Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/61e440-62d4-43be-96d3-c529b6a3e71a/1/4JMvqepn25EAvy6pNij6RVfUx5Q.mft
File:                     4JMvqepn25EAvy6pNij6RVfUx5Q.mft (raw, json)
Hash identifier:          G7Mj2DWlkrjauyUkml9qrIAqAMBZWimnS6SAQ13XyG0=
Subject key identifier:   81:A3:32:CE:14:2E:36:19:0C:DA:75:69:A2:56:D7:2C:01:53:06:4E
Authority key identifier: E0:93:2F:A9:EA:67:DB:91:00:BF:2E:A9:36:28:FA:45:57:D4:C7:94
Certificate issuer:       /CN=e0932fa9ea67db9100bf2ea93628fa4557d4c794
Certificate serial:       018C148474A13BDCFDB54B617B5CD11476F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4JMvqepn25EAvy6pNij6RVfUx5Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/61e440-62d4-43be-96d3-c529b6a3e71a/1/4JMvqepn25EAvy6pNij6RVfUx5Q.mft
Manifest number:          0D6E
Signing time:             Tue 28 Nov 2023 06:01:13 +0000
Manifest this update:     Tue 28 Nov 2023 06:01:13 +0000
Manifest next update:     Wed 29 Nov 2023 06:01:13 +0000
Files and hashes:         1: 4JMvqepn25EAvy6pNij6RVfUx5Q.crl (hash: ZIi8nGDpnMrRUvxixrbmYzOVW7Qc6U+VXxW0M981MdI=)
                          2: 5wuhqAmycF5dZ0_PUtIzO6OVoTs.roa (hash: h4yuUUPdtHW0vxfcekeYlbI8uSQquOl74Yq62wbpYRY=)
                          3: vVfd546sPuNt5HAwREz0XRLlbJQ.roa (hash: thRMOMMG20mZv90Wlyr8npSKbZlDwTSe/qe1hsf90YM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:14:84:74:a1:3b:dc:fd:b5:4b:61:7b:5c:d1:14:76:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0932fa9ea67db9100bf2ea93628fa4557d4c794
        Validity
            Not Before: Nov 28 06:01:13 2023 GMT
            Not After : Nov 29 06:01:13 2023 GMT
        Subject: CN=81a332ce142e36190cda7569a256d72c0153064e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:21:8c:cf:72:71:23:33:21:79:ca:e8:75:5f:
                    61:90:fe:cb:ce:de:db:ca:11:8b:9d:23:a0:77:b5:
                    9c:08:6e:6f:d2:d2:c6:42:07:e0:d0:c4:46:8f:0e:
                    fd:24:fc:44:12:30:26:7a:23:fc:ca:28:b7:d2:30:
                    aa:bc:8c:c2:6d:26:d9:79:a7:fb:57:20:a2:01:d2:
                    39:3f:5b:81:92:23:db:51:61:7d:99:e6:8b:fe:ad:
                    25:11:c0:15:13:7c:51:28:db:22:bc:05:f1:64:bc:
                    d1:04:35:5b:3a:fc:40:1e:70:f3:d5:3c:b8:84:d8:
                    ca:05:a5:2c:24:3f:8a:a8:00:e9:6c:6d:d0:5c:2b:
                    8e:9b:76:30:00:54:61:f1:fa:83:b5:12:8f:28:c4:
                    83:3e:3d:a6:84:ec:4e:40:dd:33:46:67:9c:95:a2:
                    50:71:ae:ad:cb:f8:e3:92:39:80:e8:5d:65:3a:7f:
                    39:f2:89:90:b2:7c:3c:be:e2:76:6b:8a:ce:a6:3c:
                    a6:f6:3f:90:ad:f0:44:a9:40:b9:86:7c:4a:21:e3:
                    e4:b3:a9:a4:5f:11:57:0f:32:88:a0:bc:b8:b9:ad:
                    1f:0d:56:78:4b:a6:5f:3e:eb:d2:28:e5:3e:42:f4:
                    30:0d:a8:0e:6c:44:23:6f:c9:f6:b5:a6:25:46:ac:
                    aa:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:A3:32:CE:14:2E:36:19:0C:DA:75:69:A2:56:D7:2C:01:53:06:4E
            X509v3 Authority Key Identifier:
                keyid:E0:93:2F:A9:EA:67:DB:91:00:BF:2E:A9:36:28:FA:45:57:D4:C7:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4JMvqepn25EAvy6pNij6RVfUx5Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/61e440-62d4-43be-96d3-c529b6a3e71a/1/4JMvqepn25EAvy6pNij6RVfUx5Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/61e440-62d4-43be-96d3-c529b6a3e71a/1/4JMvqepn25EAvy6pNij6RVfUx5Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:86:c6:a9:ca:5a:3a:25:b9:83:3f:9e:37:a7:b7:bd:75:37:
         5a:32:84:42:b3:a9:f8:c7:25:96:10:c5:c1:e9:46:c6:28:c4:
         60:0b:00:57:b2:a2:29:20:f5:68:90:b8:2e:9f:97:81:bc:dd:
         85:f0:93:01:9e:90:37:f6:ec:27:6a:d3:74:c3:2a:a3:04:ea:
         ed:82:61:83:11:cb:15:b1:d7:8f:43:58:28:40:f8:f2:9f:75:
         ca:ec:9c:16:86:58:1d:a5:a5:24:ea:4a:0b:bf:83:9d:8c:2e:
         30:8d:e3:bc:74:33:29:09:6c:53:92:6c:2b:b9:c2:53:53:75:
         f7:71:2f:c9:65:6c:17:8c:4a:44:8a:99:48:22:6f:1a:f2:b7:
         11:99:2c:14:73:4e:bf:4f:cc:02:b8:c1:3d:2e:f1:7a:00:80:
         33:d6:f7:64:ff:23:26:38:c9:1d:70:7e:ae:17:51:fd:e2:1b:
         2d:e9:30:29:d1:4c:2a:3d:90:f4:81:6a:9d:46:5f:12:a2:d3:
         c4:27:2a:64:1b:06:66:2c:86:31:3c:d6:d3:04:51:41:59:74:
         d4:5f:92:67:f0:e5:88:71:2a:96:25:77:c6:67:24:ff:de:f2:
         6b:1b:20:1a:65:c1:e8:1a:81:45:5e:9d:b7:5b:20:1b:ce:48:
         e8:3e:2b:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYwUhHShO9z9tUthe1zRFHbyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwOTMyZmE5ZWE2N2RiOTEwMGJmMmVhOTM2MjhmYTQ1NTdk
NGM3OTQwHhcNMjMxMTI4MDYwMTEzWhcNMjMxMTI5MDYwMTEzWjAzMTEwLwYDVQQD
Eyg4MWEzMzJjZTE0MmUzNjE5MGNkYTc1NjlhMjU2ZDcyYzAxNTMwNjRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkiGMz3JxIzMhecrodV9hkP7Lzt7b
yhGLnSOgd7WcCG5v0tLGQgfg0MRGjw79JPxEEjAmeiP8yii30jCqvIzCbSbZeaf7
VyCiAdI5P1uBkiPbUWF9meaL/q0lEcAVE3xRKNsivAXxZLzRBDVbOvxAHnDz1Ty4
hNjKBaUsJD+KqADpbG3QXCuOm3YwAFRh8fqDtRKPKMSDPj2mhOxOQN0zRmeclaJQ
ca6ty/jjkjmA6F1lOn858omQsnw8vuJ2a4rOpjym9j+QrfBEqUC5hnxKIePks6mk
XxFXDzKIoLy4ua0fDVZ4S6ZfPuvSKOU+QvQwDagObEQjb8n2taYlRqyqvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIGjMs4ULjYZDNp1aaJW1ywBUwZOMB8GA1UdIwQY
MBaAFOCTL6nqZ9uRAL8uqTYo+kVX1MeUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEpNdnFlcG4yNUVBdnk2cE5pajZSVmZVeDVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS82MWU0NDAtNjJkNC00M2JlLTk2ZDMt
YzUyOWI2YTNlNzFhLzEvNEpNdnFlcG4yNUVBdnk2cE5pajZSVmZVeDVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS82MWU0NDAtNjJkNC00M2JlLTk2ZDMtYzUyOWI2YTNlNzFh
LzEvNEpNdnFlcG4yNUVBdnk2cE5pajZSVmZVeDVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY4bGqcpa
OiW5gz+eN6e3vXU3WjKEQrOp+McllhDFwelGxijEYAsAV7KiKSD1aJC4Lp+Xgbzd
hfCTAZ6QN/bsJ2rTdMMqowTq7YJhgxHLFbHXj0NYKED48p91yuycFoZYHaWlJOpK
C7+DnYwuMI3jvHQzKQlsU5JsK7nCU1N193EvyWVsF4xKRIqZSCJvGvK3EZksFHNO
v0/MArjBPS7xegCAM9b3ZP8jJjjJHXB+rhdR/eIbLekwKdFMKj2Q9IFqnUZfEqLT
xCcqZBsGZiyGMTzW0wRRQVl01F+SZ/DliHEqliV3xmck/97yaxsgGmXB6BqBRV6d
t1sgG85I6D4rzA==
-----END CERTIFICATE-----