Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/e2a2e6-d16c-47e6-a595-e82c4910bf63/1/1XIPzq3riubZp9Gh0Y247ORgb0A.mft
File:                     1XIPzq3riubZp9Gh0Y247ORgb0A.mft (raw, json)
Hash identifier:          c55tGkXXgJjX5nIQ2exDge8fucAycVtMOukIMpvcw/A=
Subject key identifier:   47:A4:25:2D:17:79:84:A8:8D:D7:55:AD:30:D7:1F:FF:21:03:1D:E8
Authority key identifier: D5:72:0F:CE:AD:EB:8A:E6:D9:A7:D1:A1:D1:8D:B8:EC:E4:60:6F:40
Certificate issuer:       /CN=d5720fceadeb8ae6d9a7d1a1d18db8ece4606f40
Certificate serial:       018CB0F1BD9C8952F3A44CE0576429799F69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1XIPzq3riubZp9Gh0Y247ORgb0A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/e2a2e6-d16c-47e6-a595-e82c4910bf63/1/1XIPzq3riubZp9Gh0Y247ORgb0A.mft
Manifest number:          0622
Signing time:             Thu 28 Dec 2023 15:01:21 +0000
Manifest this update:     Thu 28 Dec 2023 15:01:21 +0000
Manifest next update:     Fri 29 Dec 2023 15:01:21 +0000
Files and hashes:         1: 1XIPzq3riubZp9Gh0Y247ORgb0A.crl (hash: hZNvYiAsr7O69RO6ntDuQs7YP9Git166X41qfA078DM=)
                          2: kI8f5rek_GZZ277yhTWKHq5gqu0.roa (hash: FSWoDhuEMFxqOk8S8fZvXJ1TL6kKja9zBaSfa1h4L+Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:b0:f1:bd:9c:89:52:f3:a4:4c:e0:57:64:29:79:9f:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5720fceadeb8ae6d9a7d1a1d18db8ece4606f40
        Validity
            Not Before: Dec 28 15:01:21 2023 GMT
            Not After : Dec 29 15:01:21 2023 GMT
        Subject: CN=47a4252d177984a88dd755ad30d71fff21031de8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:f1:18:65:c6:a5:cd:eb:74:04:55:4a:ba:22:
                    bf:a7:de:6a:60:e0:62:05:15:7f:31:0d:35:96:96:
                    d7:4a:50:e8:81:07:67:7e:bd:f0:9b:df:e9:9d:f9:
                    5f:58:3f:55:b8:03:a8:98:4a:1f:42:2d:13:0f:4a:
                    53:4e:72:2a:47:b1:a2:e5:cb:eb:dc:d7:e6:5d:82:
                    38:e3:7b:14:81:60:0b:c3:29:73:dc:a3:c3:fb:cb:
                    c5:04:0e:d1:8c:c3:b2:17:14:52:f1:fe:78:22:73:
                    36:e0:07:7a:b4:96:90:d8:d5:43:15:23:ce:3b:af:
                    d4:e1:e4:ca:14:80:f8:c5:ad:0e:1c:2c:7d:08:64:
                    e3:30:c8:87:bf:0d:5b:f2:25:18:00:c5:14:d4:0f:
                    92:af:58:44:92:ff:6d:7d:65:f1:b9:0a:10:d6:33:
                    e3:15:88:9f:96:5c:e1:0d:47:c9:67:c4:64:e0:4e:
                    15:8f:5d:24:66:3a:bf:d8:49:81:82:f3:bd:43:24:
                    3a:92:b5:dc:15:e0:0f:4c:36:0a:e9:7e:73:a5:e4:
                    f8:e3:b4:39:50:64:7e:47:30:b6:e2:45:7e:b7:fa:
                    10:e0:26:ed:f9:cb:7d:c4:e5:7a:b9:2f:5f:2d:d8:
                    33:4b:ef:59:dc:b3:63:27:18:46:44:6e:80:d7:b9:
                    3c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:A4:25:2D:17:79:84:A8:8D:D7:55:AD:30:D7:1F:FF:21:03:1D:E8
            X509v3 Authority Key Identifier:
                keyid:D5:72:0F:CE:AD:EB:8A:E6:D9:A7:D1:A1:D1:8D:B8:EC:E4:60:6F:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1XIPzq3riubZp9Gh0Y247ORgb0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/e2a2e6-d16c-47e6-a595-e82c4910bf63/1/1XIPzq3riubZp9Gh0Y247ORgb0A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/e2a2e6-d16c-47e6-a595-e82c4910bf63/1/1XIPzq3riubZp9Gh0Y247ORgb0A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:e7:19:65:f7:5f:cb:5c:b9:9b:3a:b5:8c:d1:5e:6a:e6:87:
         33:9d:a4:7a:1c:96:57:ea:ba:f7:88:6e:22:7f:3c:52:e2:e4:
         f6:1f:d6:9a:bc:89:60:bf:20:90:8f:50:30:ec:08:31:ba:4b:
         aa:2f:76:e3:8f:5a:3e:0f:57:0b:7f:6c:50:d0:8e:19:52:08:
         5c:bd:3d:62:5d:1b:3d:fc:ae:82:aa:f3:68:49:bf:05:97:10:
         70:04:58:d2:58:fd:dd:e0:df:88:e1:7a:3e:cb:0a:17:f4:d0:
         61:52:9d:6e:99:5d:c3:8c:ec:8a:a2:0a:45:0b:1d:d7:ad:6c:
         91:39:7f:de:4e:fc:d9:b8:7e:b6:d5:9c:a0:f2:10:6c:3c:27:
         ee:77:22:df:4a:04:22:ef:50:ad:f0:6e:9d:30:87:3a:db:39:
         33:09:6c:8a:17:93:b8:d7:ab:c3:f7:40:24:d4:e2:7f:41:5e:
         ba:67:7b:ae:d2:65:cc:74:be:cc:01:1e:e2:df:75:19:91:80:
         64:01:3d:61:c0:cb:07:bd:2b:3f:d3:23:ed:4f:a9:6a:17:90:
         0a:cd:2c:d8:f3:e3:5e:cb:d7:ce:0a:70:5a:41:4c:25:d3:ee:
         75:14:2d:da:13:0b:0f:0f:9d:4f:b2:ae:7f:4d:43:a0:7c:00:
         92:1e:e8:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYyw8b2ciVLzpEzgV2QpeZ9pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1NzIwZmNlYWRlYjhhZTZkOWE3ZDFhMWQxOGRiOGVjZTQ2
MDZmNDAwHhcNMjMxMjI4MTUwMTIxWhcNMjMxMjI5MTUwMTIxWjAzMTEwLwYDVQQD
Eyg0N2E0MjUyZDE3Nzk4NGE4OGRkNzU1YWQzMGQ3MWZmZjIxMDMxZGU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhPEYZcalzet0BFVKuiK/p95qYOBi
BRV/MQ01lpbXSlDogQdnfr3wm9/pnflfWD9VuAOomEofQi0TD0pTTnIqR7Gi5cvr
3NfmXYI443sUgWALwylz3KPD+8vFBA7RjMOyFxRS8f54InM24Ad6tJaQ2NVDFSPO
O6/U4eTKFID4xa0OHCx9CGTjMMiHvw1b8iUYAMUU1A+Sr1hEkv9tfWXxuQoQ1jPj
FYifllzhDUfJZ8Rk4E4Vj10kZjq/2EmBgvO9QyQ6krXcFeAPTDYK6X5zpeT447Q5
UGR+RzC24kV+t/oQ4Cbt+ct9xOV6uS9fLdgzS+9Z3LNjJxhGRG6A17k8nwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEekJS0XeYSojddVrTDXH/8hAx3oMB8GA1UdIwQY
MBaAFNVyD86t64rm2afRodGNuOzkYG9AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVhJUHpxM3JpdWJacDlHaDBZMjQ3T1JnYjBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9lMmEyZTYtZDE2Yy00N2U2LWE1OTUt
ZTgyYzQ5MTBiZjYzLzEvMVhJUHpxM3JpdWJacDlHaDBZMjQ3T1JnYjBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS9lMmEyZTYtZDE2Yy00N2U2LWE1OTUtZTgyYzQ5MTBiZjYz
LzEvMVhJUHpxM3JpdWJacDlHaDBZMjQ3T1JnYjBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbecZZfdf
y1y5mzq1jNFeauaHM52kehyWV+q694huIn88UuLk9h/WmryJYL8gkI9QMOwIMbpL
qi92449aPg9XC39sUNCOGVIIXL09Yl0bPfyugqrzaEm/BZcQcARY0lj93eDfiOF6
PssKF/TQYVKdbpldw4zsiqIKRQsd161skTl/3k782bh+ttWcoPIQbDwn7nci30oE
Iu9QrfBunTCHOts5MwlsiheTuNerw/dAJNTif0Feumd7rtJlzHS+zAEe4t91GZGA
ZAE9YcDLB70rP9Mj7U+paheQCs0s2PPjXsvXzgpwWkFMJdPudRQt2hMLDw+dT7Ku
f01DoHwAkh7ojw==
-----END CERTIFICATE-----