Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/3aab07-1085-40c3-b67e-81fed3a7e5f1/1/2cIGkBU09x7AxuMm3FkGs8QnsA8.mft
File:                     2cIGkBU09x7AxuMm3FkGs8QnsA8.mft (raw, json)
Hash identifier:          ASYd3ml9wvLhCS/LwfODORNZTYRc0lv//gUK5xSID8c=
Subject key identifier:   E9:CC:43:4B:88:9E:56:89:D5:F2:DA:0E:93:7F:A2:32:B6:29:EF:A8
Authority key identifier: D9:C2:06:90:15:34:F7:1E:C0:C6:E3:26:DC:59:06:B3:C4:27:B0:0F
Certificate issuer:       /CN=d9c206901534f71ec0c6e326dc5906b3c427b00f
Certificate serial:       032D5AEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2cIGkBU09x7AxuMm3FkGs8QnsA8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/3aab07-1085-40c3-b67e-81fed3a7e5f1/1/2cIGkBU09x7AxuMm3FkGs8QnsA8.mft
Manifest number:          043F
Signing time:             Tue 05 Jul 2022 08:59:40 +0000
Manifest this update:     Tue 05 Jul 2022 08:59:40 +0000
Manifest next update:     Wed 06 Jul 2022 08:59:40 +0000
Files and hashes:         1: 2cIGkBU09x7AxuMm3FkGs8QnsA8.crl (hash: 4LaAAgwyZR0275GZUNFmO4viwzE92+BllGo5MMV/YkY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 53304044 (0x32d5aec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9c206901534f71ec0c6e326dc5906b3c427b00f
        Validity
            Not Before: Jul  5 08:59:40 2022 GMT
            Not After : Jul  6 08:59:40 2022 GMT
        Subject: CN=e9cc434b889e5689d5f2da0e937fa232b629efa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:cd:53:85:04:60:59:f0:44:7f:95:ab:ea:3b:
                    e6:d0:a6:31:26:3a:41:0c:ee:d3:f0:65:14:6f:0d:
                    f6:1e:59:69:94:6f:d3:66:7b:07:1e:f3:c5:59:26:
                    61:67:ef:a4:15:d6:e2:a1:54:e5:84:47:24:0d:c3:
                    9a:88:37:0d:28:98:e3:8c:bb:32:1d:72:1d:84:bd:
                    05:0e:1c:b1:1e:b2:20:9e:0d:21:10:06:fa:63:a0:
                    c7:6c:be:09:0c:5d:10:9e:c3:8c:8b:5a:58:10:c9:
                    5f:61:a5:71:d7:f0:20:e7:8b:7a:f7:fc:87:7e:72:
                    6a:c3:e9:1e:72:12:e2:ac:df:a5:0d:bd:74:34:8b:
                    a1:cc:f4:e5:95:d3:b0:21:d9:af:26:fe:f6:49:3f:
                    83:db:d7:ae:d5:20:3f:e9:88:1e:1d:1e:ba:37:4f:
                    f6:b7:ca:2e:5a:c6:91:aa:c6:6e:58:9f:53:6e:87:
                    62:88:ad:ab:cd:2e:df:06:78:55:9f:1b:e5:9c:22:
                    4f:e4:99:75:a0:58:63:dc:b6:84:21:aa:28:fe:2e:
                    21:22:4a:06:1d:6e:e0:cc:8c:07:32:d4:60:de:b5:
                    90:57:d7:1e:91:ef:c9:36:0e:f3:93:7d:d8:df:f4:
                    58:9a:2b:b7:22:5a:a8:c4:a8:b9:31:cf:0c:fd:ff:
                    94:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:CC:43:4B:88:9E:56:89:D5:F2:DA:0E:93:7F:A2:32:B6:29:EF:A8
            X509v3 Authority Key Identifier:
                keyid:D9:C2:06:90:15:34:F7:1E:C0:C6:E3:26:DC:59:06:B3:C4:27:B0:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2cIGkBU09x7AxuMm3FkGs8QnsA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3aab07-1085-40c3-b67e-81fed3a7e5f1/1/2cIGkBU09x7AxuMm3FkGs8QnsA8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3aab07-1085-40c3-b67e-81fed3a7e5f1/1/2cIGkBU09x7AxuMm3FkGs8QnsA8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:24:83:fc:cb:da:3d:06:c0:8f:32:d9:a5:0e:dc:cd:39:87:
         01:74:5b:70:96:01:73:e2:62:8a:ed:c2:9c:d5:1b:31:9d:8c:
         b9:99:ea:fc:d5:6b:be:d3:f6:e8:b1:bb:42:af:92:81:64:4e:
         40:0a:87:f9:e2:a7:61:7c:e9:1b:ff:0a:5e:c2:67:6d:33:ed:
         5f:93:4d:aa:13:02:a3:da:25:bf:f9:b3:d0:55:aa:ad:15:1e:
         b2:44:d5:46:1d:fc:37:13:0f:cf:f8:81:26:e4:98:26:f4:23:
         ba:b6:07:aa:8e:49:8a:cb:f5:fb:13:1c:6a:a3:38:eb:f6:75:
         53:1d:aa:73:9c:40:9f:b5:b5:42:ce:30:09:d6:2b:e5:31:98:
         9e:e5:4f:40:d0:12:ce:31:1f:dd:48:d2:1a:1b:94:4c:33:f7:
         1c:2f:aa:a9:cc:37:f1:51:ac:25:91:83:97:5f:b4:4c:cd:c0:
         c3:2b:59:a0:f7:f6:f0:89:4b:f7:6b:d3:26:14:68:d6:71:02:
         bc:51:5a:a4:dc:e6:72:56:58:4a:b5:90:6e:0a:3f:da:41:2e:
         ca:73:a6:a6:df:46:b1:5e:f7:5b:48:02:dd:6e:5d:56:15:3c:
         8f:86:d7:5d:a3:21:93:43:12:8b:64:3d:1c:d6:d8:b1:d2:a5:
         38:4f:c7:fc
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgIEAy1a7DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
OWMyMDY5MDE1MzRmNzFlYzBjNmUzMjZkYzU5MDZiM2M0MjdiMDBmMB4XDTIyMDcw
NTA4NTk0MFoXDTIyMDcwNjA4NTk0MFowMzExMC8GA1UEAxMoZTljYzQzNGI4ODll
NTY4OWQ1ZjJkYTBlOTM3ZmEyMzJiNjI5ZWZhODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIbNU4UEYFnwRH+Vq+o75tCmMSY6QQzu0/BlFG8N9h5ZaZRv
02Z7Bx7zxVkmYWfvpBXW4qFU5YRHJA3Dmog3DSiY44y7Mh1yHYS9BQ4csR6yIJ4N
IRAG+mOgx2y+CQxdEJ7DjItaWBDJX2GlcdfwIOeLevf8h35yasPpHnIS4qzfpQ29
dDSLocz05ZXTsCHZryb+9kk/g9vXrtUgP+mIHh0eujdP9rfKLlrGkarGblifU26H
Yoitq80u3wZ4VZ8b5ZwiT+SZdaBYY9y2hCGqKP4uISJKBh1u4MyMBzLUYN61kFfX
HpHvyTYO85N92N/0WJortyJaqMSouTHPDP3/lD0CAwEAAaOCAiIwggIeMB0GA1Ud
DgQWBBTpzENLiJ5WidXy2g6Tf6IytinvqDAfBgNVHSMEGDAWgBTZwgaQFTT3HsDG
4ybcWQazxCewDzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzJjSUdrQlUwOXg3QXh1TW0zRmtHczhRbnNBOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzMvM2FhYjA3LTEwODUtNDBjMy1iNjdlLTgxZmVkM2E3ZTVmMS8x
LzJjSUdrQlUwOXg3QXh1TW0zRmtHczhRbnNBOC5tZnQwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzMv
M2FhYjA3LTEwODUtNDBjMy1iNjdlLTgxZmVkM2E3ZTVmMS8xLzJjSUdrQlUwOXg3
QXh1TW0zRmtHczhRbnNBOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/
BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAB8kg/zL2j0GwI8y2aUO3M05hwF0
W3CWAXPiYortwpzVGzGdjLmZ6vzVa77T9uixu0KvkoFkTkAKh/nip2F86Rv/Cl7C
Z20z7V+TTaoTAqPaJb/5s9BVqq0VHrJE1UYd/DcTD8/4gSbkmCb0I7q2B6qOSYrL
9fsTHGqjOOv2dVMdqnOcQJ+1tULOMAnWK+UxmJ7lT0DQEs4xH91I0hoblEwz9xwv
qqnMN/FRrCWRg5dftEzNwMMrWaD39vCJS/dr0yYUaNZxArxRWqTc5nJWWEq1kG4K
P9pBLspzpqbfRrFe91tIAt1uXVYVPI+G112jIZNDEotkPRzW2LHSpThPx/w=
-----END CERTIFICATE-----