Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/850961-dcfc-456c-bba6-2698f0601bb9/1/1hetNe8nDvsUJxNX86Z16HVmvzo.mft
File:                     1hetNe8nDvsUJxNX86Z16HVmvzo.mft (raw, json)
Hash identifier:          BIPTU+xtZpTuHmo1paNcbRVA/prwWMPX6dqdsydja8A=
Subject key identifier:   3C:62:45:02:59:24:74:A5:26:24:94:FB:7A:09:21:C9:A6:26:CA:80
Authority key identifier: D6:17:AD:35:EF:27:0E:FB:14:27:13:57:F3:A6:75:E8:75:66:BF:3A
Certificate issuer:       /CN=d617ad35ef270efb14271357f3a675e87566bf3a
Certificate serial:       018C5DE653C9DA344EEF4FBE2B6F48A90480
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1hetNe8nDvsUJxNX86Z16HVmvzo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/850961-dcfc-456c-bba6-2698f0601bb9/1/1hetNe8nDvsUJxNX86Z16HVmvzo.mft
Manifest number:          0FD4
Signing time:             Tue 12 Dec 2023 12:00:24 +0000
Manifest this update:     Tue 12 Dec 2023 12:00:24 +0000
Manifest next update:     Wed 13 Dec 2023 12:00:24 +0000
Files and hashes:         1: 1hetNe8nDvsUJxNX86Z16HVmvzo.crl (hash: JRaQ5eVFkqyayJ/hdRKA1ZTEe2lD8VBXyLmy+m8sfsA=)
                          2: Op007JdEeu_2-1FDksN4OEg6SQk.roa (hash: vD2GgpwaUVuehpnnbVu4DmRXEBMYiBOkB1I9LOwTmug=)
                          3: u3EpVLaGhR_nJJlMRPiPfNxk5sI.roa (hash: ZkXQ0Wdq2iiLY+7JQI2P8Pc+rjJGUZ1vEV2ckt7zc28=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:5d:e6:53:c9:da:34:4e:ef:4f:be:2b:6f:48:a9:04:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d617ad35ef270efb14271357f3a675e87566bf3a
        Validity
            Not Before: Dec 12 12:00:24 2023 GMT
            Not After : Dec 13 12:00:24 2023 GMT
        Subject: CN=3c624502592474a5262494fb7a0921c9a626ca80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:11:85:40:3b:1a:57:c0:68:1e:b5:43:3f:f3:
                    1a:f9:7a:21:d4:27:2b:9c:6d:df:29:86:28:39:b1:
                    8f:58:3c:9c:04:df:67:76:18:17:4f:90:71:c8:9a:
                    04:b0:1d:63:b6:3c:92:46:09:3e:4c:df:f2:a6:6b:
                    55:83:b9:ba:13:3a:db:65:d2:26:49:b9:72:ae:a7:
                    32:33:db:b5:de:5c:c6:db:4a:d4:62:f3:ee:6c:44:
                    94:32:c0:1d:45:77:a6:7e:c4:cc:3e:21:7f:b5:27:
                    b8:56:5e:fb:b3:6f:15:0a:de:a6:9d:e0:1b:0a:8d:
                    54:f5:7a:7e:83:7d:4c:61:33:8d:d3:fd:5c:26:d3:
                    2a:02:f8:88:31:2b:12:ad:ee:3e:8f:0d:e0:97:ef:
                    32:ce:0d:74:4d:e1:b4:db:66:c2:c5:e8:f6:6d:cb:
                    d7:2e:f8:43:cb:ac:49:f0:0d:51:9b:38:6e:bc:0f:
                    bf:46:1f:1a:5b:51:57:61:3f:a5:24:83:12:df:50:
                    e9:ef:a2:9b:a4:a1:2d:19:89:7f:90:fc:04:25:a4:
                    d5:20:f8:bf:33:f2:c8:29:8a:bc:da:ef:5d:bb:63:
                    c3:47:4a:e4:9d:7b:da:7b:bc:4c:04:cd:c3:d2:35:
                    db:0d:f3:78:ee:36:50:45:66:d7:13:b6:84:4a:e4:
                    bd:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:62:45:02:59:24:74:A5:26:24:94:FB:7A:09:21:C9:A6:26:CA:80
            X509v3 Authority Key Identifier:
                keyid:D6:17:AD:35:EF:27:0E:FB:14:27:13:57:F3:A6:75:E8:75:66:BF:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hetNe8nDvsUJxNX86Z16HVmvzo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/850961-dcfc-456c-bba6-2698f0601bb9/1/1hetNe8nDvsUJxNX86Z16HVmvzo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/850961-dcfc-456c-bba6-2698f0601bb9/1/1hetNe8nDvsUJxNX86Z16HVmvzo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:f3:84:69:61:53:04:93:d8:85:b3:9b:33:c5:79:78:5f:57:
         ea:49:00:81:00:5f:0c:07:30:93:8b:12:4a:ab:27:d2:9b:d9:
         25:34:86:c9:46:f5:e5:92:44:77:47:9b:0e:44:10:66:f7:da:
         e2:7d:8d:3f:65:29:63:bf:50:27:d2:0d:43:e0:1f:37:5d:c8:
         8a:f5:62:96:df:3d:b5:bc:d9:47:5d:9c:68:d2:ad:3f:60:25:
         68:be:ad:a1:c4:b7:46:b9:db:f0:51:db:de:41:96:da:76:aa:
         be:eb:74:b8:ac:75:25:a6:f8:53:ad:5a:62:5b:26:2b:b7:0e:
         e0:d4:95:3a:41:fc:b3:f2:4a:fc:ca:99:3b:bf:68:98:2a:26:
         36:93:8e:d0:6a:3f:3a:5d:0a:79:46:a3:3b:db:ed:69:cf:90:
         95:b7:6e:da:b3:1d:bd:5e:ae:b8:28:4e:02:0f:aa:f0:76:35:
         f1:f6:57:81:f2:bf:fe:e7:5c:0a:90:da:c6:4e:31:d1:82:1a:
         58:1b:d9:d2:e0:16:cf:88:f5:14:36:e1:bb:a2:ed:37:76:e7:
         6d:59:c8:5d:11:09:27:36:18:a1:6b:2b:e8:6a:6f:1d:5c:ae:
         0c:9b:01:14:b2:c2:06:c7:33:83:9e:3a:c2:3a:17:27:e1:a0:
         92:1c:0a:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYxd5lPJ2jRO70++K29IqQSAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2MTdhZDM1ZWYyNzBlZmIxNDI3MTM1N2YzYTY3NWU4NzU2
NmJmM2EwHhcNMjMxMjEyMTIwMDI0WhcNMjMxMjEzMTIwMDI0WjAzMTEwLwYDVQQD
EygzYzYyNDUwMjU5MjQ3NGE1MjYyNDk0ZmI3YTA5MjFjOWE2MjZjYTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRGFQDsaV8BoHrVDP/Ma+Xoh1Ccr
nG3fKYYoObGPWDycBN9ndhgXT5BxyJoEsB1jtjySRgk+TN/ypmtVg7m6EzrbZdIm
SblyrqcyM9u13lzG20rUYvPubESUMsAdRXemfsTMPiF/tSe4Vl77s28VCt6mneAb
Co1U9Xp+g31MYTON0/1cJtMqAviIMSsSre4+jw3gl+8yzg10TeG022bCxej2bcvX
LvhDy6xJ8A1RmzhuvA+/Rh8aW1FXYT+lJIMS31Dp76KbpKEtGYl/kPwEJaTVIPi/
M/LIKYq82u9du2PDR0rknXvae7xMBM3D0jXbDfN47jZQRWbXE7aESuS9pQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDxiRQJZJHSlJiSU+3oJIcmmJsqAMB8GA1UdIwQY
MBaAFNYXrTXvJw77FCcTV/Omdeh1Zr86MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWhldE5lOG5EdnNVSnhOWDg2WjE2SFZtdnpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi84NTA5NjEtZGNmYy00NTZjLWJiYTYt
MjY5OGYwNjAxYmI5LzEvMWhldE5lOG5EdnNVSnhOWDg2WjE2SFZtdnpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi84NTA5NjEtZGNmYy00NTZjLWJiYTYtMjY5OGYwNjAxYmI5
LzEvMWhldE5lOG5EdnNVSnhOWDg2WjE2SFZtdnpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtPOEaWFT
BJPYhbObM8V5eF9X6kkAgQBfDAcwk4sSSqsn0pvZJTSGyUb15ZJEd0ebDkQQZvfa
4n2NP2UpY79QJ9INQ+AfN13IivVilt89tbzZR12caNKtP2AlaL6tocS3Rrnb8FHb
3kGW2naqvut0uKx1Jab4U61aYlsmK7cO4NSVOkH8s/JK/MqZO79omComNpOO0Go/
Ol0KeUajO9vtac+Qlbdu2rMdvV6uuChOAg+q8HY18fZXgfK//udcCpDaxk4x0YIa
WBvZ0uAWz4j1FDbhu6LtN3bnbVnIXREJJzYYoWsr6GpvHVyuDJsBFLLCBsczg546
wjoXJ+GgkhwKCw==
-----END CERTIFICATE-----