Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/6506b6-49a6-4202-97df-ee6f3116ded4/1/bnSrcLZEkar6JpByt7DM_AVTCSY.mft
File:                     bnSrcLZEkar6JpByt7DM_AVTCSY.mft (raw, json)
Hash identifier:          qGf7XdRHSDxw164IyuHXGFbyJsder6yp8Duu1oVRcps=
Subject key identifier:   4C:5A:8D:E9:4E:7B:C5:71:8F:67:84:C8:49:EF:C8:C1:76:14:91:D0
Authority key identifier: 6E:74:AB:70:B6:44:91:AA:FA:26:90:72:B7:B0:CC:FC:05:53:09:26
Certificate issuer:       /CN=6e74ab70b64491aafa269072b7b0ccfc05530926
Certificate serial:       01855BBB9A4B277A12E5068F2097E04D5BA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bnSrcLZEkar6JpByt7DM_AVTCSY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/6506b6-49a6-4202-97df-ee6f3116ded4/1/bnSrcLZEkar6JpByt7DM_AVTCSY.mft
Manifest number:          06C9
Signing time:             Thu 29 Dec 2022 02:34:59 +0000
Manifest this update:     Thu 29 Dec 2022 02:34:59 +0000
Manifest next update:     Fri 30 Dec 2022 02:34:59 +0000
Files and hashes:         1: Scez6hAbCNlw6Z8K0V7stp90oNU.roa (hash: t93ghZ3M0LnvSVCLFw3Skzz5TXCY85a3oKXb42s0+wY=)
                          2: bnSrcLZEkar6JpByt7DM_AVTCSY.crl (hash: V11brQ1lYb/vqKAQk5O1JXKd4eBMK7V5LMwZsBwhXow=)
                          3: gIsopwSh42kJmVy8KqKcN0BtnY0.roa (hash: qUsxmJtnY2buWtajYYOBHhiAC9PTbmURxzhVXYyFR4E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:5b:bb:9a:4b:27:7a:12:e5:06:8f:20:97:e0:4d:5b:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e74ab70b64491aafa269072b7b0ccfc05530926
        Validity
            Not Before: Dec 29 02:34:59 2022 GMT
            Not After : Dec 30 02:34:59 2022 GMT
        Subject: CN=4c5a8de94e7bc5718f6784c849efc8c1761491d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c3:90:b6:69:1b:98:30:80:a0:03:c6:ce:36:
                    7c:cc:46:d8:83:68:d6:7f:87:d1:69:fe:86:2b:3d:
                    36:32:87:bb:96:5e:e2:77:52:21:12:2b:82:96:eb:
                    98:39:5a:dd:9f:de:e9:9d:65:b9:e8:89:de:4a:98:
                    28:32:e8:fd:6d:49:57:4c:8f:b7:39:89:27:ce:05:
                    88:e8:d0:4a:f3:e0:49:9f:c6:1c:91:93:e6:90:cb:
                    79:15:95:43:08:9f:89:08:b0:31:df:42:cf:5e:a8:
                    3e:2b:d8:2d:8e:c6:fa:b0:ff:40:0e:0a:95:98:41:
                    a3:64:94:88:14:23:0a:8b:89:5e:c9:0f:f3:09:e8:
                    0d:f2:dc:eb:d7:ba:7c:c9:26:f4:c9:14:2a:32:fc:
                    8a:e7:7c:4c:c3:d2:6f:30:24:dd:cb:29:69:d7:7b:
                    04:64:cf:ed:0c:82:99:50:17:de:41:d5:54:86:c4:
                    94:a8:f3:6f:71:11:45:37:68:5b:67:09:68:c5:31:
                    14:22:2c:97:8a:0e:47:75:ae:e5:d9:5b:da:9e:8c:
                    06:0d:11:83:62:46:fe:0c:00:a8:e9:fa:0e:53:e4:
                    d6:31:66:0a:b3:1d:82:e6:ad:32:bd:09:88:2a:cc:
                    62:8c:59:15:cb:a3:05:d7:aa:dc:a2:b3:47:53:79:
                    61:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:5A:8D:E9:4E:7B:C5:71:8F:67:84:C8:49:EF:C8:C1:76:14:91:D0
            X509v3 Authority Key Identifier:
                keyid:6E:74:AB:70:B6:44:91:AA:FA:26:90:72:B7:B0:CC:FC:05:53:09:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bnSrcLZEkar6JpByt7DM_AVTCSY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6506b6-49a6-4202-97df-ee6f3116ded4/1/bnSrcLZEkar6JpByt7DM_AVTCSY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6506b6-49a6-4202-97df-ee6f3116ded4/1/bnSrcLZEkar6JpByt7DM_AVTCSY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:e7:eb:21:1e:64:2e:5b:08:30:b0:57:2e:db:59:c1:92:f1:
         0f:f8:67:7c:dd:64:b6:11:d6:9b:b8:49:26:80:5f:e1:81:2a:
         fb:fc:47:d1:90:74:a0:9c:02:95:86:60:17:02:0b:b8:61:84:
         3c:b4:e6:fb:68:85:56:76:c2:85:fd:2f:32:9f:36:10:d7:1d:
         f6:87:3d:3a:ac:a7:76:e3:5c:18:97:22:5a:f5:6e:06:8b:58:
         c0:fa:1e:12:7e:34:d8:fa:87:44:9b:da:94:25:cf:59:b1:d4:
         33:db:ae:dc:66:89:7e:86:09:86:d1:97:0b:f5:eb:48:ed:c2:
         f4:31:47:55:ea:10:d2:40:eb:60:fc:b4:c4:d4:a5:0a:e6:71:
         50:2e:c3:a0:2e:30:e2:e9:e7:57:38:77:a6:58:05:af:a5:fc:
         b2:da:ad:0d:0d:6d:2c:40:70:e4:92:17:9c:f8:d1:7e:70:6d:
         6e:ab:7a:b9:dc:d8:fa:dd:44:90:5c:46:90:a7:df:3c:31:c1:
         fb:ad:e0:ff:c7:ab:df:83:ca:37:42:d9:07:59:c9:89:28:e9:
         e5:30:90:2f:2d:4a:1a:3a:03:0b:0c:cc:7f:82:ba:03:d9:48:
         2a:91:bf:2b:b2:15:f5:30:53:7a:43:a7:69:6d:42:9b:56:63:
         2c:5b:5e:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYVbu5pLJ3oS5QaPIJfgTVulMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlNzRhYjcwYjY0NDkxYWFmYTI2OTA3MmI3YjBjY2ZjMDU1
MzA5MjYwHhcNMjIxMjI5MDIzNDU5WhcNMjIxMjMwMDIzNDU5WjAzMTEwLwYDVQQD
Eyg0YzVhOGRlOTRlN2JjNTcxOGY2Nzg0Yzg0OWVmYzhjMTc2MTQ5MWQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcOQtmkbmDCAoAPGzjZ8zEbYg2jW
f4fRaf6GKz02Moe7ll7id1IhEiuCluuYOVrdn97pnWW56IneSpgoMuj9bUlXTI+3
OYknzgWI6NBK8+BJn8YckZPmkMt5FZVDCJ+JCLAx30LPXqg+K9gtjsb6sP9ADgqV
mEGjZJSIFCMKi4leyQ/zCegN8tzr17p8ySb0yRQqMvyK53xMw9JvMCTdyylp13sE
ZM/tDIKZUBfeQdVUhsSUqPNvcRFFN2hbZwloxTEUIiyXig5Hda7l2VvanowGDRGD
Ykb+DACo6foOU+TWMWYKsx2C5q0yvQmIKsxijFkVy6MF16rcorNHU3lhvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFExajelOe8Vxj2eEyEnvyMF2FJHQMB8GA1UdIwQY
MBaAFG50q3C2RJGq+iaQcrewzPwFUwkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm5TcmNMWkVrYXI2SnBCeXQ3RE1fQVZUQ1NZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi82NTA2YjYtNDlhNi00MjAyLTk3ZGYt
ZWU2ZjMxMTZkZWQ0LzEvYm5TcmNMWkVrYXI2SnBCeXQ3RE1fQVZUQ1NZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi82NTA2YjYtNDlhNi00MjAyLTk3ZGYtZWU2ZjMxMTZkZWQ0
LzEvYm5TcmNMWkVrYXI2SnBCeXQ3RE1fQVZUQ1NZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP+frIR5k
LlsIMLBXLttZwZLxD/hnfN1kthHWm7hJJoBf4YEq+/xH0ZB0oJwClYZgFwILuGGE
PLTm+2iFVnbChf0vMp82ENcd9oc9OqynduNcGJciWvVuBotYwPoeEn402PqHRJva
lCXPWbHUM9uu3GaJfoYJhtGXC/XrSO3C9DFHVeoQ0kDrYPy0xNSlCuZxUC7DoC4w
4unnVzh3plgFr6X8stqtDQ1tLEBw5JIXnPjRfnBtbqt6udzY+t1EkFxGkKffPDHB
+63g/8er34PKN0LZB1nJiSjp5TCQLy1KGjoDCwzMf4K6A9lIKpG/K7IV9TBTekOn
aW1Cm1ZjLFteAw==
-----END CERTIFICATE-----