Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/991ad9-d953-43a8-8584-723b33cb0ef9/1/18xWofINWmAylmGWNXhv3iZFjRI.mft
File:                     18xWofINWmAylmGWNXhv3iZFjRI.mft (raw, json)
Hash identifier:          XAjel/WzLBngYCxWF0IWt29JhJ5opoGmErVWX9pOJcE=
Subject key identifier:   84:2F:08:33:A7:3A:80:7A:C3:5E:FC:2C:F8:A8:C6:5F:3D:EA:9B:75
Authority key identifier: D7:CC:56:A1:F2:0D:5A:60:32:96:61:96:35:78:6F:DE:26:45:8D:12
Certificate issuer:       /CN=d7cc56a1f20d5a603296619635786fde26458d12
Certificate serial:       018A8342E028265699AFD9A6E3C903A892FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/18xWofINWmAylmGWNXhv3iZFjRI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/991ad9-d953-43a8-8584-723b33cb0ef9/1/18xWofINWmAylmGWNXhv3iZFjRI.mft
Manifest number:          0EDE
Signing time:             Mon 11 Sep 2023 08:01:52 +0000
Manifest this update:     Mon 11 Sep 2023 08:01:52 +0000
Manifest next update:     Tue 12 Sep 2023 08:01:52 +0000
Files and hashes:         1: 18xWofINWmAylmGWNXhv3iZFjRI.crl (hash: EoYVwW2/4/gnXphhOuhpPcwqnYyYK36Ju+rlT68AOTA=)
                          2: wkoXSuCS-gyUYQAI_3JePEAKvd4.roa (hash: ZXQIBbQ0WT5xoGm2ZSZnZiKG4zq8Icmc5T3s5hOhKNE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:83:42:e0:28:26:56:99:af:d9:a6:e3:c9:03:a8:92:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7cc56a1f20d5a603296619635786fde26458d12
        Validity
            Not Before: Sep 11 08:01:52 2023 GMT
            Not After : Sep 12 08:01:52 2023 GMT
        Subject: CN=842f0833a73a807ac35efc2cf8a8c65f3dea9b75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:c4:68:c6:90:8a:de:a9:dc:85:03:87:16:32:
                    22:45:66:04:58:a2:fd:a6:44:26:ee:bd:25:2d:37:
                    0d:eb:aa:b2:e7:aa:c8:f5:6d:81:2d:17:cd:f2:dc:
                    9f:e9:ab:98:f4:db:f1:1a:21:03:cd:3e:62:c7:a7:
                    e9:f4:5c:c5:b4:e7:76:4a:84:8a:39:ae:d6:24:3b:
                    ff:ed:80:e3:f4:1a:bb:a5:13:eb:e0:a5:3e:c8:8f:
                    0a:ae:74:6b:46:b3:ce:a4:55:ae:47:56:c3:cf:7d:
                    94:64:07:c0:b6:f2:3c:b3:71:08:eb:42:64:fe:aa:
                    07:aa:a1:a5:7d:2c:90:17:81:b0:bc:f7:20:9c:9c:
                    db:37:54:88:a6:81:bb:44:c7:fb:e9:71:a0:50:99:
                    14:be:01:ef:b2:b6:76:43:9c:8a:ac:98:13:58:06:
                    05:98:22:56:92:af:40:e7:aa:f3:40:b3:39:35:f8:
                    75:e4:d3:12:ec:c9:ea:8e:7f:fb:6d:ac:97:68:8b:
                    ee:6f:b8:fb:5e:9f:2f:1a:12:ed:83:3b:3d:85:92:
                    0f:15:2a:7d:28:54:47:dd:6b:74:ee:61:df:c5:ed:
                    f4:46:2f:db:99:07:5e:ff:91:44:04:e2:d5:b4:5a:
                    5f:d1:e4:8a:c9:a9:f3:e2:28:1f:33:9b:01:81:5f:
                    ae:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:2F:08:33:A7:3A:80:7A:C3:5E:FC:2C:F8:A8:C6:5F:3D:EA:9B:75
            X509v3 Authority Key Identifier:
                keyid:D7:CC:56:A1:F2:0D:5A:60:32:96:61:96:35:78:6F:DE:26:45:8D:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18xWofINWmAylmGWNXhv3iZFjRI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/991ad9-d953-43a8-8584-723b33cb0ef9/1/18xWofINWmAylmGWNXhv3iZFjRI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/991ad9-d953-43a8-8584-723b33cb0ef9/1/18xWofINWmAylmGWNXhv3iZFjRI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:31:1e:16:8d:0e:3a:14:4e:7c:5a:49:19:95:a4:12:22:78:
         c3:fb:bc:95:07:7a:0d:60:30:3a:c4:f9:6b:14:c8:73:f3:df:
         6e:c5:6a:2f:bc:8d:c0:ba:6e:d9:be:8c:33:d1:1e:a2:e3:5a:
         7d:83:a3:03:8f:61:68:bb:32:fa:8c:e4:ea:83:4f:15:91:58:
         b0:f1:b1:44:e9:6c:31:d6:d1:18:f1:60:6b:f7:88:78:ee:14:
         d2:d1:22:09:65:10:52:54:e6:de:2a:0b:5b:7a:a4:77:a2:72:
         52:2e:18:f1:2d:dd:d8:85:ed:f0:19:29:95:7e:1c:f7:69:0d:
         85:82:09:2d:4e:6b:aa:95:9a:ea:20:39:91:e3:f1:72:75:78:
         7b:4a:65:cc:d3:3f:a3:47:91:ab:8c:89:4d:e0:ed:6d:e7:ba:
         fe:d9:17:b2:58:f8:b2:32:bd:74:aa:85:63:eb:f3:4a:db:f6:
         54:0c:2f:1a:60:e9:5c:37:a2:62:fb:39:98:8d:71:1b:8d:fc:
         44:58:20:09:c6:9b:bd:ad:4f:1a:f6:69:3d:7a:36:28:e3:38:
         a6:e5:42:60:35:41:1e:73:fa:31:da:7c:61:19:9d:52:d7:07:
         a3:2e:c6:2e:a0:e4:ab:b5:73:88:e8:7e:d2:f4:2b:25:b6:fc:
         23:6c:5f:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYqDQuAoJlaZr9mm48kDqJL9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3Y2M1NmExZjIwZDVhNjAzMjk2NjE5NjM1Nzg2ZmRlMjY0
NThkMTIwHhcNMjMwOTExMDgwMTUyWhcNMjMwOTEyMDgwMTUyWjAzMTEwLwYDVQQD
Eyg4NDJmMDgzM2E3M2E4MDdhYzM1ZWZjMmNmOGE4YzY1ZjNkZWE5Yjc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcRoxpCK3qnchQOHFjIiRWYEWKL9
pkQm7r0lLTcN66qy56rI9W2BLRfN8tyf6auY9NvxGiEDzT5ix6fp9FzFtOd2SoSK
Oa7WJDv/7YDj9Bq7pRPr4KU+yI8KrnRrRrPOpFWuR1bDz32UZAfAtvI8s3EI60Jk
/qoHqqGlfSyQF4GwvPcgnJzbN1SIpoG7RMf76XGgUJkUvgHvsrZ2Q5yKrJgTWAYF
mCJWkq9A56rzQLM5Nfh15NMS7Mnqjn/7bayXaIvub7j7Xp8vGhLtgzs9hZIPFSp9
KFRH3Wt07mHfxe30Ri/bmQde/5FEBOLVtFpf0eSKyanz4igfM5sBgV+u+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIQvCDOnOoB6w178LPioxl896pt1MB8GA1UdIwQY
MBaAFNfMVqHyDVpgMpZhljV4b94mRY0SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTh4V29mSU5XbUF5bG1HV05YaHYzaVpGalJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS85OTFhZDktZDk1My00M2E4LTg1ODQt
NzIzYjMzY2IwZWY5LzEvMTh4V29mSU5XbUF5bG1HV05YaHYzaVpGalJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS85OTFhZDktZDk1My00M2E4LTg1ODQtNzIzYjMzY2IwZWY5
LzEvMTh4V29mSU5XbUF5bG1HV05YaHYzaVpGalJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAczEeFo0O
OhROfFpJGZWkEiJ4w/u8lQd6DWAwOsT5axTIc/PfbsVqL7yNwLpu2b6MM9EeouNa
fYOjA49haLsy+ozk6oNPFZFYsPGxROlsMdbRGPFga/eIeO4U0tEiCWUQUlTm3ioL
W3qkd6JyUi4Y8S3d2IXt8BkplX4c92kNhYIJLU5rqpWa6iA5kePxcnV4e0plzNM/
o0eRq4yJTeDtbee6/tkXslj4sjK9dKqFY+vzStv2VAwvGmDpXDeiYvs5mI1xG438
RFggCcabva1PGvZpPXo2KOM4puVCYDVBHnP6Mdp8YRmdUtcHoy7GLqDkq7VziOh+
0vQrJbb8I2xfsA==
-----END CERTIFICATE-----