Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/6d04c4-5a5f-4d9b-84d2-679aff7acb2c/1/CkVdKYOdNPKm-g-BjMc_ww4kUiI.mft
File:                     CkVdKYOdNPKm-g-BjMc_ww4kUiI.mft (raw, json)
Hash identifier:          gGvQfI1e3Q93GupH+ZF53qEBhfhPsq/Wun88ockyb+U=
Subject key identifier:   A9:E7:17:A4:CC:DF:D0:E4:C0:D2:9A:4A:45:8F:BE:62:A2:85:CB:41
Authority key identifier: 0A:45:5D:29:83:9D:34:F2:A6:FA:0F:81:8C:C7:3F:C3:0E:24:52:22
Certificate issuer:       /CN=0a455d29839d34f2a6fa0f818cc73fc30e245222
Certificate serial:       0185DD9676FDCFDDEED5506B5AA5399EDD16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CkVdKYOdNPKm-g-BjMc_ww4kUiI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/6d04c4-5a5f-4d9b-84d2-679aff7acb2c/1/CkVdKYOdNPKm-g-BjMc_ww4kUiI.mft
Manifest number:          02BE
Signing time:             Mon 23 Jan 2023 07:45:03 +0000
Manifest this update:     Mon 23 Jan 2023 07:45:03 +0000
Manifest next update:     Tue 24 Jan 2023 07:45:03 +0000
Files and hashes:         1: CkVdKYOdNPKm-g-BjMc_ww4kUiI.crl (hash: Nm8Livjm1hvdD/AzG0AY4NuW2oTTt44HLkESxaolDBA=)
                          2: P_SvUA3E2M8_mKhQ-mC1H3i_0yg.roa (hash: mXhEv/ci38IEYI9sTr1vOK6RPG5vl7QjfpXEMTpCoJI=)
                          3: fyTRSfUMGoiurYWiL1i5pPP8hbI.roa (hash: V4cvBdwuL6B93JlINol8Eqtxnyc9P6etZTugMqxTiYg=)
                          4: pxEmt4j50s9AjzuedDq48c_2vzw.roa (hash: pizAy8XkKG/bskAcy1VYRPbFwQCMgUhEH1NAsZ8vVn8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:dd:96:76:fd:cf:dd:ee:d5:50:6b:5a:a5:39:9e:dd:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a455d29839d34f2a6fa0f818cc73fc30e245222
        Validity
            Not Before: Jan 23 07:45:03 2023 GMT
            Not After : Jan 24 07:45:03 2023 GMT
        Subject: CN=a9e717a4ccdfd0e4c0d29a4a458fbe62a285cb41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:9b:55:0f:90:06:4a:83:21:72:df:65:e1:bd:
                    39:cd:e1:82:a4:bd:48:3f:92:a2:d2:56:aa:e2:f6:
                    d3:c9:bd:36:3b:95:36:21:2a:d3:02:21:08:b6:88:
                    1b:77:c7:9c:30:2f:54:63:a3:f1:84:b4:12:bd:e7:
                    78:0f:02:7a:e1:b2:bc:17:a3:3a:95:6f:49:dd:3a:
                    64:8e:a0:f9:74:b4:5d:8a:be:0d:a3:05:c8:c1:72:
                    7b:83:7c:83:3c:01:53:02:2f:6c:d4:94:f4:74:33:
                    bb:33:84:b0:2b:92:0d:ef:f9:4b:94:e4:9e:d3:d0:
                    4f:87:91:3d:c9:33:e5:86:ed:42:74:b8:69:8a:ba:
                    54:63:9a:51:d5:89:dc:c5:c1:5d:9a:66:c2:03:78:
                    b0:78:38:83:f1:5c:0c:4d:cc:54:3b:8b:7d:0d:d0:
                    16:18:dc:59:99:f4:4a:dd:1d:37:ce:60:99:fc:15:
                    52:ea:4b:19:65:c3:76:80:08:09:11:5b:27:97:68:
                    d8:ad:01:86:83:3d:b1:f8:0d:47:ea:b4:8e:87:99:
                    aa:ae:64:38:01:ef:9d:04:7c:d4:ed:78:e1:2a:a0:
                    83:c1:40:e4:9c:9c:12:0d:53:a0:c1:6c:c4:68:8b:
                    34:ef:67:fa:2a:41:e4:a0:5c:b6:a4:ef:3f:2b:8e:
                    de:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:E7:17:A4:CC:DF:D0:E4:C0:D2:9A:4A:45:8F:BE:62:A2:85:CB:41
            X509v3 Authority Key Identifier:
                keyid:0A:45:5D:29:83:9D:34:F2:A6:FA:0F:81:8C:C7:3F:C3:0E:24:52:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkVdKYOdNPKm-g-BjMc_ww4kUiI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6d04c4-5a5f-4d9b-84d2-679aff7acb2c/1/CkVdKYOdNPKm-g-BjMc_ww4kUiI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6d04c4-5a5f-4d9b-84d2-679aff7acb2c/1/CkVdKYOdNPKm-g-BjMc_ww4kUiI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:e7:01:aa:6a:0c:6f:9d:58:dd:7b:04:c6:07:87:63:3d:e5:
         a7:ef:e8:d5:90:b0:28:8f:f0:17:22:e7:f4:a4:19:3a:ea:c9:
         dc:10:c7:e5:65:9f:2f:b2:8c:6d:51:bb:35:2f:14:ea:ad:ee:
         7e:59:0e:e7:96:ef:32:2f:26:41:ef:27:fb:2f:d9:2f:fd:04:
         41:ce:c1:5a:23:b3:7f:87:6f:5d:87:f9:6b:75:49:1a:3a:b0:
         09:af:18:15:66:16:0d:97:59:2e:b6:71:0b:cc:cc:99:12:a1:
         7c:29:0b:ff:30:30:e2:dd:19:e8:ab:f7:33:8c:6d:f9:b6:b8:
         55:f9:51:59:ae:25:43:38:2c:58:d9:93:6f:f5:83:0b:cb:73:
         86:0a:0c:32:b5:e6:28:b1:4b:1b:03:e3:37:1b:b1:11:87:07:
         cc:d3:e5:d8:90:f6:d9:be:81:8c:7e:ce:9d:c9:ba:ce:9a:f5:
         2b:8c:82:7b:33:f5:d8:1c:5e:4c:79:4a:70:5e:78:43:50:86:
         aa:e3:a6:45:7b:29:1b:3a:58:2c:44:dd:0b:0d:4d:6d:e6:bc:
         62:ba:19:19:ee:f0:08:94:95:7b:91:4c:57:ec:d3:1e:5a:45:
         1b:31:1c:cd:31:9f:23:6c:80:31:2d:c8:4e:51:1a:2c:3a:61:
         48:10:2b:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYXdlnb9z93u1VBrWqU5nt0WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhNDU1ZDI5ODM5ZDM0ZjJhNmZhMGY4MThjYzczZmMzMGUy
NDUyMjIwHhcNMjMwMTIzMDc0NTAzWhcNMjMwMTI0MDc0NTAzWjAzMTEwLwYDVQQD
EyhhOWU3MTdhNGNjZGZkMGU0YzBkMjlhNGE0NThmYmU2MmEyODVjYjQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZtVD5AGSoMhct9l4b05zeGCpL1I
P5Ki0laq4vbTyb02O5U2ISrTAiEItogbd8ecMC9UY6PxhLQSved4DwJ64bK8F6M6
lW9J3TpkjqD5dLRdir4NowXIwXJ7g3yDPAFTAi9s1JT0dDO7M4SwK5IN7/lLlOSe
09BPh5E9yTPlhu1CdLhpirpUY5pR1YncxcFdmmbCA3iweDiD8VwMTcxUO4t9DdAW
GNxZmfRK3R03zmCZ/BVS6ksZZcN2gAgJEVsnl2jYrQGGgz2x+A1H6rSOh5mqrmQ4
Ae+dBHzU7XjhKqCDwUDknJwSDVOgwWzEaIs072f6KkHkoFy2pO8/K47e2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKnnF6TM39DkwNKaSkWPvmKihctBMB8GA1UdIwQY
MBaAFApFXSmDnTTypvoPgYzHP8MOJFIiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2tWZEtZT2ROUEttLWctQmpNY193dzRrVWlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC82ZDA0YzQtNWE1Zi00ZDliLTg0ZDIt
Njc5YWZmN2FjYjJjLzEvQ2tWZEtZT2ROUEttLWctQmpNY193dzRrVWlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC82ZDA0YzQtNWE1Zi00ZDliLTg0ZDItNjc5YWZmN2FjYjJj
LzEvQ2tWZEtZT2ROUEttLWctQmpNY193dzRrVWlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALOcBqmoM
b51Y3XsExgeHYz3lp+/o1ZCwKI/wFyLn9KQZOurJ3BDH5WWfL7KMbVG7NS8U6q3u
flkO55bvMi8mQe8n+y/ZL/0EQc7BWiOzf4dvXYf5a3VJGjqwCa8YFWYWDZdZLrZx
C8zMmRKhfCkL/zAw4t0Z6Kv3M4xt+ba4VflRWa4lQzgsWNmTb/WDC8tzhgoMMrXm
KLFLGwPjNxuxEYcHzNPl2JD22b6BjH7Oncm6zpr1K4yCezP12BxeTHlKcF54Q1CG
quOmRXspGzpYLETdCw1Nbea8YroZGe7wCJSVe5FMV+zTHlpFGzEczTGfI2yAMS3I
TlEaLDphSBArJA==
-----END CERTIFICATE-----