Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/6007d2-c8e3-46d7-9836-d4e5c11adaf4/1/6_crz1uZLihY-13P3fSpQyGCSss.mft
File:                     6_crz1uZLihY-13P3fSpQyGCSss.mft (raw, json)
Hash identifier:          rFGhIQ6fgy53KngCA5r2lO/X3dPJ53EVDmcS9FwifuU=
Subject key identifier:   5D:36:BC:3B:0B:A9:E8:F8:AE:9A:1C:F3:EC:E0:85:3C:70:15:F2:A2
Authority key identifier: EB:F7:2B:CF:5B:99:2E:28:58:FB:5D:CF:DD:F4:A9:43:21:82:4A:CB
Certificate issuer:       /CN=ebf72bcf5b992e2858fb5dcfddf4a94321824acb
Certificate serial:       0190FDEF094094761DDDC156865A4DCF8ECF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6_crz1uZLihY-13P3fSpQyGCSss.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/6007d2-c8e3-46d7-9836-d4e5c11adaf4/1/6_crz1uZLihY-13P3fSpQyGCSss.mft
Manifest number:          0C6D
Signing time:             Mon 29 Jul 2024 10:00:19 +0000
Manifest this update:     Mon 29 Jul 2024 10:00:19 +0000
Manifest next update:     Tue 30 Jul 2024 10:00:19 +0000
Files and hashes:         1: 6_crz1uZLihY-13P3fSpQyGCSss.crl (hash: mxGTaS0tLLQuJRsh2WcXPzIpcyO1I8bjltp/5kXYCO8=)
                          2: Hox-uyyTgzfaRUusy-4J9HYlq3Y.roa (hash: LuTwmQfJtIbP80icQl65spZTfgTsgR+McaBUnWlr1cw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:fd:ef:09:40:94:76:1d:dd:c1:56:86:5a:4d:cf:8e:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebf72bcf5b992e2858fb5dcfddf4a94321824acb
        Validity
            Not Before: Jul 29 10:00:19 2024 GMT
            Not After : Jul 30 10:00:19 2024 GMT
        Subject: CN=5d36bc3b0ba9e8f8ae9a1cf3ece0853c7015f2a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:4c:9b:1c:9c:fc:82:3e:4e:46:9a:5e:4e:ca:
                    14:67:89:2e:ff:e6:33:17:78:4c:ca:38:ce:5b:14:
                    87:48:a3:e6:ee:33:f8:e5:f9:c7:54:7b:87:1f:4a:
                    2d:a5:c0:82:af:b4:b4:1c:d2:69:8f:c9:0e:f8:fc:
                    4b:50:3f:11:88:fd:b4:be:90:cb:17:0b:8d:47:34:
                    3b:c9:58:ee:6c:58:59:ea:16:e9:f6:6e:3a:8e:4d:
                    8e:d2:21:60:59:b9:ba:22:3a:ac:1c:c8:42:42:b4:
                    b6:86:aa:d2:f0:89:bf:91:44:b8:46:fe:e0:12:20:
                    90:30:c6:91:30:0c:26:7e:2a:6e:a8:87:b4:4f:67:
                    6d:bb:d6:f9:b9:1b:ef:c8:f0:5a:af:c9:9a:59:69:
                    09:51:30:dd:46:22:1c:bf:c9:28:7e:f1:17:39:ed:
                    4d:77:aa:a2:62:5e:4a:34:94:cc:be:13:1c:ea:a9:
                    c7:d0:af:a1:93:74:73:54:f0:c9:1c:42:28:1b:94:
                    f6:a7:47:31:f6:6a:cb:eb:4a:58:2b:03:cc:04:b1:
                    e6:65:36:24:9c:98:81:5b:c4:d0:68:53:c1:32:5f:
                    8c:1d:07:b8:10:64:fe:b8:c3:db:e2:c0:70:f8:bb:
                    41:a9:03:b7:c9:09:81:12:31:02:c1:f7:f6:ce:9a:
                    2a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:36:BC:3B:0B:A9:E8:F8:AE:9A:1C:F3:EC:E0:85:3C:70:15:F2:A2
            X509v3 Authority Key Identifier:
                keyid:EB:F7:2B:CF:5B:99:2E:28:58:FB:5D:CF:DD:F4:A9:43:21:82:4A:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6_crz1uZLihY-13P3fSpQyGCSss.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/6007d2-c8e3-46d7-9836-d4e5c11adaf4/1/6_crz1uZLihY-13P3fSpQyGCSss.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/6007d2-c8e3-46d7-9836-d4e5c11adaf4/1/6_crz1uZLihY-13P3fSpQyGCSss.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:fe:64:19:11:e8:b5:13:a1:10:5f:9c:f8:8f:d7:a7:48:8c:
         f5:5c:12:b2:8c:79:83:e0:ae:fc:2b:b1:4b:30:9f:d3:ba:a8:
         aa:eb:26:c3:93:3f:bf:23:fd:03:75:e7:b9:dc:35:b3:7a:99:
         53:35:00:fd:f7:39:4b:72:15:c4:08:97:9b:69:77:8a:bb:3f:
         2c:dc:11:e9:3f:9d:0d:90:bf:92:00:ff:da:35:2d:ad:7d:4e:
         f4:af:43:b9:2d:48:3a:08:30:c9:8e:0f:b2:e2:40:a6:ab:34:
         dd:25:50:b8:4f:d1:25:76:c4:00:3a:70:9f:d0:06:56:8d:17:
         f2:23:67:ee:f6:1b:e6:31:3a:5b:19:cc:65:cc:eb:c9:4f:01:
         2d:89:3e:8e:48:be:a6:99:32:3b:ea:ff:10:9a:5c:07:0e:d7:
         db:5c:80:f0:f9:87:d1:d1:49:1c:3e:7f:b6:c5:cd:94:63:a2:
         aa:e6:f8:65:00:ca:e4:f7:be:fc:61:11:12:fb:a4:da:c7:34:
         76:22:e3:a5:dc:a4:ca:d1:34:27:48:ec:6d:67:7a:ac:a1:ec:
         a2:9e:ab:9a:96:c8:68:c5:0d:d7:0e:01:92:5e:05:79:bf:84:
         66:92:95:45:d2:92:ea:8b:2c:96:e0:d9:73:dd:5e:00:4a:f5:
         a8:26:46:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZD97wlAlHYd3cFWhlpNz47PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViZjcyYmNmNWI5OTJlMjg1OGZiNWRjZmRkZjRhOTQzMjE4
MjRhY2IwHhcNMjQwNzI5MTAwMDE5WhcNMjQwNzMwMTAwMDE5WjAzMTEwLwYDVQQD
Eyg1ZDM2YmMzYjBiYTllOGY4YWU5YTFjZjNlY2UwODUzYzcwMTVmMmEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0EybHJz8gj5ORppeTsoUZ4ku/+Yz
F3hMyjjOWxSHSKPm7jP45fnHVHuHH0otpcCCr7S0HNJpj8kO+PxLUD8RiP20vpDL
FwuNRzQ7yVjubFhZ6hbp9m46jk2O0iFgWbm6IjqsHMhCQrS2hqrS8Im/kUS4Rv7g
EiCQMMaRMAwmfipuqIe0T2dtu9b5uRvvyPBar8maWWkJUTDdRiIcv8kofvEXOe1N
d6qiYl5KNJTMvhMc6qnH0K+hk3RzVPDJHEIoG5T2p0cx9mrL60pYKwPMBLHmZTYk
nJiBW8TQaFPBMl+MHQe4EGT+uMPb4sBw+LtBqQO3yQmBEjECwff2zpoq4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF02vDsLqej4rpoc8+zghTxwFfKiMB8GA1UdIwQY
MBaAFOv3K89bmS4oWPtdz930qUMhgkrLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNl9jcnoxdVpMaWhZLTEzUDNmU3BReUdDU3NzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC82MDA3ZDItYzhlMy00NmQ3LTk4MzYt
ZDRlNWMxMWFkYWY0LzEvNl9jcnoxdVpMaWhZLTEzUDNmU3BReUdDU3NzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC82MDA3ZDItYzhlMy00NmQ3LTk4MzYtZDRlNWMxMWFkYWY0
LzEvNl9jcnoxdVpMaWhZLTEzUDNmU3BReUdDU3NzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuP5kGRHo
tROhEF+c+I/Xp0iM9VwSsox5g+Cu/CuxSzCf07qoqusmw5M/vyP9A3Xnudw1s3qZ
UzUA/fc5S3IVxAiXm2l3irs/LNwR6T+dDZC/kgD/2jUtrX1O9K9DuS1IOggwyY4P
suJApqs03SVQuE/RJXbEADpwn9AGVo0X8iNn7vYb5jE6WxnMZczryU8BLYk+jki+
ppkyO+r/EJpcBw7X21yA8PmH0dFJHD5/tsXNlGOiqub4ZQDK5Pe+/GEREvuk2sc0
diLjpdykytE0J0jsbWd6rKHsop6rmpbIaMUN1w4Bkl4Feb+EZpKVRdKS6ossluDZ
c91eAEr1qCZG2Q==
-----END CERTIFICATE-----