Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/595d8c-185a-4f86-a32a-60fa912615cb/1/EK0ZMK-er97hDnaGhJ1Br37zNDk.mft
File:                     EK0ZMK-er97hDnaGhJ1Br37zNDk.mft (raw, json)
Hash identifier:          Iid1+UDxQFof2uTaiSPti3VRsoEg5oazdfFWmJa33dw=
Subject key identifier:   B4:66:50:18:81:C7:19:13:36:FC:06:05:85:D2:E3:10:FD:5C:90:88
Authority key identifier: 10:AD:19:30:AF:9E:AF:DE:E1:0E:76:86:84:9D:41:AF:7E:F3:34:39
Certificate issuer:       /CN=10ad1930af9eafdee10e7686849d41af7ef33439
Certificate serial:       018EE3C6B998380E18EE0B6E0AD0DB439BD4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EK0ZMK-er97hDnaGhJ1Br37zNDk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/595d8c-185a-4f86-a32a-60fa912615cb/1/EK0ZMK-er97hDnaGhJ1Br37zNDk.mft
Manifest number:          0885
Signing time:             Mon 15 Apr 2024 22:00:35 +0000
Manifest this update:     Mon 15 Apr 2024 22:00:35 +0000
Manifest next update:     Tue 16 Apr 2024 22:00:35 +0000
Files and hashes:         1: EK0ZMK-er97hDnaGhJ1Br37zNDk.crl (hash: 1ldpA3qTaFiqAdKZoCkr2fxK1NfuqUICJInoQx3JQ9A=)
                          2: NG0i1XxpYBJhct4pabwsroCEPJ4.roa (hash: 3tnJzVTS3//H9/eCWB+AS2W2Cit8Q4z7oPwfwKTMeNU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:e3:c6:b9:98:38:0e:18:ee:0b:6e:0a:d0:db:43:9b:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10ad1930af9eafdee10e7686849d41af7ef33439
        Validity
            Not Before: Apr 15 22:00:35 2024 GMT
            Not After : Apr 16 22:00:35 2024 GMT
        Subject: CN=b466501881c7191336fc060585d2e310fd5c9088
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:26:2c:92:f6:58:49:87:42:fa:f1:21:f1:ef:
                    92:22:de:be:1b:d5:94:00:ae:04:ce:ba:b4:0f:cc:
                    94:97:ce:ae:64:46:88:f9:da:98:e8:70:57:98:96:
                    fc:7a:cc:83:58:e9:6a:7f:91:e3:22:1c:36:aa:12:
                    33:1f:e8:b7:c7:98:8a:15:73:1f:d5:84:4c:49:d6:
                    fb:96:5c:62:89:ea:ba:8c:82:b2:44:a2:0f:6d:24:
                    da:2e:52:ae:a0:8a:b6:7e:7c:15:f4:99:81:d2:77:
                    66:00:7d:1b:71:55:78:a5:c3:98:8d:1f:74:04:eb:
                    28:86:8a:db:15:67:b6:dc:9c:74:1f:b5:fd:f9:0c:
                    89:67:69:ad:a3:3b:b7:22:72:bf:fe:eb:21:55:59:
                    4d:0e:38:51:a1:5b:fe:8d:7c:9e:71:41:02:5a:b2:
                    21:f3:d0:47:50:60:31:d2:38:53:07:3d:7c:64:54:
                    ef:a9:f9:ec:ae:94:1f:86:b1:1b:a5:d9:87:36:26:
                    3e:5c:63:5c:96:d5:b8:0c:e9:51:3c:64:83:61:af:
                    10:0e:3d:cb:0c:8e:cc:93:6a:04:59:c9:69:39:9e:
                    ee:5f:32:85:32:5a:e6:9b:ff:1f:97:5a:26:39:16:
                    f4:e1:12:30:7b:4f:7d:df:9f:b2:17:a6:77:53:0c:
                    64:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:66:50:18:81:C7:19:13:36:FC:06:05:85:D2:E3:10:FD:5C:90:88
            X509v3 Authority Key Identifier:
                keyid:10:AD:19:30:AF:9E:AF:DE:E1:0E:76:86:84:9D:41:AF:7E:F3:34:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EK0ZMK-er97hDnaGhJ1Br37zNDk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/595d8c-185a-4f86-a32a-60fa912615cb/1/EK0ZMK-er97hDnaGhJ1Br37zNDk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/595d8c-185a-4f86-a32a-60fa912615cb/1/EK0ZMK-er97hDnaGhJ1Br37zNDk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:8c:99:78:21:02:ac:fe:3e:de:ff:4e:b0:0a:33:91:13:53:
         3f:3c:78:f2:93:69:b1:83:53:68:c1:63:c0:8a:88:5d:97:69:
         0c:2f:0e:e2:dd:0b:64:ed:a9:b6:ba:af:2c:7c:c5:51:1b:8a:
         e2:3b:23:1f:f5:df:20:55:b2:75:5b:44:d2:95:8f:3a:87:48:
         43:8e:6b:17:88:6f:fd:72:96:b7:94:2e:fb:db:74:26:e3:18:
         a2:df:b0:db:f1:f3:58:fa:2e:58:39:93:46:81:ba:de:43:6e:
         61:e2:22:f2:55:42:f7:75:50:ca:2c:61:ff:e3:b3:45:4f:de:
         25:33:e3:26:39:75:58:28:65:11:61:5d:38:d4:aa:bb:87:36:
         59:31:5d:31:4b:75:18:2a:a6:1a:2b:ce:ce:2e:b1:32:bf:3e:
         0b:d0:4a:8e:a7:6c:7b:7d:6e:a9:05:aa:52:16:cd:73:e7:5e:
         bc:79:58:3f:94:05:ac:59:12:95:d1:e4:d4:5d:26:ef:f9:de:
         1f:6e:69:10:2a:61:22:f5:92:6d:8c:be:a0:81:ea:38:67:bc:
         37:aa:45:c7:67:96:9a:fc:bc:3d:05:89:05:45:4a:cb:89:3c:
         66:b3:58:9d:0d:29:b2:52:84:30:26:11:dd:a8:86:5b:7e:8f:
         cf:f7:ac:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY7jxrmYOA4Y7gtuCtDbQ5vUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwYWQxOTMwYWY5ZWFmZGVlMTBlNzY4Njg0OWQ0MWFmN2Vm
MzM0MzkwHhcNMjQwNDE1MjIwMDM1WhcNMjQwNDE2MjIwMDM1WjAzMTEwLwYDVQQD
EyhiNDY2NTAxODgxYzcxOTEzMzZmYzA2MDU4NWQyZTMxMGZkNWM5MDg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSYskvZYSYdC+vEh8e+SIt6+G9WU
AK4Ezrq0D8yUl86uZEaI+dqY6HBXmJb8esyDWOlqf5HjIhw2qhIzH+i3x5iKFXMf
1YRMSdb7llxiieq6jIKyRKIPbSTaLlKuoIq2fnwV9JmB0ndmAH0bcVV4pcOYjR90
BOsohorbFWe23Jx0H7X9+QyJZ2mtozu3InK//ushVVlNDjhRoVv+jXyecUECWrIh
89BHUGAx0jhTBz18ZFTvqfnsrpQfhrEbpdmHNiY+XGNcltW4DOlRPGSDYa8QDj3L
DI7Mk2oEWclpOZ7uXzKFMlrmm/8fl1omORb04RIwe09935+yF6Z3UwxkIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLRmUBiBxxkTNvwGBYXS4xD9XJCIMB8GA1UdIwQY
MBaAFBCtGTCvnq/e4Q52hoSdQa9+8zQ5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUswWk1LLWVyOTdoRG5hR2hKMUJyMzd6TkRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy81OTVkOGMtMTg1YS00Zjg2LWEzMmEt
NjBmYTkxMjYxNWNiLzEvRUswWk1LLWVyOTdoRG5hR2hKMUJyMzd6TkRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy81OTVkOGMtMTg1YS00Zjg2LWEzMmEtNjBmYTkxMjYxNWNi
LzEvRUswWk1LLWVyOTdoRG5hR2hKMUJyMzd6TkRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeYyZeCEC
rP4+3v9OsAozkRNTPzx48pNpsYNTaMFjwIqIXZdpDC8O4t0LZO2ptrqvLHzFURuK
4jsjH/XfIFWydVtE0pWPOodIQ45rF4hv/XKWt5Qu+9t0JuMYot+w2/HzWPouWDmT
RoG63kNuYeIi8lVC93VQyixh/+OzRU/eJTPjJjl1WChlEWFdONSqu4c2WTFdMUt1
GCqmGivOzi6xMr8+C9BKjqdse31uqQWqUhbNc+devHlYP5QFrFkSldHk1F0m7/ne
H25pECphIvWSbYy+oIHqOGe8N6pFx2eWmvy8PQWJBUVKy4k8ZrNYnQ0pslKEMCYR
3aiGW36Pz/esJA==
-----END CERTIFICATE-----