Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/336c16-3eff-4bc4-b3d2-a9cea14d6163/1/_s_Ltn0zmq10GGCMWV509UK3U1M.mft
File:                     _s_Ltn0zmq10GGCMWV509UK3U1M.mft (raw, json)
Hash identifier:          4twuIfjXSfA1gazJxRCd5AXOA7AQ9aoHZbqtv6bh7d8=
Subject key identifier:   8E:49:1B:3F:61:2E:DA:1D:6C:2C:22:AA:A1:35:AE:F2:47:18:9B:F7
Authority key identifier: FE:CF:CB:B6:7D:33:9A:AD:74:18:60:8C:59:5E:74:F5:42:B7:53:53
Certificate issuer:       /CN=fecfcbb67d339aad7418608c595e74f542b75353
Certificate serial:       0186F30884F00861EA42DB65A8AB9C188326
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_s_Ltn0zmq10GGCMWV509UK3U1M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/336c16-3eff-4bc4-b3d2-a9cea14d6163/1/_s_Ltn0zmq10GGCMWV509UK3U1M.mft
Manifest number:          01C6
Signing time:             Sat 18 Mar 2023 04:44:27 +0000
Manifest this update:     Sat 18 Mar 2023 04:44:27 +0000
Manifest next update:     Sun 19 Mar 2023 04:44:27 +0000
Files and hashes:         1: 46O4DcGD44YQ_evRYZLMK0WnI7Q.roa (hash: iva0cdXKO8qdD8yg8C3WumYrSjjdgTcNuiov7b/VWUk=)
                          2: 9RJQwFlw9o3YuKAgcfJPCDAHO2o.roa (hash: aDB0H+wc2tNWuLiDU3me2Y0fq3HfxSjBOyoINl4Dplk=)
                          3: BWaUc79gJkVUhCLZR5C2lEN8v2c.roa (hash: KMnNSLUMm+M+BUhakXAsdgj2MkmS/vlOU+W1LBS0W8U=)
                          4: GQLSYL0Ft9M4HTlA-5cRP_o_HMA.roa (hash: 6HsQ1/YoL5csZQPtxJFfj4bl0Ihc7kfGRdIJKGS3MvA=)
                          5: _s_Ltn0zmq10GGCMWV509UK3U1M.crl (hash: 8EPoVPU1Jd7/TfnPQ9I9nDtceSL2CfDwE7ldZHPnh1Y=)
                          6: kYT9pe9to42Ct3KW9LCYMu0Z_wI.roa (hash: BIIPicEv9bxpU8aSwN0+p4I2P5Jes/jpjUqs33+HnPA=)
                          7: sv9QSlj3rZIrI80zyZKbdAdSy9E.roa (hash: 5BTkP6NZRIg1gOkhSXlsH3obCCKBY79Taw0zqVdDiA4=)
                          8: w9GMzer6cnNKMiXo6A-6mpolx88.roa (hash: kFkMlm8BpF6TdCXiTowNCqFsxv2z3LQq+peAzOSnbO8=)
                          9: yXB64_d6-eJk4srAY0xMxcPmxAA.roa (hash: bgSqIDoo9HHEAPg4vbwtgXYUPcXflDx/DB0aolkf/SU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:f3:08:84:f0:08:61:ea:42:db:65:a8:ab:9c:18:83:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fecfcbb67d339aad7418608c595e74f542b75353
        Validity
            Not Before: Mar 18 04:44:27 2023 GMT
            Not After : Mar 19 04:44:27 2023 GMT
        Subject: CN=8e491b3f612eda1d6c2c22aaa135aef247189bf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:8b:d4:82:65:5a:04:6a:ec:79:27:42:fa:37:
                    b2:13:78:bd:54:40:24:7c:53:78:e9:7d:ae:82:17:
                    d4:bb:fa:aa:be:bf:c5:1b:c4:75:70:ea:03:01:dc:
                    bc:23:a1:f1:24:0f:9c:16:85:57:16:69:f6:43:f6:
                    6e:12:23:05:a2:cc:d2:7f:34:c8:b3:cd:b6:58:cb:
                    d4:ca:41:34:84:1a:63:33:f2:2e:d0:f6:c5:56:41:
                    ad:26:ef:db:c3:0f:7a:f0:57:aa:58:c5:49:d8:9a:
                    ed:ae:ca:d3:ce:52:c2:ca:1d:4e:2e:6b:45:94:33:
                    4e:7a:d3:60:38:61:43:61:5f:46:cc:da:54:7c:43:
                    a9:80:79:c1:48:75:a8:06:e0:e8:71:8d:52:71:77:
                    b0:17:9c:8e:d5:d5:a9:71:54:de:6f:39:0e:a6:cb:
                    7d:a2:54:f7:6b:1b:dd:9d:52:2a:69:09:71:05:a9:
                    24:b4:51:cc:67:d6:f3:a9:65:ea:d6:0f:3f:5f:42:
                    43:be:8a:c1:d3:9d:c1:e9:9e:8e:97:3b:24:f3:ba:
                    76:ea:19:f1:83:28:fc:7b:2b:1a:c7:8b:72:69:cf:
                    bf:f1:4c:7f:fa:a1:84:96:a0:e7:0f:ee:07:54:6b:
                    43:ec:fe:16:2b:14:72:dc:c3:78:6c:2b:e5:7c:f5:
                    84:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:49:1B:3F:61:2E:DA:1D:6C:2C:22:AA:A1:35:AE:F2:47:18:9B:F7
            X509v3 Authority Key Identifier:
                keyid:FE:CF:CB:B6:7D:33:9A:AD:74:18:60:8C:59:5E:74:F5:42:B7:53:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_s_Ltn0zmq10GGCMWV509UK3U1M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/336c16-3eff-4bc4-b3d2-a9cea14d6163/1/_s_Ltn0zmq10GGCMWV509UK3U1M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/336c16-3eff-4bc4-b3d2-a9cea14d6163/1/_s_Ltn0zmq10GGCMWV509UK3U1M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:b7:75:27:78:3d:65:cc:e8:63:89:e9:a6:09:59:fc:a7:e7:
         bd:64:41:3e:53:9f:b2:e4:58:7c:ad:c3:82:81:1a:88:23:e8:
         99:2a:35:73:b6:85:4d:21:e8:80:89:24:04:42:84:bb:83:b3:
         1c:67:8d:c0:d5:23:68:8b:50:ea:f4:6d:44:7c:ad:94:d2:09:
         87:8c:6c:e2:8c:f2:5d:ca:95:62:f3:05:50:c2:3b:b9:a6:06:
         1a:f5:2a:f3:5b:69:3d:01:40:07:c9:10:45:e3:e0:bf:a2:01:
         6f:48:3a:b0:f5:53:fc:6f:16:7c:7f:72:1e:4c:f7:db:f6:f1:
         f7:35:33:bf:f9:bd:a3:08:76:58:9c:fc:d1:03:57:d5:83:7c:
         79:fe:b2:49:1d:7f:57:25:5f:d2:a3:08:08:cd:a7:7c:77:23:
         47:31:bb:d2:35:16:30:2d:15:73:e7:59:44:08:e3:80:04:e4:
         c8:0f:98:07:52:a2:40:af:5f:fa:1f:ba:e1:16:c4:00:6f:27:
         19:92:0e:ee:29:1e:70:19:38:b0:a5:cc:5a:12:c8:d3:84:86:
         73:51:8e:00:18:f1:58:d4:fe:1a:e1:0a:60:61:6b:aa:3d:3f:
         39:ae:48:a7:5e:27:6f:19:8d:2e:f2:d6:8c:b1:98:03:14:ff:
         2c:b3:35:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYbzCITwCGHqQttlqKucGIMmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlY2ZjYmI2N2QzMzlhYWQ3NDE4NjA4YzU5NWU3NGY1NDJi
NzUzNTMwHhcNMjMwMzE4MDQ0NDI3WhcNMjMwMzE5MDQ0NDI3WjAzMTEwLwYDVQQD
Eyg4ZTQ5MWIzZjYxMmVkYTFkNmMyYzIyYWFhMTM1YWVmMjQ3MTg5YmY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIvUgmVaBGrseSdC+jeyE3i9VEAk
fFN46X2ughfUu/qqvr/FG8R1cOoDAdy8I6HxJA+cFoVXFmn2Q/ZuEiMFoszSfzTI
s822WMvUykE0hBpjM/Iu0PbFVkGtJu/bww968FeqWMVJ2JrtrsrTzlLCyh1OLmtF
lDNOetNgOGFDYV9GzNpUfEOpgHnBSHWoBuDocY1ScXewF5yO1dWpcVTebzkOpst9
olT3axvdnVIqaQlxBakktFHMZ9bzqWXq1g8/X0JDvorB053B6Z6Olzsk87p26hnx
gyj8eysax4tyac+/8Ux/+qGElqDnD+4HVGtD7P4WKxRy3MN4bCvlfPWEbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI5JGz9hLtodbCwiqqE1rvJHGJv3MB8GA1UdIwQY
MBaAFP7Py7Z9M5qtdBhgjFledPVCt1NTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3NfTHRuMHptcTEwR0dDTVdWNTA5VUszVTFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8zMzZjMTYtM2VmZi00YmM0LWIzZDIt
YTljZWExNGQ2MTYzLzEvX3NfTHRuMHptcTEwR0dDTVdWNTA5VUszVTFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi8zMzZjMTYtM2VmZi00YmM0LWIzZDItYTljZWExNGQ2MTYz
LzEvX3NfTHRuMHptcTEwR0dDTVdWNTA5VUszVTFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAArd1J3g9
ZczoY4nppglZ/KfnvWRBPlOfsuRYfK3DgoEaiCPomSo1c7aFTSHogIkkBEKEu4Oz
HGeNwNUjaItQ6vRtRHytlNIJh4xs4ozyXcqVYvMFUMI7uaYGGvUq81tpPQFAB8kQ
RePgv6IBb0g6sPVT/G8WfH9yHkz32/bx9zUzv/m9owh2WJz80QNX1YN8ef6ySR1/
VyVf0qMICM2nfHcjRzG70jUWMC0Vc+dZRAjjgATkyA+YB1KiQK9f+h+64RbEAG8n
GZIO7ikecBk4sKXMWhLI04SGc1GOABjxWNT+GuEKYGFrqj0/Oa5Ip14nbxmNLvLW
jLGYAxT/LLM1gQ==
-----END CERTIFICATE-----