Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/5bda04-a277-4066-95ea-51e1769500d9/1/IGTR3pcoZp9P3K9Mhu917kxHUR0.mft
File:                     IGTR3pcoZp9P3K9Mhu917kxHUR0.mft (raw, json)
Hash identifier:          vEsuCewg1BH+sjbe3dSCP4bRakJHvf73FHeCwYhmR1g=
Subject key identifier:   0E:1F:0D:A3:19:B7:E1:C4:E6:B5:72:39:DE:D8:E4:9B:FE:19:1A:04
Authority key identifier: 20:64:D1:DE:97:28:66:9F:4F:DC:AF:4C:86:EF:75:EE:4C:47:51:1D
Certificate issuer:       /CN=2064d1de9728669f4fdcaf4c86ef75ee4c47511d
Certificate serial:       01852F877C67FC8CA0E8928E08F3C488568F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IGTR3pcoZp9P3K9Mhu917kxHUR0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/5bda04-a277-4066-95ea-51e1769500d9/1/IGTR3pcoZp9P3K9Mhu917kxHUR0.mft
Manifest number:          01
Signing time:             Tue 20 Dec 2022 12:34:46 +0000
Manifest this update:     Tue 20 Dec 2022 12:34:46 +0000
Manifest next update:     Wed 21 Dec 2022 12:34:46 +0000
Files and hashes:         1: IGTR3pcoZp9P3K9Mhu917kxHUR0.crl (hash: SW1HSn13LbREU1h9l8LcwsjnTaqzthvFh/mq7kFwDCk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:2f:87:7c:67:fc:8c:a0:e8:92:8e:08:f3:c4:88:56:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2064d1de9728669f4fdcaf4c86ef75ee4c47511d
        Validity
            Not Before: Dec 20 12:34:46 2022 GMT
            Not After : Dec 21 12:34:46 2022 GMT
        Subject: CN=0e1f0da319b7e1c4e6b57239ded8e49bfe191a04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:03:cf:98:0a:58:63:12:03:cc:26:d3:27:22:
                    dc:a8:41:a4:f8:62:83:b7:fb:3e:50:87:fe:7a:7f:
                    d4:cd:7e:54:a9:14:1a:b6:4a:b6:51:80:ab:ed:68:
                    46:f6:d8:7e:03:d8:9b:a6:86:48:88:7a:3b:33:80:
                    63:1e:a6:b7:00:64:ba:51:41:ed:f9:d6:dc:ca:80:
                    df:a4:6c:32:cd:71:d2:c3:f6:08:d1:37:66:3e:b0:
                    5f:29:eb:b7:91:14:ba:7d:0f:c8:c2:c0:c4:a6:5f:
                    02:13:0b:9c:4b:b8:b5:5a:f9:e2:73:8d:dc:f2:26:
                    d5:9a:3b:14:91:89:93:bf:f6:95:56:d6:fc:ee:b0:
                    a0:40:8b:bc:3f:9e:01:f1:af:cd:48:b1:15:67:f5:
                    20:b1:41:88:89:77:bf:e8:14:17:68:01:94:54:70:
                    2c:e4:08:a0:37:e4:d1:ba:a0:de:41:b1:45:03:c4:
                    aa:7c:cf:cd:1d:3e:7e:09:06:e7:e2:da:af:4e:35:
                    ac:bb:c6:48:51:2c:66:18:e9:2d:9a:94:ad:13:8b:
                    11:07:db:f2:64:f0:58:42:92:e6:b4:2a:02:29:25:
                    c4:a2:b6:a8:3b:dd:24:92:50:81:3c:b9:3e:c0:4b:
                    eb:49:d3:3d:ea:70:c5:c5:68:22:a7:83:a4:21:62:
                    6e:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:1F:0D:A3:19:B7:E1:C4:E6:B5:72:39:DE:D8:E4:9B:FE:19:1A:04
            X509v3 Authority Key Identifier:
                keyid:20:64:D1:DE:97:28:66:9F:4F:DC:AF:4C:86:EF:75:EE:4C:47:51:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IGTR3pcoZp9P3K9Mhu917kxHUR0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5bda04-a277-4066-95ea-51e1769500d9/1/IGTR3pcoZp9P3K9Mhu917kxHUR0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5bda04-a277-4066-95ea-51e1769500d9/1/IGTR3pcoZp9P3K9Mhu917kxHUR0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:f7:9e:07:58:bf:2d:3f:75:d2:b0:c8:ec:f2:86:60:53:ac:
         12:40:d9:57:ea:b8:69:45:f5:23:7b:e0:d8:f6:35:ce:b6:63:
         cd:59:22:a6:44:6e:81:87:56:5a:61:a4:74:7d:f4:da:64:84:
         e1:2d:a2:cf:7f:be:d2:ea:a2:4e:04:e9:db:52:c9:31:25:e2:
         0d:f0:47:5e:7a:2b:3d:92:da:cc:62:90:71:2f:e5:97:92:8a:
         10:53:4c:0a:70:f9:a2:30:84:a6:7d:19:45:10:9a:1a:d6:d0:
         91:4e:5c:8f:2e:83:64:d0:44:cd:b5:b8:1f:c3:ca:15:b7:15:
         a8:1e:2b:31:9f:c0:32:12:c2:4a:b1:a1:aa:fa:e9:63:ae:f5:
         c9:47:da:92:7a:54:c0:28:ab:c1:7b:ed:4f:b1:54:fa:57:61:
         f9:16:9a:c0:4c:4f:2f:0c:5d:0f:91:0b:b7:1d:4e:c3:ac:23:
         44:67:30:cf:f6:40:df:c1:b2:fa:04:e8:0b:bd:cb:b6:a6:ba:
         4d:40:c8:a2:ec:ba:63:76:ff:21:91:73:00:b8:11:3a:39:f3:
         78:c0:a2:f7:e1:46:71:06:49:67:8e:2f:60:73:33:64:dd:30:
         da:23:8c:cb:08:19:b5:41:37:33:cf:dc:ac:0a:9f:ce:a3:93:
         47:ce:69:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYUvh3xn/Iyg6JKOCPPEiFaPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwNjRkMWRlOTcyODY2OWY0ZmRjYWY0Yzg2ZWY3NWVlNGM0
NzUxMWQwHhcNMjIxMjIwMTIzNDQ2WhcNMjIxMjIxMTIzNDQ2WjAzMTEwLwYDVQQD
EygwZTFmMGRhMzE5YjdlMWM0ZTZiNTcyMzlkZWQ4ZTQ5YmZlMTkxYTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogPPmApYYxIDzCbTJyLcqEGk+GKD
t/s+UIf+en/UzX5UqRQatkq2UYCr7WhG9th+A9ibpoZIiHo7M4BjHqa3AGS6UUHt
+dbcyoDfpGwyzXHSw/YI0TdmPrBfKeu3kRS6fQ/IwsDEpl8CEwucS7i1Wvnic43c
8ibVmjsUkYmTv/aVVtb87rCgQIu8P54B8a/NSLEVZ/UgsUGIiXe/6BQXaAGUVHAs
5AigN+TRuqDeQbFFA8SqfM/NHT5+CQbn4tqvTjWsu8ZIUSxmGOktmpStE4sRB9vy
ZPBYQpLmtCoCKSXEoraoO90kklCBPLk+wEvrSdM96nDFxWgip4OkIWJuFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA4fDaMZt+HE5rVyOd7Y5Jv+GRoEMB8GA1UdIwQY
MBaAFCBk0d6XKGafT9yvTIbvde5MR1EdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUdUUjNwY29acDlQM0s5TWh1OTE3a3hIVVIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC81YmRhMDQtYTI3Ny00MDY2LTk1ZWEt
NTFlMTc2OTUwMGQ5LzEvSUdUUjNwY29acDlQM0s5TWh1OTE3a3hIVVIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC81YmRhMDQtYTI3Ny00MDY2LTk1ZWEtNTFlMTc2OTUwMGQ5
LzEvSUdUUjNwY29acDlQM0s5TWh1OTE3a3hIVVIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHfeeB1i/
LT910rDI7PKGYFOsEkDZV+q4aUX1I3vg2PY1zrZjzVkipkRugYdWWmGkdH302mSE
4S2iz3++0uqiTgTp21LJMSXiDfBHXnorPZLazGKQcS/ll5KKEFNMCnD5ojCEpn0Z
RRCaGtbQkU5cjy6DZNBEzbW4H8PKFbcVqB4rMZ/AMhLCSrGhqvrpY671yUfaknpU
wCirwXvtT7FU+ldh+RaawExPLwxdD5ELtx1Ow6wjRGcwz/ZA38Gy+gToC73Ltqa6
TUDIouy6Y3b/IZFzALgROjnzeMCi9+FGcQZJZ44vYHMzZN0w2iOMywgZtUE3M8/c
rAqfzqOTR85p7Q==
-----END CERTIFICATE-----