Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1de28c-1fac-4730-ac09-7d4b77f983b6/1/N97hygoWVRO1fIBQYhuMebjjpW8.mft
File:                     N97hygoWVRO1fIBQYhuMebjjpW8.mft (raw, json)
Hash identifier:          JiC00BC7+Yoc9hEwURmAcXOJD+5xQDKu8CtBQmz+aiM=
Subject key identifier:   E5:4F:2C:E4:31:31:A3:8D:C1:7E:4F:44:92:61:CB:82:20:BC:81:EA
Authority key identifier: 37:DE:E1:CA:0A:16:55:13:B5:7C:80:50:62:1B:8C:79:B8:E3:A5:6F
Certificate issuer:       /CN=37dee1ca0a165513b57c8050621b8c79b8e3a56f
Certificate serial:       018BB9527EEFC594D8C788E5FA154C90A9F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N97hygoWVRO1fIBQYhuMebjjpW8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/1de28c-1fac-4730-ac09-7d4b77f983b6/1/N97hygoWVRO1fIBQYhuMebjjpW8.mft
Manifest number:          08BC
Signing time:             Fri 10 Nov 2023 13:01:13 +0000
Manifest this update:     Fri 10 Nov 2023 13:01:13 +0000
Manifest next update:     Sat 11 Nov 2023 13:01:13 +0000
Files and hashes:         1: N97hygoWVRO1fIBQYhuMebjjpW8.crl (hash: ioNDDiMbh6PKmDIxTva7cgjmRYhbpW6esMqlHkQ3h+k=)
                          2: bXjU_vIxm81LonVjUhQqcPFpjaE.roa (hash: VUtc9X8WlzNQEyGfQbAaP9cYwyYFknMLJ4cC7UXUGhs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:b9:52:7e:ef:c5:94:d8:c7:88:e5:fa:15:4c:90:a9:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37dee1ca0a165513b57c8050621b8c79b8e3a56f
        Validity
            Not Before: Nov 10 13:01:13 2023 GMT
            Not After : Nov 11 13:01:13 2023 GMT
        Subject: CN=e54f2ce43131a38dc17e4f449261cb8220bc81ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:f3:b3:da:42:1a:cf:73:2e:6f:54:c8:35:10:
                    ed:05:ba:0b:3d:17:e0:ec:ac:e1:8f:50:fa:d5:dd:
                    b3:81:56:00:9e:08:6a:c6:3f:61:e1:a2:3f:66:67:
                    57:e1:63:9f:33:3d:a6:7c:1a:1c:fe:56:e9:18:d8:
                    a2:bd:cc:e2:2f:29:47:7f:bd:9c:98:91:a7:8e:6c:
                    c3:82:78:41:e8:9b:39:5b:ec:60:74:18:4e:96:3b:
                    81:2e:39:29:12:b2:4a:2d:58:46:33:0e:de:32:18:
                    b4:58:94:4a:d0:45:ad:43:36:33:eb:ab:91:15:68:
                    c4:74:1c:89:4a:64:7d:11:89:2d:54:a4:dd:0f:50:
                    c2:a8:17:5e:3c:98:7a:c9:ff:ea:bf:d2:6a:78:87:
                    a0:20:72:82:86:f3:b1:be:e8:86:10:4e:3d:9e:b4:
                    ed:48:12:be:30:2c:8f:5b:76:3a:23:b8:94:dc:37:
                    b8:05:e3:3a:39:ac:cb:bc:db:89:52:e8:3e:6a:b7:
                    32:7d:75:00:74:dc:98:fd:3a:4c:22:0b:af:5c:89:
                    06:dc:14:48:25:06:ff:f3:ab:f1:76:3d:40:fd:90:
                    2e:3d:99:20:42:07:8e:29:f2:9a:ac:c3:52:2b:cb:
                    4a:73:ef:d4:eb:27:96:af:c2:62:da:f8:83:a2:c1:
                    e5:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:4F:2C:E4:31:31:A3:8D:C1:7E:4F:44:92:61:CB:82:20:BC:81:EA
            X509v3 Authority Key Identifier:
                keyid:37:DE:E1:CA:0A:16:55:13:B5:7C:80:50:62:1B:8C:79:B8:E3:A5:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N97hygoWVRO1fIBQYhuMebjjpW8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1de28c-1fac-4730-ac09-7d4b77f983b6/1/N97hygoWVRO1fIBQYhuMebjjpW8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1de28c-1fac-4730-ac09-7d4b77f983b6/1/N97hygoWVRO1fIBQYhuMebjjpW8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:f0:fd:f4:df:a2:fc:69:eb:d7:45:a0:c1:aa:9f:56:a1:53:
         2e:16:f2:57:0f:24:13:37:69:af:a7:5a:7a:59:2a:84:20:57:
         73:46:f9:86:0f:9e:a1:1b:04:58:b9:d6:8f:5f:4e:25:b9:d8:
         06:93:9c:c5:40:59:66:5e:13:62:75:af:5b:46:16:e4:b9:a0:
         e9:64:33:44:ff:2c:91:0a:bf:3f:e1:74:fa:ce:5c:40:3d:68:
         22:4d:e8:84:a2:2d:ec:97:db:f0:9b:be:3d:32:1a:8c:45:e0:
         33:ff:4c:d4:a9:72:33:e3:13:51:01:b0:47:41:e4:2f:0e:23:
         80:69:33:af:e1:98:8c:74:52:4b:a3:8f:a4:7d:8d:3d:f0:37:
         ad:5c:fa:8d:e6:1d:32:b1:e6:f5:65:10:ee:c8:d1:c7:e6:97:
         37:f2:00:d5:03:1f:a2:f6:ed:70:0d:b2:a1:28:5a:93:2b:12:
         78:56:52:39:7e:e2:25:cb:c4:8b:7e:ad:a5:83:2e:95:1b:ae:
         f3:51:0d:aa:50:6c:66:55:77:1c:50:87:c7:68:8f:80:ab:f0:
         07:5f:b5:ce:13:46:d5:a3:61:9b:73:02:47:56:4e:fb:ee:4e:
         97:f9:43:4e:2a:c5:c8:d3:ed:39:d5:20:8c:9b:24:00:a9:24:
         bd:33:f1:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYu5Un7vxZTYx4jl+hVMkKn0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3ZGVlMWNhMGExNjU1MTNiNTdjODA1MDYyMWI4Yzc5Yjhl
M2E1NmYwHhcNMjMxMTEwMTMwMTEzWhcNMjMxMTExMTMwMTEzWjAzMTEwLwYDVQQD
EyhlNTRmMmNlNDMxMzFhMzhkYzE3ZTRmNDQ5MjYxY2I4MjIwYmM4MWVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvOz2kIaz3Mub1TINRDtBboLPRfg
7Kzhj1D61d2zgVYAnghqxj9h4aI/ZmdX4WOfMz2mfBoc/lbpGNiivcziLylHf72c
mJGnjmzDgnhB6Js5W+xgdBhOljuBLjkpErJKLVhGMw7eMhi0WJRK0EWtQzYz66uR
FWjEdByJSmR9EYktVKTdD1DCqBdePJh6yf/qv9JqeIegIHKChvOxvuiGEE49nrTt
SBK+MCyPW3Y6I7iU3De4BeM6OazLvNuJUug+arcyfXUAdNyY/TpMIguvXIkG3BRI
JQb/86vxdj1A/ZAuPZkgQgeOKfKarMNSK8tKc+/U6yeWr8Ji2viDosHl3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOVPLOQxMaONwX5PRJJhy4IgvIHqMB8GA1UdIwQY
MBaAFDfe4coKFlUTtXyAUGIbjHm446VvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjk3aHlnb1dWUk8xZklCUVlodU1lYmpqcFc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8xZGUyOGMtMWZhYy00NzMwLWFjMDkt
N2Q0Yjc3Zjk4M2I2LzEvTjk3aHlnb1dWUk8xZklCUVlodU1lYmpqcFc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi8xZGUyOGMtMWZhYy00NzMwLWFjMDktN2Q0Yjc3Zjk4M2I2
LzEvTjk3aHlnb1dWUk8xZklCUVlodU1lYmpqcFc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJfD99N+i
/Gnr10WgwaqfVqFTLhbyVw8kEzdpr6daelkqhCBXc0b5hg+eoRsEWLnWj19OJbnY
BpOcxUBZZl4TYnWvW0YW5Lmg6WQzRP8skQq/P+F0+s5cQD1oIk3ohKIt7Jfb8Ju+
PTIajEXgM/9M1KlyM+MTUQGwR0HkLw4jgGkzr+GYjHRSS6OPpH2NPfA3rVz6jeYd
MrHm9WUQ7sjRx+aXN/IA1QMfovbtcA2yoShakysSeFZSOX7iJcvEi36tpYMulRuu
81ENqlBsZlV3HFCHx2iPgKvwB1+1zhNG1aNhm3MCR1ZO++5Ol/lDTirFyNPtOdUg
jJskAKkkvTPxkw==
-----END CERTIFICATE-----