Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/62e43b-228a-4e85-834c-44c166014612/1/mgTNzcEVnDHu2yTMesiyYrdWInw.mft
File:                     mgTNzcEVnDHu2yTMesiyYrdWInw.mft (raw, json)
Hash identifier:          DOYukmcx3hAL5VmcQGJ8V/IYomiWbJRqfQQhSCAi8vI=
Subject key identifier:   AF:E5:C3:52:BD:D2:E7:5B:24:18:32:69:51:29:B4:58:48:F2:2A:5A
Authority key identifier: 9A:04:CD:CD:C1:15:9C:31:EE:DB:24:CC:7A:C8:B2:62:B7:56:22:7C
Certificate issuer:       /CN=9a04cdcdc1159c31eedb24cc7ac8b262b756227c
Certificate serial:       018CB34E554E18CD895BB22AD24F2732B515
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mgTNzcEVnDHu2yTMesiyYrdWInw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/62e43b-228a-4e85-834c-44c166014612/1/mgTNzcEVnDHu2yTMesiyYrdWInw.mft
Manifest number:          0C0F
Signing time:             Fri 29 Dec 2023 02:01:44 +0000
Manifest this update:     Fri 29 Dec 2023 02:01:44 +0000
Manifest next update:     Sat 30 Dec 2023 02:01:44 +0000
Files and hashes:         1: Kaa7DoWzeBRlF2xmovkKSD-Yz0A.roa (hash: ub0aRsngRjkmIXB6ayJ/oE9xnXMAjGotUIZIsxkPZi8=)
                          2: mgTNzcEVnDHu2yTMesiyYrdWInw.crl (hash: GLUPt0eOB7xYCYCi8zU3O0d/Dhn2iLYZoX9P8hZgDes=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:b3:4e:55:4e:18:cd:89:5b:b2:2a:d2:4f:27:32:b5:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a04cdcdc1159c31eedb24cc7ac8b262b756227c
        Validity
            Not Before: Dec 29 02:01:44 2023 GMT
            Not After : Dec 30 02:01:44 2023 GMT
        Subject: CN=afe5c352bdd2e75b241832695129b45848f22a5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:54:58:02:cf:f6:dd:1a:82:82:08:09:f3:91:
                    c1:fa:6b:60:b5:6e:7f:b1:16:54:46:5c:dc:3b:7f:
                    31:f0:f8:c0:0b:0f:d1:f8:67:2c:72:cf:fd:89:54:
                    95:07:56:5a:89:c9:8a:b8:8f:75:58:b5:32:e6:98:
                    de:e4:f5:3d:cd:92:9f:91:9b:cb:52:ce:08:ad:c7:
                    52:1d:5a:14:b4:5b:70:2f:9a:8a:2d:e5:67:9e:e1:
                    8a:41:be:99:30:e1:06:6e:7f:b7:25:b1:42:9c:a6:
                    ee:93:5c:27:19:48:f2:55:c5:db:6f:74:f6:06:eb:
                    ef:af:f0:50:b4:31:9a:18:a3:11:58:c1:b6:94:6e:
                    d8:15:7f:a3:54:a5:a0:9a:f9:49:a8:4b:83:5d:f0:
                    16:01:89:e6:81:dd:ab:ca:36:a7:0d:b1:e3:e7:28:
                    c0:32:9c:38:69:ca:cc:a3:90:25:e9:ef:ea:fa:dd:
                    e0:35:1c:86:98:dd:32:9d:6e:1b:1d:3b:c5:c0:fc:
                    e9:a5:55:5e:a1:fb:90:d7:75:c9:b4:7d:cc:73:0c:
                    25:54:d7:8d:8a:d9:04:e7:87:e8:e1:a7:9d:db:82:
                    2f:eb:13:79:87:86:e1:df:04:65:4d:bb:d8:2d:75:
                    c8:d8:fa:ba:31:73:ec:62:06:77:81:65:14:7a:03:
                    08:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:E5:C3:52:BD:D2:E7:5B:24:18:32:69:51:29:B4:58:48:F2:2A:5A
            X509v3 Authority Key Identifier:
                keyid:9A:04:CD:CD:C1:15:9C:31:EE:DB:24:CC:7A:C8:B2:62:B7:56:22:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mgTNzcEVnDHu2yTMesiyYrdWInw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/62e43b-228a-4e85-834c-44c166014612/1/mgTNzcEVnDHu2yTMesiyYrdWInw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/62e43b-228a-4e85-834c-44c166014612/1/mgTNzcEVnDHu2yTMesiyYrdWInw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:df:5a:c5:ea:74:1e:b7:59:af:e1:e0:e4:89:ad:b6:83:03:
         13:c0:6d:e1:9b:bb:d6:e3:93:86:06:8c:90:22:53:6e:54:15:
         b0:5f:40:37:e7:47:92:54:b7:a1:d8:6e:35:f0:28:4a:1c:d5:
         f9:ec:dc:38:22:ef:24:9f:d8:1d:c4:e9:68:de:82:e2:f6:81:
         a8:f1:05:a3:76:3f:59:40:87:67:c3:a3:9a:a8:38:0c:aa:a0:
         27:66:cc:07:c4:2d:e9:ca:df:a4:c4:83:3f:86:82:0d:dc:fe:
         82:87:3e:07:ef:9e:25:b0:a0:91:c9:4a:6e:06:b2:b8:2f:bb:
         d6:19:70:86:de:ee:e9:32:b7:8d:83:bf:0f:79:45:18:5b:2b:
         de:33:ed:af:d7:aa:c8:cf:28:c9:7d:e1:36:f4:b4:09:3b:84:
         9f:9d:25:bc:ed:03:87:a8:19:0e:66:1e:f9:97:c4:28:3e:cd:
         da:35:ef:52:39:fe:68:e5:d0:76:7f:d7:df:95:b3:60:ea:c5:
         f5:01:0f:48:04:c5:95:39:88:45:d3:a5:56:f5:34:9d:b4:f7:
         25:96:ce:07:5c:1a:19:01:5e:e0:48:eb:8b:f8:c5:1e:89:fd:
         b6:09:10:ad:41:92:38:79:63:89:38:7b:06:0c:c6:cf:7e:0c:
         7d:73:c9:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYyzTlVOGM2JW7Iq0k8nMrUVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhMDRjZGNkYzExNTljMzFlZWRiMjRjYzdhYzhiMjYyYjc1
NjIyN2MwHhcNMjMxMjI5MDIwMTQ0WhcNMjMxMjMwMDIwMTQ0WjAzMTEwLwYDVQQD
EyhhZmU1YzM1MmJkZDJlNzViMjQxODMyNjk1MTI5YjQ1ODQ4ZjIyYTVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1RYAs/23RqCgggJ85HB+mtgtW5/
sRZURlzcO38x8PjACw/R+Gcscs/9iVSVB1ZaicmKuI91WLUy5pje5PU9zZKfkZvL
Us4IrcdSHVoUtFtwL5qKLeVnnuGKQb6ZMOEGbn+3JbFCnKbuk1wnGUjyVcXbb3T2
Buvvr/BQtDGaGKMRWMG2lG7YFX+jVKWgmvlJqEuDXfAWAYnmgd2ryjanDbHj5yjA
Mpw4acrMo5Al6e/q+t3gNRyGmN0ynW4bHTvFwPzppVVeofuQ13XJtH3McwwlVNeN
itkE54fo4aed24Iv6xN5h4bh3wRlTbvYLXXI2Pq6MXPsYgZ3gWUUegMI2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK/lw1K90udbJBgyaVEptFhI8ipaMB8GA1UdIwQY
MBaAFJoEzc3BFZwx7tskzHrIsmK3ViJ8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWdUTnpjRVZuREh1MnlUTWVzaXlZcmRXSW53LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi82MmU0M2ItMjI4YS00ZTg1LTgzNGMt
NDRjMTY2MDE0NjEyLzEvbWdUTnpjRVZuREh1MnlUTWVzaXlZcmRXSW53Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi82MmU0M2ItMjI4YS00ZTg1LTgzNGMtNDRjMTY2MDE0NjEy
LzEvbWdUTnpjRVZuREh1MnlUTWVzaXlZcmRXSW53LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJt9axep0
HrdZr+Hg5ImttoMDE8Bt4Zu71uOThgaMkCJTblQVsF9AN+dHklS3odhuNfAoShzV
+ezcOCLvJJ/YHcTpaN6C4vaBqPEFo3Y/WUCHZ8Ojmqg4DKqgJ2bMB8Qt6crfpMSD
P4aCDdz+goc+B++eJbCgkclKbgayuC+71hlwht7u6TK3jYO/D3lFGFsr3jPtr9eq
yM8oyX3hNvS0CTuEn50lvO0Dh6gZDmYe+ZfEKD7N2jXvUjn+aOXQdn/X35WzYOrF
9QEPSATFlTmIRdOlVvU0nbT3JZbOB1waGQFe4Ejri/jFHon9tgkQrUGSOHljiTh7
BgzGz34MfXPJGA==
-----END CERTIFICATE-----