Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/cf7d1a-a962-46bb-a468-a871e02567ac/1/A89r-jibXqQ8DSeC_ubwREQgR2s.mft
File:                     A89r-jibXqQ8DSeC_ubwREQgR2s.mft (raw, json)
Hash identifier:          Jhi/+yjG9jBmyR00vsk4BcQTlLc5YfZj0pA/oJAfcPM=
Subject key identifier:   98:4B:47:84:A2:30:38:5A:E3:BA:D1:2E:D4:1E:0B:A6:B0:81:73:68
Authority key identifier: 03:CF:6B:FA:38:9B:5E:A4:3C:0D:27:82:FE:E6:F0:44:44:20:47:6B
Certificate issuer:       /CN=03cf6bfa389b5ea43c0d2782fee6f0444420476b
Certificate serial:       018419C48C45ECCC2F0547371D40CB050F6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A89r-jibXqQ8DSeC_ubwREQgR2s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/cf7d1a-a962-46bb-a468-a871e02567ac/1/A89r-jibXqQ8DSeC_ubwREQgR2s.mft
Manifest number:          09D3
Signing time:             Thu 27 Oct 2022 14:07:01 +0000
Manifest this update:     Thu 27 Oct 2022 14:07:01 +0000
Manifest next update:     Fri 28 Oct 2022 14:07:01 +0000
Files and hashes:         1: 7dvoKp0Q5-OuuylRONSGIsnrgi8.roa (hash: OyeHzMPNA87JUYUqqpJramWxgWv7gfmI/c4/NgCDUyw=)
                          2: A89r-jibXqQ8DSeC_ubwREQgR2s.crl (hash: A1aJBDT/wRblLUyAseR04Ih8bwW3B47nGYzBrvIHRlk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:19:c4:8c:45:ec:cc:2f:05:47:37:1d:40:cb:05:0f:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03cf6bfa389b5ea43c0d2782fee6f0444420476b
        Validity
            Not Before: Oct 27 14:07:01 2022 GMT
            Not After : Oct 28 14:07:01 2022 GMT
        Subject: CN=984b4784a230385ae3bad12ed41e0ba6b0817368
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:65:c1:38:97:ee:c7:21:2c:2a:a7:ce:6e:23:
                    26:d3:0e:34:1d:59:22:d5:fa:5e:44:5b:9c:0e:c3:
                    d4:76:1e:20:71:25:48:f2:65:71:d0:97:07:42:9d:
                    b8:1a:4d:83:48:5d:36:73:d5:66:1e:1c:60:60:b8:
                    ac:0b:4a:7a:9a:46:ea:3f:72:20:ad:98:30:26:41:
                    c9:de:aa:f6:cd:4e:6c:bd:29:9f:9a:3a:59:d3:51:
                    48:b9:a5:91:ab:d1:47:97:1b:b8:a1:bf:8a:59:cc:
                    4c:db:77:3e:76:00:92:5b:dd:19:17:97:2f:65:73:
                    4e:69:2e:ae:e4:7d:59:8d:84:ad:d3:65:0a:f7:47:
                    b5:f7:35:93:8d:a7:93:78:1b:a6:48:5e:32:2e:12:
                    21:fc:04:79:3f:f5:20:53:f3:b2:b4:fc:b0:11:53:
                    ab:4f:e3:db:3f:51:d1:06:90:ce:4c:5f:7b:88:d0:
                    09:66:61:3f:f8:74:19:3c:38:9d:6d:1b:1c:05:42:
                    d2:dc:e5:f1:a2:65:c4:a1:05:51:7b:49:85:94:b9:
                    1a:b9:11:6c:5c:7a:f1:74:99:1f:92:89:bb:f8:2b:
                    78:a9:6b:a1:c7:c9:15:a3:00:af:94:52:4a:1f:a8:
                    e7:2c:b5:af:1f:0a:a1:e2:1b:0d:f8:6e:21:f5:7a:
                    bd:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:4B:47:84:A2:30:38:5A:E3:BA:D1:2E:D4:1E:0B:A6:B0:81:73:68
            X509v3 Authority Key Identifier:
                keyid:03:CF:6B:FA:38:9B:5E:A4:3C:0D:27:82:FE:E6:F0:44:44:20:47:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A89r-jibXqQ8DSeC_ubwREQgR2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/cf7d1a-a962-46bb-a468-a871e02567ac/1/A89r-jibXqQ8DSeC_ubwREQgR2s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/cf7d1a-a962-46bb-a468-a871e02567ac/1/A89r-jibXqQ8DSeC_ubwREQgR2s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:96:36:c0:7a:b5:e5:ac:f5:c8:68:89:57:a4:54:59:40:f8:
         50:9d:8e:75:f9:f1:fc:e5:b3:eb:17:4f:ec:70:b1:cf:6f:9d:
         ce:3c:38:45:a8:13:9e:9e:c7:98:c1:da:f6:10:e4:8a:39:74:
         d8:e7:53:9e:20:5e:a6:4f:f2:5b:09:6f:13:cc:45:c0:15:6a:
         f9:dd:94:95:99:8c:6d:84:15:1b:bd:04:a6:52:9b:37:21:bd:
         eb:58:1f:5a:55:89:40:f5:9d:df:3e:1e:6e:e3:20:0e:37:f4:
         01:f2:5f:b7:a8:8f:91:a6:bf:88:b2:a2:26:21:b3:f0:45:00:
         5c:c9:4c:20:fb:b4:7b:22:21:f2:b3:ff:d2:ff:47:f3:a5:ba:
         62:da:4e:cc:60:59:cd:15:be:34:37:59:2d:83:eb:54:38:e6:
         88:cd:b4:36:b3:6a:d7:e5:c6:30:7f:11:a7:4d:af:4f:c6:c3:
         a8:1c:03:0b:b8:21:eb:50:8e:b5:32:71:78:07:59:12:10:40:
         0f:e4:32:99:64:09:a7:23:cc:a1:4d:71:e8:34:33:e3:40:3f:
         79:15:e2:4c:90:a8:de:e4:56:89:ff:6d:97:32:65:f5:0a:1c:
         ff:9f:4e:95:92:c5:02:cb:b7:5e:a2:c7:38:27:dc:54:66:f8:
         c6:d6:1b:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYQZxIxF7MwvBUc3HUDLBQ9uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzY2Y2YmZhMzg5YjVlYTQzYzBkMjc4MmZlZTZmMDQ0NDQy
MDQ3NmIwHhcNMjIxMDI3MTQwNzAxWhcNMjIxMDI4MTQwNzAxWjAzMTEwLwYDVQQD
Eyg5ODRiNDc4NGEyMzAzODVhZTNiYWQxMmVkNDFlMGJhNmIwODE3MzY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWXBOJfuxyEsKqfObiMm0w40HVki
1fpeRFucDsPUdh4gcSVI8mVx0JcHQp24Gk2DSF02c9VmHhxgYLisC0p6mkbqP3Ig
rZgwJkHJ3qr2zU5svSmfmjpZ01FIuaWRq9FHlxu4ob+KWcxM23c+dgCSW90ZF5cv
ZXNOaS6u5H1ZjYSt02UK90e19zWTjaeTeBumSF4yLhIh/AR5P/UgU/OytPywEVOr
T+PbP1HRBpDOTF97iNAJZmE/+HQZPDidbRscBULS3OXxomXEoQVRe0mFlLkauRFs
XHrxdJkfkom7+Ct4qWuhx8kVowCvlFJKH6jnLLWvHwqh4hsN+G4h9Xq9iQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJhLR4SiMDha47rRLtQeC6awgXNoMB8GA1UdIwQY
MBaAFAPPa/o4m16kPA0ngv7m8EREIEdrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTg5ci1qaWJYcVE4RFNlQ191YndSRVFnUjJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9jZjdkMWEtYTk2Mi00NmJiLWE0Njgt
YTg3MWUwMjU2N2FjLzEvQTg5ci1qaWJYcVE4RFNlQ191YndSRVFnUjJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9jZjdkMWEtYTk2Mi00NmJiLWE0NjgtYTg3MWUwMjU2N2Fj
LzEvQTg5ci1qaWJYcVE4RFNlQ191YndSRVFnUjJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAppY2wHq1
5az1yGiJV6RUWUD4UJ2Odfnx/OWz6xdP7HCxz2+dzjw4RagTnp7HmMHa9hDkijl0
2OdTniBepk/yWwlvE8xFwBVq+d2UlZmMbYQVG70EplKbNyG961gfWlWJQPWd3z4e
buMgDjf0AfJft6iPkaa/iLKiJiGz8EUAXMlMIPu0eyIh8rP/0v9H86W6YtpOzGBZ
zRW+NDdZLYPrVDjmiM20NrNq1+XGMH8Rp02vT8bDqBwDC7gh61COtTJxeAdZEhBA
D+QymWQJpyPMoU1x6DQz40A/eRXiTJCo3uRWif9tlzJl9Qoc/59OlZLFAsu3XqLH
OCfcVGb4xtYbUw==
-----END CERTIFICATE-----