Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/d48808-74e8-449d-8a3d-c1f0f9cbb167/1/0z5Ltp75GJueS7y1_olshLvgLtQ.mft
File:                     0z5Ltp75GJueS7y1_olshLvgLtQ.mft (raw, json)
Hash identifier:          O8Gx7iDjdlRDfQ67kTaKAA34hYAto/9ffoMNpGDOft0=
Subject key identifier:   FB:5E:2E:16:8C:6F:FF:CD:8B:3B:94:4C:A3:1D:61:45:C5:ED:25:51
Authority key identifier: D3:3E:4B:B6:9E:F9:18:9B:9E:4B:BC:B5:FE:89:6C:84:BB:E0:2E:D4
Certificate issuer:       /CN=d33e4bb69ef9189b9e4bbcb5fe896c84bbe02ed4
Certificate serial:       0185156787B8F86EA199CBF48611C86EF6DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0z5Ltp75GJueS7y1_olshLvgLtQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/d48808-74e8-449d-8a3d-c1f0f9cbb167/1/0z5Ltp75GJueS7y1_olshLvgLtQ.mft
Manifest number:          0584
Signing time:             Thu 15 Dec 2022 10:49:44 +0000
Manifest this update:     Thu 15 Dec 2022 10:49:44 +0000
Manifest next update:     Fri 16 Dec 2022 10:49:44 +0000
Files and hashes:         1: 0z5Ltp75GJueS7y1_olshLvgLtQ.crl (hash: i2a6ITEbTebTMD4OW2KxD3+CArd0QL2rX0nt0ftFlag=)
                          2: DqaQ4MdXvN8YyIAVCdEEr5dPPRA.roa (hash: Oc1NQbCLCrMaed6l7uEH/zvxnkjOSzvHsrY2+toKUPM=)
                          3: tf4kaS2iUUkVzKPJPMUuW56vkUY.roa (hash: 8hGkLUx8fxr+mtc92MNgR/siQJnhfZj1LcZQtuLrSHM=)
                          4: yL6N6MCuN20IYdpIYxs4Vfm5wBo.roa (hash: cO4lINLqWDOUNu3VkqWXYGyatrJ7CzFbfvIonJK5aAs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:15:67:87:b8:f8:6e:a1:99:cb:f4:86:11:c8:6e:f6:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d33e4bb69ef9189b9e4bbcb5fe896c84bbe02ed4
        Validity
            Not Before: Dec 15 10:49:44 2022 GMT
            Not After : Dec 16 10:49:44 2022 GMT
        Subject: CN=fb5e2e168c6fffcd8b3b944ca31d6145c5ed2551
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f0:29:f4:53:94:e8:e5:22:02:78:f1:20:16:
                    5b:de:07:a4:43:fe:0f:ab:c3:58:fb:a9:2c:a2:e5:
                    25:09:9f:2a:80:87:5a:45:81:5b:85:d8:c2:79:78:
                    eb:13:c8:0f:66:98:37:16:2c:a9:42:ba:ee:2c:bb:
                    cf:ce:e4:09:93:03:55:d3:fa:8a:93:e2:5f:e2:08:
                    fe:07:a3:82:ec:e3:89:5e:97:3b:49:93:f4:be:85:
                    dc:9c:29:67:98:ef:4c:9e:2e:e8:30:ed:fc:26:5d:
                    78:5b:c8:a1:4b:0d:7b:06:26:4e:b8:f4:39:85:fc:
                    8f:1b:c0:af:a1:dc:c4:5a:c0:88:9b:04:13:ba:ed:
                    fc:15:a9:d5:b5:c7:bb:a2:93:8e:59:9b:3e:4e:62:
                    c1:e3:0d:be:64:61:6f:7e:91:72:07:3f:6b:2b:a1:
                    db:59:2d:3c:2b:7a:a3:1f:d6:c8:fd:0e:cc:22:54:
                    b5:bd:35:fd:dd:f0:9b:a7:d1:35:52:8c:6e:31:43:
                    d7:0b:dc:9d:34:71:87:8b:57:bc:cf:9b:77:de:04:
                    bd:63:50:5d:1e:f0:bf:50:8c:5c:7b:62:2e:98:75:
                    17:ec:87:61:d7:3b:c9:be:8d:fb:00:66:38:b0:f6:
                    b0:50:8d:73:44:4c:75:5a:ac:c5:a0:b6:8e:02:87:
                    86:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:5E:2E:16:8C:6F:FF:CD:8B:3B:94:4C:A3:1D:61:45:C5:ED:25:51
            X509v3 Authority Key Identifier:
                keyid:D3:3E:4B:B6:9E:F9:18:9B:9E:4B:BC:B5:FE:89:6C:84:BB:E0:2E:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0z5Ltp75GJueS7y1_olshLvgLtQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/d48808-74e8-449d-8a3d-c1f0f9cbb167/1/0z5Ltp75GJueS7y1_olshLvgLtQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/d48808-74e8-449d-8a3d-c1f0f9cbb167/1/0z5Ltp75GJueS7y1_olshLvgLtQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:9f:39:96:56:c3:1b:f2:8d:73:52:ae:c4:eb:45:95:da:55:
         49:7f:45:24:da:63:03:94:10:f8:2e:b7:0c:f5:29:fe:3a:f0:
         3d:4e:a4:b5:33:9b:ea:d1:25:dd:e4:89:86:1f:ce:38:a1:e1:
         dc:b8:87:6e:cf:ff:ba:79:73:60:f6:d4:bf:4a:dc:67:64:20:
         ef:12:56:34:8b:7e:a9:bd:c4:13:d4:0f:fb:fb:d5:cd:9f:32:
         c5:f1:53:0d:a7:e3:fd:4e:1f:65:7d:6c:08:8d:18:d6:a6:51:
         eb:64:b7:f3:cb:80:82:bb:35:f9:74:cf:af:5a:a9:6c:98:2a:
         e2:a1:da:ac:95:ba:d4:ec:32:0e:ec:72:58:b1:f4:0b:cb:d8:
         66:77:39:1d:df:51:09:78:1d:23:bb:9c:9b:39:ff:ac:ef:07:
         f1:ae:4a:1b:a8:c6:87:43:2a:55:cc:d6:80:0a:4f:ad:d5:47:
         ec:f6:31:dd:cf:d6:29:c1:7b:42:85:8e:a9:04:9c:40:eb:4f:
         81:7c:dc:4b:93:54:2f:27:4e:34:2f:a0:c2:88:3d:87:97:68:
         d1:bb:0c:bd:a4:c9:65:b8:50:8a:ac:7e:3d:c6:a0:93:36:d3:
         99:15:1d:b4:07:a0:50:8e:98:ea:dc:a7:30:eb:63:b9:77:c5:
         34:af:a9:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYUVZ4e4+G6hmcv0hhHIbvbeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzM2U0YmI2OWVmOTE4OWI5ZTRiYmNiNWZlODk2Yzg0YmJl
MDJlZDQwHhcNMjIxMjE1MTA0OTQ0WhcNMjIxMjE2MTA0OTQ0WjAzMTEwLwYDVQQD
EyhmYjVlMmUxNjhjNmZmZmNkOGIzYjk0NGNhMzFkNjE0NWM1ZWQyNTUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvAp9FOU6OUiAnjxIBZb3gekQ/4P
q8NY+6ksouUlCZ8qgIdaRYFbhdjCeXjrE8gPZpg3FiypQrruLLvPzuQJkwNV0/qK
k+Jf4gj+B6OC7OOJXpc7SZP0voXcnClnmO9Mni7oMO38Jl14W8ihSw17BiZOuPQ5
hfyPG8CvodzEWsCImwQTuu38FanVtce7opOOWZs+TmLB4w2+ZGFvfpFyBz9rK6Hb
WS08K3qjH9bI/Q7MIlS1vTX93fCbp9E1UoxuMUPXC9ydNHGHi1e8z5t33gS9Y1Bd
HvC/UIxce2IumHUX7Idh1zvJvo37AGY4sPawUI1zREx1WqzFoLaOAoeGyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPteLhaMb//NizuUTKMdYUXF7SVRMB8GA1UdIwQY
MBaAFNM+S7ae+Ribnku8tf6JbIS74C7UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHo1THRwNzVHSnVlUzd5MV9vbHNoTHZnTHRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9kNDg4MDgtNzRlOC00NDlkLThhM2Qt
YzFmMGY5Y2JiMTY3LzEvMHo1THRwNzVHSnVlUzd5MV9vbHNoTHZnTHRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9kNDg4MDgtNzRlOC00NDlkLThhM2QtYzFmMGY5Y2JiMTY3
LzEvMHo1THRwNzVHSnVlUzd5MV9vbHNoTHZnTHRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnZ85llbD
G/KNc1KuxOtFldpVSX9FJNpjA5QQ+C63DPUp/jrwPU6ktTOb6tEl3eSJhh/OOKHh
3LiHbs//unlzYPbUv0rcZ2Qg7xJWNIt+qb3EE9QP+/vVzZ8yxfFTDafj/U4fZX1s
CI0Y1qZR62S388uAgrs1+XTPr1qpbJgq4qHarJW61OwyDuxyWLH0C8vYZnc5Hd9R
CXgdI7ucmzn/rO8H8a5KG6jGh0MqVczWgApPrdVH7PYx3c/WKcF7QoWOqQScQOtP
gXzcS5NULydONC+gwog9h5do0bsMvaTJZbhQiqx+PcagkzbTmRUdtAegUI6Y6tyn
MOtjuXfFNK+paA==
-----END CERTIFICATE-----