Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/c53d23-5104-40fa-9d37-1faded12c414/1/4NzRjqb0btH-lmJ29vniA_Uzf1k.mft
File:                     4NzRjqb0btH-lmJ29vniA_Uzf1k.mft (raw, json)
Hash identifier:          Bri5s9+LrkyYqzJDR1ndiK0PBt/rdubfSZny31gb1hg=
Subject key identifier:   59:8B:31:CB:B4:37:03:F0:2B:48:37:6A:2B:E9:E0:5B:04:AA:1A:80
Authority key identifier: E0:DC:D1:8E:A6:F4:6E:D1:FE:96:62:76:F6:F9:E2:03:F5:33:7F:59
Certificate issuer:       /CN=e0dcd18ea6f46ed1fe966276f6f9e203f5337f59
Certificate serial:       06E15128
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4NzRjqb0btH-lmJ29vniA_Uzf1k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/c53d23-5104-40fa-9d37-1faded12c414/1/4NzRjqb0btH-lmJ29vniA_Uzf1k.mft
Manifest number:          08F1
Signing time:             Mon 11 Apr 2022 04:33:58 +0000
Manifest this update:     Mon 11 Apr 2022 04:33:58 +0000
Manifest next update:     Tue 12 Apr 2022 04:33:58 +0000
Files and hashes:         1: 4NzRjqb0btH-lmJ29vniA_Uzf1k.crl (hash: WagwgnlsgOaeBfC1sWhFKHGgKskLDvV/C2bX6RPF6co=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 115429672 (0x6e15128)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0dcd18ea6f46ed1fe966276f6f9e203f5337f59
        Validity
            Not Before: Apr 11 04:33:58 2022 GMT
            Not After : Apr 12 04:33:58 2022 GMT
        Subject: CN=598b31cbb43703f02b48376a2be9e05b04aa1a80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:99:ba:32:0c:ba:b8:99:50:40:25:41:aa:21:
                    93:e8:4c:1a:19:97:27:86:2f:e2:5a:d8:af:73:3f:
                    89:09:d8:6f:f8:27:3c:65:16:ab:8c:61:2e:c5:42:
                    93:11:74:07:ab:7f:3c:4f:e2:79:f2:0b:77:e1:53:
                    b3:fe:3a:b3:88:b2:ba:21:fa:a4:d7:f3:11:2c:a9:
                    09:b5:af:2a:88:6d:51:4b:7c:03:cf:df:9b:21:e1:
                    29:f3:19:77:b9:b1:f3:e1:c9:72:ba:12:e9:ce:a9:
                    09:cb:34:b6:db:54:fb:9e:3c:f4:c1:b5:eb:4f:c1:
                    7b:de:7c:23:0e:f0:94:cd:0c:bf:49:f7:89:27:09:
                    ee:40:6b:e7:57:5a:5e:09:01:7a:d7:f1:ce:be:08:
                    34:ab:db:7e:db:43:31:81:5a:30:89:5a:ee:f3:24:
                    8b:2f:5a:39:d3:3a:db:fe:8b:0a:95:19:6c:48:34:
                    91:01:cb:64:5e:6c:e7:51:4f:e3:5e:e1:56:ba:39:
                    63:71:f1:dc:4d:42:29:cf:ee:34:4f:25:30:00:e0:
                    87:5d:94:99:0b:6e:31:0c:54:94:6b:c7:c7:7d:f0:
                    23:ba:79:ba:67:b3:d1:60:a3:ca:5f:81:c1:9a:03:
                    18:4a:29:67:34:de:5f:08:2e:33:5d:cf:65:23:95:
                    15:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:8B:31:CB:B4:37:03:F0:2B:48:37:6A:2B:E9:E0:5B:04:AA:1A:80
            X509v3 Authority Key Identifier:
                keyid:E0:DC:D1:8E:A6:F4:6E:D1:FE:96:62:76:F6:F9:E2:03:F5:33:7F:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4NzRjqb0btH-lmJ29vniA_Uzf1k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c53d23-5104-40fa-9d37-1faded12c414/1/4NzRjqb0btH-lmJ29vniA_Uzf1k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c53d23-5104-40fa-9d37-1faded12c414/1/4NzRjqb0btH-lmJ29vniA_Uzf1k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:90:1c:b0:c1:5b:b2:97:11:c5:f0:46:c9:12:cc:30:e4:3c:
         24:53:e9:55:7b:06:be:b4:a5:56:b8:d8:fe:3b:07:50:84:4d:
         c6:51:7b:5f:38:cd:50:69:9a:7f:75:5d:40:ba:25:b3:75:72:
         e6:b0:67:58:4a:7a:48:5a:a7:fe:74:0e:a0:39:1c:34:9b:48:
         13:90:d5:99:45:81:3e:40:b5:c6:89:10:17:08:ac:fb:7a:2b:
         93:75:cc:27:07:6a:32:68:5c:8a:c6:e7:47:fe:1d:13:0b:a0:
         54:bb:1d:b5:d4:ff:70:3d:d7:87:74:ac:cc:cf:55:f5:2f:5c:
         b9:f4:ca:8e:cd:08:79:c2:e4:4f:45:59:cd:59:c0:36:90:70:
         14:dd:12:9e:f2:3d:e8:c0:99:c7:3c:2f:ac:76:b8:44:20:45:
         f4:f9:4d:98:80:3a:ca:0f:23:14:11:8c:c3:9a:1d:12:02:5d:
         28:0c:d4:61:2f:e5:2f:07:d6:7c:3a:da:af:66:07:31:39:44:
         e4:5e:81:d4:5a:c2:79:c0:4d:5e:73:3c:42:68:f3:b4:51:2a:
         02:38:bd:1b:6d:7b:c6:8d:1a:98:b7:0e:03:cb:aa:70:c0:5f:
         31:cb:dc:03:f2:dc:3a:8f:fb:47:ee:db:08:2a:88:31:a8:67:
         30:11:24:af
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgIEBuFRKDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
MGRjZDE4ZWE2ZjQ2ZWQxZmU5NjYyNzZmNmY5ZTIwM2Y1MzM3ZjU5MB4XDTIyMDQx
MTA0MzM1OFoXDTIyMDQxMjA0MzM1OFowMzExMC8GA1UEAxMoNTk4YjMxY2JiNDM3
MDNmMDJiNDgzNzZhMmJlOWUwNWIwNGFhMWE4MDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALOZujIMuriZUEAlQaohk+hMGhmXJ4Yv4lrYr3M/iQnYb/gn
PGUWq4xhLsVCkxF0B6t/PE/iefILd+FTs/46s4iyuiH6pNfzESypCbWvKohtUUt8
A8/fmyHhKfMZd7mx8+HJcroS6c6pCcs0tttU+5489MG160/Be958Iw7wlM0Mv0n3
iScJ7kBr51daXgkBetfxzr4INKvbfttDMYFaMIla7vMkiy9aOdM62/6LCpUZbEg0
kQHLZF5s51FP417hVro5Y3Hx3E1CKc/uNE8lMADgh12UmQtuMQxUlGvHx33wI7p5
umez0WCjyl+BwZoDGEopZzTeXwguM13PZSOVFeUCAwEAAaOCAiIwggIeMB0GA1Ud
DgQWBBRZizHLtDcD8CtIN2or6eBbBKoagDAfBgNVHSMEGDAWgBTg3NGOpvRu0f6W
Ynb2+eID9TN/WTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzROelJqcWIwYnRILWxtSjI5dm5pQV9VemYxay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMWYvYzUzZDIzLTUxMDQtNDBmYS05ZDM3LTFmYWRlZDEyYzQxNC8x
LzROelJqcWIwYnRILWxtSjI5dm5pQV9VemYxay5tZnQwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWYv
YzUzZDIzLTUxMDQtNDBmYS05ZDM3LTFmYWRlZDEyYzQxNC8xLzROelJqcWIwYnRI
LWxtSjI5dm5pQV9VemYxay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/
BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBADuQHLDBW7KXEcXwRskSzDDkPCRT
6VV7Br60pVa42P47B1CETcZRe184zVBpmn91XUC6JbN1cuawZ1hKekhap/50DqA5
HDSbSBOQ1ZlFgT5AtcaJEBcIrPt6K5N1zCcHajJoXIrG50f+HRMLoFS7HbXU/3A9
14d0rMzPVfUvXLn0yo7NCHnC5E9FWc1ZwDaQcBTdEp7yPejAmcc8L6x2uEQgRfT5
TZiAOsoPIxQRjMOaHRICXSgM1GEv5S8H1nw62q9mBzE5RORegdRawnnATV5zPEJo
87RRKgI4vRtte8aNGpi3DgPLqnDAXzHL3APy3DqP+0fu2wgqiDGoZzARJK8=
-----END CERTIFICATE-----