Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/87d9d0-a580-40b4-9a4b-669fc1e840f8/1/Ztp-hWdrlum6aVNGDvUoCZUih-I.mft
File:                     Ztp-hWdrlum6aVNGDvUoCZUih-I.mft (raw, json)
Hash identifier:          7iingCf3Lxr2TEorUMVKfdH3Vew0yufkrK2Tr2y6Tsk=
Subject key identifier:   34:A1:47:59:7E:8C:A5:ED:4C:C1:EA:BB:B3:7A:BB:A8:4E:1D:2C:86
Authority key identifier: 66:DA:7E:85:67:6B:96:E9:BA:69:53:46:0E:F5:28:09:95:22:87:E2
Certificate issuer:       /CN=66da7e85676b96e9ba6953460ef52809952287e2
Certificate serial:       018EEEB938243BA0D41E2EB90CA80CC1650D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ztp-hWdrlum6aVNGDvUoCZUih-I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/87d9d0-a580-40b4-9a4b-669fc1e840f8/1/Ztp-hWdrlum6aVNGDvUoCZUih-I.mft
Manifest number:          08B7
Signing time:             Thu 18 Apr 2024 01:01:39 +0000
Manifest this update:     Thu 18 Apr 2024 01:01:39 +0000
Manifest next update:     Fri 19 Apr 2024 01:01:39 +0000
Files and hashes:         1: Ztp-hWdrlum6aVNGDvUoCZUih-I.crl (hash: PSFm3N7L8+Z0aZdWYGrgjHMHDaGZJ5LZ7NviAwafUMM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:ee:b9:38:24:3b:a0:d4:1e:2e:b9:0c:a8:0c:c1:65:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66da7e85676b96e9ba6953460ef52809952287e2
        Validity
            Not Before: Apr 18 01:01:39 2024 GMT
            Not After : Apr 19 01:01:39 2024 GMT
        Subject: CN=34a147597e8ca5ed4cc1eabbb37abba84e1d2c86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:72:de:16:f7:01:a5:67:71:4a:f7:90:df:98:
                    d9:11:82:3a:87:da:62:f1:72:c7:2f:f4:25:a3:53:
                    5e:64:d9:0d:6c:f6:bc:01:3a:43:45:17:c9:a0:76:
                    bb:15:3e:f4:9e:9b:a8:2f:d5:74:c0:f8:7c:cc:54:
                    64:a6:8d:c2:e6:46:ce:69:76:9c:f2:e8:4a:29:0e:
                    24:ef:3c:af:cb:92:bc:ba:fe:02:2e:8d:c7:27:54:
                    33:e6:3c:03:1e:4d:e9:24:66:7a:51:b7:eb:27:f3:
                    8a:fc:bb:d8:ab:50:e3:85:f3:ef:93:b2:35:49:33:
                    e0:2a:33:e2:75:b8:5a:9b:b3:1f:67:b4:04:f6:ec:
                    a8:2f:39:9b:2e:91:f9:ac:2a:28:2a:b7:48:97:f2:
                    dd:37:93:ca:6f:45:81:b0:05:5c:d6:a4:cb:7b:79:
                    3c:fb:64:07:b0:f9:6d:ee:b9:43:18:2f:4c:4f:e2:
                    55:e5:a0:af:c8:ec:88:05:ea:a4:42:15:04:c9:40:
                    c0:7d:ce:1b:2e:30:61:30:21:70:01:0f:a6:f3:ff:
                    81:f6:5c:87:fd:d4:10:05:f3:b6:fd:1d:21:a0:a5:
                    ea:e1:68:fd:fb:80:d9:f0:e7:54:65:b8:f9:6b:fc:
                    b2:b3:df:58:52:03:25:cf:a0:59:6d:0c:0c:25:c7:
                    60:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:A1:47:59:7E:8C:A5:ED:4C:C1:EA:BB:B3:7A:BB:A8:4E:1D:2C:86
            X509v3 Authority Key Identifier:
                keyid:66:DA:7E:85:67:6B:96:E9:BA:69:53:46:0E:F5:28:09:95:22:87:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ztp-hWdrlum6aVNGDvUoCZUih-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/87d9d0-a580-40b4-9a4b-669fc1e840f8/1/Ztp-hWdrlum6aVNGDvUoCZUih-I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/87d9d0-a580-40b4-9a4b-669fc1e840f8/1/Ztp-hWdrlum6aVNGDvUoCZUih-I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:38:09:7e:5b:62:c2:6d:d7:68:f8:59:a9:4c:95:7e:c5:b9:
         25:bd:a5:60:5b:a8:0e:3c:b1:de:28:27:64:ef:d5:d7:93:cf:
         c6:11:4f:0b:7a:28:6d:17:ef:11:e1:89:25:ec:a8:31:2d:b9:
         ab:8c:28:d0:d2:24:57:d8:5f:ad:ef:72:fa:5d:39:16:78:95:
         89:e0:6b:62:36:07:1d:5f:34:3a:c6:4f:b6:f5:37:1a:f4:fd:
         a2:51:1e:bf:1f:01:97:72:c1:5d:50:63:fb:1f:3c:66:b6:53:
         75:e4:03:78:a9:d6:af:da:ca:ab:98:08:e6:75:d9:0f:44:f1:
         fa:e8:1f:90:e4:25:48:27:52:11:20:7e:be:7e:a6:1e:9e:1b:
         c6:c3:a0:0a:56:2a:ba:fc:a4:1f:e0:db:d4:91:8f:a3:09:38:
         93:f4:2b:99:ac:6c:f1:12:26:1c:96:59:3e:61:33:5c:96:f7:
         0b:e4:e1:67:60:72:49:9b:fc:78:91:cd:9b:48:71:e5:15:9a:
         09:68:18:93:83:de:1e:34:c1:9b:5b:f6:6d:91:59:48:b4:ff:
         c9:8d:1c:92:e7:d0:80:3e:b0:fd:31:d5:80:d2:d9:a6:c3:f5:
         8f:25:6d:2b:de:c1:94:52:f8:c8:92:8c:43:d1:97:2c:d1:5e:
         ed:e5:2b:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY7uuTgkO6DUHi65DKgMwWUNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2ZGE3ZTg1Njc2Yjk2ZTliYTY5NTM0NjBlZjUyODA5OTUy
Mjg3ZTIwHhcNMjQwNDE4MDEwMTM5WhcNMjQwNDE5MDEwMTM5WjAzMTEwLwYDVQQD
EygzNGExNDc1OTdlOGNhNWVkNGNjMWVhYmJiMzdhYmJhODRlMWQyYzg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnLeFvcBpWdxSveQ35jZEYI6h9pi
8XLHL/Qlo1NeZNkNbPa8ATpDRRfJoHa7FT70npuoL9V0wPh8zFRkpo3C5kbOaXac
8uhKKQ4k7zyvy5K8uv4CLo3HJ1Qz5jwDHk3pJGZ6UbfrJ/OK/LvYq1DjhfPvk7I1
STPgKjPidbham7MfZ7QE9uyoLzmbLpH5rCooKrdIl/LdN5PKb0WBsAVc1qTLe3k8
+2QHsPlt7rlDGC9MT+JV5aCvyOyIBeqkQhUEyUDAfc4bLjBhMCFwAQ+m8/+B9lyH
/dQQBfO2/R0hoKXq4Wj9+4DZ8OdUZbj5a/yys99YUgMlz6BZbQwMJcdgqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDShR1l+jKXtTMHqu7N6u6hOHSyGMB8GA1UdIwQY
MBaAFGbafoVna5bpumlTRg71KAmVIofiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnRwLWhXZHJsdW02YVZOR0R2VW9DWlVpaC1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi84N2Q5ZDAtYTU4MC00MGI0LTlhNGIt
NjY5ZmMxZTg0MGY4LzEvWnRwLWhXZHJsdW02YVZOR0R2VW9DWlVpaC1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi84N2Q5ZDAtYTU4MC00MGI0LTlhNGItNjY5ZmMxZTg0MGY4
LzEvWnRwLWhXZHJsdW02YVZOR0R2VW9DWlVpaC1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAATgJflti
wm3XaPhZqUyVfsW5Jb2lYFuoDjyx3ignZO/V15PPxhFPC3oobRfvEeGJJeyoMS25
q4wo0NIkV9hfre9y+l05FniVieBrYjYHHV80OsZPtvU3GvT9olEevx8Bl3LBXVBj
+x88ZrZTdeQDeKnWr9rKq5gI5nXZD0Tx+ugfkOQlSCdSESB+vn6mHp4bxsOgClYq
uvykH+Db1JGPowk4k/Qrmaxs8RImHJZZPmEzXJb3C+ThZ2BySZv8eJHNm0hx5RWa
CWgYk4PeHjTBm1v2bZFZSLT/yY0ckufQgD6w/THVgNLZpsP1jyVtK97BlFL4yJKM
Q9GXLNFe7eUrsw==
-----END CERTIFICATE-----