Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/606820-7e11-4896-8360-fc0e1d100650/1/LZ9MkEMWpuNnKsBx5CMk8hmDRLU.mft
File:                     LZ9MkEMWpuNnKsBx5CMk8hmDRLU.mft (raw, json)
Hash identifier:          G4Hea2xPCyQoPbuIIszlN1nyF5KhWqFszpAUBCLolzc=
Subject key identifier:   B8:94:2B:92:FF:28:EC:05:AA:99:88:EE:43:18:1A:1D:48:DC:63:6C
Authority key identifier: 2D:9F:4C:90:43:16:A6:E3:67:2A:C0:71:E4:23:24:F2:19:83:44:B5
Certificate issuer:       /CN=2d9f4c904316a6e3672ac071e42324f2198344b5
Certificate serial:       018B9356E8E370FAE24316DCB0AA187BD5FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LZ9MkEMWpuNnKsBx5CMk8hmDRLU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/606820-7e11-4896-8360-fc0e1d100650/1/LZ9MkEMWpuNnKsBx5CMk8hmDRLU.mft
Manifest number:          04FD
Signing time:             Fri 03 Nov 2023 04:00:28 +0000
Manifest this update:     Fri 03 Nov 2023 04:00:28 +0000
Manifest next update:     Sat 04 Nov 2023 04:00:28 +0000
Files and hashes:         1: 4x_C-SpEdSVsh0nqb_PzjCV5Brs.roa (hash: XjSO1yeYtRRovJxnlkYIUhs3aAVwhRkfIfbci/GP2EE=)
                          2: 8pm_IyvAPfay3blkkkjdSiBDewA.roa (hash: +FiKMAd1xRCYbIQAAXz03QmwrHu9a5eKq3SfvJrL6iM=)
                          3: LZ9MkEMWpuNnKsBx5CMk8hmDRLU.crl (hash: pyEEkDCUyvkU92go+5ceeTvnqXuKXTi3MFj7VH8cZRs=)
                          4: c7gP8YAYuE8993hvWm7T5D4_B0E.roa (hash: RVJInDlfSERgRslh6Qy/3F17f762syj9yBdvUohZ1kY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:93:56:e8:e3:70:fa:e2:43:16:dc:b0:aa:18:7b:d5:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d9f4c904316a6e3672ac071e42324f2198344b5
        Validity
            Not Before: Nov  3 04:00:28 2023 GMT
            Not After : Nov  4 04:00:28 2023 GMT
        Subject: CN=b8942b92ff28ec05aa9988ee43181a1d48dc636c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:83:fd:34:0f:0b:60:bf:2d:e3:2a:43:94:5a:
                    41:81:ba:b6:cb:58:0c:93:96:a9:dd:18:01:41:8a:
                    18:4c:1f:d3:50:e4:f7:8d:bb:cc:82:6b:a1:b1:4d:
                    58:c7:b2:45:56:51:8c:55:08:4d:db:a3:52:9c:47:
                    d8:2a:73:60:fd:ab:e1:bb:1a:a7:57:3f:74:d6:e1:
                    8d:67:ae:53:66:51:de:ec:b5:4e:3d:d6:83:3f:39:
                    c6:17:62:81:48:54:d0:b9:78:6f:be:74:49:23:a9:
                    11:dc:a4:e9:c5:19:66:44:64:ec:74:13:8a:35:78:
                    f2:cc:c7:eb:26:56:53:fc:b4:b7:c5:77:87:87:55:
                    d6:ed:f5:75:49:4b:f9:f2:7d:b0:3f:ef:cf:30:0b:
                    6b:b4:2e:2f:1d:0a:70:83:f0:30:70:03:4a:b6:50:
                    b7:1f:40:3c:86:be:e8:dd:8a:7a:fb:ea:e6:b0:f5:
                    a7:1a:06:93:07:aa:fd:6d:49:99:20:df:7b:87:75:
                    81:7f:5c:55:a7:dc:3d:be:fe:7b:5a:1e:04:78:92:
                    99:59:ba:36:ed:51:ec:90:ab:d7:b7:7c:b4:af:d0:
                    d5:ef:62:a7:00:14:43:0a:a3:a2:a7:46:53:3e:42:
                    f3:ed:0a:ae:9d:1d:e1:e1:63:a2:b0:1d:a0:06:28:
                    6b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:94:2B:92:FF:28:EC:05:AA:99:88:EE:43:18:1A:1D:48:DC:63:6C
            X509v3 Authority Key Identifier:
                keyid:2D:9F:4C:90:43:16:A6:E3:67:2A:C0:71:E4:23:24:F2:19:83:44:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LZ9MkEMWpuNnKsBx5CMk8hmDRLU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/606820-7e11-4896-8360-fc0e1d100650/1/LZ9MkEMWpuNnKsBx5CMk8hmDRLU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/606820-7e11-4896-8360-fc0e1d100650/1/LZ9MkEMWpuNnKsBx5CMk8hmDRLU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:fb:3d:31:6f:d1:ee:75:c0:7b:de:61:fb:db:13:a1:f4:f5:
         3b:9a:5c:ee:53:68:05:c1:9d:e8:95:82:3b:bb:07:e1:44:6f:
         a2:27:aa:d0:21:3e:76:c4:a7:0b:2d:83:9c:ec:ca:cc:af:3c:
         96:7b:29:4a:58:c1:a4:56:86:14:9b:7b:db:8f:58:0d:a9:97:
         59:af:b8:8a:3f:1c:7f:ac:b2:ae:a4:0b:e5:68:2f:d7:5b:dd:
         ab:75:e7:21:e1:69:40:be:6e:a4:0e:3b:55:be:36:7b:b9:29:
         56:bd:e7:6e:a6:cb:13:fe:79:2e:04:7e:7f:0b:40:92:32:27:
         55:98:34:ca:da:cb:74:ff:9f:47:25:a0:c9:cd:12:c4:9f:b8:
         3a:e2:1c:5d:7e:4d:d9:62:c2:b3:a5:1d:12:3e:16:0b:26:61:
         b9:6e:ac:26:10:e9:32:39:72:88:7f:4f:2b:85:b8:8d:96:36:
         4d:b3:17:a7:ed:ee:04:06:67:08:06:94:95:a5:1c:3c:92:2c:
         57:1d:ed:47:90:5e:9c:45:ae:8b:9a:ce:2c:ce:72:26:c8:84:
         94:c1:55:4b:e0:34:67:84:d5:68:c5:f9:d0:f6:2a:3f:ca:57:
         7e:32:fb:ab:d4:12:a1:7e:71:78:d0:d0:97:52:26:f1:b3:f4:
         74:c9:14:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYuTVujjcPriQxbcsKoYe9X7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkOWY0YzkwNDMxNmE2ZTM2NzJhYzA3MWU0MjMyNGYyMTk4
MzQ0YjUwHhcNMjMxMTAzMDQwMDI4WhcNMjMxMTA0MDQwMDI4WjAzMTEwLwYDVQQD
EyhiODk0MmI5MmZmMjhlYzA1YWE5OTg4ZWU0MzE4MWExZDQ4ZGM2MzZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIP9NA8LYL8t4ypDlFpBgbq2y1gM
k5ap3RgBQYoYTB/TUOT3jbvMgmuhsU1Yx7JFVlGMVQhN26NSnEfYKnNg/avhuxqn
Vz901uGNZ65TZlHe7LVOPdaDPznGF2KBSFTQuXhvvnRJI6kR3KTpxRlmRGTsdBOK
NXjyzMfrJlZT/LS3xXeHh1XW7fV1SUv58n2wP+/PMAtrtC4vHQpwg/AwcANKtlC3
H0A8hr7o3Yp6++rmsPWnGgaTB6r9bUmZIN97h3WBf1xVp9w9vv57Wh4EeJKZWbo2
7VHskKvXt3y0r9DV72KnABRDCqOip0ZTPkLz7QqunR3h4WOisB2gBihrNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLiUK5L/KOwFqpmI7kMYGh1I3GNsMB8GA1UdIwQY
MBaAFC2fTJBDFqbjZyrAceQjJPIZg0S1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFo5TWtFTVdwdU5uS3NCeDVDTWs4aG1EUkxVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy82MDY4MjAtN2UxMS00ODk2LTgzNjAt
ZmMwZTFkMTAwNjUwLzEvTFo5TWtFTVdwdU5uS3NCeDVDTWs4aG1EUkxVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy82MDY4MjAtN2UxMS00ODk2LTgzNjAtZmMwZTFkMTAwNjUw
LzEvTFo5TWtFTVdwdU5uS3NCeDVDTWs4aG1EUkxVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHfs9MW/R
7nXAe95h+9sTofT1O5pc7lNoBcGd6JWCO7sH4URvoieq0CE+dsSnCy2DnOzKzK88
lnspSljBpFaGFJt7249YDamXWa+4ij8cf6yyrqQL5Wgv11vdq3XnIeFpQL5upA47
Vb42e7kpVr3nbqbLE/55LgR+fwtAkjInVZg0ytrLdP+fRyWgyc0SxJ+4OuIcXX5N
2WLCs6UdEj4WCyZhuW6sJhDpMjlyiH9PK4W4jZY2TbMXp+3uBAZnCAaUlaUcPJIs
Vx3tR5BenEWui5rOLM5yJsiElMFVS+A0Z4TVaMX50PYqP8pXfjL7q9QSoX5xeNDQ
l1Im8bP0dMkUtA==
-----END CERTIFICATE-----