Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/2697ab-5b41-4963-b9d4-7a3300cd7e92/1/wc8lNzWj_WLOhJKNf_a7VibMiHs.mft
File:                     wc8lNzWj_WLOhJKNf_a7VibMiHs.mft (raw, json)
Hash identifier:          OUCFs12ItkIPe/QUx/ujVax67aJYeu1v+zhQXNpO4Rs=
Subject key identifier:   9A:C5:A5:F3:C1:D7:CD:24:B1:F4:B0:2B:55:4D:33:30:58:60:E6:37
Authority key identifier: C1:CF:25:37:35:A3:FD:62:CE:84:92:8D:7F:F6:BB:56:26:CC:88:7B
Certificate issuer:       /CN=c1cf253735a3fd62ce84928d7ff6bb5626cc887b
Certificate serial:       06600343
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wc8lNzWj_WLOhJKNf_a7VibMiHs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/2697ab-5b41-4963-b9d4-7a3300cd7e92/1/wc8lNzWj_WLOhJKNf_a7VibMiHs.mft
Manifest number:          084A
Signing time:             Tue 22 Mar 2022 07:43:07 +0000
Manifest this update:     Tue 22 Mar 2022 07:43:07 +0000
Manifest next update:     Wed 23 Mar 2022 07:43:07 +0000
Files and hashes:         1: BNKGe-ht2hcSulYhtX_BDOnApKk.roa (hash: MT5SBY5Cr4ceL4nApPXUjKrYW8/LQYB7TfOD6HNXcnQ=)
                          2: _VKATFnrnj02VH_QVGmqJ-1sUjg.roa (hash: 5pE4OAxcSu4FZRd0/6Eu1vmZee+5bKKMTcx8xD0oKOM=)
                          3: fCONQXjUFz4B3PQkudcr95U3X7o.roa (hash: 4sLguvP/mlK/NOvhcBqsUyk+mFzoR6as/nE9feowuEk=)
                          4: nYBo4_7r7h5aXuRibxyIU-FAXxI.roa (hash: Z2scSazuK26qQCMh3m5HXmp20ijWHteBTCMAOcc9XjQ=)
                          5: wc8lNzWj_WLOhJKNf_a7VibMiHs.crl (hash: EY3zPZ5fO31WgEyKe4Io+6CX0iwL8ZPalVEsoZiC11o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 106955587 (0x6600343)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1cf253735a3fd62ce84928d7ff6bb5626cc887b
        Validity
            Not Before: Mar 22 07:43:07 2022 GMT
            Not After : Mar 23 07:43:07 2022 GMT
        Subject: CN=9ac5a5f3c1d7cd24b1f4b02b554d33305860e637
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:9f:16:17:4f:2d:99:01:41:a9:74:67:2e:b9:
                    85:72:3b:88:7e:41:4a:32:56:93:c3:2d:7a:0b:b8:
                    7d:d2:36:95:7d:1c:2c:83:d4:f8:11:1e:eb:ff:e4:
                    7b:9a:23:9a:c9:3c:33:dc:c3:9f:22:bb:4c:fb:27:
                    d1:e1:ff:87:65:05:c5:59:bc:a2:3e:c6:66:98:ae:
                    08:1e:db:08:69:d9:61:f8:f0:c1:7c:ac:82:0c:ad:
                    f6:5c:14:63:97:9f:19:17:39:01:64:11:d6:eb:e0:
                    cb:7a:da:c0:ca:52:e3:7b:97:8a:0b:a5:3f:c1:aa:
                    0b:d5:37:91:6e:fe:3a:56:e0:3a:7d:b7:35:ef:12:
                    07:91:8b:82:6d:3f:82:99:33:26:c0:0e:d7:15:fd:
                    c8:23:9e:45:35:f4:2b:99:60:41:c7:7a:7e:7a:e4:
                    46:59:c7:7f:95:14:ba:c6:ef:0f:6b:e4:06:df:bd:
                    08:99:2f:8a:99:ab:3b:25:e9:9d:e0:48:ea:c5:91:
                    5b:95:85:03:c8:ae:2c:65:af:da:4d:1d:51:45:a8:
                    db:e6:82:25:d3:a1:09:2a:88:dc:ad:29:3e:1f:84:
                    57:ca:1f:5c:dc:d7:e9:96:08:bc:53:24:48:15:5d:
                    f0:35:ef:d1:59:26:68:b3:d5:e8:44:cb:9a:cd:8d:
                    26:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:C5:A5:F3:C1:D7:CD:24:B1:F4:B0:2B:55:4D:33:30:58:60:E6:37
            X509v3 Authority Key Identifier:
                keyid:C1:CF:25:37:35:A3:FD:62:CE:84:92:8D:7F:F6:BB:56:26:CC:88:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wc8lNzWj_WLOhJKNf_a7VibMiHs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/2697ab-5b41-4963-b9d4-7a3300cd7e92/1/wc8lNzWj_WLOhJKNf_a7VibMiHs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/2697ab-5b41-4963-b9d4-7a3300cd7e92/1/wc8lNzWj_WLOhJKNf_a7VibMiHs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:43:86:07:78:8b:85:23:40:69:42:ef:7e:36:90:d8:ef:c9:
         a5:c1:39:ef:38:36:6a:b5:9b:a8:f0:8e:25:a5:c6:02:6a:8b:
         e1:c2:23:3e:a8:36:a3:f2:01:4b:42:5b:2c:fd:05:6a:b8:c4:
         c2:e7:3c:07:28:ad:b4:b0:b3:97:13:cf:31:07:47:e7:17:b3:
         c0:bd:b2:5a:05:21:b0:1b:de:dd:aa:bd:8d:92:04:d3:28:9c:
         2d:ce:73:96:77:f5:4d:3d:4e:b9:02:a1:ea:97:32:c9:a3:84:
         7e:bc:bc:e8:0f:d1:8a:8f:20:fe:ca:e7:75:1b:67:46:02:c6:
         e2:b5:f7:4e:35:42:17:26:48:b7:dd:a0:94:86:ef:49:08:a0:
         b4:91:f0:44:fa:7b:ce:6c:9b:5e:3a:51:09:38:32:5c:eb:d6:
         00:f7:4f:ac:1a:34:76:c4:03:b5:05:37:b5:fa:d6:4b:40:d4:
         32:f2:b8:e1:07:75:5b:ed:ad:ee:cf:66:98:b7:4f:db:d7:24:
         b0:da:3c:a1:a8:cd:28:66:00:75:b2:00:04:4f:c0:b9:3d:8f:
         63:43:b2:cf:ac:dc:0d:72:78:66:f6:ee:f0:c3:f3:26:41:bd:
         ec:bb:03:1b:1e:3f:d0:95:ed:9f:db:fa:c0:69:06:98:dc:63:
         13:09:e9:71
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgIEBmADQzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
MWNmMjUzNzM1YTNmZDYyY2U4NDkyOGQ3ZmY2YmI1NjI2Y2M4ODdiMB4XDTIyMDMy
MjA3NDMwN1oXDTIyMDMyMzA3NDMwN1owMzExMC8GA1UEAxMoOWFjNWE1ZjNjMWQ3
Y2QyNGIxZjRiMDJiNTU0ZDMzMzA1ODYwZTYzNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIifFhdPLZkBQal0Zy65hXI7iH5BSjJWk8Mtegu4fdI2lX0c
LIPU+BEe6//ke5ojmsk8M9zDnyK7TPsn0eH/h2UFxVm8oj7GZpiuCB7bCGnZYfjw
wXysggyt9lwUY5efGRc5AWQR1uvgy3rawMpS43uXigulP8GqC9U3kW7+OlbgOn23
Ne8SB5GLgm0/gpkzJsAO1xX9yCOeRTX0K5lgQcd6fnrkRlnHf5UUusbvD2vkBt+9
CJkvipmrOyXpneBI6sWRW5WFA8iuLGWv2k0dUUWo2+aCJdOhCSqI3K0pPh+EV8of
XNzX6ZYIvFMkSBVd8DXv0VkmaLPV6ETLms2NJvUCAwEAAaOCAiIwggIeMB0GA1Ud
DgQWBBSaxaXzwdfNJLH0sCtVTTMwWGDmNzAfBgNVHSMEGDAWgBTBzyU3NaP9Ys6E
ko1/9rtWJsyIezAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3djOGxOeldqX1dMT2hKS05mX2E3VmliTWlIcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOTQvMjY5N2FiLTViNDEtNDk2My1iOWQ0LTdhMzMwMGNkN2U5Mi8x
L3djOGxOeldqX1dMT2hKS05mX2E3VmliTWlIcy5tZnQwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTQv
MjY5N2FiLTViNDEtNDk2My1iOWQ0LTdhMzMwMGNkN2U5Mi8xL3djOGxOeldqX1dM
T2hKS05mX2E3VmliTWlIcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/
BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAAxDhgd4i4UjQGlC7342kNjvyaXB
Oe84Nmq1m6jwjiWlxgJqi+HCIz6oNqPyAUtCWyz9BWq4xMLnPAcorbSws5cTzzEH
R+cXs8C9sloFIbAb3t2qvY2SBNMonC3Oc5Z39U09TrkCoeqXMsmjhH68vOgP0YqP
IP7K53UbZ0YCxuK19041QhcmSLfdoJSG70kIoLSR8ET6e85sm146UQk4Mlzr1gD3
T6waNHbEA7UFN7X61ktA1DLyuOEHdVvtre7PZpi3T9vXJLDaPKGozShmAHWyAARP
wLk9j2NDss+s3A1yeGb27vDD8yZBvey7AxseP9CV7Z/b+sBpBpjcYxMJ6XE=
-----END CERTIFICATE-----