzQ4NS00ZTczLTljZGYtY2MzZGI1NGY2YTQ3
LzEvR2FhRmZGdWo5UjItT1BURW9NZDhoUDhQczFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACWqjeTdq
pru2q8XoldIaxAEJ17zQPoMTQTyRHhTWPGmM7UMDyh5g4EC5oHpUu2arH87PHFhB
5kWix3Qp1d6bfleI6qdKll7huT4n2vQ+uTHOhX7263u4VI11GpLXpLnnqrHAnyS4
Us2rqEGgDifAq+M2qK96tV6scPpdvUJF3CHT9BWghvdePT0XpYkCpE1ZZffbjWEY
ysJpWTJQ0D+yX6OsjeRj5J5uTfphSw/y9+wRlVSFxRwTAKjoCF4wKPf+j8Lc+Gt2
RW4YPZUzAiUy9S6xnVVbdvkLiOceNYfszFKWZV0WJ4rY/zmAb7KCxTvHdKmW16sL
d+2f3CjFKbWtjg==
-----END CERTIFICATE-----