Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/5dbeff-f1ad-4ceb-b473-81973ebb0794/1/cKm5fx-KHtRzjFAK7P-tJPE2cWY.mft
File:                     cKm5fx-KHtRzjFAK7P-tJPE2cWY.mft (raw, json)
Hash identifier:          hiMtO9OeIqJty0K/Avphxq5uwSekbGuoqfGEJZMAlyE=
Subject key identifier:   E6:1F:C8:4E:A8:67:8A:D3:7D:C3:97:5E:F2:31:FE:90:67:26:66:9C
Authority key identifier: 70:A9:B9:7F:1F:8A:1E:D4:73:8C:50:0A:EC:FF:AD:24:F1:36:71:66
Certificate issuer:       /CN=70a9b97f1f8a1ed4738c500aecffad24f1367166
Certificate serial:       018BB877473D1F3510C4E9E9707BAB975B31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cKm5fx-KHtRzjFAK7P-tJPE2cWY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/5dbeff-f1ad-4ceb-b473-81973ebb0794/1/cKm5fx-KHtRzjFAK7P-tJPE2cWY.mft
Manifest number:          0895
Signing time:             Fri 10 Nov 2023 09:01:46 +0000
Manifest this update:     Fri 10 Nov 2023 09:01:46 +0000
Manifest next update:     Sat 11 Nov 2023 09:01:46 +0000
Files and hashes:         1: GGajVjR7MI8ICWb5gKAwwApW2e0.roa (hash: BYQ12bKkvSYsEAyCYD22myNQ6NXRUkDkopV4gYGS8fY=)
                          2: cKm5fx-KHtRzjFAK7P-tJPE2cWY.crl (hash: +8Az4oUMnavSP+EgRimaMP1erDbms6FfxJ+MouVdqX8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:b8:77:47:3d:1f:35:10:c4:e9:e9:70:7b:ab:97:5b:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70a9b97f1f8a1ed4738c500aecffad24f1367166
        Validity
            Not Before: Nov 10 09:01:46 2023 GMT
            Not After : Nov 11 09:01:46 2023 GMT
        Subject: CN=e61fc84ea8678ad37dc3975ef231fe906726669c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:13:83:13:ce:32:ae:7e:f2:c7:7a:a2:1c:41:
                    ce:4d:e7:9f:6e:d9:28:8b:e8:19:39:5c:50:13:c1:
                    c8:9d:d7:5f:b9:a8:6b:7e:90:b8:90:49:f2:cb:c9:
                    ef:7f:3b:11:a8:d3:a7:34:84:0f:1d:0c:79:78:c5:
                    08:3a:9d:0d:47:e2:fc:6e:91:81:0b:40:51:02:df:
                    a4:51:b3:c2:8e:3f:75:af:6e:e8:8c:db:fb:c3:9d:
                    fb:81:64:c6:c5:03:ce:86:c9:ba:0f:82:f8:d0:0d:
                    23:60:8d:bc:54:f2:e5:30:c9:72:20:99:c7:8b:6c:
                    cf:ce:f0:c3:95:1a:2a:ed:4c:2a:24:fe:02:6b:a2:
                    00:d4:4c:56:14:5c:54:8f:33:6d:a0:b6:8b:da:21:
                    db:bd:ae:92:94:c4:5b:42:7d:ae:48:32:d0:79:ae:
                    60:07:01:2d:56:5d:0d:73:ab:cf:5f:c8:a6:01:d4:
                    40:b8:1f:27:80:57:1b:21:f8:30:88:4a:39:d3:a7:
                    21:78:59:e5:58:7e:72:da:54:fe:cc:4a:8e:a2:d7:
                    43:7a:18:84:b8:30:45:1d:64:49:d1:d2:83:b0:b1:
                    e5:56:50:13:71:7b:66:24:54:8c:36:7d:c9:74:f3:
                    77:fc:d1:a6:e8:3c:c5:5f:37:76:d1:9a:83:d7:7b:
                    6e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:1F:C8:4E:A8:67:8A:D3:7D:C3:97:5E:F2:31:FE:90:67:26:66:9C
            X509v3 Authority Key Identifier:
                keyid:70:A9:B9:7F:1F:8A:1E:D4:73:8C:50:0A:EC:FF:AD:24:F1:36:71:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cKm5fx-KHtRzjFAK7P-tJPE2cWY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5dbeff-f1ad-4ceb-b473-81973ebb0794/1/cKm5fx-KHtRzjFAK7P-tJPE2cWY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5dbeff-f1ad-4ceb-b473-81973ebb0794/1/cKm5fx-KHtRzjFAK7P-tJPE2cWY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:34:44:a3:26:f4:81:66:82:46:6a:81:53:5d:5b:9c:46:33:
         8a:09:64:b1:ea:a1:8a:bb:b0:3d:d3:e3:57:73:02:eb:26:78:
         81:3e:85:95:1d:b3:86:66:ed:f6:af:1d:0d:8a:b7:1a:ac:53:
         ed:76:87:f7:50:cf:91:a9:31:3e:b6:8f:be:75:a5:2a:6f:50:
         7f:29:fa:2a:56:e8:64:ce:b1:02:d6:23:72:26:2b:12:d8:0a:
         d3:35:73:98:5e:82:f9:6b:dc:d5:67:48:e1:47:4f:16:f6:75:
         3c:ec:b7:48:f4:25:c5:6d:5f:83:1d:79:39:3d:16:6c:7e:dd:
         2b:e8:dd:48:ec:a8:2f:79:c8:ce:6e:73:52:3a:93:0f:f3:ad:
         22:c6:47:19:9c:e6:3f:03:95:3c:0b:b9:49:0a:6c:68:4a:63:
         6d:67:55:4b:93:62:26:63:59:48:c7:54:ba:0d:6a:33:90:29:
         be:29:e0:aa:40:ed:a2:6d:b7:f2:0c:f3:ae:d2:a4:dc:6c:5d:
         51:64:07:21:6f:d3:4b:69:62:d7:80:a0:37:2f:37:b9:64:ee:
         ba:48:6e:fb:af:66:95:1f:be:86:0f:e1:3f:5f:28:18:70:82:
         ed:ca:a7:91:e4:36:5f:0d:bf:cf:55:d3:03:b5:75:56:6f:e4:
         50:37:b1:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYu4d0c9HzUQxOnpcHurl1sxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwYTliOTdmMWY4YTFlZDQ3MzhjNTAwYWVjZmZhZDI0ZjEz
NjcxNjYwHhcNMjMxMTEwMDkwMTQ2WhcNMjMxMTExMDkwMTQ2WjAzMTEwLwYDVQQD
EyhlNjFmYzg0ZWE4Njc4YWQzN2RjMzk3NWVmMjMxZmU5MDY3MjY2NjljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgRODE84yrn7yx3qiHEHOTeefbtko
i+gZOVxQE8HInddfuahrfpC4kEnyy8nvfzsRqNOnNIQPHQx5eMUIOp0NR+L8bpGB
C0BRAt+kUbPCjj91r27ojNv7w537gWTGxQPOhsm6D4L40A0jYI28VPLlMMlyIJnH
i2zPzvDDlRoq7UwqJP4Ca6IA1ExWFFxUjzNtoLaL2iHbva6SlMRbQn2uSDLQea5g
BwEtVl0Nc6vPX8imAdRAuB8ngFcbIfgwiEo506cheFnlWH5y2lT+zEqOotdDehiE
uDBFHWRJ0dKDsLHlVlATcXtmJFSMNn3JdPN3/NGm6DzFXzd20ZqD13tu+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOYfyE6oZ4rTfcOXXvIx/pBnJmacMB8GA1UdIwQY
MBaAFHCpuX8fih7Uc4xQCuz/rSTxNnFmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0ttNWZ4LUtIdFJ6akZBSzdQLXRKUEUyY1dZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC81ZGJlZmYtZjFhZC00Y2ViLWI0NzMt
ODE5NzNlYmIwNzk0LzEvY0ttNWZ4LUtIdFJ6akZBSzdQLXRKUEUyY1dZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC81ZGJlZmYtZjFhZC00Y2ViLWI0NzMtODE5NzNlYmIwNzk0
LzEvY0ttNWZ4LUtIdFJ6akZBSzdQLXRKUEUyY1dZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALTREoyb0
gWaCRmqBU11bnEYziglkseqhiruwPdPjV3MC6yZ4gT6FlR2zhmbt9q8dDYq3GqxT
7XaH91DPkakxPraPvnWlKm9Qfyn6KlboZM6xAtYjciYrEtgK0zVzmF6C+Wvc1WdI
4UdPFvZ1POy3SPQlxW1fgx15OT0WbH7dK+jdSOyoL3nIzm5zUjqTD/OtIsZHGZzm
PwOVPAu5SQpsaEpjbWdVS5NiJmNZSMdUug1qM5ApvingqkDtom238gzzrtKk3Gxd
UWQHIW/TS2li14CgNy83uWTuukhu+69mlR++hg/hP18oGHCC7cqnkeQ2Xw2/z1XT
A7V1Vm/kUDexxQ==
-----END CERTIFICATE-----