Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/89fd83-0f92-4653-831a-4f23a2ffb9e7/1/BblLt89ckj3xiSRqXU2Z1jsZfs8.mft
File:                     BblLt89ckj3xiSRqXU2Z1jsZfs8.mft (raw, json)
Hash identifier:          3rk1jkc1aQ+md/yMhZSewL+WzE/bFECTPkpLu20oMFM=
Subject key identifier:   B9:A3:1D:04:AC:ED:5E:FD:9B:84:AB:DD:80:87:9F:12:F1:1E:AB:C0
Authority key identifier: 05:B9:4B:B7:CF:5C:92:3D:F1:89:24:6A:5D:4D:99:D6:3B:19:7E:CF
Certificate issuer:       /CN=05b94bb7cf5c923df189246a5d4d99d63b197ecf
Certificate serial:       018A871FAE948310D33DCBF36D8BCB2A51E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BblLt89ckj3xiSRqXU2Z1jsZfs8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/89fd83-0f92-4653-831a-4f23a2ffb9e7/1/BblLt89ckj3xiSRqXU2Z1jsZfs8.mft
Manifest number:          0EE2
Signing time:             Tue 12 Sep 2023 02:01:54 +0000
Manifest this update:     Tue 12 Sep 2023 02:01:54 +0000
Manifest next update:     Wed 13 Sep 2023 02:01:54 +0000
Files and hashes:         1: BblLt89ckj3xiSRqXU2Z1jsZfs8.crl (hash: fXbAXeAVdChl+uoBWNNk9coC8PVhU3NnqjLby5IS6Hw=)
                          2: pzVP8_DYejrlZdrPp5kH1ufGT_4.roa (hash: kky57G9STcYkTkJiLQKl6YTJqCps/1jk95inY8Ag4wU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:87:1f:ae:94:83:10:d3:3d:cb:f3:6d:8b:cb:2a:51:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05b94bb7cf5c923df189246a5d4d99d63b197ecf
        Validity
            Not Before: Sep 12 02:01:54 2023 GMT
            Not After : Sep 13 02:01:54 2023 GMT
        Subject: CN=b9a31d04aced5efd9b84abdd80879f12f11eabc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:bb:e8:79:1a:9f:fb:fa:bc:4e:3a:31:0f:d6:
                    cb:6b:98:1b:b4:e5:f6:38:dd:24:f0:ae:be:6b:f2:
                    05:eb:3f:10:ff:e4:ec:ab:1e:8a:b3:4f:6a:9a:02:
                    92:26:e2:30:e8:b1:e0:ca:40:8e:75:7e:95:f8:b5:
                    83:79:de:f8:68:82:3c:55:e8:44:4f:bd:a9:41:9b:
                    18:ef:b5:8d:30:9d:f9:88:c1:e1:93:3f:57:d9:65:
                    6e:5d:3c:48:ef:9f:07:45:69:9d:24:5a:1f:67:a5:
                    38:f7:12:ce:11:0c:fd:62:21:1d:a1:68:c5:1f:c2:
                    54:a1:0e:80:db:d3:e3:10:7e:45:ff:1e:d4:25:57:
                    ec:72:38:b9:d5:ef:bc:b2:84:9c:fe:94:1d:52:58:
                    bc:d1:8b:0e:95:74:99:da:3c:ba:a4:13:e7:c5:ca:
                    ad:95:4e:ff:f8:46:53:b7:6f:de:2a:1d:b6:0c:00:
                    2b:58:2f:b3:42:fd:e4:21:98:1b:0c:64:4f:98:31:
                    88:06:96:44:92:09:03:40:85:22:79:bf:d6:9d:72:
                    89:d2:ca:a4:59:b2:4f:c6:b3:7e:4c:79:0b:b1:15:
                    d3:c8:82:9d:a4:ed:c1:3a:13:8a:75:e0:e1:bb:53:
                    93:f3:74:6c:07:0d:9c:5e:04:8f:db:67:f0:8e:dd:
                    e2:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:A3:1D:04:AC:ED:5E:FD:9B:84:AB:DD:80:87:9F:12:F1:1E:AB:C0
            X509v3 Authority Key Identifier:
                keyid:05:B9:4B:B7:CF:5C:92:3D:F1:89:24:6A:5D:4D:99:D6:3B:19:7E:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BblLt89ckj3xiSRqXU2Z1jsZfs8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/89fd83-0f92-4653-831a-4f23a2ffb9e7/1/BblLt89ckj3xiSRqXU2Z1jsZfs8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/89fd83-0f92-4653-831a-4f23a2ffb9e7/1/BblLt89ckj3xiSRqXU2Z1jsZfs8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:97:7a:17:36:b1:d9:48:8c:54:72:3c:cc:07:06:2d:5d:73:
         5f:94:bf:12:b5:73:9b:58:e3:0e:18:9d:66:a3:a6:f7:68:65:
         9b:73:48:8a:18:27:c1:c6:8a:2f:2e:8c:ef:82:fc:5e:3a:bd:
         8e:a2:a2:33:a0:6e:c0:be:91:54:49:04:d5:03:9f:84:aa:37:
         26:4c:96:db:bb:fe:cc:40:64:04:b2:9c:29:0e:53:92:9b:49:
         4a:a0:bc:9c:60:2e:47:0b:a6:00:84:29:16:b1:b9:87:bd:08:
         ed:8c:55:16:fb:bf:b9:b4:6d:ab:9d:d9:11:c9:24:5d:a1:ec:
         02:6e:04:0e:4f:f1:4b:b9:c5:44:29:f8:68:ef:a3:00:30:ee:
         e6:dd:da:ab:d7:13:66:4e:d2:fd:af:b6:6f:51:df:08:b3:a6:
         69:e5:a5:ef:32:72:32:48:59:f3:7b:29:86:3a:ff:78:24:ba:
         fe:19:4c:3e:a2:d0:00:9d:50:6d:c5:d8:88:7b:70:98:d7:37:
         b7:7f:5e:c8:9a:25:23:d3:ec:b6:5f:0e:26:e0:4a:d4:31:59:
         2b:2d:73:4e:89:35:73:07:1e:3b:4e:9d:fe:d2:2d:4d:ee:63:
         a0:41:9e:d9:b6:8a:bd:54:6b:fb:63:24:e2:c7:93:d0:96:28:
         3a:a6:fd:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYqHH66UgxDTPcvzbYvLKlHgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1Yjk0YmI3Y2Y1YzkyM2RmMTg5MjQ2YTVkNGQ5OWQ2M2Ix
OTdlY2YwHhcNMjMwOTEyMDIwMTU0WhcNMjMwOTEzMDIwMTU0WjAzMTEwLwYDVQQD
EyhiOWEzMWQwNGFjZWQ1ZWZkOWI4NGFiZGQ4MDg3OWYxMmYxMWVhYmMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbvoeRqf+/q8TjoxD9bLa5gbtOX2
ON0k8K6+a/IF6z8Q/+Tsqx6Ks09qmgKSJuIw6LHgykCOdX6V+LWDed74aII8VehE
T72pQZsY77WNMJ35iMHhkz9X2WVuXTxI758HRWmdJFofZ6U49xLOEQz9YiEdoWjF
H8JUoQ6A29PjEH5F/x7UJVfscji51e+8soSc/pQdUli80YsOlXSZ2jy6pBPnxcqt
lU7/+EZTt2/eKh22DAArWC+zQv3kIZgbDGRPmDGIBpZEkgkDQIUieb/WnXKJ0sqk
WbJPxrN+THkLsRXTyIKdpO3BOhOKdeDhu1OT83RsBw2cXgSP22fwjt3iFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLmjHQSs7V79m4Sr3YCHnxLxHqvAMB8GA1UdIwQY
MBaAFAW5S7fPXJI98Ykkal1NmdY7GX7PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmJsTHQ4OWNrajN4aVNScVhVMloxanNaZnM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS84OWZkODMtMGY5Mi00NjUzLTgzMWEt
NGYyM2EyZmZiOWU3LzEvQmJsTHQ4OWNrajN4aVNScVhVMloxanNaZnM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS84OWZkODMtMGY5Mi00NjUzLTgzMWEtNGYyM2EyZmZiOWU3
LzEvQmJsTHQ4OWNrajN4aVNScVhVMloxanNaZnM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY5d6Fzax
2UiMVHI8zAcGLV1zX5S/ErVzm1jjDhidZqOm92hlm3NIihgnwcaKLy6M74L8Xjq9
jqKiM6BuwL6RVEkE1QOfhKo3JkyW27v+zEBkBLKcKQ5TkptJSqC8nGAuRwumAIQp
FrG5h70I7YxVFvu/ubRtq53ZEckkXaHsAm4EDk/xS7nFRCn4aO+jADDu5t3aq9cT
Zk7S/a+2b1HfCLOmaeWl7zJyMkhZ83sphjr/eCS6/hlMPqLQAJ1QbcXYiHtwmNc3
t39eyJolI9Pstl8OJuBK1DFZKy1zTok1cwceO06d/tItTe5joEGe2baKvVRr+2Mk
4seT0JYoOqb9VQ==
-----END CERTIFICATE-----