Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/59ab25-6ba2-4da0-aaca-a1947e12d3d2/1/zpWIVcbrN4ynH4_LOnzy2zQ1zZ8.mft
File:                     zpWIVcbrN4ynH4_LOnzy2zQ1zZ8.mft (raw, json)
Hash identifier:          eFY2tzj2dohXZEujuSJDXMDp9E+KnDJ58eAT+6WDx0c=
Subject key identifier:   61:5C:81:49:2F:3F:B5:83:57:92:40:B0:D9:56:72:90:ED:49:FC:B9
Authority key identifier: CE:95:88:55:C6:EB:37:8C:A7:1F:8F:CB:3A:7C:F2:DB:34:35:CD:9F
Certificate issuer:       /CN=ce958855c6eb378ca71f8fcb3a7cf2db3435cd9f
Certificate serial:       095A63AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zpWIVcbrN4ynH4_LOnzy2zQ1zZ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/59ab25-6ba2-4da0-aaca-a1947e12d3d2/1/zpWIVcbrN4ynH4_LOnzy2zQ1zZ8.mft
Manifest number:          08DE
Signing time:             Wed 06 Apr 2022 01:12:24 +0000
Manifest this update:     Wed 06 Apr 2022 01:12:24 +0000
Manifest next update:     Thu 07 Apr 2022 01:12:24 +0000
Files and hashes:         1: 04lMqZnMV6FJQ94xcVq3-Q7rUb0.roa (hash: pS8lYIbl3S83v5x+MvQVpi6eEHQz4v1RWL6cFI7l048=)
                          2: zpWIVcbrN4ynH4_LOnzy2zQ1zZ8.crl (hash: W5eP5Kv8M/+YgUa6CyYANID2wcx6YVrfvJiYnXon1kk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 156918699 (0x95a63ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce958855c6eb378ca71f8fcb3a7cf2db3435cd9f
        Validity
            Not Before: Apr  6 01:12:24 2022 GMT
            Not After : Apr  7 01:12:24 2022 GMT
        Subject: CN=615c81492f3fb583579240b0d9567290ed49fcb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e0:38:00:f9:a8:60:8c:60:b4:2f:4c:e5:68:
                    15:31:13:8a:6b:fc:31:ac:7b:8c:19:ba:c4:4e:dd:
                    b2:89:a2:38:dd:7c:05:80:65:ec:34:d7:22:7f:ac:
                    82:a9:23:c1:f2:d4:51:4e:97:e9:a0:c9:1e:5f:50:
                    ad:4e:6d:be:29:54:ef:fd:99:68:2b:60:4f:fa:8b:
                    bf:19:c5:e5:bd:08:36:73:47:26:20:d8:c5:5b:42:
                    d5:e4:8c:ea:72:e0:dd:a1:f2:b4:a9:2a:88:b1:84:
                    48:5f:1a:68:0c:a3:9d:1f:11:bc:0d:fc:0c:f9:58:
                    ba:eb:de:8d:7c:9e:d0:74:4f:51:6d:16:19:27:52:
                    33:b3:33:f1:d4:ff:20:8e:6b:02:9b:3f:aa:71:7e:
                    fa:df:08:45:80:6f:ec:aa:3c:dd:13:b6:c3:aa:45:
                    b5:da:55:ba:1d:38:90:f7:28:e6:a8:e5:51:7c:02:
                    44:bf:1c:99:a9:95:bc:1f:16:07:b4:60:97:61:f0:
                    2c:2e:b9:ae:1d:57:ed:4a:a1:3f:cf:85:bf:9c:57:
                    a9:71:e3:93:44:e4:d4:f0:0b:dd:63:5c:dd:c9:5e:
                    a9:01:74:59:00:68:8d:e5:69:f9:3f:7a:c3:d7:ba:
                    db:e8:e9:e6:3a:18:52:10:34:e8:32:09:f2:7d:46:
                    c7:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:5C:81:49:2F:3F:B5:83:57:92:40:B0:D9:56:72:90:ED:49:FC:B9
            X509v3 Authority Key Identifier:
                keyid:CE:95:88:55:C6:EB:37:8C:A7:1F:8F:CB:3A:7C:F2:DB:34:35:CD:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpWIVcbrN4ynH4_LOnzy2zQ1zZ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/59ab25-6ba2-4da0-aaca-a1947e12d3d2/1/zpWIVcbrN4ynH4_LOnzy2zQ1zZ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/59ab25-6ba2-4da0-aaca-a1947e12d3d2/1/zpWIVcbrN4ynH4_LOnzy2zQ1zZ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:96:9a:80:38:77:8c:ed:5b:28:07:48:a1:00:63:fb:7d:a6:
         7d:21:19:d9:1e:ff:af:be:dc:a9:52:52:1f:69:97:c7:20:76:
         83:ed:16:f3:3a:80:45:57:6b:02:df:64:58:6b:7a:8d:15:4a:
         ff:a4:36:66:6d:1a:c0:0e:d3:a3:ea:4e:00:29:58:b1:73:ff:
         b2:d3:1f:30:38:44:ce:4b:50:ea:86:57:9a:0c:9d:9b:b9:bc:
         0c:eb:60:d1:b1:8c:e3:86:c1:6c:a3:c4:fc:f5:fd:4c:9a:ba:
         04:19:aa:a0:77:90:b7:e6:93:fc:d0:1f:ef:4f:4f:0c:78:80:
         1f:ad:6d:a7:8e:64:e4:37:0f:e2:ad:3f:0a:ae:34:20:66:8e:
         20:ee:ce:42:2e:1b:0c:a3:05:a2:ad:c2:c6:c2:81:1f:b3:00:
         a9:55:67:95:83:f8:65:1f:b1:3b:d6:44:4c:50:86:c0:17:dc:
         ff:c3:9c:28:b9:43:ed:78:52:83:5c:e9:2a:1f:1d:73:36:11:
         5a:3b:35:5f:68:6a:bd:e8:f6:2e:42:f7:8b:9b:1b:0d:d7:22:
         ad:8f:5d:dd:ce:fa:93:cf:73:ba:2f:7b:a1:f2:61:53:54:d1:
         2d:a1:5a:01:f8:1b:41:c7:cb:80:88:42:c1:4b:0b:d9:a6:f5:
         da:ba:f6:d2
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgIECVpjqzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
ZTk1ODg1NWM2ZWIzNzhjYTcxZjhmY2IzYTdjZjJkYjM0MzVjZDlmMB4XDTIyMDQw
NjAxMTIyNFoXDTIyMDQwNzAxMTIyNFowMzExMC8GA1UEAxMoNjE1YzgxNDkyZjNm
YjU4MzU3OTI0MGIwZDk1NjcyOTBlZDQ5ZmNiOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKrgOAD5qGCMYLQvTOVoFTETimv8Max7jBm6xE7dsomiON18
BYBl7DTXIn+sgqkjwfLUUU6X6aDJHl9QrU5tvilU7/2ZaCtgT/qLvxnF5b0INnNH
JiDYxVtC1eSM6nLg3aHytKkqiLGESF8aaAyjnR8RvA38DPlYuuvejXye0HRPUW0W
GSdSM7Mz8dT/II5rAps/qnF++t8IRYBv7Ko83RO2w6pFtdpVuh04kPco5qjlUXwC
RL8cmamVvB8WB7Rgl2HwLC65rh1X7UqhP8+Fv5xXqXHjk0Tk1PAL3WNc3cleqQF0
WQBojeVp+T96w9e62+jp5joYUhA06DIJ8n1Gx18CAwEAAaOCAiIwggIeMB0GA1Ud
DgQWBBRhXIFJLz+1g1eSQLDZVnKQ7Un8uTAfBgNVHSMEGDAWgBTOlYhVxus3jKcf
j8s6fPLbNDXNnzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3pwV0lWY2JyTjR5bkg0X0xPbnp5MnpRMXpaOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGYvNTlhYjI1LTZiYTItNGRhMC1hYWNhLWExOTQ3ZTEyZDNkMi8x
L3pwV0lWY2JyTjR5bkg0X0xPbnp5MnpRMXpaOC5tZnQwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGYv
NTlhYjI1LTZiYTItNGRhMC1hYWNhLWExOTQ3ZTEyZDNkMi8xL3pwV0lWY2JyTjR5
bkg0X0xPbnp5MnpRMXpaOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/
BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAGGWmoA4d4ztWygHSKEAY/t9pn0h
Gdke/6++3KlSUh9pl8cgdoPtFvM6gEVXawLfZFhreo0VSv+kNmZtGsAO06PqTgAp
WLFz/7LTHzA4RM5LUOqGV5oMnZu5vAzrYNGxjOOGwWyjxPz1/UyaugQZqqB3kLfm
k/zQH+9PTwx4gB+tbaeOZOQ3D+KtPwquNCBmjiDuzkIuGwyjBaKtwsbCgR+zAKlV
Z5WD+GUfsTvWRExQhsAX3P/DnCi5Q+14UoNc6SofHXM2EVo7NV9oar3o9i5C94ub
Gw3XIq2PXd3O+pPPc7ove6HyYVNU0S2hWgH4G0HHy4CIQsFLC9mm9dq69tI=
-----END CERTIFICATE-----