Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/aa32be-415f-4b04-ad10-c32d9eadf311/1/iZqXYtptVxUiVesgTiIf76X3P4U.mft
File:                     iZqXYtptVxUiVesgTiIf76X3P4U.mft (raw, json)
Hash identifier:          Vfkqvdr0di8HgLmJSGOFi/oJxMCsaRfIxDOOOByVjXA=
Subject key identifier:   E4:05:AA:F9:01:C0:7C:96:A5:AB:CE:88:F8:71:55:BE:ED:3B:BC:3E
Authority key identifier: 89:9A:97:62:DA:6D:57:15:22:55:EB:20:4E:22:1F:EF:A5:F7:3F:85
Certificate issuer:       /CN=899a9762da6d57152255eb204e221fefa5f73f85
Certificate serial:       01852A90CB0686B22270FCEF9B9E54789A15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iZqXYtptVxUiVesgTiIf76X3P4U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/aa32be-415f-4b04-ad10-c32d9eadf311/1/iZqXYtptVxUiVesgTiIf76X3P4U.mft
Manifest number:          0A2D
Signing time:             Mon 19 Dec 2022 13:26:50 +0000
Manifest this update:     Mon 19 Dec 2022 13:26:50 +0000
Manifest next update:     Tue 20 Dec 2022 13:26:50 +0000
Files and hashes:         1: iZqXYtptVxUiVesgTiIf76X3P4U.crl (hash: 6iuO2K7ikn+Y/253PzUvTpt5VTJZwk0F4BqAxnKBD8w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:2a:90:cb:06:86:b2:22:70:fc:ef:9b:9e:54:78:9a:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=899a9762da6d57152255eb204e221fefa5f73f85
        Validity
            Not Before: Dec 19 13:26:50 2022 GMT
            Not After : Dec 20 13:26:50 2022 GMT
        Subject: CN=e405aaf901c07c96a5abce88f87155beed3bbc3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:43:ae:9a:37:d8:24:2e:92:35:9d:d3:d2:72:
                    a6:f7:63:7c:3c:07:aa:45:40:92:25:5b:2c:de:e6:
                    6f:19:57:a1:98:73:89:f1:97:4b:7d:f0:91:08:10:
                    92:32:50:ba:87:49:de:68:b1:e0:13:bd:35:4d:2d:
                    e3:64:df:08:a4:6c:ef:61:dc:51:57:2e:b2:5c:63:
                    a4:c7:25:73:30:d9:25:f0:8e:1f:34:77:8d:6a:4e:
                    d5:9e:93:0c:8b:9d:ba:c1:7a:d8:95:14:7b:5d:37:
                    79:b8:16:ee:18:b4:13:04:e2:fb:6b:b6:ec:05:f7:
                    25:a9:cc:34:45:71:f6:bf:c0:74:57:77:08:d1:97:
                    20:04:f0:e8:df:2b:0c:24:5e:a0:74:02:d8:ec:bd:
                    58:63:83:10:95:bc:79:7f:41:f1:28:6f:fa:25:b5:
                    33:10:ea:2f:9d:da:8b:3f:22:df:f0:56:b4:ed:c2:
                    c5:ae:04:d2:ae:22:99:1a:56:40:e6:76:05:7b:e8:
                    9c:71:32:1c:58:80:39:77:0f:88:93:27:5d:18:d3:
                    cc:da:ab:12:30:d0:f5:ca:6e:4d:70:ac:27:fa:14:
                    09:2c:ac:56:4b:f5:bb:cf:57:bf:f3:f0:d3:66:8c:
                    5f:9e:92:ae:77:86:5c:08:37:d1:2e:6d:b5:9a:ee:
                    7e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:05:AA:F9:01:C0:7C:96:A5:AB:CE:88:F8:71:55:BE:ED:3B:BC:3E
            X509v3 Authority Key Identifier:
                keyid:89:9A:97:62:DA:6D:57:15:22:55:EB:20:4E:22:1F:EF:A5:F7:3F:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iZqXYtptVxUiVesgTiIf76X3P4U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/aa32be-415f-4b04-ad10-c32d9eadf311/1/iZqXYtptVxUiVesgTiIf76X3P4U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/aa32be-415f-4b04-ad10-c32d9eadf311/1/iZqXYtptVxUiVesgTiIf76X3P4U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:91:0d:db:f6:f7:83:67:0f:67:a6:76:89:7f:9e:9c:e2:a0:
         04:4d:95:2d:c0:7c:d4:88:56:b0:39:5a:5f:6f:e6:d8:c2:2b:
         c9:06:93:d8:5b:10:b5:e8:4e:29:09:3f:a3:bf:e2:92:24:27:
         00:f4:54:0e:a2:6d:17:25:a7:bc:99:2f:ce:6e:1c:29:71:f4:
         e7:e5:b0:2e:f7:d6:9c:b5:23:3b:4b:3c:19:ec:ec:18:c2:e5:
         3c:be:4a:33:d0:f7:03:b0:cf:a9:85:a8:07:bf:b1:76:66:b0:
         5b:95:bb:57:22:01:f8:73:74:d4:25:0d:7b:ac:8e:17:28:94:
         42:cf:c5:d5:6a:51:84:db:9d:7a:60:d5:ea:f0:1f:b8:a6:21:
         ea:f4:d8:3e:02:73:1e:8b:72:37:f6:95:a7:10:7a:57:16:0b:
         7c:ac:cc:bb:1d:b6:2d:f8:de:35:2a:70:44:74:4e:33:87:6a:
         b6:1d:85:78:48:18:f6:57:c5:2e:5b:49:74:bc:14:1e:77:1d:
         ae:7d:82:95:25:87:95:08:8a:3b:6a:40:63:a5:bb:0e:3b:24:
         07:63:68:2e:99:9e:cc:c1:6b:91:19:65:6e:f5:1a:5d:02:f8:
         e7:68:6b:5e:d9:74:6f:8e:74:92:0f:af:28:c9:c2:39:fe:93:
         ac:10:7c:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYUqkMsGhrIicPzvm55UeJoVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5OWE5NzYyZGE2ZDU3MTUyMjU1ZWIyMDRlMjIxZmVmYTVm
NzNmODUwHhcNMjIxMjE5MTMyNjUwWhcNMjIxMjIwMTMyNjUwWjAzMTEwLwYDVQQD
EyhlNDA1YWFmOTAxYzA3Yzk2YTVhYmNlODhmODcxNTViZWVkM2JiYzNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikOumjfYJC6SNZ3T0nKm92N8PAeq
RUCSJVss3uZvGVehmHOJ8ZdLffCRCBCSMlC6h0neaLHgE701TS3jZN8IpGzvYdxR
Vy6yXGOkxyVzMNkl8I4fNHeNak7VnpMMi526wXrYlRR7XTd5uBbuGLQTBOL7a7bs
Bfclqcw0RXH2v8B0V3cI0ZcgBPDo3ysMJF6gdALY7L1YY4MQlbx5f0HxKG/6JbUz
EOovndqLPyLf8Fa07cLFrgTSriKZGlZA5nYFe+iccTIcWIA5dw+IkyddGNPM2qsS
MND1ym5NcKwn+hQJLKxWS/W7z1e/8/DTZoxfnpKud4ZcCDfRLm21mu5+GQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOQFqvkBwHyWpavOiPhxVb7tO7w+MB8GA1UdIwQY
MBaAFImal2LabVcVIlXrIE4iH++l9z+FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVpxWFl0cHRWeFVpVmVzZ1RpSWY3NlgzUDRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9hYTMyYmUtNDE1Zi00YjA0LWFkMTAt
YzMyZDllYWRmMzExLzEvaVpxWFl0cHRWeFVpVmVzZ1RpSWY3NlgzUDRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi9hYTMyYmUtNDE1Zi00YjA0LWFkMTAtYzMyZDllYWRmMzEx
LzEvaVpxWFl0cHRWeFVpVmVzZ1RpSWY3NlgzUDRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZpEN2/b3
g2cPZ6Z2iX+enOKgBE2VLcB81IhWsDlaX2/m2MIryQaT2FsQtehOKQk/o7/ikiQn
APRUDqJtFyWnvJkvzm4cKXH05+WwLvfWnLUjO0s8GezsGMLlPL5KM9D3A7DPqYWo
B7+xdmawW5W7VyIB+HN01CUNe6yOFyiUQs/F1WpRhNudemDV6vAfuKYh6vTYPgJz
HotyN/aVpxB6VxYLfKzMux22LfjeNSpwRHROM4dqth2FeEgY9lfFLltJdLwUHncd
rn2ClSWHlQiKO2pAY6W7DjskB2NoLpmezMFrkRllbvUaXQL452hrXtl0b450kg+v
KMnCOf6TrBB8AA==
-----END CERTIFICATE-----