Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.mft
File:                     Sz2m6ZxmZROizuXw4NOrdF8WfcM.mft (raw, json)
Hash identifier:          UT//UyWDsLhpVGHTR2N9F9w2dyGWCxP8nKZPL26joM0=
Subject key identifier:   66:E1:6A:83:2C:B5:01:B4:C3:8B:6F:6D:5B:85:41:68:D3:9F:EC:FF
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Certificate issuer:       /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial:       0185A4851E6C3A6A8FA9A0227ED8B0C43597
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.mft
Manifest number:          09E2
Signing time:             Thu 12 Jan 2023 05:47:45 +0000
Manifest this update:     Thu 12 Jan 2023 05:47:45 +0000
Manifest next update:     Fri 13 Jan 2023 05:47:45 +0000
Files and hashes:         1: 3FHx00tfXX-OBtOwNT6Mrde4nu0.roa (hash: hAkyZkxpZadxk+10YWajnFS4CTX48wWfL+DYibnmqsM=)
                          2: RbAoy33hffaYP1LSDg9yAycytU4.roa (hash: WLYp1LUjXzgDjb7IHLoDInOEZvheO1mUa8BkVfAblwM=)
                          3: Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl (hash: st9HxKQeeUVxHxPVVoBP6scHnXsKlsyYBfvLZHsEFEk=)
                          4: _r-JjVcHfXt2ZwyBswPBaaRZglc.roa (hash: Ei/6PO6PdGOj+lpF4lNjba9n+4dx1tc1WdCUDeO+H+0=)
                          5: oN1uebrpMPnz2jmquVImyHYJ2Dg.roa (hash: 2OneUj1Ey/LIuhFfDwMX1C/II7E2N7acsmW7fqQj7AA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:a4:85:1e:6c:3a:6a:8f:a9:a0:22:7e:d8:b0:c4:35:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
        Validity
            Not Before: Jan 12 05:47:45 2023 GMT
            Not After : Jan 13 05:47:45 2023 GMT
        Subject: CN=66e16a832cb501b4c38b6f6d5b854168d39fecff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:06:09:a9:fe:43:ff:a2:fe:73:51:45:0b:65:
                    bd:40:14:7f:41:4c:03:90:d3:91:89:a1:6f:fc:e1:
                    34:15:ce:be:3a:08:39:ba:c1:2e:43:92:16:de:34:
                    00:16:35:ea:e0:d4:e3:c8:d3:c9:13:f0:2d:20:06:
                    ff:bd:1b:a4:c2:aa:8c:4e:c7:94:5a:ce:32:4b:46:
                    e3:37:ba:3b:7c:0b:dd:4f:45:f2:11:e7:3c:a3:f1:
                    f2:aa:cf:81:da:8a:74:d4:0d:53:23:1c:bd:41:3b:
                    ec:1c:55:42:60:b3:1a:d7:64:1e:75:81:f0:d7:37:
                    8d:ae:21:23:0d:7c:7f:c2:28:82:2a:fe:ce:84:89:
                    91:4c:f9:3d:fa:bf:7a:46:5c:31:77:3d:5e:0e:ab:
                    bb:54:30:48:63:d7:d5:0d:e0:a2:12:bb:eb:c2:73:
                    1f:06:fb:2c:28:67:f0:7b:96:48:41:47:26:d7:5e:
                    7f:18:a6:76:85:8d:26:e7:5d:42:63:5f:8a:ad:6c:
                    22:5f:f1:3a:b8:99:90:f2:c7:1d:1c:ba:59:66:a3:
                    34:20:0f:2c:88:6b:a8:17:0b:46:57:c2:13:4e:b2:
                    7c:73:56:69:0a:02:93:45:12:b3:cf:00:f4:01:84:
                    ea:ae:6e:b3:75:66:d8:10:18:99:41:3c:21:ea:b1:
                    f3:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:E1:6A:83:2C:B5:01:B4:C3:8B:6F:6D:5B:85:41:68:D3:9F:EC:FF
            X509v3 Authority Key Identifier:
                keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:6c:bc:e0:34:fd:2d:4c:88:62:2e:00:09:17:d7:90:0b:c0:
         a1:7a:b4:c7:ef:e8:a7:cb:28:a6:a0:45:36:14:89:ff:5f:2c:
         84:6b:a5:4d:59:b0:04:9c:04:ed:9e:de:02:a1:1b:7c:16:71:
         85:8a:62:15:ef:6e:85:87:13:85:b3:ac:25:c7:14:0b:42:84:
         8e:a3:ff:62:29:ca:3e:f6:72:64:57:22:c2:9b:b2:93:c1:31:
         2e:35:63:dc:1c:36:78:13:8b:84:5e:33:c1:f7:82:85:7a:ac:
         bd:6b:12:a5:58:4a:69:3c:ad:85:58:ff:f3:04:b1:21:cd:3e:
         31:76:66:08:a5:b5:6c:c8:50:94:c1:8f:2f:d0:c5:f2:fb:de:
         e8:d3:75:7d:39:4d:71:56:71:b7:a2:cb:44:88:b8:8d:87:41:
         cc:16:45:4f:fa:6c:22:f3:a3:74:86:ca:e1:02:62:6c:f1:34:
         7f:97:05:1b:75:47:59:02:49:13:3a:73:ab:24:ad:49:bd:f4:
         26:f3:3a:de:91:49:24:b8:af:d6:61:de:c1:dc:5a:23:a7:e6:
         2b:fb:2e:af:79:6c:ea:32:29:cb:d2:91:d4:cc:95:cc:01:c9:
         f2:e9:86:13:62:6f:e5:df:cd:0a:6b:eb:72:f0:a9:bc:51:16:
         0d:de:44:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYWkhR5sOmqPqaAiftiwxDWXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiM2RhNmU5OWM2NjY1MTNhMmNlZTVmMGUwZDNhYjc0NWYx
NjdkYzMwHhcNMjMwMTEyMDU0NzQ1WhcNMjMwMTEzMDU0NzQ1WjAzMTEwLwYDVQQD
Eyg2NmUxNmE4MzJjYjUwMWI0YzM4YjZmNmQ1Yjg1NDE2OGQzOWZlY2ZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQYJqf5D/6L+c1FFC2W9QBR/QUwD
kNORiaFv/OE0Fc6+Ogg5usEuQ5IW3jQAFjXq4NTjyNPJE/AtIAb/vRukwqqMTseU
Ws4yS0bjN7o7fAvdT0XyEec8o/Hyqs+B2op01A1TIxy9QTvsHFVCYLMa12QedYHw
1zeNriEjDXx/wiiCKv7OhImRTPk9+r96Rlwxdz1eDqu7VDBIY9fVDeCiErvrwnMf
BvssKGfwe5ZIQUcm115/GKZ2hY0m511CY1+KrWwiX/E6uJmQ8scdHLpZZqM0IA8s
iGuoFwtGV8ITTrJ8c1ZpCgKTRRKzzwD0AYTqrm6zdWbYEBiZQTwh6rHzVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGbhaoMstQG0w4tvbVuFQWjTn+z/MB8GA1UdIwQY
MBaAFEs9pumcZmUTos7l8ODTq3RfFn3DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3oybTZaeG1aUk9penVYdzROT3JkRjhXZmNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi82ZjIzMmUtMjI3NS00NGU5LTkxYzAt
YzczOTdhMjY2OWE5LzEvU3oybTZaeG1aUk9penVYdzROT3JkRjhXZmNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi82ZjIzMmUtMjI3NS00NGU5LTkxYzAtYzczOTdhMjY2OWE5
LzEvU3oybTZaeG1aUk9penVYdzROT3JkRjhXZmNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ2y84DT9
LUyIYi4ACRfXkAvAoXq0x+/op8sopqBFNhSJ/18shGulTVmwBJwE7Z7eAqEbfBZx
hYpiFe9uhYcThbOsJccUC0KEjqP/YinKPvZyZFciwpuyk8ExLjVj3Bw2eBOLhF4z
wfeChXqsvWsSpVhKaTythVj/8wSxIc0+MXZmCKW1bMhQlMGPL9DF8vve6NN1fTlN
cVZxt6LLRIi4jYdBzBZFT/psIvOjdIbK4QJibPE0f5cFG3VHWQJJEzpzqyStSb30
JvM63pFJJLiv1mHewdxaI6fmK/sur3ls6jIpy9KR1MyVzAHJ8umGE2Jv5d/NCmvr
cvCpvFEWDd5EMA==
-----END CERTIFICATE-----