Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/eaaf19-5440-4228-8c31-3622cd7d8956/1/AEb3j180EOsOVtwXADZn4DBxG68.mft
File:                     AEb3j180EOsOVtwXADZn4DBxG68.mft (raw, json)
Hash identifier:          K2S3QfyAIrXSgXbTNuJ5eGjSy3ri4LmSLq3SMM1Lbs4=
Subject key identifier:   60:F4:99:D2:88:28:F6:F0:C4:2D:F7:02:21:DA:DF:0D:9F:7B:26:0F
Authority key identifier: 00:46:F7:8F:5F:34:10:EB:0E:56:DC:17:00:36:67:E0:30:71:1B:AF
Certificate issuer:       /CN=0046f78f5f3410eb0e56dc17003667e030711baf
Certificate serial:       018A1C0076E6E657A9DC9C942F1B642ECEA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AEb3j180EOsOVtwXADZn4DBxG68.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/eaaf19-5440-4228-8c31-3622cd7d8956/1/AEb3j180EOsOVtwXADZn4DBxG68.mft
Manifest number:          062A
Signing time:             Tue 22 Aug 2023 06:48:26 +0000
Manifest this update:     Tue 22 Aug 2023 06:48:26 +0000
Manifest next update:     Wed 23 Aug 2023 06:48:26 +0000
Files and hashes:         1: AEb3j180EOsOVtwXADZn4DBxG68.crl (hash: Ybw8RFQ+jT7P7F3b1FnTN4rKKO+J3bpTmwWyo0denGs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:1c:00:76:e6:e6:57:a9:dc:9c:94:2f:1b:64:2e:ce:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0046f78f5f3410eb0e56dc17003667e030711baf
        Validity
            Not Before: Aug 22 06:48:26 2023 GMT
            Not After : Aug 23 06:48:26 2023 GMT
        Subject: CN=60f499d28828f6f0c42df70221dadf0d9f7b260f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ad:63:d9:b6:15:8e:58:5a:9f:5e:45:8a:cf:
                    f4:a1:8d:04:de:4c:bf:81:ff:bf:8c:04:70:9b:9a:
                    3f:9d:5d:ab:ec:2c:05:b7:45:c5:ae:14:d7:bb:b9:
                    4a:94:4c:57:64:ea:c5:ae:68:da:f4:31:57:56:0f:
                    70:8f:12:ab:e2:01:f0:ae:84:95:2e:27:5f:80:f9:
                    6a:36:47:b8:40:20:f7:5b:fc:5a:08:cc:22:89:5f:
                    28:6c:09:42:dc:98:ec:fe:cf:47:3d:9e:a9:66:54:
                    37:67:f2:3d:87:48:6e:52:4b:e5:3c:26:02:d2:9a:
                    dc:28:f2:a7:b7:65:00:cf:d0:55:9c:3b:d6:a9:ba:
                    12:9b:ea:a9:99:84:ed:0f:1f:0e:61:f0:94:4c:a6:
                    0a:25:7e:ba:59:ee:5f:99:b7:95:b9:b5:af:7b:25:
                    82:63:26:9a:71:2b:c0:c5:72:91:64:9f:b2:ec:b2:
                    5a:fa:e8:75:12:3d:29:7d:0b:ea:3c:df:ae:00:0e:
                    41:f0:a4:80:9b:e3:f6:82:9a:cc:1a:21:64:06:5b:
                    ea:ca:03:89:3c:0d:1f:35:14:7c:62:a8:b3:2b:46:
                    c1:3f:19:42:41:46:03:fc:95:92:9a:86:3c:d2:01:
                    07:5a:84:98:0a:3a:ea:84:71:55:8c:0d:fd:01:30:
                    3e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:F4:99:D2:88:28:F6:F0:C4:2D:F7:02:21:DA:DF:0D:9F:7B:26:0F
            X509v3 Authority Key Identifier:
                keyid:00:46:F7:8F:5F:34:10:EB:0E:56:DC:17:00:36:67:E0:30:71:1B:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AEb3j180EOsOVtwXADZn4DBxG68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/eaaf19-5440-4228-8c31-3622cd7d8956/1/AEb3j180EOsOVtwXADZn4DBxG68.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/eaaf19-5440-4228-8c31-3622cd7d8956/1/AEb3j180EOsOVtwXADZn4DBxG68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:44:fb:e8:c6:37:88:b0:9c:40:b0:f8:76:30:cf:20:f4:aa:
         2b:fc:ee:13:0b:0a:5e:9e:a4:36:29:90:72:3f:4d:c2:7d:1d:
         d2:c6:ef:73:74:66:06:99:9f:b4:2b:07:7d:f5:2c:66:d9:2b:
         eb:f3:9b:29:02:64:57:f7:dc:c3:65:48:d0:82:7f:24:34:1e:
         9f:af:fd:66:b2:b2:66:3b:de:37:4b:4c:22:e2:9e:8a:2d:51:
         44:fc:95:bf:2d:33:18:e1:4b:85:8c:15:80:fa:7f:26:82:39:
         c5:1a:8f:10:da:ec:d4:43:33:75:5a:40:a4:4a:95:55:11:8b:
         e1:9d:ea:a7:f4:4a:70:a5:c2:18:c7:ec:fd:e2:73:06:5c:cf:
         2f:c4:67:45:dd:83:62:47:ae:73:60:c7:82:d9:35:1b:19:e1:
         f7:c5:fc:4e:a4:dc:b8:5a:ff:c0:55:d3:ce:78:2f:4b:bb:15:
         f1:f8:8d:c7:70:77:1a:9c:db:21:64:e2:a7:a7:02:de:9d:23:
         5b:07:65:97:84:b7:bb:bd:17:f0:49:4d:50:76:52:aa:8e:b7:
         c0:29:6d:4d:85:b3:88:c3:ab:2c:f4:62:0d:80:52:00:65:ca:
         08:37:ff:0b:aa:7b:26:c7:36:e0:3c:fa:83:6a:b7:12:4a:4f:
         33:cf:9d:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYocAHbm5lep3JyULxtkLs6hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwNDZmNzhmNWYzNDEwZWIwZTU2ZGMxNzAwMzY2N2UwMzA3
MTFiYWYwHhcNMjMwODIyMDY0ODI2WhcNMjMwODIzMDY0ODI2WjAzMTEwLwYDVQQD
Eyg2MGY0OTlkMjg4MjhmNmYwYzQyZGY3MDIyMWRhZGYwZDlmN2IyNjBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuK1j2bYVjlhan15Fis/0oY0E3ky/
gf+/jARwm5o/nV2r7CwFt0XFrhTXu7lKlExXZOrFrmja9DFXVg9wjxKr4gHwroSV
LidfgPlqNke4QCD3W/xaCMwiiV8obAlC3Jjs/s9HPZ6pZlQ3Z/I9h0huUkvlPCYC
0prcKPKnt2UAz9BVnDvWqboSm+qpmYTtDx8OYfCUTKYKJX66We5fmbeVubWveyWC
YyaacSvAxXKRZJ+y7LJa+uh1Ej0pfQvqPN+uAA5B8KSAm+P2gprMGiFkBlvqygOJ
PA0fNRR8YqizK0bBPxlCQUYD/JWSmoY80gEHWoSYCjrqhHFVjA39ATA+hQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGD0mdKIKPbwxC33AiHa3w2feyYPMB8GA1UdIwQY
MBaAFABG949fNBDrDlbcFwA2Z+AwcRuvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUViM2oxODBFT3NPVnR3WEFEWm40REJ4RzY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9lYWFmMTktNTQ0MC00MjI4LThjMzEt
MzYyMmNkN2Q4OTU2LzEvQUViM2oxODBFT3NPVnR3WEFEWm40REJ4RzY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9lYWFmMTktNTQ0MC00MjI4LThjMzEtMzYyMmNkN2Q4OTU2
LzEvQUViM2oxODBFT3NPVnR3WEFEWm40REJ4RzY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAUT76MY3
iLCcQLD4djDPIPSqK/zuEwsKXp6kNimQcj9Nwn0d0sbvc3RmBpmftCsHffUsZtkr
6/ObKQJkV/fcw2VI0IJ/JDQen6/9ZrKyZjveN0tMIuKeii1RRPyVvy0zGOFLhYwV
gPp/JoI5xRqPENrs1EMzdVpApEqVVRGL4Z3qp/RKcKXCGMfs/eJzBlzPL8RnRd2D
Ykeuc2DHgtk1Gxnh98X8TqTcuFr/wFXTzngvS7sV8fiNx3B3GpzbIWTip6cC3p0j
Wwdll4S3u70X8ElNUHZSqo63wCltTYWziMOrLPRiDYBSAGXKCDf/C6p7Jsc24Dz6
g2q3EkpPM8+d7w==
-----END CERTIFICATE-----