Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/1feae3-00b9-4157-9478-686267797793/1/1sF1waGCdwwHcMLO2oT8xRxMFqs.mft
File:                     1sF1waGCdwwHcMLO2oT8xRxMFqs.mft (raw, json)
Hash identifier:          1Qs0CVhOHz02u4QN5FZCxqLNnwgNXCjfAEGDpg9HiBI=
Subject key identifier:   E5:7C:C1:04:66:CB:93:C0:A3:4A:38:AA:93:2F:4F:6E:26:10:6D:94
Authority key identifier: D6:C1:75:C1:A1:82:77:0C:07:70:C2:CE:DA:84:FC:C5:1C:4C:16:AB
Certificate issuer:       /CN=d6c175c1a182770c0770c2ceda84fcc51c4c16ab
Certificate serial:       018523EC82B4AB790BF15AD092D06CC7FBCC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1sF1waGCdwwHcMLO2oT8xRxMFqs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/1feae3-00b9-4157-9478-686267797793/1/1sF1waGCdwwHcMLO2oT8xRxMFqs.mft
Manifest number:          0499
Signing time:             Sun 18 Dec 2022 06:29:40 +0000
Manifest this update:     Sun 18 Dec 2022 06:29:40 +0000
Manifest next update:     Mon 19 Dec 2022 06:29:40 +0000
Files and hashes:         1: 1sF1waGCdwwHcMLO2oT8xRxMFqs.crl (hash: EhKBAbQCH4G8oSo+2wxF3gF7CxWQmeeG5GZ8bs/yca4=)
                          2: p63tplu7rnlRJ7jFGWFleyJBzac.roa (hash: v5gxJ8SWkRbHsUkU1mpylnP28Lv9TIoDUFlgw2+WZ0U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:23:ec:82:b4:ab:79:0b:f1:5a:d0:92:d0:6c:c7:fb:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6c175c1a182770c0770c2ceda84fcc51c4c16ab
        Validity
            Not Before: Dec 18 06:29:40 2022 GMT
            Not After : Dec 19 06:29:40 2022 GMT
        Subject: CN=e57cc10466cb93c0a34a38aa932f4f6e26106d94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:51:91:3f:0b:78:fc:50:43:af:9f:09:23:59:
                    96:4c:1d:4f:49:4f:03:2d:d8:42:c7:12:b2:d5:cb:
                    46:29:66:58:4b:bd:08:94:f9:e1:b7:21:47:cd:e2:
                    d3:85:a1:09:9e:3c:5f:e3:58:c4:22:84:21:d3:1b:
                    aa:5e:86:37:a6:e3:9f:5d:ff:45:b0:18:6b:0d:17:
                    f6:4a:c7:83:a1:52:dd:56:28:76:47:f6:5f:e8:2a:
                    7a:f4:58:8f:12:d7:de:f0:84:e1:c9:e5:53:a6:41:
                    59:81:b5:6b:37:6f:8f:3e:6c:dc:3f:ea:51:c9:8c:
                    ab:5c:d9:55:68:63:7c:e8:21:55:d7:ce:64:5c:a6:
                    90:ae:f7:5a:ac:82:be:45:e5:f3:52:4b:b9:57:cd:
                    7c:4d:f8:42:56:b0:ba:cd:3f:56:8c:b1:6d:7b:18:
                    c6:ae:a3:97:7a:c8:09:f4:db:43:22:32:c2:e6:46:
                    42:88:78:a8:fa:95:5a:50:f8:1e:24:ad:75:e0:8c:
                    5d:cc:0e:f9:e9:d8:91:9c:a6:8b:d5:3d:4d:be:76:
                    4a:d8:61:10:f7:32:bd:89:2c:9f:bf:48:1e:c3:9a:
                    3c:4e:7e:63:a9:8a:4a:50:a8:f9:57:30:c6:41:12:
                    2a:13:b8:7f:8f:47:7d:95:01:a5:1c:83:a7:4b:a2:
                    01:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:7C:C1:04:66:CB:93:C0:A3:4A:38:AA:93:2F:4F:6E:26:10:6D:94
            X509v3 Authority Key Identifier:
                keyid:D6:C1:75:C1:A1:82:77:0C:07:70:C2:CE:DA:84:FC:C5:1C:4C:16:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1sF1waGCdwwHcMLO2oT8xRxMFqs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/1feae3-00b9-4157-9478-686267797793/1/1sF1waGCdwwHcMLO2oT8xRxMFqs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/1feae3-00b9-4157-9478-686267797793/1/1sF1waGCdwwHcMLO2oT8xRxMFqs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:b6:d6:31:f3:8a:5f:41:27:1d:bb:d3:bd:f0:13:45:21:4d:
         2f:3e:2a:4a:7d:7d:60:96:98:9b:21:f3:4a:06:f1:01:83:74:
         02:65:5f:ef:02:b7:04:80:9b:92:d2:b6:e1:79:c6:a7:7a:ef:
         d7:b2:f1:70:55:9c:72:ed:ec:53:15:c1:1f:89:d2:81:61:19:
         74:be:8e:6f:7f:d7:b8:81:29:74:b3:14:26:f2:2d:65:90:d6:
         0d:5b:4c:90:5e:05:c7:dc:80:89:11:f3:b2:d2:48:8a:84:41:
         f1:31:40:ce:f2:d3:55:a1:94:2d:55:87:5d:36:82:21:52:d0:
         4e:11:2f:25:10:57:74:d0:34:1c:92:0f:25:ad:ec:c2:c0:be:
         4a:a8:ed:81:53:67:f3:0c:0d:92:fe:b9:31:16:25:ea:42:a8:
         a0:24:b3:28:35:99:15:bd:a5:3d:45:68:ac:81:21:47:81:40:
         89:42:9b:ff:44:ab:ab:8e:07:8d:2d:6b:9a:94:59:e4:44:93:
         81:9d:5a:1c:e5:b8:9e:01:96:4b:22:ef:8e:07:24:64:13:2d:
         68:eb:39:5a:78:5b:d1:c3:f2:f7:4c:70:88:9d:7a:d8:91:a0:
         0a:d8:1e:a9:00:f2:ec:27:32:3a:7b:a5:00:0d:d6:27:a5:b2:
         d9:7b:78:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYUj7IK0q3kL8VrQktBsx/vMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2YzE3NWMxYTE4Mjc3MGMwNzcwYzJjZWRhODRmY2M1MWM0
YzE2YWIwHhcNMjIxMjE4MDYyOTQwWhcNMjIxMjE5MDYyOTQwWjAzMTEwLwYDVQQD
EyhlNTdjYzEwNDY2Y2I5M2MwYTM0YTM4YWE5MzJmNGY2ZTI2MTA2ZDk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVGRPwt4/FBDr58JI1mWTB1PSU8D
LdhCxxKy1ctGKWZYS70IlPnhtyFHzeLThaEJnjxf41jEIoQh0xuqXoY3puOfXf9F
sBhrDRf2SseDoVLdVih2R/Zf6Cp69FiPEtfe8IThyeVTpkFZgbVrN2+PPmzcP+pR
yYyrXNlVaGN86CFV185kXKaQrvdarIK+ReXzUku5V818TfhCVrC6zT9WjLFtexjG
rqOXesgJ9NtDIjLC5kZCiHio+pVaUPgeJK114IxdzA756diRnKaL1T1NvnZK2GEQ
9zK9iSyfv0gew5o8Tn5jqYpKUKj5VzDGQRIqE7h/j0d9lQGlHIOnS6IBKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOV8wQRmy5PAo0o4qpMvT24mEG2UMB8GA1UdIwQY
MBaAFNbBdcGhgncMB3DCztqE/MUcTBarMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXNGMXdhR0Nkd3dIY01MTzJvVDh4UnhNRnFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8xZmVhZTMtMDBiOS00MTU3LTk0Nzgt
Njg2MjY3Nzk3NzkzLzEvMXNGMXdhR0Nkd3dIY01MTzJvVDh4UnhNRnFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC8xZmVhZTMtMDBiOS00MTU3LTk0NzgtNjg2MjY3Nzk3Nzkz
LzEvMXNGMXdhR0Nkd3dIY01MTzJvVDh4UnhNRnFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl7bWMfOK
X0EnHbvTvfATRSFNLz4qSn19YJaYmyHzSgbxAYN0AmVf7wK3BICbktK24XnGp3rv
17LxcFWccu3sUxXBH4nSgWEZdL6Ob3/XuIEpdLMUJvItZZDWDVtMkF4Fx9yAiRHz
stJIioRB8TFAzvLTVaGULVWHXTaCIVLQThEvJRBXdNA0HJIPJa3swsC+SqjtgVNn
8wwNkv65MRYl6kKooCSzKDWZFb2lPUVorIEhR4FAiUKb/0Srq44HjS1rmpRZ5EST
gZ1aHOW4ngGWSyLvjgckZBMtaOs5Wnhb0cPy90xwiJ162JGgCtgeqQDy7CcyOnul
AA3WJ6Wy2Xt4qg==
-----END CERTIFICATE-----