Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/05a772-c920-4d99-9a05-e2cb9124f543/1/SzFS8Nd-BX-yyb-A2AMymHlEB3Y.mft
File:                     SzFS8Nd-BX-yyb-A2AMymHlEB3Y.mft (raw, json)
Hash identifier:          WtkJa/tH4lAO+PUviEZHStUGjar35RlLnTnBFAQBXHw=
Subject key identifier:   D7:AD:64:94:04:A2:A0:5B:1F:42:59:DD:06:D6:62:51:DE:F9:65:AF
Authority key identifier: 4B:31:52:F0:D7:7E:05:7F:B2:C9:BF:80:D8:03:32:98:79:44:07:76
Certificate issuer:       /CN=4b3152f0d77e057fb2c9bf80d803329879440776
Certificate serial:       018B6B005FB2C7139FC73DEC4B5592EE105B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SzFS8Nd-BX-yyb-A2AMymHlEB3Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/05a772-c920-4d99-9a05-e2cb9124f543/1/SzFS8Nd-BX-yyb-A2AMymHlEB3Y.mft
Manifest number:          0869
Signing time:             Thu 26 Oct 2023 08:01:08 +0000
Manifest this update:     Thu 26 Oct 2023 08:01:08 +0000
Manifest next update:     Fri 27 Oct 2023 08:01:08 +0000
Files and hashes:         1: 1WAAaF4riLTFmpFV3x6Gakqrt58.roa (hash: TJevjaSW/D2A6qxsk+LiBEzXVLsyBq6P1H6jS/AlIOw=)
                          2: 9epAapRLa2-y9lN1ApORscaoZd4.roa (hash: jWgBbxuGWdczMegs/hqHXTkA139wTkt7FmIrjiwE8U4=)
                          3: SzFS8Nd-BX-yyb-A2AMymHlEB3Y.crl (hash: SVqnfNC+3N7QP8cJewemMMkF1n3O9YZ9VE6zn4Oik+Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:6b:00:5f:b2:c7:13:9f:c7:3d:ec:4b:55:92:ee:10:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3152f0d77e057fb2c9bf80d803329879440776
        Validity
            Not Before: Oct 26 08:01:08 2023 GMT
            Not After : Oct 27 08:01:08 2023 GMT
        Subject: CN=d7ad649404a2a05b1f4259dd06d66251def965af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:28:95:ec:11:fb:87:0f:19:e5:e5:d1:3e:29:
                    53:36:ad:e2:82:60:77:c2:90:2f:62:d6:c7:08:50:
                    62:42:9a:58:e2:87:15:32:8b:84:81:28:e6:f9:78:
                    85:85:cb:e3:4f:23:1a:94:74:4e:0d:22:ca:b1:bc:
                    fe:e9:7e:d4:4b:36:bb:27:be:d1:ab:b9:b6:15:da:
                    b4:0f:84:a4:4a:a1:2e:d6:ae:8b:2d:df:a4:e9:06:
                    ac:41:e7:99:30:d7:81:bc:e5:a4:76:b7:e2:9d:b8:
                    f5:f7:ed:3f:eb:1f:6a:1d:35:11:18:bd:3a:88:ba:
                    8d:40:be:40:d3:22:e3:85:b0:c8:3a:2f:f0:fa:18:
                    29:bb:80:d9:29:b4:95:06:16:7b:c3:6f:2e:da:ae:
                    d3:22:07:29:ab:37:28:50:bf:a3:0f:77:fb:c4:e4:
                    4d:93:60:3f:0c:fa:1e:bd:2a:41:bd:60:dd:8f:8d:
                    98:fa:c6:e1:49:2f:64:7e:ef:79:1c:50:1d:3b:c9:
                    0a:0f:b5:98:e6:c7:ef:23:8e:19:b9:0c:4a:6e:dd:
                    2e:1e:a1:c7:ca:f7:00:09:4c:ef:e9:7d:24:b2:e5:
                    9f:31:8f:c3:64:5f:55:9f:1d:65:1a:ec:c9:24:c4:
                    b7:a4:d5:7d:48:ca:b5:8b:e1:2d:fd:cd:91:35:83:
                    2b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:AD:64:94:04:A2:A0:5B:1F:42:59:DD:06:D6:62:51:DE:F9:65:AF
            X509v3 Authority Key Identifier:
                keyid:4B:31:52:F0:D7:7E:05:7F:B2:C9:BF:80:D8:03:32:98:79:44:07:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzFS8Nd-BX-yyb-A2AMymHlEB3Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/05a772-c920-4d99-9a05-e2cb9124f543/1/SzFS8Nd-BX-yyb-A2AMymHlEB3Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/05a772-c920-4d99-9a05-e2cb9124f543/1/SzFS8Nd-BX-yyb-A2AMymHlEB3Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:9b:a6:50:24:de:52:d8:28:f3:bb:e4:ae:99:43:f3:47:6e:
         2b:2f:27:04:2a:0e:0a:84:fb:3c:15:b6:40:bd:fc:c8:24:ca:
         fc:a7:de:d2:d6:5c:9c:e5:7f:83:b8:3b:4c:50:65:d3:04:fc:
         fa:b5:36:d1:5a:c4:1c:2a:99:b8:05:bb:b0:1f:cc:fd:c8:08:
         ba:44:36:b6:7c:2f:85:aa:30:39:8a:2f:71:26:ab:26:95:14:
         00:b1:be:b5:47:58:95:8f:79:9d:5c:7a:a9:4c:07:3e:14:a3:
         7c:35:19:0d:f4:c3:ca:92:6f:b3:89:85:d1:d7:d5:d8:1f:0a:
         55:61:7f:94:c7:b9:db:f9:97:98:cc:4b:7a:f5:95:a1:63:38:
         72:72:27:f6:66:42:5c:bc:b7:48:37:2b:50:6f:ed:a9:32:01:
         04:d1:0e:df:93:d7:87:5f:da:9b:29:54:92:8b:85:3c:c7:bc:
         0c:47:17:b7:c8:9b:cb:9e:ef:50:83:cf:dd:93:39:ea:01:6a:
         a3:18:19:e8:87:7e:2c:31:d9:84:3e:8e:8b:6f:72:47:22:6f:
         f7:92:ca:3a:bf:ba:e4:35:b7:f2:ee:12:58:c0:b4:fb:0c:88:
         4a:48:70:67:32:b9:5e:94:af:f4:01:64:39:fc:43:7e:9a:7e:
         66:ea:b9:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYtrAF+yxxOfxz3sS1WS7hBbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiMzE1MmYwZDc3ZTA1N2ZiMmM5YmY4MGQ4MDMzMjk4Nzk0
NDA3NzYwHhcNMjMxMDI2MDgwMTA4WhcNMjMxMDI3MDgwMTA4WjAzMTEwLwYDVQQD
EyhkN2FkNjQ5NDA0YTJhMDViMWY0MjU5ZGQwNmQ2NjI1MWRlZjk2NWFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkiiV7BH7hw8Z5eXRPilTNq3igmB3
wpAvYtbHCFBiQppY4ocVMouEgSjm+XiFhcvjTyMalHRODSLKsbz+6X7USza7J77R
q7m2Fdq0D4SkSqEu1q6LLd+k6QasQeeZMNeBvOWkdrfinbj19+0/6x9qHTURGL06
iLqNQL5A0yLjhbDIOi/w+hgpu4DZKbSVBhZ7w28u2q7TIgcpqzcoUL+jD3f7xORN
k2A/DPoevSpBvWDdj42Y+sbhSS9kfu95HFAdO8kKD7WY5sfvI44ZuQxKbt0uHqHH
yvcACUzv6X0ksuWfMY/DZF9Vnx1lGuzJJMS3pNV9SMq1i+Et/c2RNYMrQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNetZJQEoqBbH0JZ3QbWYlHe+WWvMB8GA1UdIwQY
MBaAFEsxUvDXfgV/ssm/gNgDMph5RAd2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3pGUzhOZC1CWC15eWItQTJBTXltSGxFQjNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8wNWE3NzItYzkyMC00ZDk5LTlhMDUt
ZTJjYjkxMjRmNTQzLzEvU3pGUzhOZC1CWC15eWItQTJBTXltSGxFQjNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy8wNWE3NzItYzkyMC00ZDk5LTlhMDUtZTJjYjkxMjRmNTQz
LzEvU3pGUzhOZC1CWC15eWItQTJBTXltSGxFQjNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFZumUCTe
Utgo87vkrplD80duKy8nBCoOCoT7PBW2QL38yCTK/Kfe0tZcnOV/g7g7TFBl0wT8
+rU20VrEHCqZuAW7sB/M/cgIukQ2tnwvhaowOYovcSarJpUUALG+tUdYlY95nVx6
qUwHPhSjfDUZDfTDypJvs4mF0dfV2B8KVWF/lMe52/mXmMxLevWVoWM4cnIn9mZC
XLy3SDcrUG/tqTIBBNEO35PXh1/amylUkouFPMe8DEcXt8iby57vUIPP3ZM56gFq
oxgZ6Id+LDHZhD6Oi29yRyJv95LKOr+65DW38u4SWMC0+wyISkhwZzK5XpSv9AFk
OfxDfpp+Zuq5DQ==
-----END CERTIFICATE-----