Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/f75751-6f33-49f1-896c-ab43d8b96cce/1/BLbG4hjuFM9lxkCq32EaxyorqUY.mft
File:                     BLbG4hjuFM9lxkCq32EaxyorqUY.mft (raw, json)
Hash identifier:          mM1vjRhwAGq2PVeGuZdsg2fHTVxjasFOwRTi16iPOVc=
Subject key identifier:   8B:F8:0E:14:24:97:AD:00:52:6B:FE:5A:9B:CE:AC:60:50:56:57:95
Authority key identifier: 04:B6:C6:E2:18:EE:14:CF:65:C6:40:AA:DF:61:1A:C7:2A:2B:A9:46
Certificate issuer:       /CN=04b6c6e218ee14cf65c640aadf611ac72a2ba946
Certificate serial:       018BFFB3B4949FDB15D69DA2AB2D95EFCDAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BLbG4hjuFM9lxkCq32EaxyorqUY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/f75751-6f33-49f1-896c-ab43d8b96cce/1/BLbG4hjuFM9lxkCq32EaxyorqUY.mft
Manifest number:          085D
Signing time:             Fri 24 Nov 2023 05:00:49 +0000
Manifest this update:     Fri 24 Nov 2023 05:00:49 +0000
Manifest next update:     Sat 25 Nov 2023 05:00:49 +0000
Files and hashes:         1: AJ44oYNTNuWX6lQ0vP-Qpr15UCA.roa (hash: CO0CcWW3VEkKRASE7W/+8bAgix3GOflCGSvrdGq/DsU=)
                          2: BLbG4hjuFM9lxkCq32EaxyorqUY.crl (hash: sdoX6U3E61wO2ydMT+BSQTOu/K7Ja0n9Tb89F17aB/4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:ff:b3:b4:94:9f:db:15:d6:9d:a2:ab:2d:95:ef:cd:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04b6c6e218ee14cf65c640aadf611ac72a2ba946
        Validity
            Not Before: Nov 24 05:00:49 2023 GMT
            Not After : Nov 25 05:00:49 2023 GMT
        Subject: CN=8bf80e142497ad00526bfe5a9bceac6050565795
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:40:c1:6d:fa:4a:be:3d:9d:51:1e:4c:2d:c3:
                    e7:51:6c:4b:72:53:dd:d1:ac:22:ab:b6:3f:fa:46:
                    28:07:45:2d:8f:69:24:fd:bd:b9:fb:0e:34:d1:55:
                    bf:0c:0b:60:5b:a0:79:42:94:cf:35:24:85:62:c5:
                    1b:bd:7d:c4:28:46:95:c5:68:f3:a9:8b:00:fd:67:
                    96:47:bd:75:1f:e1:b0:34:72:95:41:9a:b1:e2:75:
                    5e:51:43:98:ff:10:5c:ae:48:0c:0f:e3:29:c3:b4:
                    e6:b5:0d:e1:68:af:24:e5:ba:1e:77:e8:04:e1:cf:
                    31:36:84:d8:d8:76:e9:4c:45:41:3b:90:c6:4d:c5:
                    b9:de:7c:5a:9a:ed:80:29:97:0d:67:f0:fb:7b:15:
                    38:04:0b:32:67:8b:4a:d1:5c:17:66:bf:4d:7c:86:
                    cb:15:d9:05:b6:cc:f9:3c:8d:f3:fb:87:93:6e:aa:
                    29:2d:3d:a3:cd:13:a0:0f:df:c3:c9:34:86:5e:fb:
                    83:55:bb:11:9a:7d:2e:74:f8:49:40:53:07:52:ca:
                    23:4f:d6:f9:51:c4:d0:41:b5:7e:5b:73:fb:10:95:
                    cf:d3:c0:85:04:1c:59:a8:e6:24:0c:1d:2f:04:fe:
                    54:b0:b2:68:d0:5f:5c:8a:ea:76:72:34:27:e6:be:
                    d3:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:F8:0E:14:24:97:AD:00:52:6B:FE:5A:9B:CE:AC:60:50:56:57:95
            X509v3 Authority Key Identifier:
                keyid:04:B6:C6:E2:18:EE:14:CF:65:C6:40:AA:DF:61:1A:C7:2A:2B:A9:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BLbG4hjuFM9lxkCq32EaxyorqUY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/f75751-6f33-49f1-896c-ab43d8b96cce/1/BLbG4hjuFM9lxkCq32EaxyorqUY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/f75751-6f33-49f1-896c-ab43d8b96cce/1/BLbG4hjuFM9lxkCq32EaxyorqUY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:d7:80:fb:08:5a:4e:32:47:f2:fe:15:8f:45:f5:60:fb:95:
         7a:36:af:49:31:52:63:0e:e8:35:d3:34:19:62:e3:b6:e4:97:
         d7:a8:e8:37:e1:35:e3:95:ac:c3:90:f0:9f:7a:4b:3b:e1:80:
         01:ca:5f:e5:99:ff:33:1b:6b:05:13:e4:ba:d6:5c:17:b4:81:
         40:b4:58:88:7f:44:5d:73:27:d9:db:09:08:56:3b:f4:0c:f0:
         8b:10:31:cd:7e:6e:7e:cf:4e:b7:40:29:41:d8:61:2b:a9:7c:
         e4:d1:21:40:89:5e:9a:9e:4b:18:38:23:be:d1:8f:7d:17:f6:
         4b:a7:66:bf:7a:7b:09:1d:f1:ca:e8:f0:76:25:56:93:ed:b0:
         bf:a9:e0:02:e7:ee:4a:02:7f:57:70:85:19:fd:47:59:7e:86:
         10:11:66:66:7f:b1:f5:c1:60:1e:5c:d4:3f:58:d9:83:b9:cd:
         c6:86:19:95:bc:f9:51:26:3c:09:de:a2:c8:d2:00:17:0b:ef:
         61:10:be:70:cf:a8:11:c9:cc:93:7a:ce:47:f8:84:47:15:e2:
         76:b2:d7:9d:0b:7b:fa:c9:1a:c9:33:d8:16:2d:d0:2b:ec:6c:
         0c:92:10:d0:f4:88:55:1a:09:92:36:92:67:a3:de:6e:81:08:
         88:e0:c2:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYv/s7SUn9sV1p2iqy2V782tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0YjZjNmUyMThlZTE0Y2Y2NWM2NDBhYWRmNjExYWM3MmEy
YmE5NDYwHhcNMjMxMTI0MDUwMDQ5WhcNMjMxMTI1MDUwMDQ5WjAzMTEwLwYDVQQD
Eyg4YmY4MGUxNDI0OTdhZDAwNTI2YmZlNWE5YmNlYWM2MDUwNTY1Nzk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg0DBbfpKvj2dUR5MLcPnUWxLclPd
0awiq7Y/+kYoB0Utj2kk/b25+w400VW/DAtgW6B5QpTPNSSFYsUbvX3EKEaVxWjz
qYsA/WeWR711H+GwNHKVQZqx4nVeUUOY/xBcrkgMD+Mpw7TmtQ3haK8k5boed+gE
4c8xNoTY2HbpTEVBO5DGTcW53nxamu2AKZcNZ/D7exU4BAsyZ4tK0VwXZr9NfIbL
FdkFtsz5PI3z+4eTbqopLT2jzROgD9/DyTSGXvuDVbsRmn0udPhJQFMHUsojT9b5
UcTQQbV+W3P7EJXP08CFBBxZqOYkDB0vBP5UsLJo0F9ciup2cjQn5r7TrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIv4DhQkl60AUmv+WpvOrGBQVleVMB8GA1UdIwQY
MBaAFAS2xuIY7hTPZcZAqt9hGscqK6lGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkxiRzRoanVGTTlseGtDcTMyRWF4eW9ycVVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9mNzU3NTEtNmYzMy00OWYxLTg5NmMt
YWI0M2Q4Yjk2Y2NlLzEvQkxiRzRoanVGTTlseGtDcTMyRWF4eW9ycVVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9mNzU3NTEtNmYzMy00OWYxLTg5NmMtYWI0M2Q4Yjk2Y2Nl
LzEvQkxiRzRoanVGTTlseGtDcTMyRWF4eW9ycVVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUteA+wha
TjJH8v4Vj0X1YPuVejavSTFSYw7oNdM0GWLjtuSX16joN+E145Wsw5Dwn3pLO+GA
Acpf5Zn/MxtrBRPkutZcF7SBQLRYiH9EXXMn2dsJCFY79AzwixAxzX5ufs9Ot0Ap
QdhhK6l85NEhQIlemp5LGDgjvtGPfRf2S6dmv3p7CR3xyujwdiVWk+2wv6ngAufu
SgJ/V3CFGf1HWX6GEBFmZn+x9cFgHlzUP1jZg7nNxoYZlbz5USY8Cd6iyNIAFwvv
YRC+cM+oEcnMk3rOR/iERxXidrLXnQt7+skayTPYFi3QK+xsDJIQ0PSIVRoJkjaS
Z6PeboEIiODCZQ==
-----END CERTIFICATE-----