Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/58d593-70ed-4604-92c7-9796571533ed/1/4KzMXcNCESpm6D84zKDgnl86Fyw.mft
File:                     4KzMXcNCESpm6D84zKDgnl86Fyw.mft (raw, json)
Hash identifier:          +UMgsUKXYMJoyFOLkxh2c7/Q3BUOQZSVt27SlxgOfko=
Subject key identifier:   78:71:9A:F3:DE:65:F8:5A:5D:54:99:1B:B9:44:CD:90:3D:FB:69:C7
Authority key identifier: E0:AC:CC:5D:C3:42:11:2A:66:E8:3F:38:CC:A0:E0:9E:5F:3A:17:2C
Certificate issuer:       /CN=e0accc5dc342112a66e83f38cca0e09e5f3a172c
Certificate serial:       0182A907FE9F47B06429EE649B50C24BCFF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4KzMXcNCESpm6D84zKDgnl86Fyw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/58d593-70ed-4604-92c7-9796571533ed/1/4KzMXcNCESpm6D84zKDgnl86Fyw.mft
Manifest number:          0A67
Signing time:             Tue 16 Aug 2022 23:40:49 +0000
Manifest this update:     Tue 16 Aug 2022 23:40:49 +0000
Manifest next update:     Wed 17 Aug 2022 23:40:49 +0000
Files and hashes:         1: 4KzMXcNCESpm6D84zKDgnl86Fyw.crl (hash: XXCtbtsl9FuU01qAny55Ng6Wc/bOSKNBWhwoBPqsaAQ=)
                          2: YA5hMzrXPRNgPOhuAb6pFXXBmtU.roa (hash: irQaHpdy/OOzX3dLwQl2nkZSymhEbAu+D/h4mH6Ebuc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:a9:07:fe:9f:47:b0:64:29:ee:64:9b:50:c2:4b:cf:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0accc5dc342112a66e83f38cca0e09e5f3a172c
        Validity
            Not Before: Aug 16 23:40:49 2022 GMT
            Not After : Aug 17 23:40:49 2022 GMT
        Subject: CN=78719af3de65f85a5d54991bb944cd903dfb69c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b3:61:d5:16:8d:25:3e:68:6b:ce:d8:b2:a0:
                    5c:db:e0:50:5a:aa:66:44:d5:ad:56:9a:46:a9:e6:
                    02:5f:84:0a:bb:d7:45:3a:b7:dd:60:b0:56:c2:db:
                    81:dc:d5:9f:cf:3d:b2:fc:9a:7c:26:c3:52:f8:b5:
                    02:9d:90:b1:e5:32:2a:d4:ea:fd:3a:9e:6e:c8:3a:
                    9b:a8:ed:87:1a:42:30:01:4d:29:cc:ff:7c:e4:f8:
                    64:0d:9b:e7:af:60:07:4c:0f:3e:95:6a:0a:4e:8b:
                    ef:99:c4:5c:25:88:fd:c1:91:9e:f7:ff:59:a9:92:
                    44:82:a7:ed:35:98:7d:d3:9c:cb:d0:10:29:5c:e6:
                    fd:b5:9c:e8:9e:f9:fc:c3:56:80:aa:bd:2c:6e:75:
                    6c:b2:39:c4:ee:25:f7:a6:c2:8a:16:23:7b:89:36:
                    79:6b:78:95:0b:97:ef:15:58:98:b8:d2:24:68:60:
                    97:80:e1:9e:7f:9a:20:0c:4f:eb:26:c1:fa:f6:9b:
                    ae:2a:e6:3f:ca:f9:ca:cd:16:41:ff:1f:84:d6:ab:
                    d7:d9:f9:ed:b6:ee:4d:62:7e:11:03:c1:c6:68:f5:
                    6b:eb:a5:a4:d2:4b:48:25:20:cf:58:4b:9a:5d:50:
                    e4:94:8a:b7:c3:28:45:36:49:e2:36:f4:f7:dd:89:
                    29:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:71:9A:F3:DE:65:F8:5A:5D:54:99:1B:B9:44:CD:90:3D:FB:69:C7
            X509v3 Authority Key Identifier:
                keyid:E0:AC:CC:5D:C3:42:11:2A:66:E8:3F:38:CC:A0:E0:9E:5F:3A:17:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4KzMXcNCESpm6D84zKDgnl86Fyw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/58d593-70ed-4604-92c7-9796571533ed/1/4KzMXcNCESpm6D84zKDgnl86Fyw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/58d593-70ed-4604-92c7-9796571533ed/1/4KzMXcNCESpm6D84zKDgnl86Fyw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:f1:ef:bc:fc:f5:cc:3a:8d:d8:75:13:ff:3a:af:02:2c:e5:
         11:4a:d7:14:a2:dd:d3:e0:b5:c1:48:8b:01:0b:2e:0c:93:f7:
         7f:8f:f0:cf:0d:61:1b:3f:56:9f:c6:0c:e4:52:14:49:d0:8c:
         fc:89:38:11:35:43:bc:8d:3d:88:39:47:7d:a1:6d:66:5a:bb:
         52:23:b4:4d:7f:f3:d1:ab:a2:47:d1:35:33:a2:c2:d9:80:53:
         83:c9:5e:9f:c6:c6:58:96:a8:c8:f3:f5:86:5d:3f:cb:53:34:
         89:46:11:1e:39:08:37:e1:fc:1d:e1:df:60:5f:d6:be:78:d5:
         ef:39:ef:69:0a:46:16:f4:0b:ea:e1:a2:13:41:be:4b:a9:39:
         81:61:31:b1:0d:bb:43:ed:e1:32:6f:d8:45:17:7f:ab:90:80:
         96:ec:ea:ab:62:25:53:8c:42:95:82:40:9f:e0:dd:0b:9c:49:
         d0:4e:b1:c0:4a:bb:7e:93:2f:e5:a7:80:62:6d:1b:3d:b3:57:
         4f:27:d2:8a:51:c7:8f:8f:e8:f4:4d:19:55:cc:c5:36:71:b8:
         6b:55:a4:0a:73:d7:1d:af:fc:35:08:a4:34:98:dd:96:e2:25:
         7a:db:e4:ad:64:9a:44:9b:29:38:ad:0a:b3:25:00:91:37:58:
         4b:0d:28:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYKpB/6fR7BkKe5km1DCS8/0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwYWNjYzVkYzM0MjExMmE2NmU4M2YzOGNjYTBlMDllNWYz
YTE3MmMwHhcNMjIwODE2MjM0MDQ5WhcNMjIwODE3MjM0MDQ5WjAzMTEwLwYDVQQD
Eyg3ODcxOWFmM2RlNjVmODVhNWQ1NDk5MWJiOTQ0Y2Q5MDNkZmI2OWM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbNh1RaNJT5oa87YsqBc2+BQWqpm
RNWtVppGqeYCX4QKu9dFOrfdYLBWwtuB3NWfzz2y/Jp8JsNS+LUCnZCx5TIq1Or9
Op5uyDqbqO2HGkIwAU0pzP985PhkDZvnr2AHTA8+lWoKTovvmcRcJYj9wZGe9/9Z
qZJEgqftNZh905zL0BApXOb9tZzonvn8w1aAqr0sbnVssjnE7iX3psKKFiN7iTZ5
a3iVC5fvFViYuNIkaGCXgOGef5ogDE/rJsH69puuKuY/yvnKzRZB/x+E1qvX2fnt
tu5NYn4RA8HGaPVr66Wk0ktIJSDPWEuaXVDklIq3wyhFNkniNvT33YkpDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHhxmvPeZfhaXVSZG7lEzZA9+2nHMB8GA1UdIwQY
MBaAFOCszF3DQhEqZug/OMyg4J5fOhcsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEt6TVhjTkNFU3BtNkQ4NHpLRGdubDg2Rnl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi81OGQ1OTMtNzBlZC00NjA0LTkyYzct
OTc5NjU3MTUzM2VkLzEvNEt6TVhjTkNFU3BtNkQ4NHpLRGdubDg2Rnl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi81OGQ1OTMtNzBlZC00NjA0LTkyYzctOTc5NjU3MTUzM2Vk
LzEvNEt6TVhjTkNFU3BtNkQ4NHpLRGdubDg2Rnl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfvHvvPz1
zDqN2HUT/zqvAizlEUrXFKLd0+C1wUiLAQsuDJP3f4/wzw1hGz9Wn8YM5FIUSdCM
/Ik4ETVDvI09iDlHfaFtZlq7UiO0TX/z0auiR9E1M6LC2YBTg8len8bGWJaoyPP1
hl0/y1M0iUYRHjkIN+H8HeHfYF/WvnjV7znvaQpGFvQL6uGiE0G+S6k5gWExsQ27
Q+3hMm/YRRd/q5CAluzqq2IlU4xClYJAn+DdC5xJ0E6xwEq7fpMv5aeAYm0bPbNX
TyfSilHHj4/o9E0ZVczFNnG4a1WkCnPXHa/8NQikNJjdluIletvkrWSaRJspOK0K
syUAkTdYSw0o1A==
-----END CERTIFICATE-----