Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/0658f4-ae21-40ca-a3dc-c230519482e3/1/ssHUKM3uHrP_v23yMY-ZVN2IX_A.mft
File:                     ssHUKM3uHrP_v23yMY-ZVN2IX_A.mft (raw, json)
Hash identifier:          0u5PBPlpNqszGHWQxyiYswWUUnhYvl8DeF/PrGNOeJ8=
Subject key identifier:   C2:66:21:51:C7:26:F2:9A:75:99:D7:B6:C9:0C:F0:05:ED:A2:37:7A
Authority key identifier: B2:C1:D4:28:CD:EE:1E:B3:FF:BF:6D:F2:31:8F:99:54:DD:88:5F:F0
Certificate issuer:       /CN=b2c1d428cdee1eb3ffbf6df2318f9954dd885ff0
Certificate serial:       0189D44D95DE099D8A6F1F3AB52F1465B66C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ssHUKM3uHrP_v23yMY-ZVN2IX_A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/0658f4-ae21-40ca-a3dc-c230519482e3/1/ssHUKM3uHrP_v23yMY-ZVN2IX_A.mft
Manifest number:          0855
Signing time:             Tue 08 Aug 2023 08:40:01 +0000
Manifest this update:     Tue 08 Aug 2023 08:40:01 +0000
Manifest next update:     Wed 09 Aug 2023 08:40:01 +0000
Files and hashes:         1: ssHUKM3uHrP_v23yMY-ZVN2IX_A.crl (hash: wsx1AITfxV8lPGE/iDsurbAcIKxsvdO+7lMLvS2FSpg=)
                          2: yKEq8Y0EwJsiSiIVa_YsRrsFnqc.roa (hash: rrmoFnj3Bdbi41bTWQd4paTULVA6T96Nz+vT153sdiE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:d4:4d:95:de:09:9d:8a:6f:1f:3a:b5:2f:14:65:b6:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2c1d428cdee1eb3ffbf6df2318f9954dd885ff0
        Validity
            Not Before: Aug  8 08:40:01 2023 GMT
            Not After : Aug  9 08:40:01 2023 GMT
        Subject: CN=c2662151c726f29a7599d7b6c90cf005eda2377a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:5c:43:50:a1:54:68:ef:f7:a3:83:94:c6:83:
                    0b:bb:b2:be:bc:b3:85:9d:44:01:03:b2:20:41:3f:
                    8c:5b:2b:40:f5:b0:cd:ef:ce:9b:e8:f5:fa:4a:cf:
                    d4:b6:7a:76:4d:73:41:e8:4e:99:1f:13:3b:fe:ff:
                    19:f1:a9:69:54:e0:49:7d:ea:84:58:40:e0:79:fe:
                    6e:1e:5d:a8:26:e8:e0:9d:3f:69:c9:0d:9d:83:b3:
                    c0:be:69:33:7e:93:a2:d2:fd:bf:a4:86:eb:5a:89:
                    e6:f8:6a:3a:49:44:7c:b0:28:98:6f:de:4e:64:67:
                    30:c8:55:38:ff:7e:ea:7f:72:12:16:01:91:a2:13:
                    c7:bf:de:9b:5d:83:09:2d:8e:cf:57:7b:a2:4c:37:
                    f1:e6:88:3d:a1:24:8d:f0:de:ad:a7:58:f2:9b:8e:
                    a1:5a:e7:b4:34:f4:13:a3:9b:f0:9a:bb:9f:4a:e6:
                    f3:18:77:e6:93:b1:28:51:c2:8e:f1:5b:d2:f0:37:
                    9e:4d:9e:40:d7:ce:9c:8a:4c:dd:0f:f2:0a:02:96:
                    55:a4:60:ec:65:cb:c0:60:4e:80:2b:1c:95:8f:23:
                    44:d5:11:00:f9:32:d3:f7:37:18:68:59:ea:25:ea:
                    4e:68:f0:51:09:eb:27:12:bf:7e:36:fa:84:b0:42:
                    91:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:66:21:51:C7:26:F2:9A:75:99:D7:B6:C9:0C:F0:05:ED:A2:37:7A
            X509v3 Authority Key Identifier:
                keyid:B2:C1:D4:28:CD:EE:1E:B3:FF:BF:6D:F2:31:8F:99:54:DD:88:5F:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ssHUKM3uHrP_v23yMY-ZVN2IX_A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0658f4-ae21-40ca-a3dc-c230519482e3/1/ssHUKM3uHrP_v23yMY-ZVN2IX_A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0658f4-ae21-40ca-a3dc-c230519482e3/1/ssHUKM3uHrP_v23yMY-ZVN2IX_A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:99:44:25:03:9d:92:ae:bb:f0:7b:e4:6f:19:16:05:3a:11:
         7f:21:c6:c8:7f:06:67:fd:70:1e:b3:d6:10:05:1f:38:db:e4:
         50:0e:f2:b9:12:95:e6:8d:85:04:49:40:48:5f:67:79:68:74:
         88:d1:ea:ae:e9:9b:99:c3:f8:e1:6b:76:2e:fe:39:f2:19:e4:
         41:e8:fe:6e:a8:98:95:51:1d:b3:33:ca:31:89:a0:68:a9:bb:
         ad:83:80:2e:0d:64:ca:5f:74:5f:b9:b8:bb:b6:ba:75:3a:99:
         6e:de:9c:96:0a:38:91:93:d5:70:a2:58:92:c1:22:f1:6c:da:
         c9:37:3c:42:49:4e:26:a3:34:9a:f9:ac:72:c4:39:90:4b:ba:
         5a:c9:a5:64:b0:a9:66:26:d1:51:ca:b6:b6:7c:73:9a:a3:02:
         2f:46:66:c9:cf:eb:3f:48:80:95:32:be:f4:b2:3a:32:39:5b:
         d4:5c:4b:1f:4e:81:00:e0:44:e8:99:41:0c:fd:83:b4:6f:fe:
         0b:96:32:78:71:6b:49:4d:8b:36:30:38:63:a9:49:14:95:a3:
         5d:82:ee:7c:eb:b0:c9:e0:aa:56:fb:35:c9:9b:75:6a:18:7c:
         36:ca:93:88:9b:bb:17:c0:69:32:9a:11:0a:64:89:4b:13:98:
         2a:e1:05:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYnUTZXeCZ2Kbx86tS8UZbZsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyYzFkNDI4Y2RlZTFlYjNmZmJmNmRmMjMxOGY5OTU0ZGQ4
ODVmZjAwHhcNMjMwODA4MDg0MDAxWhcNMjMwODA5MDg0MDAxWjAzMTEwLwYDVQQD
EyhjMjY2MjE1MWM3MjZmMjlhNzU5OWQ3YjZjOTBjZjAwNWVkYTIzNzdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0lxDUKFUaO/3o4OUxoMLu7K+vLOF
nUQBA7IgQT+MWytA9bDN786b6PX6Ss/Utnp2TXNB6E6ZHxM7/v8Z8alpVOBJfeqE
WEDgef5uHl2oJujgnT9pyQ2dg7PAvmkzfpOi0v2/pIbrWonm+Go6SUR8sCiYb95O
ZGcwyFU4/37qf3ISFgGRohPHv96bXYMJLY7PV3uiTDfx5og9oSSN8N6tp1jym46h
Wue0NPQTo5vwmrufSubzGHfmk7EoUcKO8VvS8DeeTZ5A186cikzdD/IKApZVpGDs
ZcvAYE6AKxyVjyNE1REA+TLT9zcYaFnqJepOaPBRCesnEr9+NvqEsEKREwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMJmIVHHJvKadZnXtskM8AXtojd6MB8GA1UdIwQY
MBaAFLLB1CjN7h6z/79t8jGPmVTdiF/wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3NIVUtNM3VIclBfdjIzeU1ZLVpWTjJJWF9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8wNjU4ZjQtYWUyMS00MGNhLWEzZGMt
YzIzMDUxOTQ4MmUzLzEvc3NIVUtNM3VIclBfdjIzeU1ZLVpWTjJJWF9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi8wNjU4ZjQtYWUyMS00MGNhLWEzZGMtYzIzMDUxOTQ4MmUz
LzEvc3NIVUtNM3VIclBfdjIzeU1ZLVpWTjJJWF9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF5lEJQOd
kq678HvkbxkWBToRfyHGyH8GZ/1wHrPWEAUfONvkUA7yuRKV5o2FBElASF9neWh0
iNHqrumbmcP44Wt2Lv458hnkQej+bqiYlVEdszPKMYmgaKm7rYOALg1kyl90X7m4
u7a6dTqZbt6clgo4kZPVcKJYksEi8WzayTc8QklOJqM0mvmscsQ5kEu6WsmlZLCp
ZibRUcq2tnxzmqMCL0Zmyc/rP0iAlTK+9LI6Mjlb1FxLH06BAOBE6JlBDP2DtG/+
C5YyeHFrSU2LNjA4Y6lJFJWjXYLufOuwyeCqVvs1yZt1ahh8NsqTiJu7F8BpMpoR
CmSJSxOYKuEFMg==
-----END CERTIFICATE-----