Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/c40c2f-e148-43e7-a523-6aa3f141c6ee/1/Cj4zzG5DN2rWoRDYUQFt3M54Mjc.mft
File:                     Cj4zzG5DN2rWoRDYUQFt3M54Mjc.mft (raw, json)
Hash identifier:          JpWEuwOC6ccbyUX4w7k0JQnMKO+dXhQ8triV9qb4WqE=
Subject key identifier:   53:7B:3C:90:89:D5:A1:1C:E9:FA:67:44:F9:85:D7:AD:65:56:D1:62
Authority key identifier: 0A:3E:33:CC:6E:43:37:6A:D6:A1:10:D8:51:01:6D:DC:CE:78:32:37
Certificate issuer:       /CN=0a3e33cc6e43376ad6a110d851016ddcce783237
Certificate serial:       018A25CE3D0FAE7C347CB2C9A15D450BCD9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cj4zzG5DN2rWoRDYUQFt3M54Mjc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/c40c2f-e148-43e7-a523-6aa3f141c6ee/1/Cj4zzG5DN2rWoRDYUQFt3M54Mjc.mft
Manifest number:          0869
Signing time:             Thu 24 Aug 2023 04:29:47 +0000
Manifest this update:     Thu 24 Aug 2023 04:29:47 +0000
Manifest next update:     Fri 25 Aug 2023 04:29:47 +0000
Files and hashes:         1: Cj4zzG5DN2rWoRDYUQFt3M54Mjc.crl (hash: VsSGd+scRT2Geua/UPvcU7CwrSrKykbtQ2r24qZcsng=)
                          2: onKNtOaNkub1YvUgqc4db-cDyG8.roa (hash: 8vyNYXMIKcOF8iuFg0A/SjJXHny/yX9HAK+g8Xky/uE=)
                          3: sQxRoNPUuQBSqsCPrvYrPR40Sis.roa (hash: na4eauu7wFIVPxn138DxDmUFDK/cToNgzNNIh+VAawA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:25:ce:3d:0f:ae:7c:34:7c:b2:c9:a1:5d:45:0b:cd:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a3e33cc6e43376ad6a110d851016ddcce783237
        Validity
            Not Before: Aug 24 04:29:47 2023 GMT
            Not After : Aug 25 04:29:47 2023 GMT
        Subject: CN=537b3c9089d5a11ce9fa6744f985d7ad6556d162
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:34:28:87:b4:1f:05:5e:0a:f5:57:0b:90:50:
                    b1:5a:bd:06:63:a7:49:e3:79:3e:67:65:74:7f:09:
                    3e:cc:92:13:e5:52:0b:b7:59:33:06:56:98:ec:fa:
                    35:95:d5:ea:15:e9:f1:ef:50:73:c9:b5:e1:23:6c:
                    c7:63:9e:98:9d:25:b9:1a:cd:ac:2e:2d:49:62:25:
                    90:4d:76:0b:e3:f4:86:0e:8e:37:2e:08:c5:b7:95:
                    b2:af:58:41:d0:6a:46:b9:5e:ea:9f:bd:03:36:a1:
                    9f:7e:d7:de:62:8e:ea:f6:64:10:b5:65:7c:d1:f8:
                    e5:8d:c1:bc:8c:39:ea:82:ef:ba:47:bc:55:c9:53:
                    cc:8e:ef:54:5d:1c:fe:13:a7:9a:24:c0:ce:b5:ae:
                    e2:70:1d:fa:d2:e0:04:80:42:4c:ae:76:cd:48:29:
                    da:62:1b:5c:68:97:7f:26:51:e0:a4:17:23:b5:61:
                    f5:1e:ac:28:1f:64:16:cb:54:59:06:79:79:c3:d2:
                    00:44:34:88:e2:3f:32:d3:e1:09:ae:ab:85:40:b4:
                    6e:52:a9:8a:e2:9e:d4:85:b3:8d:09:18:2c:b6:2a:
                    28:f8:27:73:3b:54:03:15:9f:55:6a:55:bb:eb:9d:
                    a0:68:f3:72:bd:06:bd:4d:5e:01:54:1a:3e:11:6c:
                    b3:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:7B:3C:90:89:D5:A1:1C:E9:FA:67:44:F9:85:D7:AD:65:56:D1:62
            X509v3 Authority Key Identifier:
                keyid:0A:3E:33:CC:6E:43:37:6A:D6:A1:10:D8:51:01:6D:DC:CE:78:32:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cj4zzG5DN2rWoRDYUQFt3M54Mjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c40c2f-e148-43e7-a523-6aa3f141c6ee/1/Cj4zzG5DN2rWoRDYUQFt3M54Mjc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c40c2f-e148-43e7-a523-6aa3f141c6ee/1/Cj4zzG5DN2rWoRDYUQFt3M54Mjc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:ff:77:f0:b6:5a:68:97:4c:85:f2:0d:f5:4d:d6:05:fe:cb:
         08:5b:4b:ab:91:a7:f6:6a:f9:bc:7d:0d:1b:19:54:b2:89:a7:
         33:27:42:96:32:fd:fb:df:2f:ae:fe:15:b0:51:4e:c0:96:89:
         6f:1b:2f:fc:b8:a4:06:8b:0e:cd:aa:38:fd:c6:0d:c9:39:fd:
         b2:b7:54:9a:b4:75:78:21:16:f6:b0:57:4d:6a:23:66:4d:9a:
         f9:6d:56:10:fa:d1:69:61:c4:18:18:a5:61:af:80:08:9b:53:
         bd:ba:f7:a9:61:6d:e5:56:91:5d:f7:2f:d8:b9:8f:23:b4:5d:
         00:d9:8a:a8:95:9c:38:d4:81:a1:b6:a5:8c:54:23:3f:bb:94:
         7e:f3:2d:ca:25:03:5f:0b:96:0d:ab:59:05:c4:1a:a4:96:a3:
         b8:35:ad:02:27:35:3e:0b:76:2e:1d:9b:a0:9c:51:75:b9:2d:
         97:ea:58:d1:fb:21:ee:f0:da:c6:58:30:8f:1c:f7:2f:e8:2f:
         c8:de:06:17:d7:25:54:21:c1:39:6f:03:6e:f6:a5:4e:8d:7c:
         08:4f:c9:36:2b:c1:85:9c:39:91:d2:45:75:64:4e:d1:89:22:
         73:34:a6:f6:d2:a7:68:59:b9:1b:34:ac:8c:49:06:71:fc:cc:
         6d:77:be:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYolzj0Prnw0fLLJoV1FC82bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhM2UzM2NjNmU0MzM3NmFkNmExMTBkODUxMDE2ZGRjY2U3
ODMyMzcwHhcNMjMwODI0MDQyOTQ3WhcNMjMwODI1MDQyOTQ3WjAzMTEwLwYDVQQD
Eyg1MzdiM2M5MDg5ZDVhMTFjZTlmYTY3NDRmOTg1ZDdhZDY1NTZkMTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgzQoh7QfBV4K9VcLkFCxWr0GY6dJ
43k+Z2V0fwk+zJIT5VILt1kzBlaY7Po1ldXqFenx71BzybXhI2zHY56YnSW5Gs2s
Li1JYiWQTXYL4/SGDo43LgjFt5Wyr1hB0GpGuV7qn70DNqGfftfeYo7q9mQQtWV8
0fjljcG8jDnqgu+6R7xVyVPMju9UXRz+E6eaJMDOta7icB360uAEgEJMrnbNSCna
YhtcaJd/JlHgpBcjtWH1HqwoH2QWy1RZBnl5w9IARDSI4j8y0+EJrquFQLRuUqmK
4p7UhbONCRgstioo+CdzO1QDFZ9ValW7652gaPNyvQa9TV4BVBo+EWyz3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFN7PJCJ1aEc6fpnRPmF161lVtFiMB8GA1UdIwQY
MBaAFAo+M8xuQzdq1qEQ2FEBbdzOeDI3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2o0enpHNUROMnJXb1JEWVVRRnQzTTU0TWpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9jNDBjMmYtZTE0OC00M2U3LWE1MjMt
NmFhM2YxNDFjNmVlLzEvQ2o0enpHNUROMnJXb1JEWVVRRnQzTTU0TWpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi9jNDBjMmYtZTE0OC00M2U3LWE1MjMtNmFhM2YxNDFjNmVl
LzEvQ2o0enpHNUROMnJXb1JEWVVRRnQzTTU0TWpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK/938LZa
aJdMhfIN9U3WBf7LCFtLq5Gn9mr5vH0NGxlUsomnMydCljL9+98vrv4VsFFOwJaJ
bxsv/LikBosOzao4/cYNyTn9srdUmrR1eCEW9rBXTWojZk2a+W1WEPrRaWHEGBil
Ya+ACJtTvbr3qWFt5VaRXfcv2LmPI7RdANmKqJWcONSBobaljFQjP7uUfvMtyiUD
XwuWDatZBcQapJajuDWtAic1Pgt2Lh2boJxRdbktl+pY0fsh7vDaxlgwjxz3L+gv
yN4GF9clVCHBOW8DbvalTo18CE/JNivBhZw5kdJFdWRO0YkiczSm9tKnaFm5GzSs
jEkGcfzMbXe+kw==
-----END CERTIFICATE-----