Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/2891ce-ec32-4f92-9483-059f5773804e/1/m8pwDLGEwjDbQU0b-Wrxemld-9E.mft
File:                     m8pwDLGEwjDbQU0b-Wrxemld-9E.mft (raw, json)
Hash identifier:          9XGHWZ+UXQAdZzo+wj5dWFnJx+zqWxeqVqjGPvNilao=
Subject key identifier:   D8:89:EA:C2:68:70:67:32:B9:A5:81:47:75:A6:AD:30:07:5D:98:66
Authority key identifier: 9B:CA:70:0C:B1:84:C2:30:DB:41:4D:1B:F9:6A:F1:7A:69:5D:FB:D1
Certificate issuer:       /CN=9bca700cb184c230db414d1bf96af17a695dfbd1
Certificate serial:       0188E32400AA0C162A836CCD2CF48017278D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m8pwDLGEwjDbQU0b-Wrxemld-9E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/2891ce-ec32-4f92-9483-059f5773804e/1/m8pwDLGEwjDbQU0b-Wrxemld-9E.mft
Manifest number:          DF
Signing time:             Thu 22 Jun 2023 12:46:07 +0000
Manifest this update:     Thu 22 Jun 2023 12:46:07 +0000
Manifest next update:     Fri 23 Jun 2023 12:46:07 +0000
Files and hashes:         1: m8pwDLGEwjDbQU0b-Wrxemld-9E.crl (hash: rPtuaZcnc9NP4Lo6c48W9BAdugPJryEQsC6xrz9HYjw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:e3:24:00:aa:0c:16:2a:83:6c:cd:2c:f4:80:17:27:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bca700cb184c230db414d1bf96af17a695dfbd1
        Validity
            Not Before: Jun 22 12:46:07 2023 GMT
            Not After : Jun 23 12:46:07 2023 GMT
        Subject: CN=d889eac268706732b9a5814775a6ad30075d9866
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:98:31:5d:a4:24:f5:ae:4e:10:21:04:10:8e:
                    00:4b:16:70:69:dc:8b:6d:1b:44:c6:94:91:a3:d1:
                    23:a9:3f:0f:24:c7:1b:94:85:ff:23:fb:d4:5d:c1:
                    ce:44:f4:25:1d:8e:72:64:0f:ec:91:0d:9f:4b:82:
                    36:9b:a2:89:2f:29:ee:59:54:b0:97:2d:ea:cf:7f:
                    f3:d7:67:f5:58:01:a4:5e:5f:2d:1f:d7:7a:63:39:
                    f2:41:b6:9c:c2:6e:11:4f:2a:49:df:28:3b:64:93:
                    80:db:36:6b:13:b8:f2:26:5e:5c:3a:87:e1:46:40:
                    c3:69:0a:99:f4:1c:cc:3e:d2:e1:b6:49:0f:70:ff:
                    0b:e1:e3:90:88:33:1d:3a:99:f5:4d:c2:50:fe:8e:
                    70:2c:d4:14:f0:3a:40:36:9e:7a:77:3b:0b:c0:47:
                    a8:43:e0:4a:ef:5d:9c:6a:ce:30:f9:8c:a1:91:23:
                    bf:80:2e:93:e0:79:2a:78:01:2f:6d:ee:58:c3:64:
                    2f:88:24:3e:8b:61:16:3e:f2:36:a4:f7:5e:e3:07:
                    ef:bb:1d:dd:b0:03:40:09:35:e7:a9:73:87:bc:62:
                    b6:0b:50:15:47:96:93:89:d4:d0:7a:75:8e:54:83:
                    98:6b:51:56:63:b7:fd:5a:3a:b8:a9:9f:b7:6f:f4:
                    97:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:89:EA:C2:68:70:67:32:B9:A5:81:47:75:A6:AD:30:07:5D:98:66
            X509v3 Authority Key Identifier:
                keyid:9B:CA:70:0C:B1:84:C2:30:DB:41:4D:1B:F9:6A:F1:7A:69:5D:FB:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m8pwDLGEwjDbQU0b-Wrxemld-9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/2891ce-ec32-4f92-9483-059f5773804e/1/m8pwDLGEwjDbQU0b-Wrxemld-9E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/2891ce-ec32-4f92-9483-059f5773804e/1/m8pwDLGEwjDbQU0b-Wrxemld-9E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:36:cb:d7:c1:85:26:9f:6b:6c:07:7d:e1:e4:67:c2:0c:4d:
         59:1e:8f:1a:ef:4a:23:98:97:ee:6e:2e:cc:63:0a:ca:91:ad:
         41:8f:0c:1e:64:d8:96:48:12:e8:c9:b4:15:79:26:d0:d0:d2:
         23:ba:54:e1:3f:7c:d1:3d:77:67:3f:43:eb:e1:09:73:be:93:
         0b:1b:80:93:03:26:74:47:e3:cf:63:c2:de:7e:c6:f7:a2:44:
         77:27:a5:d8:82:92:a3:97:e8:35:b2:c5:c4:87:23:bc:06:9a:
         21:ab:47:28:0e:91:da:94:7c:2c:00:db:21:26:51:5f:ad:fd:
         ba:2e:18:42:2f:a8:14:ab:04:fa:25:68:9e:61:63:f9:4f:e1:
         2f:a2:3d:c1:87:f3:c5:a2:38:6a:58:07:14:b2:1d:77:ac:0a:
         e3:74:7d:64:2e:1a:95:7d:18:3b:8f:23:ba:88:28:0e:f5:b0:
         df:b2:9c:34:98:aa:8b:fe:72:c2:b7:ac:b4:f8:4b:67:8a:a6:
         a3:ed:42:71:fe:81:c4:be:73:9b:ca:c5:bb:4c:84:42:d4:09:
         8f:9d:99:b3:1e:bd:ed:c4:76:a6:fb:4a:1b:de:8e:a7:a1:f2:
         1e:b6:4e:ed:34:64:02:98:b4:a7:43:fd:e3:23:b4:2e:2c:2d:
         39:11:90:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYjjJACqDBYqg2zNLPSAFyeNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliY2E3MDBjYjE4NGMyMzBkYjQxNGQxYmY5NmFmMTdhNjk1
ZGZiZDEwHhcNMjMwNjIyMTI0NjA3WhcNMjMwNjIzMTI0NjA3WjAzMTEwLwYDVQQD
EyhkODg5ZWFjMjY4NzA2NzMyYjlhNTgxNDc3NWE2YWQzMDA3NWQ5ODY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5gxXaQk9a5OECEEEI4ASxZwadyL
bRtExpSRo9EjqT8PJMcblIX/I/vUXcHORPQlHY5yZA/skQ2fS4I2m6KJLynuWVSw
ly3qz3/z12f1WAGkXl8tH9d6YznyQbacwm4RTypJ3yg7ZJOA2zZrE7jyJl5cOofh
RkDDaQqZ9BzMPtLhtkkPcP8L4eOQiDMdOpn1TcJQ/o5wLNQU8DpANp56dzsLwEeo
Q+BK712cas4w+YyhkSO/gC6T4HkqeAEvbe5Yw2QviCQ+i2EWPvI2pPde4wfvux3d
sANACTXnqXOHvGK2C1AVR5aTidTQenWOVIOYa1FWY7f9Wjq4qZ+3b/SXowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNiJ6sJocGcyuaWBR3WmrTAHXZhmMB8GA1UdIwQY
MBaAFJvKcAyxhMIw20FNG/lq8XppXfvRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbThwd0RMR0V3akRiUVUwYi1XcnhlbWxkLTlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8yODkxY2UtZWMzMi00ZjkyLTk0ODMt
MDU5ZjU3NzM4MDRlLzEvbThwd0RMR0V3akRiUVUwYi1XcnhlbWxkLTlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC8yODkxY2UtZWMzMi00ZjkyLTk0ODMtMDU5ZjU3NzM4MDRl
LzEvbThwd0RMR0V3akRiUVUwYi1XcnhlbWxkLTlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcTbL18GF
Jp9rbAd94eRnwgxNWR6PGu9KI5iX7m4uzGMKypGtQY8MHmTYlkgS6Mm0FXkm0NDS
I7pU4T980T13Zz9D6+EJc76TCxuAkwMmdEfjz2PC3n7G96JEdyel2IKSo5foNbLF
xIcjvAaaIatHKA6R2pR8LADbISZRX639ui4YQi+oFKsE+iVonmFj+U/hL6I9wYfz
xaI4algHFLIdd6wK43R9ZC4alX0YO48juogoDvWw37KcNJiqi/5ywrestPhLZ4qm
o+1Ccf6BxL5zm8rFu0yEQtQJj52Zsx697cR2pvtKG96Op6HyHrZO7TRkApi0p0P9
4yO0LiwtORGQSQ==
-----END CERTIFICATE-----