Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/ecdca3-5f1c-4647-bcdc-314f384132d2/1/bL-IqcNs9ivdMwPvHU11ETxmpVs.mft
File:                     bL-IqcNs9ivdMwPvHU11ETxmpVs.mft (raw, json)
Hash identifier:          IqlFhJbp6e/8lG69XTf4xYSQknP94fqAAzarqP/Op6Y=
Subject key identifier:   D7:D9:2B:00:10:B6:F3:A8:82:A7:C0:64:08:C1:E3:EE:1C:27:03:86
Authority key identifier: 6C:BF:88:A9:C3:6C:F6:2B:DD:33:03:EF:1D:4D:75:11:3C:66:A5:5B
Certificate issuer:       /CN=6cbf88a9c36cf62bdd3303ef1d4d75113c66a55b
Certificate serial:       0189D7CECB725AE14F74E8835A8EBB287D6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bL-IqcNs9ivdMwPvHU11ETxmpVs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/ecdca3-5f1c-4647-bcdc-314f384132d2/1/bL-IqcNs9ivdMwPvHU11ETxmpVs.mft
Manifest number:          08CF
Signing time:             Wed 09 Aug 2023 01:00:00 +0000
Manifest this update:     Wed 09 Aug 2023 01:00:00 +0000
Manifest next update:     Thu 10 Aug 2023 01:00:00 +0000
Files and hashes:         1: bL-IqcNs9ivdMwPvHU11ETxmpVs.crl (hash: akdpDM51r6jQR5WJRyN+F5x1GVGaIAxFl6KNtWd81pI=)
                          2: kV4ekwX5PAB1Tv4_WLuqlgXljkc.roa (hash: 7e4a2O68q1UjKy2MS1IotCT7sgtV7WonRr0AlBaQ0qU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:d7:ce:cb:72:5a:e1:4f:74:e8:83:5a:8e:bb:28:7d:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cbf88a9c36cf62bdd3303ef1d4d75113c66a55b
        Validity
            Not Before: Aug  9 01:00:00 2023 GMT
            Not After : Aug 10 01:00:00 2023 GMT
        Subject: CN=d7d92b0010b6f3a882a7c06408c1e3ee1c270386
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:72:23:a9:44:b6:bb:38:1c:17:4e:18:df:4f:
                    65:d1:d3:f4:4b:0c:c6:10:84:e4:5c:28:40:ae:89:
                    e3:09:b1:af:9c:a0:b2:eb:25:4a:3a:8f:91:60:21:
                    a2:05:03:ae:f1:30:76:83:22:c9:4c:0f:4a:2e:1e:
                    33:21:17:7d:90:b3:19:36:e6:9d:d8:2d:38:63:b7:
                    1b:eb:e0:bc:4c:1a:4f:52:a6:68:33:8d:0c:b3:32:
                    eb:60:74:5f:4e:8c:71:5c:1f:84:6e:bb:79:79:68:
                    d5:33:c4:d9:d4:83:e0:b7:57:65:22:23:c9:5a:99:
                    39:13:a0:02:20:7e:94:fb:55:87:0b:0b:9b:cd:2c:
                    d2:94:3f:cd:13:39:8a:38:e7:14:86:e2:79:cb:23:
                    e3:84:bc:51:15:eb:23:33:3f:43:22:e1:1f:91:80:
                    71:24:86:cb:b8:43:80:a4:26:5a:a7:b6:6e:a5:01:
                    b8:75:9a:92:c0:c7:a1:ac:fe:83:f8:e0:bb:6e:44:
                    80:64:cf:41:14:15:7c:84:e4:44:0a:2a:24:82:b8:
                    92:76:a6:13:c8:16:ad:4e:22:c2:f6:1e:ef:44:36:
                    ec:c3:9a:b3:fd:e8:4a:77:78:d0:5f:91:e7:3e:04:
                    07:33:99:6c:a4:fb:98:fe:a0:52:f4:20:8b:f4:98:
                    13:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:D9:2B:00:10:B6:F3:A8:82:A7:C0:64:08:C1:E3:EE:1C:27:03:86
            X509v3 Authority Key Identifier:
                keyid:6C:BF:88:A9:C3:6C:F6:2B:DD:33:03:EF:1D:4D:75:11:3C:66:A5:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bL-IqcNs9ivdMwPvHU11ETxmpVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ecdca3-5f1c-4647-bcdc-314f384132d2/1/bL-IqcNs9ivdMwPvHU11ETxmpVs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ecdca3-5f1c-4647-bcdc-314f384132d2/1/bL-IqcNs9ivdMwPvHU11ETxmpVs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:d3:93:8c:a0:c7:12:e5:c8:78:13:14:93:5e:42:a3:ae:f1:
         b1:74:88:5f:62:32:8d:6f:bb:28:ac:1a:1c:41:ec:cf:d7:b9:
         78:64:79:2c:48:36:37:c5:2b:85:88:d4:bb:59:3b:46:49:ff:
         e3:7f:8d:ea:9b:7d:36:3a:b4:45:4e:37:4c:21:ab:b7:4f:5b:
         d4:10:75:e4:ce:7a:85:aa:78:71:5f:39:b3:61:91:b3:d9:a0:
         f0:48:90:bb:78:04:05:41:88:3c:89:77:8b:f3:ce:4d:fd:a5:
         84:20:a7:52:e9:6b:81:78:e9:00:d7:68:e3:36:69:cd:cb:e7:
         ac:a7:38:e5:46:9a:27:39:04:ef:26:0b:38:06:50:22:1c:ca:
         4a:f1:f4:d9:03:44:8d:fc:33:99:c0:55:cd:29:6a:a0:6d:b7:
         03:05:07:c6:1a:80:34:88:f9:12:9b:f9:92:2f:23:69:ab:fc:
         93:cc:97:4e:b3:09:5a:b7:22:fb:1c:86:1a:ae:c1:7d:8d:c8:
         c7:f7:8d:20:44:cc:8f:bf:3f:8f:09:a1:ba:c9:14:7c:6a:3c:
         21:4d:f3:e4:a8:d2:a2:08:a2:e9:02:18:1d:76:46:47:cf:00:
         25:79:9e:40:32:10:98:0c:74:73:91:f6:85:5e:dc:08:12:d4:
         8c:b4:aa:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYnXzstyWuFPdOiDWo67KH1tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjYmY4OGE5YzM2Y2Y2MmJkZDMzMDNlZjFkNGQ3NTExM2M2
NmE1NWIwHhcNMjMwODA5MDEwMDAwWhcNMjMwODEwMDEwMDAwWjAzMTEwLwYDVQQD
EyhkN2Q5MmIwMDEwYjZmM2E4ODJhN2MwNjQwOGMxZTNlZTFjMjcwMzg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHIjqUS2uzgcF04Y309l0dP0SwzG
EITkXChAronjCbGvnKCy6yVKOo+RYCGiBQOu8TB2gyLJTA9KLh4zIRd9kLMZNuad
2C04Y7cb6+C8TBpPUqZoM40MszLrYHRfToxxXB+Ebrt5eWjVM8TZ1IPgt1dlIiPJ
Wpk5E6ACIH6U+1WHCwubzSzSlD/NEzmKOOcUhuJ5yyPjhLxRFesjMz9DIuEfkYBx
JIbLuEOApCZap7ZupQG4dZqSwMehrP6D+OC7bkSAZM9BFBV8hORECiokgriSdqYT
yBatTiLC9h7vRDbsw5qz/ehKd3jQX5HnPgQHM5lspPuY/qBS9CCL9JgT0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNfZKwAQtvOogqfAZAjB4+4cJwOGMB8GA1UdIwQY
MBaAFGy/iKnDbPYr3TMD7x1NdRE8ZqVbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkwtSXFjTnM5aXZkTXdQdkhVMTFFVHhtcFZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9lY2RjYTMtNWYxYy00NjQ3LWJjZGMt
MzE0ZjM4NDEzMmQyLzEvYkwtSXFjTnM5aXZkTXdQdkhVMTFFVHhtcFZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My9lY2RjYTMtNWYxYy00NjQ3LWJjZGMtMzE0ZjM4NDEzMmQy
LzEvYkwtSXFjTnM5aXZkTXdQdkhVMTFFVHhtcFZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcdOTjKDH
EuXIeBMUk15Co67xsXSIX2IyjW+7KKwaHEHsz9e5eGR5LEg2N8UrhYjUu1k7Rkn/
43+N6pt9Njq0RU43TCGrt09b1BB15M56hap4cV85s2GRs9mg8EiQu3gEBUGIPIl3
i/POTf2lhCCnUulrgXjpANdo4zZpzcvnrKc45UaaJzkE7yYLOAZQIhzKSvH02QNE
jfwzmcBVzSlqoG23AwUHxhqANIj5Epv5ki8jaav8k8yXTrMJWrci+xyGGq7BfY3I
x/eNIETMj78/jwmhuskUfGo8IU3z5KjSogii6QIYHXZGR88AJXmeQDIQmAx0c5H2
hV7cCBLUjLSqUA==
-----END CERTIFICATE-----