Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/8a1db9-7809-4d9c-a61d-04c80122bb08/1/3gRqpNWgaejWr-KJQjKE43tHoqA.mft
File:                     3gRqpNWgaejWr-KJQjKE43tHoqA.mft (raw, json)
Hash identifier:          pcdfxPQFoaaAmx14qLoyjwyQyp6iJM5wFmDw0KdHrlE=
Subject key identifier:   3D:AD:41:69:CA:F0:2B:0A:06:E0:8E:CB:A3:67:8A:07:41:A5:B8:60
Authority key identifier: DE:04:6A:A4:D5:A0:69:E8:D6:AF:E2:89:42:32:84:E3:7B:47:A2:A0
Certificate issuer:       /CN=de046aa4d5a069e8d6afe289423284e37b47a2a0
Certificate serial:       018200132BAC509190839F0390FD10155AB3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3gRqpNWgaejWr-KJQjKE43tHoqA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/8a1db9-7809-4d9c-a61d-04c80122bb08/1/3gRqpNWgaejWr-KJQjKE43tHoqA.mft
Manifest number:          0A04
Signing time:             Fri 15 Jul 2022 04:17:12 +0000
Manifest this update:     Fri 15 Jul 2022 04:17:12 +0000
Manifest next update:     Sat 16 Jul 2022 04:17:12 +0000
Files and hashes:         1: 1-SZCNr3acgpoQAvjv9DrtP3Wsv4.roa (hash: 7giCyF2hMeeDnp7JOH4gZGBUYWE+O6/N8KEv4tD7lGo=)
                          2: 3gRqpNWgaejWr-KJQjKE43tHoqA.crl (hash: wGwdxCpl9HEScml1dSKKbPwobUTDz3sxTOYkXATKBxs=)
                          3: iFOrlXwol6lUgb0VS4CjU5MHOio.roa (hash: ZFZNU7y9DGNd1o3OdbyvWJ2l0hlSBva4GWg7/BKp6PM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:00:13:2b:ac:50:91:90:83:9f:03:90:fd:10:15:5a:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de046aa4d5a069e8d6afe289423284e37b47a2a0
        Validity
            Not Before: Jul 15 04:17:12 2022 GMT
            Not After : Jul 16 04:17:12 2022 GMT
        Subject: CN=3dad4169caf02b0a06e08ecba3678a0741a5b860
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d7:88:32:55:75:e7:73:c3:83:35:4c:64:77:
                    66:98:88:48:b8:5a:cd:78:79:e2:ef:25:e4:87:3b:
                    c0:91:50:2b:b3:e7:df:cb:3e:3e:e9:8a:89:c7:8f:
                    26:bf:59:b8:3c:73:9a:44:76:ed:fa:46:c8:0d:22:
                    e5:b5:e1:d6:44:13:81:8f:e3:77:70:8f:ea:b0:8e:
                    b6:7e:38:9e:26:fb:3c:9b:5a:77:ea:05:1a:c7:4e:
                    3a:c0:34:d1:6f:59:3a:0e:21:f5:bf:fe:3a:57:01:
                    c8:1b:62:9c:66:f0:d3:52:62:f7:a2:89:d9:fa:90:
                    67:df:02:1f:52:9d:43:be:aa:98:12:28:f5:28:cd:
                    9b:02:e3:59:4e:bd:a6:ca:92:c3:4e:74:d7:b7:c3:
                    76:83:62:cd:6c:1a:2b:a7:a6:fe:cb:cb:b1:b9:0c:
                    a3:b5:e1:2a:5f:0b:22:de:1e:3f:26:13:ac:a2:10:
                    2e:65:d6:7a:6a:b7:38:94:e3:a0:b9:fd:de:46:3c:
                    6c:ea:3f:67:22:71:b6:da:0f:f2:a5:e1:c7:6b:ea:
                    de:28:6f:60:91:c3:ca:f2:4f:c6:d4:70:10:31:65:
                    46:f6:2a:03:13:ac:a0:b5:f3:5b:ff:ca:1a:85:61:
                    ec:ec:77:98:9f:9f:05:c8:32:ad:5e:4f:77:fe:f8:
                    73:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:AD:41:69:CA:F0:2B:0A:06:E0:8E:CB:A3:67:8A:07:41:A5:B8:60
            X509v3 Authority Key Identifier:
                keyid:DE:04:6A:A4:D5:A0:69:E8:D6:AF:E2:89:42:32:84:E3:7B:47:A2:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3gRqpNWgaejWr-KJQjKE43tHoqA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/8a1db9-7809-4d9c-a61d-04c80122bb08/1/3gRqpNWgaejWr-KJQjKE43tHoqA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/8a1db9-7809-4d9c-a61d-04c80122bb08/1/3gRqpNWgaejWr-KJQjKE43tHoqA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:3b:1e:af:81:c5:5f:e8:a6:55:07:1c:ee:52:c2:75:7c:7d:
         1d:d8:89:9f:1d:af:bd:a2:e9:bd:52:98:1c:a4:25:b7:d6:cd:
         02:7f:43:81:aa:10:3f:00:0a:70:6d:ff:e6:06:97:92:f0:db:
         cd:56:85:33:f1:35:60:d0:b6:be:95:38:d8:12:f2:fe:c1:d4:
         81:77:f6:04:1b:af:a5:5a:17:8f:d3:e2:e1:26:8f:08:72:08:
         f4:0e:af:f0:72:8f:1b:94:2b:6b:a8:5b:6a:69:a6:a7:12:dc:
         e4:a0:41:2d:aa:9d:4a:e0:6c:5f:bc:ce:46:d3:75:9c:1c:21:
         c2:da:ae:f1:0e:6e:81:ad:2f:d7:05:0e:0d:89:fc:4d:5d:37:
         e5:e4:d0:f3:74:13:0f:16:ae:25:c9:02:3e:b4:a5:4d:23:c6:
         8b:b1:20:34:ac:bf:22:92:fb:70:f1:d9:a5:05:b8:37:74:ea:
         de:10:74:17:28:75:2e:7b:b8:09:67:38:fc:30:91:e1:b4:98:
         68:88:59:a5:99:1d:5e:b8:26:20:33:7b:5f:ad:94:0d:44:88:
         47:64:e0:2f:c4:ae:23:13:cd:d7:76:c6:ce:6e:10:45:c1:9a:
         98:46:2b:da:e8:2a:ec:0a:92:19:22:a9:fb:5d:a7:8b:0b:48:
         a3:5c:4a:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYIAEyusUJGQg58DkP0QFVqzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlMDQ2YWE0ZDVhMDY5ZThkNmFmZTI4OTQyMzI4NGUzN2I0
N2EyYTAwHhcNMjIwNzE1MDQxNzEyWhcNMjIwNzE2MDQxNzEyWjAzMTEwLwYDVQQD
EygzZGFkNDE2OWNhZjAyYjBhMDZlMDhlY2JhMzY3OGEwNzQxYTViODYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdeIMlV153PDgzVMZHdmmIhIuFrN
eHni7yXkhzvAkVArs+ffyz4+6YqJx48mv1m4PHOaRHbt+kbIDSLlteHWRBOBj+N3
cI/qsI62fjieJvs8m1p36gUax046wDTRb1k6DiH1v/46VwHIG2KcZvDTUmL3oonZ
+pBn3wIfUp1DvqqYEij1KM2bAuNZTr2mypLDTnTXt8N2g2LNbBorp6b+y8uxuQyj
teEqXwsi3h4/JhOsohAuZdZ6arc4lOOguf3eRjxs6j9nInG22g/ypeHHa+reKG9g
kcPK8k/G1HAQMWVG9ioDE6ygtfNb/8oahWHs7HeYn58FyDKtXk93/vhzuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD2tQWnK8CsKBuCOy6NnigdBpbhgMB8GA1UdIwQY
MBaAFN4EaqTVoGno1q/iiUIyhON7R6KgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2dScXBOV2dhZWpXci1LSlFqS0U0M3RIb3FBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS84YTFkYjktNzgwOS00ZDljLWE2MWQt
MDRjODAxMjJiYjA4LzEvM2dScXBOV2dhZWpXci1LSlFqS0U0M3RIb3FBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS84YTFkYjktNzgwOS00ZDljLWE2MWQtMDRjODAxMjJiYjA4
LzEvM2dScXBOV2dhZWpXci1LSlFqS0U0M3RIb3FBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmjser4HF
X+imVQcc7lLCdXx9HdiJnx2vvaLpvVKYHKQlt9bNAn9DgaoQPwAKcG3/5gaXkvDb
zVaFM/E1YNC2vpU42BLy/sHUgXf2BBuvpVoXj9Pi4SaPCHII9A6v8HKPG5Qra6hb
ammmpxLc5KBBLaqdSuBsX7zORtN1nBwhwtqu8Q5uga0v1wUODYn8TV035eTQ83QT
DxauJckCPrSlTSPGi7EgNKy/IpL7cPHZpQW4N3Tq3hB0Fyh1Lnu4CWc4/DCR4bSY
aIhZpZkdXrgmIDN7X62UDUSIR2TgL8SuIxPN13bGzm4QRcGamEYr2ugq7AqSGSKp
+12niwtIo1xK0A==
-----END CERTIFICATE-----