Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/3ee7e0-9f8a-478c-99e6-698f483719ce/1/Lgtv97ZYlDMsu0HTrrc1MB9Ispg.mft
File:                     Lgtv97ZYlDMsu0HTrrc1MB9Ispg.mft (raw, json)
Hash identifier:          nc6DS4fARu9THbUdP2DoSyJ+TCBQGiZjT1XBqTNZa1A=
Subject key identifier:   76:29:86:6C:A4:0F:1C:A4:55:5F:6E:4F:88:1D:84:6E:E2:38:B1:D9
Authority key identifier: 2E:0B:6F:F7:B6:58:94:33:2C:BB:41:D3:AE:B7:35:30:1F:48:B2:98
Certificate issuer:       /CN=2e0b6ff7b65894332cbb41d3aeb735301f48b298
Certificate serial:       018B8AF8B9B57F4F49380C631EAA3BBCCEEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Lgtv97ZYlDMsu0HTrrc1MB9Ispg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/3ee7e0-9f8a-478c-99e6-698f483719ce/1/Lgtv97ZYlDMsu0HTrrc1MB9Ispg.mft
Manifest number:          08DF
Signing time:             Wed 01 Nov 2023 13:00:38 +0000
Manifest this update:     Wed 01 Nov 2023 13:00:38 +0000
Manifest next update:     Thu 02 Nov 2023 13:00:38 +0000
Files and hashes:         1: 5CEB3YP-gGUgb6Ws8f4zB6vXTdo.roa (hash: ZQBbaDPDzcKLy/tsJGthMnja4Tw9UHFPfqhtGTB+0Zs=)
                          2: ED3FbUu3gxPvEbPONzvci8ubicY.roa (hash: 3UgGnPHCOeduVo/u/PeGysiJwmBPNTqjdPtvn8/mTjE=)
                          3: Lgtv97ZYlDMsu0HTrrc1MB9Ispg.crl (hash: CBXnzR3cCDVuQTDgacwAJGJg8DfrzdmSUxNXiU922k4=)
                          4: jEYODeTbloItKPZzcez6c57Q9_I.roa (hash: Fdfdj0p5oRoto6x/epvGEDo4CNevfk3GUUPxddnNGWg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:8a:f8:b9:b5:7f:4f:49:38:0c:63:1e:aa:3b:bc:ce:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e0b6ff7b65894332cbb41d3aeb735301f48b298
        Validity
            Not Before: Nov  1 13:00:38 2023 GMT
            Not After : Nov  2 13:00:38 2023 GMT
        Subject: CN=7629866ca40f1ca4555f6e4f881d846ee238b1d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:41:16:c0:e1:a1:9d:64:c7:f0:44:c0:01:e2:
                    6a:e0:cc:8b:28:01:6c:62:31:c8:a8:26:d9:52:f4:
                    64:db:0a:e0:52:c4:2e:e6:c0:f7:f1:ee:c4:86:8c:
                    fc:cd:dd:a1:5a:32:a4:31:f2:10:11:93:8b:68:64:
                    4c:e3:1a:f9:3e:72:b8:52:de:50:7c:8c:7b:7b:1c:
                    05:56:5a:b5:5d:6c:c4:9c:22:9e:c6:e4:07:4e:45:
                    42:6a:69:3f:9f:dd:13:70:2d:06:8c:5b:2f:f3:58:
                    36:c4:9f:67:35:bd:8b:c9:ca:e3:5f:09:49:d0:fe:
                    b6:aa:54:fa:11:ff:e9:fb:49:7d:87:42:1f:08:3e:
                    fe:ae:8e:03:dd:aa:f2:82:0d:ea:0b:75:ad:98:b8:
                    7c:84:31:62:17:e1:31:2d:6d:a3:36:a7:29:26:81:
                    e0:9a:72:2e:5c:46:0b:46:1c:6a:1d:9a:d5:d0:8a:
                    a8:55:d6:c6:8c:13:e1:84:d3:ed:5b:30:d3:cd:c3:
                    5e:29:46:f5:f8:78:99:dc:7a:32:36:e5:c3:51:96:
                    a6:ab:66:40:1e:d1:fd:cc:ea:65:36:cb:cf:8f:09:
                    d6:4b:d6:24:0b:d4:3d:ad:0f:91:f2:85:0c:87:e1:
                    fa:52:b2:ab:6e:71:05:ac:d3:da:1a:b6:24:e4:3e:
                    01:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:29:86:6C:A4:0F:1C:A4:55:5F:6E:4F:88:1D:84:6E:E2:38:B1:D9
            X509v3 Authority Key Identifier:
                keyid:2E:0B:6F:F7:B6:58:94:33:2C:BB:41:D3:AE:B7:35:30:1F:48:B2:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lgtv97ZYlDMsu0HTrrc1MB9Ispg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3ee7e0-9f8a-478c-99e6-698f483719ce/1/Lgtv97ZYlDMsu0HTrrc1MB9Ispg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3ee7e0-9f8a-478c-99e6-698f483719ce/1/Lgtv97ZYlDMsu0HTrrc1MB9Ispg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:51:3b:a5:25:8a:a8:5d:59:b1:e8:fd:34:09:a5:87:37:52:
         48:e0:13:43:01:89:04:44:47:5c:f2:ad:9a:a6:c9:fe:85:94:
         57:73:30:40:52:1b:63:a7:3b:54:99:6c:4c:3f:ed:7f:4d:12:
         9e:c1:82:8a:40:55:0b:c7:3f:8f:f4:81:ed:07:c2:2d:b5:c9:
         75:76:63:f9:a4:35:44:83:b2:ae:ca:06:cf:4b:cc:15:e8:9d:
         90:d0:3f:a2:31:0d:81:a5:82:28:ab:43:b7:61:ad:f7:6b:7a:
         ff:c2:c5:50:79:5a:e0:60:3c:53:7e:78:5b:03:8c:67:3d:a5:
         6d:00:79:53:31:1f:8a:a5:88:44:bd:e2:6a:c9:d5:47:9c:01:
         0e:a9:ad:38:db:38:91:74:15:d0:75:30:9b:f7:09:6f:21:9a:
         90:f7:c7:f0:2f:91:4a:08:1e:c9:2b:3f:1d:39:d1:ae:06:34:
         8a:6f:ee:2b:42:6d:2f:85:75:93:b5:14:1f:78:cd:de:f4:e8:
         33:35:8a:e8:41:33:91:2e:c1:99:77:27:c8:cc:16:d9:04:d2:
         bc:89:9b:8a:af:5a:bf:92:e5:05:30:48:5e:68:e3:d8:e7:61:
         51:a6:a2:35:71:17:a0:08:3e:48:a3:36:36:8e:50:4f:37:3a:
         35:64:a6:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYuK+Lm1f09JOAxjHqo7vM7uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlMGI2ZmY3YjY1ODk0MzMyY2JiNDFkM2FlYjczNTMwMWY0
OGIyOTgwHhcNMjMxMTAxMTMwMDM4WhcNMjMxMTAyMTMwMDM4WjAzMTEwLwYDVQQD
Eyg3NjI5ODY2Y2E0MGYxY2E0NTU1ZjZlNGY4ODFkODQ2ZWUyMzhiMWQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0EWwOGhnWTH8ETAAeJq4MyLKAFs
YjHIqCbZUvRk2wrgUsQu5sD38e7Ehoz8zd2hWjKkMfIQEZOLaGRM4xr5PnK4Ut5Q
fIx7exwFVlq1XWzEnCKexuQHTkVCamk/n90TcC0GjFsv81g2xJ9nNb2LycrjXwlJ
0P62qlT6Ef/p+0l9h0IfCD7+ro4D3arygg3qC3WtmLh8hDFiF+ExLW2jNqcpJoHg
mnIuXEYLRhxqHZrV0IqoVdbGjBPhhNPtWzDTzcNeKUb1+HiZ3HoyNuXDUZamq2ZA
HtH9zOplNsvPjwnWS9YkC9Q9rQ+R8oUMh+H6UrKrbnEFrNPaGrYk5D4B9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHYphmykDxykVV9uT4gdhG7iOLHZMB8GA1UdIwQY
MBaAFC4Lb/e2WJQzLLtB0663NTAfSLKYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGd0djk3WllsRE1zdTBIVHJyYzFNQjlJc3BnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8zZWU3ZTAtOWY4YS00NzhjLTk5ZTYt
Njk4ZjQ4MzcxOWNlLzEvTGd0djk3WllsRE1zdTBIVHJyYzFNQjlJc3BnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC8zZWU3ZTAtOWY4YS00NzhjLTk5ZTYtNjk4ZjQ4MzcxOWNl
LzEvTGd0djk3WllsRE1zdTBIVHJyYzFNQjlJc3BnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKlE7pSWK
qF1Zsej9NAmlhzdSSOATQwGJBERHXPKtmqbJ/oWUV3MwQFIbY6c7VJlsTD/tf00S
nsGCikBVC8c/j/SB7QfCLbXJdXZj+aQ1RIOyrsoGz0vMFeidkNA/ojENgaWCKKtD
t2Gt92t6/8LFUHla4GA8U354WwOMZz2lbQB5UzEfiqWIRL3iasnVR5wBDqmtONs4
kXQV0HUwm/cJbyGakPfH8C+RSggeySs/HTnRrgY0im/uK0JtL4V1k7UUH3jN3vTo
MzWK6EEzkS7BmXcnyMwW2QTSvImbiq9av5LlBTBIXmjj2OdhUaaiNXEXoAg+SKM2
No5QTzc6NWSmNQ==
-----END CERTIFICATE-----