Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e0d0b2-9b9a-47f8-84ec-1460c78ea75d/1/JMZCcrCzrrgSVJ3ufsWKPq9vpXY.mft
File:                     JMZCcrCzrrgSVJ3ufsWKPq9vpXY.mft (raw, json)
Hash identifier:          34Tik33ApqwHfNcH+Th0qnvPoqRau67hLnGBpXtOK6o=
Subject key identifier:   AE:61:DF:B0:EF:46:F5:75:01:60:CD:2F:34:19:BD:D6:6E:DD:CB:0B
Authority key identifier: 24:C6:42:72:B0:B3:AE:B8:12:54:9D:EE:7E:C5:8A:3E:AF:6F:A5:76
Certificate issuer:       /CN=24c64272b0b3aeb812549dee7ec58a3eaf6fa576
Certificate serial:       0185295C3F949EBB28BAD7236EFAE95CF16C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JMZCcrCzrrgSVJ3ufsWKPq9vpXY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/e0d0b2-9b9a-47f8-84ec-1460c78ea75d/1/JMZCcrCzrrgSVJ3ufsWKPq9vpXY.mft
Manifest number:          08AE
Signing time:             Mon 19 Dec 2022 07:49:49 +0000
Manifest this update:     Mon 19 Dec 2022 07:49:49 +0000
Manifest next update:     Tue 20 Dec 2022 07:49:49 +0000
Files and hashes:         1: 2FRzhCan8WDf0pY-aMbG7kokZWQ.roa (hash: B6ejXqr/FLk7rWXR0t5ZOXU5C6sYGtodJY4ljQ22FGI=)
                          2: Cb2gWmUMcMchyCVwmrT-nPqCWEU.roa (hash: fVrcQTh1FiTH4H+4RuWqBpZU62NFSTCH79TuTvgPmoo=)
                          3: JMZCcrCzrrgSVJ3ufsWKPq9vpXY.crl (hash: 7QNGKz73T1VTlDxbon7JF285M3mQIRtE5XHy0ODHovQ=)
                          4: RLTc9srzq3q-yGbLudK07j18gSE.roa (hash: 8IM3Hqfkdkz3kKMcpjnp3TgjyDYwWmNSuEefXGi5j/U=)
                          5: XH_GPVyFg2owJgahBqq1uFu3D10.roa (hash: 8m2dHVdKFiqrc2bwhIVWTQ82rCOcuY4zAGIT3KqkNQ0=)
                          6: bP6K8yyA_bgCVKE6rWauv3shjUY.roa (hash: H0ScgWMJaW5mkQeoXP7V0bn+bq8IkyLCoYTNxpxNIbg=)
                          7: hfKRC_uJPolg8MS6XETerTt-KrY.roa (hash: RlYjhEfE1MYN6HnxkiMkxbwBuyJ9p8VrIsCgBlT4WpM=)
                          8: ktiPkgW5LHj5JSYA53i_r00-3tY.roa (hash: ImAK6GMednqdIO/+yOEvrtkCPZiewM2Kzk+og/d4ic8=)
                          9: mh6Gt_cRrSNcIXpvvnYJAtTvPg0.roa (hash: FJp6LFTiVLBuGnJR/pw1AzR3NbAbfMOV7+2c7Qi+WiU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:29:5c:3f:94:9e:bb:28:ba:d7:23:6e:fa:e9:5c:f1:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24c64272b0b3aeb812549dee7ec58a3eaf6fa576
        Validity
            Not Before: Dec 19 07:49:49 2022 GMT
            Not After : Dec 20 07:49:49 2022 GMT
        Subject: CN=ae61dfb0ef46f5750160cd2f3419bdd66eddcb0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:8b:a8:4b:60:5a:1c:55:e1:1d:d6:b0:ba:4b:
                    47:ef:05:e1:53:8f:2d:4c:6f:ec:d4:2b:77:07:fa:
                    8b:e9:f4:1f:d3:fc:ec:92:57:8c:71:a2:b1:94:d1:
                    d7:d6:8c:d1:c3:dc:ee:66:e4:29:62:09:a9:aa:50:
                    5a:79:2c:31:56:0e:2c:8e:b5:f8:1c:56:1b:79:de:
                    54:eb:cd:b7:09:08:31:8d:65:67:eb:2b:25:e0:37:
                    7a:b1:8b:93:cd:b6:8c:aa:62:f6:35:89:5b:9b:ac:
                    7b:d5:d6:ed:50:5b:a0:f4:94:4c:05:b6:48:a5:f4:
                    8c:2a:6f:bb:ea:d4:94:c8:29:93:d4:df:64:5f:f1:
                    ec:04:f7:cd:13:ec:a6:5a:75:c3:12:86:b6:73:74:
                    33:94:b4:a2:5b:63:ba:3f:35:fa:7d:10:39:b6:c4:
                    66:06:c0:1d:ab:dc:46:44:99:e7:55:c3:8f:fb:e1:
                    b2:ff:66:e7:0c:e5:67:f1:18:15:77:c2:3a:5d:8c:
                    b2:5e:d2:c6:3d:42:60:79:5a:5e:14:4b:c4:af:e3:
                    d5:e5:3a:ed:d1:54:48:e0:3e:6e:58:d4:8f:35:da:
                    85:3d:bb:1a:e5:c2:58:26:61:ca:2f:fe:a2:3c:a9:
                    bf:a2:57:b4:1c:f0:b0:e2:05:7c:f4:99:95:0a:2f:
                    fc:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:61:DF:B0:EF:46:F5:75:01:60:CD:2F:34:19:BD:D6:6E:DD:CB:0B
            X509v3 Authority Key Identifier:
                keyid:24:C6:42:72:B0:B3:AE:B8:12:54:9D:EE:7E:C5:8A:3E:AF:6F:A5:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMZCcrCzrrgSVJ3ufsWKPq9vpXY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e0d0b2-9b9a-47f8-84ec-1460c78ea75d/1/JMZCcrCzrrgSVJ3ufsWKPq9vpXY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e0d0b2-9b9a-47f8-84ec-1460c78ea75d/1/JMZCcrCzrrgSVJ3ufsWKPq9vpXY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:0e:48:75:a8:d4:82:8c:21:1a:31:60:41:ad:7f:9d:d0:af:
         aa:7f:8d:64:87:4b:3c:ab:f5:17:f7:e3:6c:20:f0:bf:78:2e:
         55:cb:8f:e8:f6:08:44:bc:1f:34:23:0e:77:cf:54:38:8d:54:
         c8:ce:aa:8f:a6:07:a4:77:63:f6:39:65:aa:8b:79:d5:0b:0e:
         f3:82:ed:67:62:dc:8c:9e:48:ba:43:9e:77:04:23:16:c1:a4:
         c6:67:c8:fa:2b:88:9b:c9:44:93:64:7f:e7:ae:4a:34:b2:f1:
         b1:52:fa:3c:14:63:4d:03:84:42:c8:78:bc:2a:4d:8d:d3:ab:
         fc:e0:d6:54:d6:cb:58:d2:00:52:3b:f3:93:a1:ec:1f:d6:71:
         41:38:26:45:5f:9e:4f:aa:4d:f1:19:5c:dc:09:3a:5b:39:87:
         fc:b2:53:22:1b:37:90:52:cd:c1:ff:51:eb:95:b6:56:69:6d:
         5a:89:d9:e3:ca:1b:1e:64:ef:25:d0:d7:92:09:51:f6:3b:a7:
         f4:00:b5:26:fd:58:e9:ac:0b:2c:37:5c:bb:e4:ab:1e:e5:bd:
         f2:af:a2:a5:5c:68:51:3c:52:1d:fa:0f:6a:13:22:a5:92:2d:
         00:41:f0:1b:fe:29:a9:58:4d:89:ce:f8:ad:e4:fe:5b:d3:8d:
         fa:2a:c6:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYUpXD+UnrsoutcjbvrpXPFsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0YzY0MjcyYjBiM2FlYjgxMjU0OWRlZTdlYzU4YTNlYWY2
ZmE1NzYwHhcNMjIxMjE5MDc0OTQ5WhcNMjIxMjIwMDc0OTQ5WjAzMTEwLwYDVQQD
EyhhZTYxZGZiMGVmNDZmNTc1MDE2MGNkMmYzNDE5YmRkNjZlZGRjYjBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIuoS2BaHFXhHdawuktH7wXhU48t
TG/s1Ct3B/qL6fQf0/zskleMcaKxlNHX1ozRw9zuZuQpYgmpqlBaeSwxVg4sjrX4
HFYbed5U6823CQgxjWVn6ysl4Dd6sYuTzbaMqmL2NYlbm6x71dbtUFug9JRMBbZI
pfSMKm+76tSUyCmT1N9kX/HsBPfNE+ymWnXDEoa2c3QzlLSiW2O6PzX6fRA5tsRm
BsAdq9xGRJnnVcOP++Gy/2bnDOVn8RgVd8I6XYyyXtLGPUJgeVpeFEvEr+PV5Trt
0VRI4D5uWNSPNdqFPbsa5cJYJmHKL/6iPKm/ole0HPCw4gV89JmVCi/8twIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK5h37DvRvV1AWDNLzQZvdZu3csLMB8GA1UdIwQY
MBaAFCTGQnKws664ElSd7n7Fij6vb6V2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSk1aQ2NyQ3pycmdTVkozdWZzV0tQcTl2cFhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9lMGQwYjItOWI5YS00N2Y4LTg0ZWMt
MTQ2MGM3OGVhNzVkLzEvSk1aQ2NyQ3pycmdTVkozdWZzV0tQcTl2cFhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9lMGQwYjItOWI5YS00N2Y4LTg0ZWMtMTQ2MGM3OGVhNzVk
LzEvSk1aQ2NyQ3pycmdTVkozdWZzV0tQcTl2cFhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAig5IdajU
gowhGjFgQa1/ndCvqn+NZIdLPKv1F/fjbCDwv3guVcuP6PYIRLwfNCMOd89UOI1U
yM6qj6YHpHdj9jllqot51QsO84LtZ2LcjJ5IukOedwQjFsGkxmfI+iuIm8lEk2R/
565KNLLxsVL6PBRjTQOEQsh4vCpNjdOr/ODWVNbLWNIAUjvzk6HsH9ZxQTgmRV+e
T6pN8Rlc3Ak6WzmH/LJTIhs3kFLNwf9R65W2VmltWonZ48obHmTvJdDXkglR9jun
9AC1Jv1Y6awLLDdcu+SrHuW98q+ipVxoUTxSHfoPahMipZItAEHwG/4pqVhNic74
reT+W9ON+irGXA==
-----END CERTIFICATE-----