Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/86c181-4f5c-45fc-baac-1f9a19c37e08/1/RcSRNisuOGGXuaB0YSQoi8C88DE.mft
File:                     RcSRNisuOGGXuaB0YSQoi8C88DE.mft (raw, json)
Hash identifier:          ffe83asj4FAZ/ERzDUO44b3sNe1YDHqZ5R4rWvtTDOE=
Subject key identifier:   ED:4D:61:F9:77:75:D9:EF:AE:1F:24:A7:50:A3:34:0A:A8:0F:EF:5F
Authority key identifier: 45:C4:91:36:2B:2E:38:61:97:B9:A0:74:61:24:28:8B:C0:BC:F0:31
Certificate issuer:       /CN=45c491362b2e386197b9a0746124288bc0bcf031
Certificate serial:       0189BA56D167669C2E3ACB33FBB37B03206E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RcSRNisuOGGXuaB0YSQoi8C88DE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/86c181-4f5c-45fc-baac-1f9a19c37e08/1/RcSRNisuOGGXuaB0YSQoi8C88DE.mft
Manifest number:          0878
Signing time:             Thu 03 Aug 2023 07:39:59 +0000
Manifest this update:     Thu 03 Aug 2023 07:39:59 +0000
Manifest next update:     Fri 04 Aug 2023 07:39:59 +0000
Files and hashes:         1: 4ZeUlQU3quNpGKsbIEaiNyKOWmI.roa (hash: vQUmVxAZv2MyfpEiNQKmSMVPKUEp4+SfIYYgt/TM8Tw=)
                          2: IaizFfBRPTpK4T-fraxs6klsLCU.roa (hash: EHWP3Y6bTBtnSaOYUeenIFWmza4QO2idpY5G9qG7oVQ=)
                          3: JIkSKZk0OtFCvM2XXa-cRWjmJPA.roa (hash: 6ERBzyR/LP+xN6TeHFex8YjIPGVYO+nXSIcvpP7suhI=)
                          4: RcSRNisuOGGXuaB0YSQoi8C88DE.crl (hash: fOcFP8TqeCgh24Lcx5ToGe8mtBns2/dCRPEAsiX5sXc=)
                          5: UXbfx0Rtjz3puBWZB-w86xPfVYY.roa (hash: QSCUCqm2fwuPFCJZUMjQ0ywdbKSmpM+/WudQdGaC0C8=)
                          6: bL06i8iGahWydw3qJytDHfBnk-A.roa (hash: 70xmLZ0HdnyPJa/xRAzQv8OD6HDf/6HlA83Q/2ORX8g=)
                          7: dkzSloFAmXBg_NwkciBUGFU4h0I.roa (hash: 3nwtIFyFsmnk0rEdfRSh2rZNd4o9EtcD8NJ1ilBWOSE=)
                          8: obcEq4cXIvoJ2fAu-81v0CIvc_A.roa (hash: 4Xrr+HKzfLOsGRABJIFyL2EXrNvPhGiWhzGUUHJq08c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:ba:56:d1:67:66:9c:2e:3a:cb:33:fb:b3:7b:03:20:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45c491362b2e386197b9a0746124288bc0bcf031
        Validity
            Not Before: Aug  3 07:39:59 2023 GMT
            Not After : Aug  4 07:39:59 2023 GMT
        Subject: CN=ed4d61f97775d9efae1f24a750a3340aa80fef5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:93:cd:2e:68:55:20:18:62:d5:9a:7d:81:94:
                    c2:b7:96:91:bb:40:3a:d9:d5:c4:d8:04:41:60:63:
                    eb:a5:31:d7:e4:bf:be:bd:52:d6:df:05:4d:87:6c:
                    3e:86:6e:a8:e6:23:98:65:a3:9e:1f:fd:25:90:ed:
                    57:a2:6d:9e:9b:42:be:5b:76:0b:c1:59:58:14:a5:
                    66:03:89:ba:39:12:c8:24:5d:4f:15:4b:93:a5:8d:
                    33:1c:ea:df:74:50:1b:4b:53:55:15:0b:f7:84:dd:
                    14:94:04:2a:b9:42:78:75:98:a6:02:a4:88:de:2d:
                    16:7e:14:85:f7:84:5f:96:84:02:c9:93:0f:1d:64:
                    3c:e8:86:04:13:bf:6d:81:2c:42:93:5b:01:ef:58:
                    92:ba:8f:26:e4:5b:d6:28:72:c4:b7:92:4e:ef:6b:
                    55:4c:9f:f8:f3:d7:07:e9:41:7b:ce:89:4e:38:7b:
                    21:ee:9d:91:a1:71:aa:e5:9a:1e:ca:c1:9e:8f:18:
                    18:01:b7:03:ab:9b:9a:08:f3:95:f8:8f:70:e1:fc:
                    34:49:df:79:8a:13:8b:33:8f:9c:3f:0b:60:24:e0:
                    92:b0:22:b9:38:2a:55:66:9a:5b:03:c8:a3:e3:a0:
                    de:67:f9:de:52:b6:ac:ef:6b:fd:4a:8f:73:6f:1b:
                    47:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:4D:61:F9:77:75:D9:EF:AE:1F:24:A7:50:A3:34:0A:A8:0F:EF:5F
            X509v3 Authority Key Identifier:
                keyid:45:C4:91:36:2B:2E:38:61:97:B9:A0:74:61:24:28:8B:C0:BC:F0:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RcSRNisuOGGXuaB0YSQoi8C88DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/86c181-4f5c-45fc-baac-1f9a19c37e08/1/RcSRNisuOGGXuaB0YSQoi8C88DE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/86c181-4f5c-45fc-baac-1f9a19c37e08/1/RcSRNisuOGGXuaB0YSQoi8C88DE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:4c:5f:f5:e6:f7:eb:66:1c:1a:de:ce:d7:27:e9:eb:7e:68:
         bf:a5:ee:12:66:9e:e3:37:4f:54:c9:a7:06:8e:6a:94:57:55:
         e9:a9:b6:bf:c9:fa:78:93:97:c4:7b:a1:6d:4d:36:de:ea:0f:
         cb:4b:6c:27:f2:7f:0d:10:31:cd:ba:69:7d:0e:19:9b:d5:8d:
         06:08:33:52:ab:ac:2f:31:a1:d8:ca:29:9a:8e:6c:18:65:b6:
         c6:dc:be:9b:df:8c:41:9b:6c:9d:a8:e5:52:9b:ea:93:12:3c:
         69:56:c0:30:78:5b:bd:47:c6:28:6f:c0:dd:6c:8b:ce:d4:7c:
         b5:8b:3d:a7:c6:ec:b0:76:9e:f8:8d:71:4c:d3:39:b1:d4:23:
         ad:7c:e8:cb:09:76:6c:f7:d8:02:30:9f:ea:ed:80:b3:1f:35:
         e6:d3:e3:48:03:7e:72:b2:39:6b:51:65:0e:dc:8b:4f:a9:d4:
         d7:48:d8:51:f0:f1:1c:9a:fc:99:5c:aa:eb:f9:31:43:bc:93:
         9d:f7:22:be:45:a3:d3:4d:29:08:d4:19:1a:da:18:4b:38:6b:
         cf:d1:b9:fd:d3:ec:62:d9:dd:40:ed:60:2a:d6:fd:7c:fa:b1:
         ad:96:77:55:b7:5a:bc:bd:6f:bd:c4:dc:08:bc:4b:de:9f:a8:
         4b:e9:e1:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYm6VtFnZpwuOssz+7N7AyBuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1YzQ5MTM2MmIyZTM4NjE5N2I5YTA3NDYxMjQyODhiYzBi
Y2YwMzEwHhcNMjMwODAzMDczOTU5WhcNMjMwODA0MDczOTU5WjAzMTEwLwYDVQQD
EyhlZDRkNjFmOTc3NzVkOWVmYWUxZjI0YTc1MGEzMzQwYWE4MGZlZjVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAipPNLmhVIBhi1Zp9gZTCt5aRu0A6
2dXE2ARBYGPrpTHX5L++vVLW3wVNh2w+hm6o5iOYZaOeH/0lkO1Xom2em0K+W3YL
wVlYFKVmA4m6ORLIJF1PFUuTpY0zHOrfdFAbS1NVFQv3hN0UlAQquUJ4dZimAqSI
3i0WfhSF94RfloQCyZMPHWQ86IYEE79tgSxCk1sB71iSuo8m5FvWKHLEt5JO72tV
TJ/489cH6UF7zolOOHsh7p2RoXGq5ZoeysGejxgYAbcDq5uaCPOV+I9w4fw0Sd95
ihOLM4+cPwtgJOCSsCK5OCpVZppbA8ij46DeZ/neUras72v9So9zbxtHaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO1NYfl3ddnvrh8kp1CjNAqoD+9fMB8GA1UdIwQY
MBaAFEXEkTYrLjhhl7mgdGEkKIvAvPAxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmNTUk5pc3VPR0dYdWFCMFlTUW9pOEM4OERFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy84NmMxODEtNGY1Yy00NWZjLWJhYWMt
MWY5YTE5YzM3ZTA4LzEvUmNTUk5pc3VPR0dYdWFCMFlTUW9pOEM4OERFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy84NmMxODEtNGY1Yy00NWZjLWJhYWMtMWY5YTE5YzM3ZTA4
LzEvUmNTUk5pc3VPR0dYdWFCMFlTUW9pOEM4OERFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZkxf9eb3
62YcGt7O1yfp635ov6XuEmae4zdPVMmnBo5qlFdV6am2v8n6eJOXxHuhbU023uoP
y0tsJ/J/DRAxzbppfQ4Zm9WNBggzUqusLzGh2Mopmo5sGGW2xty+m9+MQZtsnajl
UpvqkxI8aVbAMHhbvUfGKG/A3WyLztR8tYs9p8bssHae+I1xTNM5sdQjrXzoywl2
bPfYAjCf6u2Asx815tPjSAN+crI5a1FlDtyLT6nU10jYUfDxHJr8mVyq6/kxQ7yT
nfcivkWj000pCNQZGtoYSzhrz9G5/dPsYtndQO1gKtb9fPqxrZZ3VbdavL1vvcTc
CLxL3p+oS+nhKQ==
-----END CERTIFICATE-----