Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/51bb40-fd1c-4cf9-810c-b2d73171d1bb/1/w7GO3hDV-cmbj2i5CG0vuTzLmXg.mft
File:                     w7GO3hDV-cmbj2i5CG0vuTzLmXg.mft (raw, json)
Hash identifier:          L4ErC1LFhAUkMhhzWvlGBlabjSEMdBQKBByz8JmRKnw=
Subject key identifier:   5B:18:CA:9C:BA:5A:70:D5:38:F5:A4:C8:C4:3B:81:34:F5:83:3C:DF
Authority key identifier: C3:B1:8E:DE:10:D5:F9:C9:9B:8F:68:B9:08:6D:2F:B9:3C:CB:99:78
Certificate issuer:       /CN=c3b18ede10d5f9c99b8f68b9086d2fb93ccb9978
Certificate serial:       018A00C96E0B1A2D418B96AA4519BFCF6E71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w7GO3hDV-cmbj2i5CG0vuTzLmXg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/51bb40-fd1c-4cf9-810c-b2d73171d1bb/1/w7GO3hDV-cmbj2i5CG0vuTzLmXg.mft
Manifest number:          0873
Signing time:             Wed 16 Aug 2023 23:58:35 +0000
Manifest this update:     Wed 16 Aug 2023 23:58:35 +0000
Manifest next update:     Thu 17 Aug 2023 23:58:35 +0000
Files and hashes:         1: OJuht62cHpudsvyMOFFq2GijDsA.roa (hash: QuZlSDHK6npQ4d69fZztZMp7fZ9U0CarsCb2uSpbOHo=)
                          2: w7GO3hDV-cmbj2i5CG0vuTzLmXg.crl (hash: 2viCdyBBmMOdRr7keeJhjFxj2ocPZShL7n/WL7/eo58=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:00:c9:6e:0b:1a:2d:41:8b:96:aa:45:19:bf:cf:6e:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3b18ede10d5f9c99b8f68b9086d2fb93ccb9978
        Validity
            Not Before: Aug 16 23:58:35 2023 GMT
            Not After : Aug 17 23:58:35 2023 GMT
        Subject: CN=5b18ca9cba5a70d538f5a4c8c43b8134f5833cdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2b:91:b4:49:73:6f:90:3e:6d:8a:4e:14:8c:
                    80:8f:02:83:a9:b3:11:f4:3b:18:5b:2c:11:20:dc:
                    09:02:d0:37:a0:d1:e7:ea:fc:80:38:e6:22:75:af:
                    7f:29:3a:d1:08:16:7c:59:fd:e5:66:35:85:a9:6d:
                    a8:97:a0:94:be:e6:c0:a3:b0:fc:2a:27:f9:af:be:
                    c7:b5:3f:0c:70:41:8d:57:a1:d8:89:ba:fd:8e:49:
                    d1:7b:e9:4c:96:69:06:4a:94:f7:6d:5b:b5:e5:41:
                    7b:0c:80:a4:4f:34:ac:b0:93:fe:e2:f0:77:6d:ee:
                    c8:4f:3e:68:ba:86:db:8d:8b:81:19:9c:ae:37:bc:
                    30:a2:29:b5:c5:cc:33:2b:50:e9:a7:35:eb:b5:a5:
                    cb:06:1b:4e:2d:c5:cc:6e:86:cc:f9:f4:2b:7c:04:
                    30:15:b1:88:9f:8b:b3:03:e7:13:2c:74:a3:55:91:
                    a4:43:ed:59:ba:53:59:93:fd:fe:d8:cc:57:db:9a:
                    24:db:45:3c:6c:b4:4e:e5:d9:65:ed:de:68:d1:65:
                    ec:08:ed:77:90:00:49:13:44:54:a1:9e:f5:fb:08:
                    aa:5d:6c:0f:df:87:7f:f4:7c:53:9e:18:2f:0d:de:
                    80:c4:13:2f:f4:7f:fe:e6:43:cb:51:0c:b7:4c:0e:
                    54:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:18:CA:9C:BA:5A:70:D5:38:F5:A4:C8:C4:3B:81:34:F5:83:3C:DF
            X509v3 Authority Key Identifier:
                keyid:C3:B1:8E:DE:10:D5:F9:C9:9B:8F:68:B9:08:6D:2F:B9:3C:CB:99:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w7GO3hDV-cmbj2i5CG0vuTzLmXg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/51bb40-fd1c-4cf9-810c-b2d73171d1bb/1/w7GO3hDV-cmbj2i5CG0vuTzLmXg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/51bb40-fd1c-4cf9-810c-b2d73171d1bb/1/w7GO3hDV-cmbj2i5CG0vuTzLmXg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:84:d6:2e:49:d9:b0:f7:5e:78:bd:16:03:77:51:40:90:2f:
         e0:7c:cf:22:63:76:68:aa:c3:09:10:96:ae:06:6e:82:ad:83:
         db:12:f4:a0:6b:71:83:c5:a3:8f:9e:15:96:a6:e1:48:50:79:
         e5:22:e0:0f:ca:46:3d:fa:f2:f4:e7:e1:1c:7f:a6:7f:c1:2d:
         c6:83:4b:72:a3:98:d1:55:2e:db:4a:38:0e:9a:8a:ce:7b:9c:
         20:0e:64:d4:5f:84:17:b6:ee:3c:f6:e7:97:e4:70:44:80:4d:
         09:1b:43:9a:46:27:4e:ff:78:c0:dd:07:d7:2a:40:ef:10:ca:
         4d:cf:30:a3:49:37:05:cb:59:79:f7:3e:91:90:92:90:c0:9d:
         83:ad:a5:9e:21:ce:b8:38:6a:d1:c7:a8:54:09:e9:f3:fd:e3:
         b8:c9:7c:1b:46:0f:00:89:39:95:cb:a2:ae:bf:62:ca:b6:8d:
         a2:b3:34:20:fd:8d:15:16:1b:6f:fc:67:6d:44:14:66:5b:d8:
         34:ac:6c:f1:22:2a:94:4b:fd:c1:6f:ea:a5:62:d0:a2:6e:66:
         0d:49:7a:f4:b4:51:5d:44:d2:0d:a1:37:f4:45:40:48:07:a9:
         fb:f9:55:c6:d2:82:76:9f:b7:25:fd:27:f8:1d:2e:56:bc:2c:
         21:f7:42:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYoAyW4LGi1Bi5aqRRm/z25xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYjE4ZWRlMTBkNWY5Yzk5YjhmNjhiOTA4NmQyZmI5M2Nj
Yjk5NzgwHhcNMjMwODE2MjM1ODM1WhcNMjMwODE3MjM1ODM1WjAzMTEwLwYDVQQD
Eyg1YjE4Y2E5Y2JhNWE3MGQ1MzhmNWE0YzhjNDNiODEzNGY1ODMzY2RmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviuRtElzb5A+bYpOFIyAjwKDqbMR
9DsYWywRINwJAtA3oNHn6vyAOOYida9/KTrRCBZ8Wf3lZjWFqW2ol6CUvubAo7D8
Kif5r77HtT8McEGNV6HYibr9jknRe+lMlmkGSpT3bVu15UF7DICkTzSssJP+4vB3
be7ITz5ouobbjYuBGZyuN7wwoim1xcwzK1DppzXrtaXLBhtOLcXMbobM+fQrfAQw
FbGIn4uzA+cTLHSjVZGkQ+1ZulNZk/3+2MxX25ok20U8bLRO5dll7d5o0WXsCO13
kABJE0RUoZ71+wiqXWwP34d/9HxTnhgvDd6AxBMv9H/+5kPLUQy3TA5UrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFsYypy6WnDVOPWkyMQ7gTT1gzzfMB8GA1UdIwQY
MBaAFMOxjt4Q1fnJm49ouQhtL7k8y5l4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzdHTzNoRFYtY21iajJpNUNHMHZ1VHpMbVhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC81MWJiNDAtZmQxYy00Y2Y5LTgxMGMt
YjJkNzMxNzFkMWJiLzEvdzdHTzNoRFYtY21iajJpNUNHMHZ1VHpMbVhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC81MWJiNDAtZmQxYy00Y2Y5LTgxMGMtYjJkNzMxNzFkMWJi
LzEvdzdHTzNoRFYtY21iajJpNUNHMHZ1VHpMbVhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa4TWLknZ
sPdeeL0WA3dRQJAv4HzPImN2aKrDCRCWrgZugq2D2xL0oGtxg8Wjj54VlqbhSFB5
5SLgD8pGPfry9OfhHH+mf8EtxoNLcqOY0VUu20o4DpqKznucIA5k1F+EF7buPPbn
l+RwRIBNCRtDmkYnTv94wN0H1ypA7xDKTc8wo0k3BctZefc+kZCSkMCdg62lniHO
uDhq0ceoVAnp8/3juMl8G0YPAIk5lcuirr9iyraNorM0IP2NFRYbb/xnbUQUZlvY
NKxs8SIqlEv9wW/qpWLQom5mDUl69LRRXUTSDaE39EVASAep+/lVxtKCdp+3Jf0n
+B0uVrwsIfdCZw==
-----END CERTIFICATE-----