Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/f2daf4-2e9f-4921-82d8-fc42ae5ec1b5/1/gSps3Fy5zpz9lQs0QNMIO3iLleY.mft
File:                     gSps3Fy5zpz9lQs0QNMIO3iLleY.mft (raw, json)
Hash identifier:          ta6/GN5c4RN/E+j1fmmautdX3bkyc5Sshxg/DBMdRUU=
Subject key identifier:   26:A8:2A:DB:5A:E0:C7:58:D4:7C:A0:B0:E5:5C:6C:08:AF:5A:FE:30
Authority key identifier: 81:2A:6C:DC:5C:B9:CE:9C:FD:95:0B:34:40:D3:08:3B:78:8B:95:E6
Certificate issuer:       /CN=812a6cdc5cb9ce9cfd950b3440d3083b788b95e6
Certificate serial:       018BD124B4A2C43D9ED7845E7758C6F1C916
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gSps3Fy5zpz9lQs0QNMIO3iLleY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/f2daf4-2e9f-4921-82d8-fc42ae5ec1b5/1/gSps3Fy5zpz9lQs0QNMIO3iLleY.mft
Manifest number:          08A3
Signing time:             Wed 15 Nov 2023 04:02:05 +0000
Manifest this update:     Wed 15 Nov 2023 04:02:05 +0000
Manifest next update:     Thu 16 Nov 2023 04:02:05 +0000
Files and hashes:         1: KaNqLlzgHtmW8jgqVQbSgUvPjl8.roa (hash: WOEJp7iewyFEOEMGHT8IJRcokblBwJD5lnBoaNHXDhc=)
                          2: gSps3Fy5zpz9lQs0QNMIO3iLleY.crl (hash: 6JSymg/aPAblwNYwEHn9UbjfuyOpSXpUwkmNbuNeUBs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:d1:24:b4:a2:c4:3d:9e:d7:84:5e:77:58:c6:f1:c9:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=812a6cdc5cb9ce9cfd950b3440d3083b788b95e6
        Validity
            Not Before: Nov 15 04:02:05 2023 GMT
            Not After : Nov 16 04:02:05 2023 GMT
        Subject: CN=26a82adb5ae0c758d47ca0b0e55c6c08af5afe30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:19:34:5e:d3:36:cc:46:8e:0a:83:cd:5b:a2:
                    10:22:8b:bd:3e:a9:ac:f1:fd:a9:e1:4d:ba:8b:54:
                    84:e9:01:df:0f:cf:d4:fe:75:13:09:32:7f:e6:57:
                    d3:c2:8d:7c:cf:04:8e:8f:06:b2:00:fb:20:f0:60:
                    a8:e7:5d:49:ba:d6:84:6b:5e:79:ac:ad:83:88:c2:
                    8e:0f:94:21:3e:60:44:30:7b:0d:1c:7e:2d:19:cd:
                    16:f9:c1:62:dd:67:bd:81:01:13:06:24:ac:41:90:
                    f9:70:8c:e5:92:59:85:4b:89:6e:da:50:69:2b:65:
                    7d:e7:63:35:8b:00:db:c9:62:ef:51:e1:e5:8c:89:
                    2b:80:6b:29:f6:c8:57:0f:56:df:fc:b5:8e:a3:5d:
                    a6:1d:c6:d4:00:0b:6b:c3:c8:76:02:eb:f9:1e:28:
                    b4:e2:b7:92:b9:23:8d:4c:fe:c4:2e:83:8d:fb:6e:
                    c6:63:8d:f8:9c:42:b2:80:19:8f:8d:43:4b:10:a2:
                    a5:02:a9:b2:80:2a:68:c0:9f:18:1d:2a:a5:89:a3:
                    79:d4:cb:ff:4b:6e:05:fc:fb:14:7c:c3:0e:dd:17:
                    47:7c:ad:13:2b:a4:9b:c8:58:5c:97:91:a1:26:bd:
                    b6:39:df:3c:ee:71:c6:46:a8:e0:5c:71:81:1f:8a:
                    d4:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:A8:2A:DB:5A:E0:C7:58:D4:7C:A0:B0:E5:5C:6C:08:AF:5A:FE:30
            X509v3 Authority Key Identifier:
                keyid:81:2A:6C:DC:5C:B9:CE:9C:FD:95:0B:34:40:D3:08:3B:78:8B:95:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gSps3Fy5zpz9lQs0QNMIO3iLleY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f2daf4-2e9f-4921-82d8-fc42ae5ec1b5/1/gSps3Fy5zpz9lQs0QNMIO3iLleY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f2daf4-2e9f-4921-82d8-fc42ae5ec1b5/1/gSps3Fy5zpz9lQs0QNMIO3iLleY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:ff:7b:34:0c:0f:5a:92:39:57:31:db:a2:8f:27:79:5f:4b:
         f4:81:58:5c:20:b8:18:98:f1:48:e2:ac:e2:6d:71:93:85:15:
         5e:d5:9d:46:74:60:ef:48:5a:32:01:3d:f7:3b:ef:52:6c:19:
         a2:40:07:2a:6c:d0:66:66:f1:0f:c3:be:bd:7d:2d:32:3f:e8:
         48:74:65:ff:48:1d:27:a4:6f:5a:45:0e:c3:d8:38:51:06:cc:
         cb:27:6d:df:30:b4:b4:12:b2:65:f2:85:4f:01:ea:22:7e:56:
         09:81:ce:bb:3a:e3:c8:8e:f5:5a:43:a8:56:72:9f:b6:37:f1:
         97:f8:06:38:d7:fb:94:ff:c7:68:e1:61:4a:5e:16:ca:3a:04:
         9a:28:25:16:00:f6:15:0e:07:71:e2:f6:25:8f:7f:db:30:7a:
         0a:b3:95:a9:71:11:90:dd:16:e2:97:2e:a2:09:6d:7e:ed:4e:
         d2:39:75:fb:f8:a8:d9:fd:05:de:97:7b:1f:0a:68:22:5d:b0:
         c6:37:a2:2f:7b:43:eb:33:4e:d8:74:24:a5:c8:fc:63:34:66:
         3f:9c:7b:b8:f2:ce:4c:0e:a1:31:81:b0:ed:66:fc:24:fb:49:
         d6:8f:77:f9:73:54:b7:d6:a9:57:f4:cb:58:9a:77:b8:d7:3d:
         56:88:7d:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYvRJLSixD2e14Red1jG8ckWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxMmE2Y2RjNWNiOWNlOWNmZDk1MGIzNDQwZDMwODNiNzg4
Yjk1ZTYwHhcNMjMxMTE1MDQwMjA1WhcNMjMxMTE2MDQwMjA1WjAzMTEwLwYDVQQD
EygyNmE4MmFkYjVhZTBjNzU4ZDQ3Y2EwYjBlNTVjNmMwOGFmNWFmZTMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhk0XtM2zEaOCoPNW6IQIou9Pqms
8f2p4U26i1SE6QHfD8/U/nUTCTJ/5lfTwo18zwSOjwayAPsg8GCo511JutaEa155
rK2DiMKOD5QhPmBEMHsNHH4tGc0W+cFi3We9gQETBiSsQZD5cIzlklmFS4lu2lBp
K2V952M1iwDbyWLvUeHljIkrgGsp9shXD1bf/LWOo12mHcbUAAtrw8h2Auv5Hii0
4reSuSONTP7ELoON+27GY434nEKygBmPjUNLEKKlAqmygCpowJ8YHSqliaN51Mv/
S24F/PsUfMMO3RdHfK0TK6SbyFhcl5GhJr22Od887nHGRqjgXHGBH4rUNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCaoKtta4MdY1HygsOVcbAivWv4wMB8GA1UdIwQY
MBaAFIEqbNxcuc6c/ZULNEDTCDt4i5XmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1NwczNGeTV6cHo5bFFzMFFOTUlPM2lMbGVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9mMmRhZjQtMmU5Zi00OTIxLTgyZDgt
ZmM0MmFlNWVjMWI1LzEvZ1NwczNGeTV6cHo5bFFzMFFOTUlPM2lMbGVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9mMmRhZjQtMmU5Zi00OTIxLTgyZDgtZmM0MmFlNWVjMWI1
LzEvZ1NwczNGeTV6cHo5bFFzMFFOTUlPM2lMbGVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqv97NAwP
WpI5VzHboo8neV9L9IFYXCC4GJjxSOKs4m1xk4UVXtWdRnRg70haMgE99zvvUmwZ
okAHKmzQZmbxD8O+vX0tMj/oSHRl/0gdJ6RvWkUOw9g4UQbMyydt3zC0tBKyZfKF
TwHqIn5WCYHOuzrjyI71WkOoVnKftjfxl/gGONf7lP/HaOFhSl4WyjoEmiglFgD2
FQ4HceL2JY9/2zB6CrOVqXERkN0W4pcuogltfu1O0jl1+/io2f0F3pd7HwpoIl2w
xjeiL3tD6zNO2HQkpcj8YzRmP5x7uPLOTA6hMYGw7Wb8JPtJ1o93+XNUt9apV/TL
WJp3uNc9Voh9iQ==
-----END CERTIFICATE-----