Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/31def3-89f7-4509-9aa0-7d639aab512f/1/bcUpyewAC5Bw8tH7-64efcnb5F8.mft
File:                     bcUpyewAC5Bw8tH7-64efcnb5F8.mft (raw, json)
Hash identifier:          vQxX61bBT/d+0PmGPmNRnnI3MYqYec4ZZu+ckIEZ/XE=
Subject key identifier:   60:BC:D8:37:4A:D2:35:FD:77:5C:50:13:EF:93:20:F0:89:07:23:C8
Authority key identifier: 6D:C5:29:C9:EC:00:0B:90:70:F2:D1:FB:FB:AE:1E:7D:C9:DB:E4:5F
Certificate issuer:       /CN=6dc529c9ec000b9070f2d1fbfbae1e7dc9dbe45f
Certificate serial:       018796BF187A4063CE6079BFDB162752D94B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bcUpyewAC5Bw8tH7-64efcnb5F8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/31def3-89f7-4509-9aa0-7d639aab512f/1/bcUpyewAC5Bw8tH7-64efcnb5F8.mft
Manifest number:          36
Signing time:             Tue 18 Apr 2023 23:41:58 +0000
Manifest this update:     Tue 18 Apr 2023 23:41:58 +0000
Manifest next update:     Wed 19 Apr 2023 23:41:58 +0000
Files and hashes:         1: bcUpyewAC5Bw8tH7-64efcnb5F8.crl (hash: K/XvZJ5ylPuZ1kRnAEt4KlQA5KvVG76BPCE6E1esXGM=)
                          2: lc94ikG1eP0IonEy085ugHlOiFA.roa (hash: KsD4Z/GHBxnOLZ1mhUUEd0vGsi/GePCncspDDkHvHZ0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:96:bf:18:7a:40:63:ce:60:79:bf:db:16:27:52:d9:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dc529c9ec000b9070f2d1fbfbae1e7dc9dbe45f
        Validity
            Not Before: Apr 18 23:41:58 2023 GMT
            Not After : Apr 19 23:41:58 2023 GMT
        Subject: CN=60bcd8374ad235fd775c5013ef9320f0890723c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b6:c0:54:31:26:8c:47:4b:36:43:d9:7f:82:
                    a7:23:ff:ce:03:f5:df:8c:fc:a9:1f:9a:f5:e6:eb:
                    5c:34:40:8b:0e:05:1f:ae:23:c3:5e:da:fc:66:5f:
                    46:e2:fc:fe:fb:59:20:68:e2:4e:85:89:64:63:0e:
                    c6:52:3d:08:94:2f:85:e6:72:a5:0c:ef:20:b4:ed:
                    95:d7:1a:42:86:23:24:ca:41:1c:3f:9b:d8:4c:4c:
                    a2:df:d9:6c:7f:10:84:e4:24:1f:8a:59:bd:53:10:
                    d3:f8:5a:52:4b:5f:67:7e:a7:c5:6f:50:e2:b2:31:
                    47:06:38:f3:d5:ce:92:c0:57:c8:55:43:83:c5:3c:
                    71:6e:36:0b:13:cc:69:96:2d:fe:9e:2d:a9:9a:c4:
                    98:d0:d7:5e:1a:b6:43:09:b4:47:30:1f:d2:a0:02:
                    ec:c0:28:ae:e6:f5:07:ab:59:54:be:16:64:28:0e:
                    bd:67:96:0e:b5:09:0b:9a:78:ef:b1:47:f5:e5:a5:
                    a6:76:4c:e7:3f:23:57:19:07:7d:6e:d0:9d:c5:e6:
                    c6:c2:ae:5e:9e:a1:cd:9c:e2:1b:0b:d8:5d:c2:2f:
                    4b:b2:d8:ef:6d:9c:33:47:e4:1c:58:6a:e6:0d:95:
                    09:dd:e8:d6:5f:70:92:84:81:f2:2b:15:ab:c3:35:
                    a0:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:BC:D8:37:4A:D2:35:FD:77:5C:50:13:EF:93:20:F0:89:07:23:C8
            X509v3 Authority Key Identifier:
                keyid:6D:C5:29:C9:EC:00:0B:90:70:F2:D1:FB:FB:AE:1E:7D:C9:DB:E4:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bcUpyewAC5Bw8tH7-64efcnb5F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/31def3-89f7-4509-9aa0-7d639aab512f/1/bcUpyewAC5Bw8tH7-64efcnb5F8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/31def3-89f7-4509-9aa0-7d639aab512f/1/bcUpyewAC5Bw8tH7-64efcnb5F8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ea:54:53:41:6d:a3:d2:7f:53:a9:da:56:e1:f6:6b:b0:d2:7c:
         f6:51:9a:35:52:a8:72:8b:d1:ae:5f:c4:02:66:33:9c:1e:a7:
         15:89:08:6b:a3:9c:b6:00:6c:55:93:6d:54:62:23:2a:bf:fc:
         e2:d7:4d:35:40:b9:80:7c:9a:93:2d:72:54:8d:c3:30:31:37:
         1e:9e:b4:4c:f9:b5:c1:4c:6a:40:fe:15:2b:92:f9:33:de:7b:
         bb:4f:e9:2b:86:19:21:d6:b2:c1:e7:76:69:b8:5d:49:76:fb:
         76:77:c8:8c:ab:b5:77:43:92:63:fe:8b:ef:c6:ce:0c:50:2a:
         50:3f:3b:05:87:58:55:e8:26:92:24:7f:b5:a4:c6:10:e1:cc:
         17:3f:17:19:e8:4f:5b:aa:a5:39:64:93:b4:40:a6:52:bc:fc:
         d3:cf:8d:02:e5:96:e0:8f:e7:fc:52:6d:cf:25:21:57:3d:ff:
         b1:6d:6e:6b:1c:a4:a3:d6:c5:a4:40:93:73:ab:0b:99:36:47:
         9b:7e:b7:52:4e:6f:d1:6c:1c:a9:fe:bc:5f:44:aa:fb:be:15:
         d6:f0:02:8e:d8:23:13:b9:60:4f:1b:a5:1c:30:93:5b:f6:9e:
         e4:8f:0b:30:8c:53:67:35:87:ba:4a:ac:a8:ee:a6:e7:bc:72:
         74:f0:0d:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYeWvxh6QGPOYHm/2xYnUtlLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkYzUyOWM5ZWMwMDBiOTA3MGYyZDFmYmZiYWUxZTdkYzlk
YmU0NWYwHhcNMjMwNDE4MjM0MTU4WhcNMjMwNDE5MjM0MTU4WjAzMTEwLwYDVQQD
Eyg2MGJjZDgzNzRhZDIzNWZkNzc1YzUwMTNlZjkzMjBmMDg5MDcyM2M4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybbAVDEmjEdLNkPZf4KnI//OA/Xf
jPypH5r15utcNECLDgUfriPDXtr8Zl9G4vz++1kgaOJOhYlkYw7GUj0IlC+F5nKl
DO8gtO2V1xpChiMkykEcP5vYTEyi39lsfxCE5CQfilm9UxDT+FpSS19nfqfFb1Di
sjFHBjjz1c6SwFfIVUODxTxxbjYLE8xpli3+ni2pmsSY0NdeGrZDCbRHMB/SoALs
wCiu5vUHq1lUvhZkKA69Z5YOtQkLmnjvsUf15aWmdkznPyNXGQd9btCdxebGwq5e
nqHNnOIbC9hdwi9LstjvbZwzR+QcWGrmDZUJ3ejWX3CShIHyKxWrwzWg6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGC82DdK0jX9d1xQE++TIPCJByPIMB8GA1UdIwQY
MBaAFG3FKcnsAAuQcPLR+/uuHn3J2+RfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmNVcHlld0FDNUJ3OHRINy02NGVmY25iNUY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC8zMWRlZjMtODlmNy00NTA5LTlhYTAt
N2Q2MzlhYWI1MTJmLzEvYmNVcHlld0FDNUJ3OHRINy02NGVmY25iNUY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC8zMWRlZjMtODlmNy00NTA5LTlhYTAtN2Q2MzlhYWI1MTJm
LzEvYmNVcHlld0FDNUJ3OHRINy02NGVmY25iNUY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA6lRTQW2j
0n9TqdpW4fZrsNJ89lGaNVKocovRrl/EAmYznB6nFYkIa6OctgBsVZNtVGIjKr/8
4tdNNUC5gHyaky1yVI3DMDE3Hp60TPm1wUxqQP4VK5L5M957u0/pK4YZIdaywed2
abhdSXb7dnfIjKu1d0OSY/6L78bODFAqUD87BYdYVegmkiR/taTGEOHMFz8XGehP
W6qlOWSTtECmUrz808+NAuWW4I/n/FJtzyUhVz3/sW1uaxyko9bFpECTc6sLmTZH
m363Uk5v0Wwcqf68X0Sq+74V1vACjtgjE7lgTxulHDCTW/ae5I8LMIxTZzWHukqs
qO6m57xydPAN2Q==
-----END CERTIFICATE-----