Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/5b2fd4-f5c5-4e0c-98e8-e17073d3623d/1/N1KdV6bbHsgny65EatOfOdGlGdo.mft
File:                     N1KdV6bbHsgny65EatOfOdGlGdo.mft (raw, json)
Hash identifier:          rXSGAp+ESQ/acGSm1s9lP8XbE2vf7G0juVVlDvWBjUQ=
Subject key identifier:   2F:8D:C4:56:CA:77:BA:0C:6A:CE:C5:83:FA:90:BA:9D:27:3E:9E:11
Authority key identifier: 37:52:9D:57:A6:DB:1E:C8:27:CB:AE:44:6A:D3:9F:39:D1:A5:19:DA
Certificate issuer:       /CN=37529d57a6db1ec827cbae446ad39f39d1a519da
Certificate serial:       01851AE3095CE0D68FFA21C1A3021360D53A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N1KdV6bbHsgny65EatOfOdGlGdo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/5b2fd4-f5c5-4e0c-98e8-e17073d3623d/1/N1KdV6bbHsgny65EatOfOdGlGdo.mft
Manifest number:          0905
Signing time:             Fri 16 Dec 2022 12:22:44 +0000
Manifest this update:     Fri 16 Dec 2022 12:22:44 +0000
Manifest next update:     Sat 17 Dec 2022 12:22:44 +0000
Files and hashes:         1: N1KdV6bbHsgny65EatOfOdGlGdo.crl (hash: K7aFUqAvjBfVkCBDaBRxm65fy6wVrKg3G8UBvkIqx4M=)
                          2: TvEhBRpfzMCfISEbTcciSxVBKjY.roa (hash: 2dXuH9wJdnk4Urh/fIXkVrnf0ksrzPxbt3yWi3MA0jg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:1a:e3:09:5c:e0:d6:8f:fa:21:c1:a3:02:13:60:d5:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37529d57a6db1ec827cbae446ad39f39d1a519da
        Validity
            Not Before: Dec 16 12:22:44 2022 GMT
            Not After : Dec 17 12:22:44 2022 GMT
        Subject: CN=2f8dc456ca77ba0c6acec583fa90ba9d273e9e11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:f6:92:d2:6c:5f:14:a8:32:e9:b9:66:86:ea:
                    9c:a1:47:da:96:c1:ce:24:ad:1d:5a:e5:88:21:aa:
                    d1:e4:c9:5f:b6:2b:30:b0:5a:97:b9:fb:ab:30:d9:
                    56:74:74:88:0b:8b:3e:a2:f3:29:d7:56:03:6c:6f:
                    6f:74:12:03:ae:4b:75:f3:6d:6c:38:d5:d5:90:94:
                    30:c4:f3:15:7d:af:9d:a0:25:b9:02:6c:4c:41:6b:
                    37:39:53:58:52:e5:c8:7d:b2:a0:c4:fe:66:1d:d8:
                    78:fc:e7:2f:c7:5b:9f:d5:62:a4:3c:bd:66:21:53:
                    e1:4c:0b:ed:86:bd:b7:d1:51:e5:6c:18:5d:8c:2c:
                    6c:b2:62:9a:eb:f4:ce:89:2f:45:f4:02:4b:06:6d:
                    17:74:e3:18:87:c9:1a:03:a1:f6:f5:c2:0c:6d:d7:
                    9a:ba:eb:ac:e0:80:40:83:25:49:22:db:43:9f:d7:
                    f0:a7:60:4a:8a:d3:72:52:48:6c:eb:97:ba:70:6c:
                    7e:79:3d:5b:5a:35:c7:ed:46:4b:ff:cd:c2:47:3e:
                    42:6e:62:48:a8:ba:2f:6e:89:8d:76:d6:92:9e:f0:
                    47:d9:66:93:0a:f3:8c:04:9c:9d:bf:4a:df:4c:9a:
                    4a:a8:4b:a6:4b:1b:cb:06:50:a7:83:51:81:86:3e:
                    c6:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:8D:C4:56:CA:77:BA:0C:6A:CE:C5:83:FA:90:BA:9D:27:3E:9E:11
            X509v3 Authority Key Identifier:
                keyid:37:52:9D:57:A6:DB:1E:C8:27:CB:AE:44:6A:D3:9F:39:D1:A5:19:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1KdV6bbHsgny65EatOfOdGlGdo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/5b2fd4-f5c5-4e0c-98e8-e17073d3623d/1/N1KdV6bbHsgny65EatOfOdGlGdo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/5b2fd4-f5c5-4e0c-98e8-e17073d3623d/1/N1KdV6bbHsgny65EatOfOdGlGdo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:aa:9f:bb:87:c4:1e:94:5a:f6:22:77:4a:93:59:37:8f:c2:
         d5:fb:2f:0e:c0:92:e4:71:3b:35:46:b2:18:c4:c3:20:5d:e9:
         cb:60:94:db:4f:58:00:65:39:dd:02:13:ce:88:54:75:f4:ee:
         53:e9:54:b8:63:af:0a:f9:d7:54:8e:d6:68:e2:5b:ba:f4:c4:
         c0:f2:c1:81:b4:46:a2:37:a8:60:11:c0:a4:99:9f:71:f7:5e:
         12:f8:7b:07:ee:49:d8:95:d3:cc:bf:0c:de:41:d3:f1:6e:0d:
         b3:5b:bc:84:d2:6c:ba:6d:04:5f:36:42:78:c5:c7:fc:cd:3d:
         ec:3f:f9:4b:7f:95:4d:df:4d:08:c0:e0:2c:cf:aa:b3:2e:35:
         7b:31:aa:d7:8a:9f:67:6c:25:93:8d:26:f2:c6:ea:60:e8:1a:
         f4:a7:78:a7:3c:1c:9d:47:0d:f3:ff:39:a3:63:25:a2:f1:d2:
         d4:3c:c3:3b:a4:7b:07:71:d3:f3:be:fa:72:fa:0d:10:3c:d2:
         9f:d0:a1:49:40:25:69:66:df:84:d3:21:b0:c0:48:5e:63:ea:
         a6:ce:62:b9:5a:51:cf:f7:ad:08:2f:8e:31:0d:c2:0f:fb:ca:
         f0:88:e9:83:cf:c0:c4:f7:53:a3:71:78:f4:17:0c:15:17:37:
         1f:b5:8a:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYUa4wlc4NaP+iHBowITYNU6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3NTI5ZDU3YTZkYjFlYzgyN2NiYWU0NDZhZDM5ZjM5ZDFh
NTE5ZGEwHhcNMjIxMjE2MTIyMjQ0WhcNMjIxMjE3MTIyMjQ0WjAzMTEwLwYDVQQD
EygyZjhkYzQ1NmNhNzdiYTBjNmFjZWM1ODNmYTkwYmE5ZDI3M2U5ZTExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2/aS0mxfFKgy6blmhuqcoUfalsHO
JK0dWuWIIarR5MlftiswsFqXufurMNlWdHSIC4s+ovMp11YDbG9vdBIDrkt1821s
ONXVkJQwxPMVfa+doCW5AmxMQWs3OVNYUuXIfbKgxP5mHdh4/Ocvx1uf1WKkPL1m
IVPhTAvthr230VHlbBhdjCxssmKa6/TOiS9F9AJLBm0XdOMYh8kaA6H29cIMbdea
uuus4IBAgyVJIttDn9fwp2BKitNyUkhs65e6cGx+eT1bWjXH7UZL/83CRz5CbmJI
qLovbomNdtaSnvBH2WaTCvOMBJydv0rfTJpKqEumSxvLBlCng1GBhj7GPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC+NxFbKd7oMas7Fg/qQup0nPp4RMB8GA1UdIwQY
MBaAFDdSnVem2x7IJ8uuRGrTnznRpRnaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjFLZFY2YmJIc2dueTY1RWF0T2ZPZEdsR2RvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81YjJmZDQtZjVjNS00ZTBjLTk4ZTgt
ZTE3MDczZDM2MjNkLzEvTjFLZFY2YmJIc2dueTY1RWF0T2ZPZEdsR2RvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC81YjJmZDQtZjVjNS00ZTBjLTk4ZTgtZTE3MDczZDM2MjNk
LzEvTjFLZFY2YmJIc2dueTY1RWF0T2ZPZEdsR2RvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmKqfu4fE
HpRa9iJ3SpNZN4/C1fsvDsCS5HE7NUayGMTDIF3py2CU209YAGU53QITzohUdfTu
U+lUuGOvCvnXVI7WaOJbuvTEwPLBgbRGojeoYBHApJmfcfdeEvh7B+5J2JXTzL8M
3kHT8W4Ns1u8hNJsum0EXzZCeMXH/M097D/5S3+VTd9NCMDgLM+qsy41ezGq14qf
Z2wlk40m8sbqYOga9Kd4pzwcnUcN8/85o2MlovHS1DzDO6R7B3HT8776cvoNEDzS
n9ChSUAlaWbfhNMhsMBIXmPqps5iuVpRz/etCC+OMQ3CD/vK8Ijpg8/AxPdTo3F4
9BcMFRc3H7WKyg==
-----END CERTIFICATE-----