Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/682496-1d5e-402b-b6ed-8a946e9884ab/1/0uVjygFO5AuY0eXtfZzCiRVtRD8.mft
File:                     0uVjygFO5AuY0eXtfZzCiRVtRD8.mft (raw, json)
Hash identifier:          9xJDQcYa9sfxIwhYELga/WRG2VHVMMCzEZjsJSmYaYY=
Subject key identifier:   91:AD:A9:4B:2B:AC:8F:E8:7C:1C:6A:DA:4F:88:52:CB:28:2F:5C:5B
Authority key identifier: D2:E5:63:CA:01:4E:E4:0B:98:D1:E5:ED:7D:9C:C2:89:15:6D:44:3F
Certificate issuer:       /CN=d2e563ca014ee40b98d1e5ed7d9cc289156d443f
Certificate serial:       018C6B347C7AD20DC36CE803392508378324
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0uVjygFO5AuY0eXtfZzCiRVtRD8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/682496-1d5e-402b-b6ed-8a946e9884ab/1/0uVjygFO5AuY0eXtfZzCiRVtRD8.mft
Manifest number:          085C
Signing time:             Fri 15 Dec 2023 02:00:50 +0000
Manifest this update:     Fri 15 Dec 2023 02:00:50 +0000
Manifest next update:     Sat 16 Dec 2023 02:00:50 +0000
Files and hashes:         1: 0uVjygFO5AuY0eXtfZzCiRVtRD8.crl (hash: WPAKSzAYTMJ4pUOLjqFr53NsOoZq8Dv5OAbRplv0SbA=)
                          2: n89WROw4TK3d2Tf-IAggrYt4y4o.roa (hash: uJ86ZIPtkb69/L+tAkymjehY8zzfnuqrxFn0TX+FgzA=)
                          3: xf4tSygdipx0TF5rzkoOCsbUXEE.roa (hash: tdoZL9pbmJU4HMhjszcooV1QzmAL3CP9yivGgGTfU74=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:6b:34:7c:7a:d2:0d:c3:6c:e8:03:39:25:08:37:83:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2e563ca014ee40b98d1e5ed7d9cc289156d443f
        Validity
            Not Before: Dec 15 02:00:50 2023 GMT
            Not After : Dec 16 02:00:50 2023 GMT
        Subject: CN=91ada94b2bac8fe87c1c6ada4f8852cb282f5c5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:95:b1:f3:20:c7:c1:df:ec:8b:c4:36:ef:73:
                    37:9b:9b:2f:1c:2e:00:ac:42:78:0f:2a:04:e0:75:
                    48:bf:14:74:43:f2:18:a0:3c:54:a3:76:f9:06:86:
                    07:59:ec:ef:8e:85:61:19:8f:04:e6:5b:ee:79:fd:
                    20:54:91:59:cb:aa:f4:a8:73:9d:b6:53:2d:10:51:
                    fc:08:33:da:5e:ab:57:4f:ba:1b:28:e0:8f:ee:2f:
                    71:65:cc:66:92:90:74:76:40:23:41:58:b8:12:8b:
                    2a:df:6f:3f:b9:14:01:d2:b9:05:0a:a1:7e:6c:1d:
                    88:74:d2:f1:4f:c1:63:69:a3:9a:a0:0a:fc:94:94:
                    97:47:0e:b6:e4:0d:d1:c3:04:b2:4f:72:45:e0:58:
                    fc:c0:09:aa:0e:41:53:29:42:70:40:fa:50:15:2e:
                    9b:e0:04:97:67:e0:fc:61:cb:f4:e4:4a:4e:fc:da:
                    b6:96:f7:f6:b4:83:95:9c:cb:d7:bd:5d:07:76:de:
                    92:21:e8:77:83:70:fa:19:7d:74:17:7c:1d:42:75:
                    48:c2:da:e0:1c:67:28:67:aa:ae:08:d6:9b:f2:46:
                    be:9e:c4:db:f4:dd:fa:1c:8a:4e:25:9a:83:22:90:
                    ca:ea:ad:46:49:59:bf:d9:8e:cf:9f:9f:33:34:bd:
                    9c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:AD:A9:4B:2B:AC:8F:E8:7C:1C:6A:DA:4F:88:52:CB:28:2F:5C:5B
            X509v3 Authority Key Identifier:
                keyid:D2:E5:63:CA:01:4E:E4:0B:98:D1:E5:ED:7D:9C:C2:89:15:6D:44:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0uVjygFO5AuY0eXtfZzCiRVtRD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/682496-1d5e-402b-b6ed-8a946e9884ab/1/0uVjygFO5AuY0eXtfZzCiRVtRD8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/682496-1d5e-402b-b6ed-8a946e9884ab/1/0uVjygFO5AuY0eXtfZzCiRVtRD8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:33:e9:09:f3:85:b2:09:40:b2:ca:88:96:6e:b4:23:74:fe:
         d8:1f:07:c5:a7:52:5d:20:c8:83:4f:0e:70:72:f0:ab:81:d8:
         80:9f:25:bb:85:e9:c5:94:a5:e7:49:80:55:25:fc:5a:ba:99:
         dd:d0:f9:ef:75:26:b4:20:fd:0c:cd:91:c4:65:2b:b7:f7:9c:
         7b:74:5d:6d:a8:62:21:a7:43:63:50:a5:33:bf:ae:80:e9:3e:
         c9:38:9b:e1:6e:f0:1b:b4:87:16:17:37:e6:8c:f5:b6:a9:52:
         b7:cd:df:1b:d4:fe:9a:1c:15:c3:9d:31:b9:ce:44:e4:91:4e:
         1b:ae:03:33:f7:a6:b6:1c:36:6a:b4:05:48:8a:ed:5d:6b:6d:
         db:25:b2:ab:62:5b:e2:62:97:ea:f0:3f:f4:e5:84:2c:90:61:
         b7:09:c3:18:a7:cb:3a:b5:d7:94:59:1e:90:f6:be:5f:ee:9e:
         2e:26:79:20:36:e5:ea:5a:b9:bf:39:b7:1c:be:cd:aa:75:59:
         93:a9:ef:c8:e4:2a:5d:f2:77:bb:74:00:21:9b:91:73:aa:9a:
         f5:67:7e:3b:17:10:18:14:b0:83:dc:d8:f8:76:b0:7b:2f:a8:
         a6:f8:14:d3:62:46:24:6c:3e:3a:c4:b3:d0:de:a3:2b:44:e3:
         0b:98:c6:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYxrNHx60g3DbOgDOSUIN4MkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyZTU2M2NhMDE0ZWU0MGI5OGQxZTVlZDdkOWNjMjg5MTU2
ZDQ0M2YwHhcNMjMxMjE1MDIwMDUwWhcNMjMxMjE2MDIwMDUwWjAzMTEwLwYDVQQD
Eyg5MWFkYTk0YjJiYWM4ZmU4N2MxYzZhZGE0Zjg4NTJjYjI4MmY1YzViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5Wx8yDHwd/si8Q273M3m5svHC4A
rEJ4DyoE4HVIvxR0Q/IYoDxUo3b5BoYHWezvjoVhGY8E5lvuef0gVJFZy6r0qHOd
tlMtEFH8CDPaXqtXT7obKOCP7i9xZcxmkpB0dkAjQVi4Eosq328/uRQB0rkFCqF+
bB2IdNLxT8FjaaOaoAr8lJSXRw625A3RwwSyT3JF4Fj8wAmqDkFTKUJwQPpQFS6b
4ASXZ+D8Ycv05EpO/Nq2lvf2tIOVnMvXvV0Hdt6SIeh3g3D6GX10F3wdQnVIwtrg
HGcoZ6quCNab8ka+nsTb9N36HIpOJZqDIpDK6q1GSVm/2Y7Pn58zNL2cUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJGtqUsrrI/ofBxq2k+IUssoL1xbMB8GA1UdIwQY
MBaAFNLlY8oBTuQLmNHl7X2cwokVbUQ/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHVWanlnRk81QXVZMGVYdGZaekNpUlZ0UkQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS82ODI0OTYtMWQ1ZS00MDJiLWI2ZWQt
OGE5NDZlOTg4NGFiLzEvMHVWanlnRk81QXVZMGVYdGZaekNpUlZ0UkQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS82ODI0OTYtMWQ1ZS00MDJiLWI2ZWQtOGE5NDZlOTg4NGFi
LzEvMHVWanlnRk81QXVZMGVYdGZaekNpUlZ0UkQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPTPpCfOF
sglAssqIlm60I3T+2B8HxadSXSDIg08OcHLwq4HYgJ8lu4XpxZSl50mAVSX8WrqZ
3dD573UmtCD9DM2RxGUrt/ece3RdbahiIadDY1ClM7+ugOk+yTib4W7wG7SHFhc3
5oz1tqlSt83fG9T+mhwVw50xuc5E5JFOG64DM/emthw2arQFSIrtXWtt2yWyq2Jb
4mKX6vA/9OWELJBhtwnDGKfLOrXXlFkekPa+X+6eLiZ5IDbl6lq5vzm3HL7NqnVZ
k6nvyOQqXfJ3u3QAIZuRc6qa9Wd+OxcQGBSwg9zY+Hawey+opvgU02JGJGw+OsSz
0N6jK0TjC5jGHQ==
-----END CERTIFICATE-----