Manifest

$ rpki-client -vvf rpki.zappiehost.com/repo/HAZEL_UID_18860/2/14082299D486857A824F7308B67507C731520D07.mft
File:                     14082299D486857A824F7308B67507C731520D07.mft (raw, json)
Hash identifier:          gU10VDJTOJgfPSDTOxrvE49yxDLnf8hjGVQpeiV6DFI=
Subject key identifier:   D3:C5:3F:B7:FB:50:BB:8C:12:E3:9F:5F:0E:10:B8:6B:A1:BB:8F:2B
Authority key identifier: 14:08:22:99:D4:86:85:7A:82:4F:73:08:B6:75:07:C7:31:52:0D:07
Certificate issuer:       /CN=14082299D486857A824F7308B67507C731520D07
Certificate serial:       5084C8A0BB9EF291F1531B72C9393C2793AD044C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/14082299D486857A824F7308B67507C731520D07.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/2/14082299D486857A824F7308B67507C731520D07.mft
Manifest number:          0C
Signing time:             Sat 20 Jan 2024 18:20:38 +0000
Manifest this update:     Sat 20 Jan 2024 18:15:38 +0000
Manifest next update:     Sun 21 Jan 2024 19:21:38 +0000
Files and hashes:         1: 14082299D486857A824F7308B67507C731520D07.crl (hash: n+TDYiRRwrFTXyzq+dYDyMLvq82uk/kBJwHI8sjoMNU=)
                          2: 326130373a353463303a646561643a3a2f34382d3438203d3e203534363831.roa (hash: 4wSOSUJ2RizFpA57oKG5le01pM7Bs2Accr7SOlAUt68=)
                          3: ECE04D26A2F2712EE3D6DA0067C8679C66A03944.cer (hash: ecLQb2w6xuwi9HAoCBFlEj7zeKhJITKK8Vzrczo3eKE=)
                          4: 326130373a353463303a633066663a3a2f34382d3438203d3e203534363831.roa (hash: SMfiw+Fui0XTlgJpOw9mPDdUQkmnO8Fyg3P3z09RJ0U=)
                          5: 326130373a353463303a636166653a3a2f34382d3438203d3e20323035373839.roa (hash: SgvQWHFGZGtOv/pmgtn+By0rWwg8U8JZJbQeyaOgidQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:84:c8:a0:bb:9e:f2:91:f1:53:1b:72:c9:39:3c:27:93:ad:04:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14082299D486857A824F7308B67507C731520D07
        Validity
            Not Before: Jan 20 18:15:38 2024 GMT
            Not After : Jan 21 19:21:38 2024 GMT
        Subject: CN=D3C53FB7FB50BB8C12E39F5F0E10B86BA1BB8F2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:4c:98:13:e0:c4:a6:89:63:ea:06:f3:56:ac:
                    1b:f9:e0:33:6a:cb:dd:81:1d:54:d8:88:d8:d8:4a:
                    1a:00:7a:1f:59:07:f0:c4:4d:41:dc:e2:93:c1:58:
                    ea:38:49:1c:43:37:b9:77:6c:9b:d1:53:f9:ea:34:
                    03:e6:74:df:35:8e:e7:5c:0b:3f:46:e7:36:b2:39:
                    68:82:ac:65:b5:6a:43:bc:3f:29:6b:ff:7f:71:9c:
                    72:eb:b1:9d:a3:79:b4:c3:22:1c:ad:a2:59:43:c9:
                    b1:62:fa:29:6b:3a:90:b8:2c:3a:ba:af:a0:0b:ea:
                    0d:54:f1:6a:f5:57:f8:15:5c:13:a9:d2:1d:72:08:
                    db:36:4c:21:82:1b:0f:df:00:0a:07:36:c7:c5:6c:
                    cc:fd:c0:35:d8:d8:6d:f0:c0:1a:02:c2:17:8d:77:
                    bb:7e:07:48:a3:f3:e5:b8:b1:76:a7:24:15:1c:3d:
                    1d:40:84:bc:92:7f:29:f0:3c:ef:d7:cc:df:10:49:
                    97:ec:ae:a6:be:72:46:b2:f9:8b:de:14:a8:5d:57:
                    6b:01:aa:80:61:e5:03:fc:02:63:a4:66:68:4e:cb:
                    66:f8:60:46:de:c4:c0:c9:de:74:91:99:f4:73:88:
                    92:96:54:20:2b:f8:60:a2:1f:fe:07:48:61:c8:da:
                    7d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:C5:3F:B7:FB:50:BB:8C:12:E3:9F:5F:0E:10:B8:6B:A1:BB:8F:2B
            X509v3 Authority Key Identifier:
                keyid:14:08:22:99:D4:86:85:7A:82:4F:73:08:B6:75:07:C7:31:52:0D:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/2/14082299D486857A824F7308B67507C731520D07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/14082299D486857A824F7308B67507C731520D07.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/HAZEL_UID_18860/2/14082299D486857A824F7308B67507C731520D07.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:1b:17:c3:27:1a:65:af:96:19:9d:05:ad:af:8a:5b:2b:dd:
         da:08:35:50:7d:fc:51:b3:4b:ac:14:3d:c7:b5:13:6f:b2:24:
         c4:33:74:3c:c3:bb:e0:92:f2:08:a9:08:30:1a:e6:0b:d3:8d:
         d0:bf:f5:59:f1:36:98:29:ec:6f:56:7a:70:63:91:4e:f8:9a:
         0a:14:9e:c9:aa:18:a2:fe:cc:0e:4c:f6:5f:0f:48:5c:a8:77:
         23:47:a6:1f:ae:c2:ee:d9:9b:9c:de:59:82:bc:48:8d:1e:e9:
         a7:4a:2b:5e:66:1d:14:a6:00:22:5d:27:6a:d8:0a:ee:cb:c6:
         30:f3:2c:40:fc:29:18:59:8b:3b:1e:fc:d9:a3:9f:ba:5b:41:
         a3:e0:63:7b:e8:f8:d5:20:06:3e:70:96:5a:b0:04:12:c8:ed:
         03:74:25:10:2d:37:e9:6e:41:d8:45:d7:47:4a:02:6d:f3:6f:
         e9:10:00:4a:0a:b8:1b:eb:d7:73:43:e7:99:57:7a:5d:7c:09:
         a2:f5:6b:55:1e:21:86:99:ac:16:ad:86:a0:4e:dc:46:f4:ca:
         6d:20:aa:8e:26:0f:3e:50:39:aa:29:ce:15:cf:d2:e4:62:a5:
         43:4a:36:6a:29:5e:bd:5d:bc:b8:8a:cd:1c:3a:e4:76:af:20:
         f7:1d:5f:59
-----BEGIN CERTIFICATE-----
MIIFLjCCBBagAwIBAgIUUITIoLue8pHxUxtyyTk8J5OtBEwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTQwODIyOTlENDg2ODU3QTgyNEY3MzA4QjY3NTA3Qzcz
MTUyMEQwNzAeFw0yNDAxMjAxODE1MzhaFw0yNDAxMjExOTIxMzhaMDMxMTAvBgNV
BAMTKEQzQzUzRkI3RkI1MEJCOEMxMkUzOUY1RjBFMTBCODZCQTFCQjhGMkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgTJgT4MSmiWPqBvNWrBv54DNq
y92BHVTYiNjYShoAeh9ZB/DETUHc4pPBWOo4SRxDN7l3bJvRU/nqNAPmdN81judc
Cz9G5zayOWiCrGW1akO8Pylr/39xnHLrsZ2jebTDIhytollDybFi+ilrOpC4LDq6
r6AL6g1U8Wr1V/gVXBOp0h1yCNs2TCGCGw/fAAoHNsfFbMz9wDXY2G3wwBoCwheN
d7t+B0ij8+W4sXanJBUcPR1AhLySfynwPO/XzN8QSZfsrqa+ckay+YveFKhdV2sB
qoBh5QP8AmOkZmhOy2b4YEbexMDJ3nSRmfRziJKWVCAr+GCiH/4HSGHI2n0bAgMB
AAGjggI4MIICNDAdBgNVHQ4EFgQU08U/t/tQu4wS459fDhC4a6G7jyswHwYDVR0j
BBgwFoAUFAgimdSGhXqCT3MItnUHxzFSDQcwDgYDVR0PAQH/BAQDAgeAMHAGA1Ud
HwRpMGcwZaBjoGGGX3JzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL0hB
WkVMX1VJRF8xODg2MC8yLzE0MDgyMjk5RDQ4Njg1N0E4MjRGNzMwOEI2NzUwN0M3
MzE1MjBEMDcuY3JsMIGeBggrBgEFBQcBAQSBkTCBjjCBiwYIKwYBBQUHMAKGf3Jz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWEwMDRi
YTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2NhZTNmLzAvMTQwODIyOTlENDg2ODU3
QTgyNEY3MzA4QjY3NTA3QzczMTUyMEQwNy5jZXIwewYIKwYBBQUHAQsEbzBtMGsG
CCsGAQUFBzALhl9yc3luYzovL3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9IQVpF
TF9VSURfMTg4NjAvMi8xNDA4MjI5OUQ0ODY4NTdBODI0RjczMDhCNjc1MDdDNzMx
NTIwRDA3Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAN
BgkqhkiG9w0BAQsFAAOCAQEAFBsXwycaZa+WGZ0Fra+KWyvd2gg1UH38UbNLrBQ9
x7UTb7IkxDN0PMO74JLyCKkIMBrmC9ON0L/1WfE2mCnsb1Z6cGORTviaChSeyaoY
ov7MDkz2Xw9IXKh3I0emH67C7tmbnN5ZgrxIjR7pp0orXmYdFKYAIl0natgK7svG
MPMsQPwpGFmLOx782aOfultBo+Bje+j41SAGPnCWWrAEEsjtA3QlEC036W5B2EXX
R0oCbfNv6RAASgq4G+vXc0PnmVd6XXwJovVrVR4hhpmsFq2GoE7cRvTKbSCqjiYP
PlA5qinOFc/S5GKlQ0o2ailevV28uIrNHDrkdq8g9x1fWQ==
-----END CERTIFICATE-----