Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/d67dd5-afbe-4c66-bc19-f2d79c8c046e/1/4StdDYWx7ukYf5h6QgmpTYvzGvA.mft
File:                     4StdDYWx7ukYf5h6QgmpTYvzGvA.mft (raw, json)
Hash identifier:          lm05Pt4juAJIp3niCqvGMZkVqR2JFJta2iaFe7IywHQ=
Subject key identifier:   5C:44:03:35:F7:62:6C:6C:12:E4:2E:1E:EE:B9:94:02:9B:63:4B:1A
Authority key identifier: E1:2B:5D:0D:85:B1:EE:E9:18:7F:98:7A:42:09:A9:4D:8B:F3:1A:F0
Certificate issuer:       /CN=e12b5d0d85b1eee9187f987a4209a94d8bf31af0
Certificate serial:       018BD64A90F6D586411F1EFF2479C04E5B25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4StdDYWx7ukYf5h6QgmpTYvzGvA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/d67dd5-afbe-4c66-bc19-f2d79c8c046e/1/4StdDYWx7ukYf5h6QgmpTYvzGvA.mft
Manifest number:          0870
Signing time:             Thu 16 Nov 2023 04:01:32 +0000
Manifest this update:     Thu 16 Nov 2023 04:01:32 +0000
Manifest next update:     Fri 17 Nov 2023 04:01:32 +0000
Files and hashes:         1: 4StdDYWx7ukYf5h6QgmpTYvzGvA.crl (hash: AMLLHT06Z5U6KEMGLhQBiWc5Q6dgyvnQNHTd+bgBmas=)
                          2: 7PtSb87z6c5o3LsNAWarH_VgDVk.roa (hash: x9Lnx6f+Iee+Z59MCCl8BfCSbMOsXVMiGh+WptGkfTs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:d6:4a:90:f6:d5:86:41:1f:1e:ff:24:79:c0:4e:5b:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e12b5d0d85b1eee9187f987a4209a94d8bf31af0
        Validity
            Not Before: Nov 16 04:01:32 2023 GMT
            Not After : Nov 17 04:01:32 2023 GMT
        Subject: CN=5c440335f7626c6c12e42e1eeeb994029b634b1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ce:06:51:25:9f:59:70:93:fa:92:2d:2c:56:
                    cd:f4:99:38:3e:4c:1a:84:ed:84:b9:65:58:af:7a:
                    84:cd:4e:27:53:79:1d:ee:82:e8:53:6b:69:11:94:
                    07:03:d2:7f:d0:81:de:50:1c:a0:b8:eb:1e:c4:cd:
                    61:51:ae:06:8d:a5:3c:9b:61:56:ed:7e:2d:08:6e:
                    83:c1:c0:02:5c:f0:95:b2:b9:72:35:3f:ef:63:5d:
                    8a:05:5b:f8:a0:ac:1d:d3:fa:db:f4:3d:3d:62:8d:
                    6b:0d:6c:bb:71:8e:61:2d:7f:e2:3f:f8:fd:9b:82:
                    fa:ec:77:c6:d0:2f:ad:7e:c3:13:24:e8:4f:67:0c:
                    f3:00:0f:ca:27:58:8f:2b:f2:51:15:d4:bd:e0:83:
                    b9:07:e9:06:de:2c:72:24:9d:2f:84:a9:23:17:99:
                    36:00:a1:36:67:53:f8:3d:6e:dd:85:5a:03:5b:6f:
                    07:fd:c8:36:da:13:ce:49:4c:1c:7f:bf:a8:91:a2:
                    e8:cb:a3:60:0d:0a:b4:8a:ba:b8:60:05:96:0d:a6:
                    30:39:e0:5f:b8:75:09:9f:61:6b:7c:f9:14:3a:06:
                    4f:df:57:58:a7:df:6f:75:25:16:5d:53:3b:44:6f:
                    94:cc:38:42:1e:44:33:6a:53:53:d5:33:bf:46:43:
                    c5:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:44:03:35:F7:62:6C:6C:12:E4:2E:1E:EE:B9:94:02:9B:63:4B:1A
            X509v3 Authority Key Identifier:
                keyid:E1:2B:5D:0D:85:B1:EE:E9:18:7F:98:7A:42:09:A9:4D:8B:F3:1A:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4StdDYWx7ukYf5h6QgmpTYvzGvA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/d67dd5-afbe-4c66-bc19-f2d79c8c046e/1/4StdDYWx7ukYf5h6QgmpTYvzGvA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/d67dd5-afbe-4c66-bc19-f2d79c8c046e/1/4StdDYWx7ukYf5h6QgmpTYvzGvA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:21:34:81:e5:d7:76:ea:35:17:f3:96:01:08:94:da:ed:ef:
         80:1a:93:ec:4a:3f:dd:22:c8:b9:50:f1:bf:48:73:65:7c:f7:
         d4:27:a2:96:2b:71:9b:bf:01:7e:90:13:ab:d1:b9:13:82:d3:
         1a:ab:9e:dd:58:9c:a1:4c:2b:b4:a6:3b:b1:67:72:6a:1c:7e:
         6f:38:d3:8f:a2:a1:f1:1d:b6:b5:6a:33:cb:7c:bf:4c:c4:d0:
         10:f9:b5:3f:7a:d7:71:a4:06:5a:63:a9:e3:a8:b1:4f:97:df:
         3e:99:a4:0f:8d:dc:26:fd:59:4b:d8:cc:bd:e8:59:eb:7c:05:
         e5:af:01:dd:90:47:6f:db:19:fd:da:2e:55:4f:19:32:3e:bb:
         4b:a6:e7:9e:d2:d6:46:7c:c9:bc:7a:1f:ed:a8:c3:57:42:4f:
         c5:03:11:da:77:b2:4b:b8:c6:ea:5e:1d:cb:93:0c:5e:99:42:
         6c:20:d7:a0:29:3c:80:de:17:ea:30:54:93:12:a3:cb:0d:0a:
         a8:75:e6:45:67:e7:c2:d7:d0:ad:4f:3c:55:bd:7e:f2:b2:da:
         3c:58:74:b9:21:71:fb:48:68:e4:e7:04:4f:65:60:2b:38:19:
         79:50:77:8b:ea:f2:2d:ed:ce:92:7d:bf:37:86:d4:0b:2e:07:
         c4:65:c6:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYvWSpD21YZBHx7/JHnATlslMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxMmI1ZDBkODViMWVlZTkxODdmOTg3YTQyMDlhOTRkOGJm
MzFhZjAwHhcNMjMxMTE2MDQwMTMyWhcNMjMxMTE3MDQwMTMyWjAzMTEwLwYDVQQD
Eyg1YzQ0MDMzNWY3NjI2YzZjMTJlNDJlMWVlZWI5OTQwMjliNjM0YjFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjs4GUSWfWXCT+pItLFbN9Jk4Pkwa
hO2EuWVYr3qEzU4nU3kd7oLoU2tpEZQHA9J/0IHeUByguOsexM1hUa4GjaU8m2FW
7X4tCG6DwcACXPCVsrlyNT/vY12KBVv4oKwd0/rb9D09Yo1rDWy7cY5hLX/iP/j9
m4L67HfG0C+tfsMTJOhPZwzzAA/KJ1iPK/JRFdS94IO5B+kG3ixyJJ0vhKkjF5k2
AKE2Z1P4PW7dhVoDW28H/cg22hPOSUwcf7+okaLoy6NgDQq0irq4YAWWDaYwOeBf
uHUJn2FrfPkUOgZP31dYp99vdSUWXVM7RG+UzDhCHkQzalNT1TO/RkPFaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFxEAzX3YmxsEuQuHu65lAKbY0saMB8GA1UdIwQY
MBaAFOErXQ2Fse7pGH+YekIJqU2L8xrwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFN0ZERZV3g3dWtZZjVoNlFnbXBUWXZ6R3ZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9kNjdkZDUtYWZiZS00YzY2LWJjMTkt
ZjJkNzljOGMwNDZlLzEvNFN0ZERZV3g3dWtZZjVoNlFnbXBUWXZ6R3ZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi9kNjdkZDUtYWZiZS00YzY2LWJjMTktZjJkNzljOGMwNDZl
LzEvNFN0ZERZV3g3dWtZZjVoNlFnbXBUWXZ6R3ZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACyE0geXX
duo1F/OWAQiU2u3vgBqT7Eo/3SLIuVDxv0hzZXz31Ceilitxm78BfpATq9G5E4LT
Gque3VicoUwrtKY7sWdyahx+bzjTj6Kh8R22tWozy3y/TMTQEPm1P3rXcaQGWmOp
46ixT5ffPpmkD43cJv1ZS9jMvehZ63wF5a8B3ZBHb9sZ/douVU8ZMj67S6bnntLW
RnzJvHof7ajDV0JPxQMR2neyS7jG6l4dy5MMXplCbCDXoCk8gN4X6jBUkxKjyw0K
qHXmRWfnwtfQrU88Vb1+8rLaPFh0uSFx+0ho5OcET2VgKzgZeVB3i+ryLe3Okn2/
N4bUCy4HxGXGoA==
-----END CERTIFICATE-----