Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/b20fb4-a8b3-4ee8-9af7-74b390f35a73/1/_CCxsZfwnRMN0qpfTiPfaU6aEEI.mft
File:                     _CCxsZfwnRMN0qpfTiPfaU6aEEI.mft (raw, json)
Hash identifier:          wvv5nTAuie2h77pJBJV1uieD8MOB9JXsbEU3FhThNI0=
Subject key identifier:   4F:6F:75:EB:A7:C7:8B:47:93:61:1F:F2:69:D2:66:2D:D4:5C:0F:48
Authority key identifier: FC:20:B1:B1:97:F0:9D:13:0D:D2:AA:5F:4E:23:DF:69:4E:9A:10:42
Certificate issuer:       /CN=fc20b1b197f09d130dd2aa5f4e23df694e9a1042
Certificate serial:       03A204D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_CCxsZfwnRMN0qpfTiPfaU6aEEI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/b20fb4-a8b3-4ee8-9af7-74b390f35a73/1/_CCxsZfwnRMN0qpfTiPfaU6aEEI.mft
Manifest number:          04BA
Signing time:             Thu 09 Jun 2022 08:49:07 +0000
Manifest this update:     Thu 09 Jun 2022 08:49:07 +0000
Manifest next update:     Fri 10 Jun 2022 08:49:07 +0000
Files and hashes:         1: _CCxsZfwnRMN0qpfTiPfaU6aEEI.crl (hash: Kb51wvRXH6BQgJnOpJcvcQTmyQCVPixquQqoaTIOh8o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60949721 (0x3a204d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc20b1b197f09d130dd2aa5f4e23df694e9a1042
        Validity
            Not Before: Jun  9 08:49:07 2022 GMT
            Not After : Jun 10 08:49:07 2022 GMT
        Subject: CN=4f6f75eba7c78b4793611ff269d2662dd45c0f48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a8:be:85:f8:72:f1:b8:3b:e5:7d:5a:4f:60:
                    91:b8:67:01:38:69:75:45:eb:7c:49:b2:0b:71:aa:
                    22:3a:0c:18:ca:f6:f3:2a:4d:c2:4b:c7:89:e9:00:
                    dd:db:d2:db:65:60:5c:7c:77:c4:bf:d1:74:0f:f5:
                    8a:d2:73:d8:dc:1a:42:57:b6:13:c0:a3:4c:5d:93:
                    b8:aa:3f:6c:e9:05:1e:45:14:cc:75:d0:9f:4a:30:
                    c3:ce:e3:ab:7a:c9:29:3a:45:ff:42:46:3e:83:7f:
                    f5:10:b6:60:5b:3e:df:23:7c:72:ed:a3:77:70:3c:
                    2e:72:93:24:d9:77:42:80:d0:64:e7:df:6f:2b:97:
                    cc:b2:66:9f:4c:41:8c:3c:37:b8:5c:49:9b:24:dc:
                    6a:97:a7:2e:a2:37:3a:93:6f:5a:a7:39:38:e4:75:
                    67:a4:1d:c7:20:92:e6:e0:11:02:50:2d:a7:87:40:
                    5f:93:d0:f9:26:4c:64:b7:13:3f:15:e7:9b:f3:43:
                    81:ac:ca:45:4f:94:ee:fb:7c:61:d9:d8:82:c0:99:
                    4d:aa:71:68:0a:94:8c:e1:08:10:85:24:5a:c1:b9:
                    0a:23:88:8b:d5:a4:eb:f5:15:1b:8e:40:c2:01:93:
                    e0:77:ea:81:b3:2f:09:6c:c1:e2:5d:ae:22:f7:fa:
                    28:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:6F:75:EB:A7:C7:8B:47:93:61:1F:F2:69:D2:66:2D:D4:5C:0F:48
            X509v3 Authority Key Identifier:
                keyid:FC:20:B1:B1:97:F0:9D:13:0D:D2:AA:5F:4E:23:DF:69:4E:9A:10:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_CCxsZfwnRMN0qpfTiPfaU6aEEI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b20fb4-a8b3-4ee8-9af7-74b390f35a73/1/_CCxsZfwnRMN0qpfTiPfaU6aEEI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b20fb4-a8b3-4ee8-9af7-74b390f35a73/1/_CCxsZfwnRMN0qpfTiPfaU6aEEI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:75:b9:ae:ab:dd:21:be:cb:45:c9:31:71:82:a0:88:ef:15:
         ff:6b:1a:d3:36:e5:e3:b9:6d:0e:51:66:f9:46:2c:34:04:85:
         a7:c4:74:1f:ae:c5:1d:c3:54:b6:fe:e8:11:bb:2e:a1:14:8d:
         8e:58:de:b3:42:c3:a3:6f:fe:97:ee:17:4a:21:e9:f6:1f:fe:
         11:5e:0a:f7:10:3a:0b:c4:06:37:58:b1:2d:69:6e:e4:be:97:
         08:35:fa:4a:79:8d:d5:55:ba:72:5d:79:6f:be:be:c3:3b:44:
         c8:e7:f5:c5:59:1b:37:a6:7d:5f:78:c5:fa:0a:6d:33:70:04:
         2a:ed:4b:87:29:39:6f:dd:2a:94:74:66:a3:f4:72:ea:6a:90:
         67:d6:72:8d:92:7f:2c:b4:3a:c2:3c:b8:0c:ed:c9:57:d7:53:
         5b:0b:59:21:76:63:41:a7:7c:4a:f0:cc:65:f4:66:0d:94:bc:
         97:9a:39:ec:93:86:42:e6:db:a3:84:91:a9:86:17:d3:82:9b:
         c1:cc:71:9e:80:8c:11:8a:6f:89:0e:3f:ae:e9:48:04:e6:b3:
         b6:07:24:10:cf:29:9c:f3:fe:93:63:3e:05:e5:59:32:fd:ab:
         18:6b:74:e9:aa:be:7a:4b:a8:50:a4:4b:04:9f:00:67:5e:21:
         45:5c:53:a5
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgIEA6IE2TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
YzIwYjFiMTk3ZjA5ZDEzMGRkMmFhNWY0ZTIzZGY2OTRlOWExMDQyMB4XDTIyMDYw
OTA4NDkwN1oXDTIyMDYxMDA4NDkwN1owMzExMC8GA1UEAxMoNGY2Zjc1ZWJhN2M3
OGI0NzkzNjExZmYyNjlkMjY2MmRkNDVjMGY0ODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMyovoX4cvG4O+V9Wk9gkbhnAThpdUXrfEmyC3GqIjoMGMr2
8ypNwkvHiekA3dvS22VgXHx3xL/RdA/1itJz2NwaQle2E8CjTF2TuKo/bOkFHkUU
zHXQn0oww87jq3rJKTpF/0JGPoN/9RC2YFs+3yN8cu2jd3A8LnKTJNl3QoDQZOff
byuXzLJmn0xBjDw3uFxJmyTcapenLqI3OpNvWqc5OOR1Z6QdxyCS5uARAlAtp4dA
X5PQ+SZMZLcTPxXnm/NDgazKRU+U7vt8YdnYgsCZTapxaAqUjOEIEIUkWsG5CiOI
i9Wk6/UVG45AwgGT4HfqgbMvCWzB4l2uIvf6KEsCAwEAAaOCAiIwggIeMB0GA1Ud
DgQWBBRPb3Xrp8eLR5NhH/Jp0mYt1FwPSDAfBgNVHSMEGDAWgBT8ILGxl/CdEw3S
ql9OI99pTpoQQjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L19DQ3hzWmZ3blJNTjBxcGZUaVBmYVU2YUVFSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTIvYjIwZmI0LWE4YjMtNGVlOC05YWY3LTc0YjM5MGYzNWE3My8x
L19DQ3hzWmZ3blJNTjBxcGZUaVBmYVU2YUVFSS5tZnQwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTIv
YjIwZmI0LWE4YjMtNGVlOC05YWY3LTc0YjM5MGYzNWE3My8xL19DQ3hzWmZ3blJN
TjBxcGZUaVBmYVU2YUVFSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/
BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBACd1ua6r3SG+y0XJMXGCoIjvFf9r
GtM25eO5bQ5RZvlGLDQEhafEdB+uxR3DVLb+6BG7LqEUjY5Y3rNCw6Nv/pfuF0oh
6fYf/hFeCvcQOgvEBjdYsS1pbuS+lwg1+kp5jdVVunJdeW++vsM7RMjn9cVZGzem
fV94xfoKbTNwBCrtS4cpOW/dKpR0ZqP0cupqkGfWco2Sfyy0OsI8uAztyVfXU1sL
WSF2Y0GnfErwzGX0Zg2UvJeaOeyThkLm26OEkamGF9OCm8HMcZ6AjBGKb4kOP67p
SATms7YHJBDPKZzz/pNjPgXlWTL9qxhrdOmqvnpLqFCkSwSfAGdeIUVcU6U=
-----END CERTIFICATE-----