Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/65ae1d-5c6c-4d50-8dea-1f9c52103600/1/a2tji15dN5cAL7yEcVEd84-u_Ec.mft
File:                     a2tji15dN5cAL7yEcVEd84-u_Ec.mft (raw, json)
Hash identifier:          mSTyLD+EViTuHk0Y1AsOSJlO5CzGH4R58gtE2X/gbpo=
Subject key identifier:   A2:A9:71:E0:95:E0:D0:6F:BD:F4:27:3A:D6:1E:83:FD:91:77:5D:33
Authority key identifier: 6B:6B:63:8B:5E:5D:37:97:00:2F:BC:84:71:51:1D:F3:8F:AE:FC:47
Certificate issuer:       /CN=6b6b638b5e5d3797002fbc8471511df38faefc47
Certificate serial:       0183D1088F03F683973D1F63543F70F74A8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a2tji15dN5cAL7yEcVEd84-u_Ec.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/65ae1d-5c6c-4d50-8dea-1f9c52103600/1/a2tji15dN5cAL7yEcVEd84-u_Ec.mft
Manifest number:          0819
Signing time:             Thu 13 Oct 2022 11:09:02 +0000
Manifest this update:     Thu 13 Oct 2022 11:09:02 +0000
Manifest next update:     Fri 14 Oct 2022 11:09:02 +0000
Files and hashes:         1: a2tji15dN5cAL7yEcVEd84-u_Ec.crl (hash: fSrfyoos+Y8zRVX7Z4VGDcAfkZhFa6oIKCRowemZp/c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:d1:08:8f:03:f6:83:97:3d:1f:63:54:3f:70:f7:4a:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b6b638b5e5d3797002fbc8471511df38faefc47
        Validity
            Not Before: Oct 13 11:09:02 2022 GMT
            Not After : Oct 14 11:09:02 2022 GMT
        Subject: CN=a2a971e095e0d06fbdf4273ad61e83fd91775d33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a8:4b:56:40:4e:95:ee:cd:72:4d:8b:b4:46:
                    89:95:13:49:49:d5:95:0d:5a:3b:b7:5d:7e:50:45:
                    69:89:df:25:9a:ce:04:33:c8:3c:72:54:3a:53:09:
                    93:21:fe:93:8e:8b:2d:0a:24:93:63:b1:20:df:5f:
                    77:b5:4f:0d:81:8d:12:d3:c4:b6:99:80:55:7d:ec:
                    65:8f:98:05:90:82:0f:df:e7:63:47:ce:4a:a1:ca:
                    d0:72:25:56:a9:2e:fc:d8:ab:98:24:33:e4:e6:d0:
                    39:a2:cf:0a:1c:36:5a:71:53:9d:1a:4c:cf:a6:a5:
                    24:56:b6:13:4f:72:fa:af:ee:7a:06:dc:7b:e6:5b:
                    a3:a4:4e:69:48:cc:50:f8:09:21:f3:e5:9d:ad:92:
                    dc:0a:29:c9:00:e5:23:c4:0b:2c:c3:ef:37:dd:29:
                    93:13:d2:4a:b1:38:a8:91:f7:42:e1:46:0f:8b:be:
                    ab:bf:a5:a5:92:3f:69:1f:96:e5:b1:29:6e:fc:e0:
                    e6:d0:5d:50:d6:2b:63:c8:c1:9d:c5:36:47:44:a3:
                    f0:ab:e3:1a:ed:e1:3f:fc:c7:de:ed:fe:03:17:ba:
                    46:fd:47:a5:51:fd:f0:c9:3f:41:4e:bf:67:5f:9f:
                    af:0c:49:48:3d:11:67:08:a8:90:03:99:1c:3b:30:
                    1c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:A9:71:E0:95:E0:D0:6F:BD:F4:27:3A:D6:1E:83:FD:91:77:5D:33
            X509v3 Authority Key Identifier:
                keyid:6B:6B:63:8B:5E:5D:37:97:00:2F:BC:84:71:51:1D:F3:8F:AE:FC:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2tji15dN5cAL7yEcVEd84-u_Ec.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/65ae1d-5c6c-4d50-8dea-1f9c52103600/1/a2tji15dN5cAL7yEcVEd84-u_Ec.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/65ae1d-5c6c-4d50-8dea-1f9c52103600/1/a2tji15dN5cAL7yEcVEd84-u_Ec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:82:00:d5:70:a7:91:03:44:2e:27:a3:57:aa:7e:30:3c:1b:
         b4:47:3b:fd:09:be:c0:99:87:18:30:c1:7a:ad:16:a4:97:35:
         60:4d:48:b3:6e:d8:b3:8e:c5:29:df:6e:0a:0a:e0:6e:78:6b:
         a5:48:7b:61:bb:10:a3:7b:7f:85:39:95:49:dd:08:c6:e9:4d:
         28:2c:3d:75:e3:45:8b:20:04:fb:4a:87:16:dd:4a:f9:21:4e:
         26:18:61:b7:9f:a6:e2:3a:9a:ca:69:af:45:cc:fd:f1:fc:4c:
         d6:8e:73:8b:ce:ba:48:20:ab:75:86:97:79:d3:66:63:a8:36:
         60:70:25:ae:58:30:81:95:f5:3c:a6:5d:66:a8:a4:46:91:79:
         f9:80:e3:9d:0b:7c:d7:44:75:38:cf:de:54:fd:ff:f9:10:b4:
         90:14:c8:91:c8:15:67:84:87:35:43:07:f4:4b:de:7d:72:c5:
         02:c8:ec:59:62:b8:49:a7:41:54:6b:9b:a5:5c:ff:59:20:a3:
         a9:95:25:a2:f1:40:a9:64:a4:cf:09:91:ac:36:aa:95:89:52:
         07:03:9d:e4:e1:7e:19:04:c2:b1:ee:c8:65:b2:f7:03:2d:ba:
         ea:16:c3:87:09:21:ad:ed:13:20:c5:b1:09:ad:c7:ef:a5:ba:
         a8:81:75:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYPRCI8D9oOXPR9jVD9w90qOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiNmI2MzhiNWU1ZDM3OTcwMDJmYmM4NDcxNTExZGYzOGZh
ZWZjNDcwHhcNMjIxMDEzMTEwOTAyWhcNMjIxMDE0MTEwOTAyWjAzMTEwLwYDVQQD
EyhhMmE5NzFlMDk1ZTBkMDZmYmRmNDI3M2FkNjFlODNmZDkxNzc1ZDMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKhLVkBOle7Nck2LtEaJlRNJSdWV
DVo7t11+UEVpid8lms4EM8g8clQ6UwmTIf6TjostCiSTY7Eg3193tU8NgY0S08S2
mYBVfexlj5gFkIIP3+djR85KocrQciVWqS782KuYJDPk5tA5os8KHDZacVOdGkzP
pqUkVrYTT3L6r+56Btx75lujpE5pSMxQ+Akh8+WdrZLcCinJAOUjxAssw+833SmT
E9JKsTiokfdC4UYPi76rv6Wlkj9pH5blsSlu/ODm0F1Q1itjyMGdxTZHRKPwq+Ma
7eE//Mfe7f4DF7pG/UelUf3wyT9BTr9nX5+vDElIPRFnCKiQA5kcOzAcqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKKpceCV4NBvvfQnOtYeg/2Rd10zMB8GA1UdIwQY
MBaAFGtrY4teXTeXAC+8hHFRHfOPrvxHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTJ0amkxNWRONWNBTDd5RWNWRWQ4NC11X0VjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy82NWFlMWQtNWM2Yy00ZDUwLThkZWEt
MWY5YzUyMTAzNjAwLzEvYTJ0amkxNWRONWNBTDd5RWNWRWQ4NC11X0VjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy82NWFlMWQtNWM2Yy00ZDUwLThkZWEtMWY5YzUyMTAzNjAw
LzEvYTJ0amkxNWRONWNBTDd5RWNWRWQ4NC11X0VjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHYIA1XCn
kQNELiejV6p+MDwbtEc7/Qm+wJmHGDDBeq0WpJc1YE1Is27Ys47FKd9uCgrgbnhr
pUh7YbsQo3t/hTmVSd0IxulNKCw9deNFiyAE+0qHFt1K+SFOJhhht5+m4jqaymmv
Rcz98fxM1o5zi866SCCrdYaXedNmY6g2YHAlrlgwgZX1PKZdZqikRpF5+YDjnQt8
10R1OM/eVP3/+RC0kBTIkcgVZ4SHNUMH9EvefXLFAsjsWWK4SadBVGubpVz/WSCj
qZUlovFAqWSkzwmRrDaqlYlSBwOd5OF+GQTCse7IZbL3Ay266hbDhwkhre0TIMWx
Ca3H76W6qIF1ww==
-----END CERTIFICATE-----