Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7d93b3-7ddf-4d3a-a454-d56471e61c33/1/zEJhiA-C84RxpXF7gAnE-9ot8kI.mft
File:                     zEJhiA-C84RxpXF7gAnE-9ot8kI.mft (raw, json)
Hash identifier:          TW1CoXFYdPpMBludQ93xbP+VWQIGO11uJZPJ+4AO+28=
Subject key identifier:   DB:3A:89:CC:08:72:43:CF:94:7B:9B:3A:6F:FB:CD:03:4A:AB:AB:29
Authority key identifier: CC:42:61:88:0F:82:F3:84:71:A5:71:7B:80:09:C4:FB:DA:2D:F2:42
Certificate issuer:       /CN=cc4261880f82f38471a5717b8009c4fbda2df242
Certificate serial:       018580F61D349608DB0DF9FB3E1C5A21DBC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zEJhiA-C84RxpXF7gAnE-9ot8kI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/7d93b3-7ddf-4d3a-a454-d56471e61c33/1/zEJhiA-C84RxpXF7gAnE-9ot8kI.mft
Manifest number:          0C1C
Signing time:             Thu 05 Jan 2023 08:04:50 +0000
Manifest this update:     Thu 05 Jan 2023 08:04:50 +0000
Manifest next update:     Fri 06 Jan 2023 08:04:50 +0000
Files and hashes:         1: 6GnuPpGQ9HA3NuVqWwToIbIrJUM.roa (hash: Eqcbbo83iJ3nVqtQ0NjMcnFL4S/SSXLvsYJ2q8YPoiw=)
                          2: BC1UkG4QMkw1Ll4wuG83J20xnpU.roa (hash: NI9TjwRhh7PjQRmQFxBvtNuQ2hZjm4ANhXnKiuiony4=)
                          3: uWVGvo6R53X5Pge3KTGiMWikgi4.roa (hash: KOrkC8BZi9jqnS/HjnffDFEC+h91CRCYvZeaT3kSKLE=)
                          4: ub0xfmlkft5EY__B-YAvSPvKG5s.roa (hash: WuCgrCeFvMXnFNHVOhhpX5ZtchwC84S46hpZr7k4OvA=)
                          5: zEJhiA-C84RxpXF7gAnE-9ot8kI.crl (hash: KziaAnu0xqs+5EOY8DEbT8p/PhpqMQfvko/Jm1NIp9o=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:80:f6:1d:34:96:08:db:0d:f9:fb:3e:1c:5a:21:db:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc4261880f82f38471a5717b8009c4fbda2df242
        Validity
            Not Before: Jan  5 08:04:50 2023 GMT
            Not After : Jan  6 08:04:50 2023 GMT
        Subject: CN=db3a89cc087243cf947b9b3a6ffbcd034aabab29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7c:26:d9:15:b5:16:06:bd:38:21:a5:cd:3a:
                    24:52:c2:b6:13:26:23:2b:b3:75:a8:7e:ee:f9:b9:
                    b5:1c:14:27:a1:7b:40:4f:1c:9e:cb:24:16:08:ed:
                    2f:0c:25:98:34:da:bd:7c:db:4f:5f:1c:14:fb:eb:
                    83:67:bd:4a:cf:64:14:4d:f6:f2:ad:49:26:7f:7e:
                    87:ae:40:39:a7:84:9b:dd:6c:0e:42:6f:51:93:01:
                    52:54:f7:9a:a5:7d:3e:f4:59:e0:a6:69:0d:e1:88:
                    79:7c:2d:5d:ff:6b:d5:e6:69:46:c8:4e:0b:52:38:
                    ca:3b:3f:fa:be:94:ce:0b:a5:20:79:89:72:b0:35:
                    e7:c8:81:b3:25:4b:ef:2c:6b:9b:f6:ae:49:b2:48:
                    c2:57:6d:fb:91:ed:98:e7:4c:ef:5f:ce:1f:cf:f9:
                    21:b2:f3:2b:79:87:79:f1:6c:97:22:ac:8f:3c:58:
                    7d:3f:e7:66:1b:28:b9:49:e0:d8:09:a2:89:c4:fb:
                    1d:a0:65:c5:52:08:ec:85:31:a2:90:9b:7c:f7:8b:
                    a2:a8:09:a8:4c:62:89:c4:dc:ef:a4:5d:77:bf:9d:
                    8d:55:c2:b8:1a:eb:d4:60:7c:39:7c:53:08:1e:35:
                    4c:97:b8:f4:eb:60:25:ec:8c:c9:eb:53:16:02:87:
                    e3:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:3A:89:CC:08:72:43:CF:94:7B:9B:3A:6F:FB:CD:03:4A:AB:AB:29
            X509v3 Authority Key Identifier:
                keyid:CC:42:61:88:0F:82:F3:84:71:A5:71:7B:80:09:C4:FB:DA:2D:F2:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEJhiA-C84RxpXF7gAnE-9ot8kI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7d93b3-7ddf-4d3a-a454-d56471e61c33/1/zEJhiA-C84RxpXF7gAnE-9ot8kI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7d93b3-7ddf-4d3a-a454-d56471e61c33/1/zEJhiA-C84RxpXF7gAnE-9ot8kI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:76:3f:5e:23:b8:66:15:ec:98:ad:68:f0:8e:3b:c7:3f:90:
         a7:ba:ce:bb:89:c4:bc:c5:9a:28:11:46:03:c4:d3:90:7c:33:
         40:93:6e:81:82:25:96:9d:e0:58:4b:03:37:36:d4:79:2d:d4:
         9a:4b:07:cc:7d:7b:3a:16:72:1b:a3:f0:58:67:49:e9:5c:35:
         81:8a:96:eb:10:d1:57:91:83:3f:19:f0:58:03:55:21:db:8c:
         38:66:c9:ee:00:b2:ef:02:ac:d3:22:4f:34:05:5b:d8:78:69:
         c0:02:c9:00:cc:8b:6b:68:a4:11:e8:d8:87:61:50:ee:05:85:
         09:00:6d:1c:cc:ec:e7:38:48:fc:94:71:7e:c9:c2:5a:68:2f:
         ed:5a:11:48:ee:6f:c8:f7:b2:a4:e1:76:20:35:d7:70:7b:ea:
         fd:a5:14:4b:30:ab:5d:e8:73:35:06:43:5b:84:64:91:4b:a6:
         9c:9a:47:45:13:61:8c:3b:c4:c2:8d:1d:82:49:bc:54:90:b8:
         0e:3b:ca:fb:a8:5b:0f:2f:b1:ee:87:88:b2:04:03:4e:2a:73:
         2d:71:82:80:58:fd:da:40:87:be:05:cc:42:9c:a7:26:40:5c:
         8a:17:2e:ef:d8:89:9b:8b:b7:0b:af:68:86:28:01:20:6d:fe:
         d2:a2:9a:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----