Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/a2cf05-939a-401f-8407-c39853672dd7/1/1d5sZezyAdmjVt_EUBM37o2WU4I.mft
File:                     1d5sZezyAdmjVt_EUBM37o2WU4I.mft (raw, json)
Hash identifier:          cSQU61Jt13fwDWE07viMy+n0OOBFP1AbAGNAE9Ef4kw=
Subject key identifier:   39:D5:F0:DF:69:3A:E3:C1:F1:FC:D9:7A:52:AF:46:AF:09:7D:84:12
Authority key identifier: D5:DE:6C:65:EC:F2:01:D9:A3:56:DF:C4:50:13:37:EE:8D:96:53:82
Certificate issuer:       /CN=d5de6c65ecf201d9a356dfc4501337ee8d965382
Certificate serial:       0189D4914B6449711B94C4A522B7D9C31437
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1d5sZezyAdmjVt_EUBM37o2WU4I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/a2cf05-939a-401f-8407-c39853672dd7/1/1d5sZezyAdmjVt_EUBM37o2WU4I.mft
Manifest number:          0855
Signing time:             Tue 08 Aug 2023 09:53:58 +0000
Manifest this update:     Tue 08 Aug 2023 09:53:58 +0000
Manifest next update:     Wed 09 Aug 2023 09:53:58 +0000
Files and hashes:         1: 1d5sZezyAdmjVt_EUBM37o2WU4I.crl (hash: dP+A9GWW2DQAgl17eXf962+EvU2qxLiEw7R927iDf2Q=)
                          2: rDtBkWSr5M7FI96Lc3tBqIDSxFI.roa (hash: Y6nRV5ZwXUt+7yIjbqtnQKMynCW/zUVaOtYM0wgoaWU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:d4:91:4b:64:49:71:1b:94:c4:a5:22:b7:d9:c3:14:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5de6c65ecf201d9a356dfc4501337ee8d965382
        Validity
            Not Before: Aug  8 09:53:58 2023 GMT
            Not After : Aug  9 09:53:58 2023 GMT
        Subject: CN=39d5f0df693ae3c1f1fcd97a52af46af097d8412
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:96:21:3c:41:c9:67:ea:df:81:25:3e:09:3e:
                    4b:28:32:cf:d3:4b:fe:95:16:40:ba:f9:de:87:50:
                    4c:03:a2:32:ef:6f:f3:73:ff:01:15:d6:67:0b:8e:
                    be:0a:cd:4b:34:cf:3e:23:6d:92:f0:16:b2:1b:cc:
                    34:91:5e:58:65:7e:69:50:19:aa:12:25:50:cd:91:
                    dc:fc:16:94:ed:f1:c9:f2:f7:80:c0:46:34:7d:75:
                    01:fa:21:f0:e1:ae:b2:b2:03:72:fd:99:da:a6:d0:
                    2d:ea:d7:f3:e6:9a:26:6f:d4:59:e7:ba:d0:9a:6f:
                    ea:7a:bc:ef:a6:55:30:3c:32:fe:44:15:cd:e1:34:
                    23:f5:d7:bd:5b:d4:2e:63:7c:cd:5b:84:8f:0d:04:
                    bc:5d:df:65:c2:4e:fd:8c:55:3e:2d:3a:33:3a:b9:
                    e4:85:5a:c2:d7:a0:36:e4:92:17:2b:d8:08:73:31:
                    38:b4:60:8b:16:ae:2b:0c:49:6c:52:24:10:50:8c:
                    c2:da:83:23:24:01:86:58:e3:41:a9:07:02:4f:d1:
                    eb:15:1b:49:a0:31:64:e9:47:55:94:61:eb:17:a8:
                    38:3d:2d:bc:2b:89:4a:6e:d5:c6:33:31:32:eb:c5:
                    1a:d7:03:12:60:ab:33:0c:db:bc:b0:86:d5:40:1e:
                    9c:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:D5:F0:DF:69:3A:E3:C1:F1:FC:D9:7A:52:AF:46:AF:09:7D:84:12
            X509v3 Authority Key Identifier:
                keyid:D5:DE:6C:65:EC:F2:01:D9:A3:56:DF:C4:50:13:37:EE:8D:96:53:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d5sZezyAdmjVt_EUBM37o2WU4I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a2cf05-939a-401f-8407-c39853672dd7/1/1d5sZezyAdmjVt_EUBM37o2WU4I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a2cf05-939a-401f-8407-c39853672dd7/1/1d5sZezyAdmjVt_EUBM37o2WU4I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:7d:55:5d:bb:a3:fb:e0:7d:28:92:29:f0:6d:94:30:b0:e9:
         cd:78:ad:06:7a:21:3a:02:f0:7c:5b:f5:02:00:ca:2a:d2:e4:
         ae:c8:5a:40:52:97:bb:12:cd:99:20:5b:d3:b4:fb:03:c4:19:
         2d:f0:7c:da:f7:0b:43:65:61:82:7e:4e:bf:af:11:89:21:db:
         6c:a5:4d:1e:40:dd:4b:62:9e:d7:81:ee:c6:a5:66:01:ea:26:
         26:44:d2:2f:2b:24:61:93:74:59:01:dc:58:ea:75:4a:de:48:
         24:44:a7:1f:d7:de:74:92:3e:ba:a3:68:6a:92:76:1e:ef:c8:
         4f:0a:86:ad:ed:00:30:de:94:62:2c:31:f6:19:15:91:1c:7d:
         61:0f:96:47:36:e6:d3:ad:f9:f6:6d:87:80:df:79:c6:57:46:
         08:a2:68:ed:69:38:f4:78:86:93:c3:0a:ed:a4:99:4f:c5:d6:
         f0:79:1b:3f:60:f7:4b:1f:06:e4:24:2c:c4:2d:8b:e9:80:c2:
         73:a3:9f:cd:1d:12:1c:88:c4:36:85:d5:bd:4e:6e:56:6c:20:
         6f:1f:ce:cc:86:b6:db:fb:6e:eb:69:c3:a5:8e:8f:b5:1b:22:
         07:37:f2:67:d2:f5:5e:08:a8:44:65:9b:7d:53:1f:6b:99:a1:
         9d:21:60:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYnUkUtkSXEblMSlIrfZwxQ3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1ZGU2YzY1ZWNmMjAxZDlhMzU2ZGZjNDUwMTMzN2VlOGQ5
NjUzODIwHhcNMjMwODA4MDk1MzU4WhcNMjMwODA5MDk1MzU4WjAzMTEwLwYDVQQD
EygzOWQ1ZjBkZjY5M2FlM2MxZjFmY2Q5N2E1MmFmNDZhZjA5N2Q4NDEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJYhPEHJZ+rfgSU+CT5LKDLP00v+
lRZAuvneh1BMA6Iy72/zc/8BFdZnC46+Cs1LNM8+I22S8BayG8w0kV5YZX5pUBmq
EiVQzZHc/BaU7fHJ8veAwEY0fXUB+iHw4a6ysgNy/ZnaptAt6tfz5pomb9RZ57rQ
mm/qerzvplUwPDL+RBXN4TQj9de9W9QuY3zNW4SPDQS8Xd9lwk79jFU+LTozOrnk
hVrC16A25JIXK9gIczE4tGCLFq4rDElsUiQQUIzC2oMjJAGGWONBqQcCT9HrFRtJ
oDFk6UdVlGHrF6g4PS28K4lKbtXGMzEy68Ua1wMSYKszDNu8sIbVQB6cEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDnV8N9pOuPB8fzZelKvRq8JfYQSMB8GA1UdIwQY
MBaAFNXebGXs8gHZo1bfxFATN+6NllOCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWQ1c1plenlBZG1qVnRfRVVCTTM3bzJXVTRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9hMmNmMDUtOTM5YS00MDFmLTg0MDct
YzM5ODUzNjcyZGQ3LzEvMWQ1c1plenlBZG1qVnRfRVVCTTM3bzJXVTRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9hMmNmMDUtOTM5YS00MDFmLTg0MDctYzM5ODUzNjcyZGQ3
LzEvMWQ1c1plenlBZG1qVnRfRVVCTTM3bzJXVTRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhX1VXbuj
++B9KJIp8G2UMLDpzXitBnohOgLwfFv1AgDKKtLkrshaQFKXuxLNmSBb07T7A8QZ
LfB82vcLQ2Vhgn5Ov68RiSHbbKVNHkDdS2Ke14HuxqVmAeomJkTSLyskYZN0WQHc
WOp1St5IJESnH9fedJI+uqNoapJ2Hu/ITwqGre0AMN6UYiwx9hkVkRx9YQ+WRzbm
06359m2HgN95xldGCKJo7Wk49HiGk8MK7aSZT8XW8HkbP2D3Sx8G5CQsxC2L6YDC
c6OfzR0SHIjENoXVvU5uVmwgbx/OzIa22/tu62nDpY6PtRsiBzfyZ9L1XgioRGWb
fVMfa5mhnSFgUQ==
-----END CERTIFICATE-----
Generated at Tue Aug 8 12:25:38 2023 by rpki-client on console-fra.rpki-client.org