Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/f5c4bd-27bb-499a-8a09-002d89cd1f5a/1/vO72Si5uEcTdatBblu_2RN20V68.mft
File:                     vO72Si5uEcTdatBblu_2RN20V68.mft (raw, json)
Hash identifier:          6KbVpa8lNx/PYk2gTHBA76/NDWIykzWCkwJTg69RvLw=
Subject key identifier:   D6:B8:E6:7D:8D:D5:AB:6E:E1:E2:5C:5E:F1:69:27:A3:28:FB:C0:A3
Authority key identifier: BC:EE:F6:4A:2E:6E:11:C4:DD:6A:D0:5B:96:EF:F6:44:DD:B4:57:AF
Certificate issuer:       /CN=bceef64a2e6e11c4dd6ad05b96eff644ddb457af
Certificate serial:       018CF6E565B9E5EDCD74F0547E430D7422AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vO72Si5uEcTdatBblu_2RN20V68.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/f5c4bd-27bb-499a-8a09-002d89cd1f5a/1/vO72Si5uEcTdatBblu_2RN20V68.mft
Manifest number:          0973
Signing time:             Thu 11 Jan 2024 05:01:17 +0000
Manifest this update:     Thu 11 Jan 2024 05:01:17 +0000
Manifest next update:     Fri 12 Jan 2024 05:01:17 +0000
Files and hashes:         1: Bw3vB5WtjGy3W2tFfZICmyVsp5E.roa (hash: LsfTvqoGyZLpbPVNOSNOuHHCLSBC4hElOeP4oMs3PJs=)
                          2: JI-Q4fS6JSjTTpLJDmu4zLpnbHU.roa (hash: HquDIuGTqMda+CyGsmbfFlwWSTYQvd+8ME7rER6aGts=)
                          3: jAa7bSy2mGXDghaZrIZaGrHANto.roa (hash: wY6ZRh4TEYD3Q2ukxR7bqNDPWhbXo5/rZRzvPIjV1iY=)
                          4: vO72Si5uEcTdatBblu_2RN20V68.crl (hash: ziIzAHcoOYrMb/7PHFyR4milmyEb1T72+9Id7AfYvgk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:f6:e5:65:b9:e5:ed:cd:74:f0:54:7e:43:0d:74:22:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bceef64a2e6e11c4dd6ad05b96eff644ddb457af
        Validity
            Not Before: Jan 11 05:01:17 2024 GMT
            Not After : Jan 12 05:01:17 2024 GMT
        Subject: CN=d6b8e67d8dd5ab6ee1e25c5ef16927a328fbc0a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:f7:06:01:c3:d7:ce:4b:c9:b2:0a:55:4c:1d:
                    0f:81:af:a0:82:08:bc:23:59:dd:0b:e1:8e:f2:fd:
                    55:fb:83:e1:ad:75:12:06:8e:e6:5a:96:0c:56:02:
                    0f:bf:f7:e7:07:70:30:c4:fe:b7:2d:99:cc:12:07:
                    99:5e:5c:75:7d:86:d7:75:2d:97:de:a1:bf:e5:78:
                    36:c9:78:7c:9b:32:fd:e8:30:4b:8a:a6:3d:42:af:
                    47:75:77:26:08:ef:bf:3d:ec:ea:39:ed:84:4e:0c:
                    be:c9:2c:9d:1e:28:fb:25:38:c4:bf:85:54:29:09:
                    70:45:2d:bf:dc:b0:15:1e:4a:ab:de:07:d0:ed:3e:
                    a1:45:eb:78:e5:f3:e0:78:d4:f2:79:ba:08:37:25:
                    6c:1a:f4:6d:48:28:fc:3b:31:87:e3:70:b8:3b:2f:
                    cd:84:f6:ae:78:3e:6b:68:28:ff:e7:8b:8e:a3:f4:
                    6a:9c:01:6f:23:05:2d:fb:41:e1:0e:f6:88:46:79:
                    6e:e2:c0:47:6f:00:1d:d5:e1:31:03:aa:11:19:ea:
                    6f:67:e4:09:73:e5:0c:39:27:1b:b2:28:c2:4b:2e:
                    56:d4:6e:4d:1e:0b:60:d9:24:da:c4:eb:60:a8:26:
                    c1:09:2e:e5:54:f2:90:25:c3:7d:b0:10:84:60:d5:
                    66:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:B8:E6:7D:8D:D5:AB:6E:E1:E2:5C:5E:F1:69:27:A3:28:FB:C0:A3
            X509v3 Authority Key Identifier:
                keyid:BC:EE:F6:4A:2E:6E:11:C4:DD:6A:D0:5B:96:EF:F6:44:DD:B4:57:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vO72Si5uEcTdatBblu_2RN20V68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f5c4bd-27bb-499a-8a09-002d89cd1f5a/1/vO72Si5uEcTdatBblu_2RN20V68.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f5c4bd-27bb-499a-8a09-002d89cd1f5a/1/vO72Si5uEcTdatBblu_2RN20V68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:5a:88:a7:16:00:b4:9f:db:16:6c:c7:0a:7b:aa:40:96:db:
         03:80:e0:f6:c7:81:e1:c1:de:83:d8:2f:09:c1:d7:7a:a8:98:
         1e:32:9f:4e:ab:88:bc:83:7c:1e:ab:3a:33:a3:ca:b8:65:32:
         24:6a:dd:dd:d2:f5:2d:cc:bf:a4:7c:58:a5:b9:ee:0a:8b:5d:
         88:fb:0b:45:06:cb:dd:86:db:e5:fa:41:ad:ce:c1:ef:f6:4d:
         f6:31:43:ed:0a:3b:eb:05:cb:df:5d:eb:e2:f8:2d:22:44:b9:
         91:d5:97:a4:ac:d0:ca:2d:44:b5:0c:b7:26:06:34:52:b4:cd:
         3b:18:85:d8:1d:44:9d:df:2f:1a:c6:c7:e2:b9:48:45:d5:b8:
         3e:25:30:9b:a5:a1:6c:c1:6c:f9:de:d3:ba:1e:3a:8f:c9:f2:
         47:be:68:a1:34:3c:a5:b0:6a:39:9a:59:06:1b:e8:bc:33:f3:
         61:fb:23:75:ba:92:a2:98:f3:10:8f:c2:55:76:7b:b8:35:39:
         d2:e6:b1:fc:65:12:1b:7f:7b:af:c7:43:04:58:c8:08:2a:59:
         b5:c7:aa:2c:b8:d4:fc:e9:bc:b0:7f:53:6b:fb:0b:b7:58:ae:
         54:cf:d9:08:7e:f1:6b:62:f2:70:31:c8:4a:e9:30:94:8f:db:
         bf:13:60:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYz25WW55e3NdPBUfkMNdCKqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjZWVmNjRhMmU2ZTExYzRkZDZhZDA1Yjk2ZWZmNjQ0ZGRi
NDU3YWYwHhcNMjQwMTExMDUwMTE3WhcNMjQwMTEyMDUwMTE3WjAzMTEwLwYDVQQD
EyhkNmI4ZTY3ZDhkZDVhYjZlZTFlMjVjNWVmMTY5MjdhMzI4ZmJjMGEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPcGAcPXzkvJsgpVTB0Pga+gggi8
I1ndC+GO8v1V+4PhrXUSBo7mWpYMVgIPv/fnB3AwxP63LZnMEgeZXlx1fYbXdS2X
3qG/5Xg2yXh8mzL96DBLiqY9Qq9HdXcmCO+/PezqOe2ETgy+ySydHij7JTjEv4VU
KQlwRS2/3LAVHkqr3gfQ7T6hRet45fPgeNTyeboINyVsGvRtSCj8OzGH43C4Oy/N
hPaueD5raCj/54uOo/RqnAFvIwUt+0HhDvaIRnlu4sBHbwAd1eExA6oRGepvZ+QJ
c+UMOScbsijCSy5W1G5NHgtg2STaxOtgqCbBCS7lVPKQJcN9sBCEYNVmOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNa45n2N1atu4eJcXvFpJ6Mo+8CjMB8GA1UdIwQY
MBaAFLzu9koubhHE3WrQW5bv9kTdtFevMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdk83MlNpNXVFY1RkYXRCYmx1XzJSTjIwVjY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9mNWM0YmQtMjdiYi00OTlhLThhMDkt
MDAyZDg5Y2QxZjVhLzEvdk83MlNpNXVFY1RkYXRCYmx1XzJSTjIwVjY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9mNWM0YmQtMjdiYi00OTlhLThhMDktMDAyZDg5Y2QxZjVh
LzEvdk83MlNpNXVFY1RkYXRCYmx1XzJSTjIwVjY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACFqIpxYA
tJ/bFmzHCnuqQJbbA4Dg9seB4cHeg9gvCcHXeqiYHjKfTquIvIN8Hqs6M6PKuGUy
JGrd3dL1Lcy/pHxYpbnuCotdiPsLRQbL3Ybb5fpBrc7B7/ZN9jFD7Qo76wXL313r
4vgtIkS5kdWXpKzQyi1EtQy3JgY0UrTNOxiF2B1End8vGsbH4rlIRdW4PiUwm6Wh
bMFs+d7Tuh46j8nyR75ooTQ8pbBqOZpZBhvovDPzYfsjdbqSopjzEI/CVXZ7uDU5
0uax/GUSG397r8dDBFjICCpZtceqLLjU/Om8sH9Ta/sLt1iuVM/ZCH7xa2LycDHI
SukwlI/bvxNg8Q==
-----END CERTIFICATE-----