Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/35f632-db7b-4fb4-98a6-79d817202ae5/1/zuDApawTOo8PJIFhJ26JOYXY0-E.mft
File:                     zuDApawTOo8PJIFhJ26JOYXY0-E.mft (raw, json)
Hash identifier:          rdSoCZgtfTjTKj1CfzgDuVnuWjFCJMwcR+59yEOs9+s=
Subject key identifier:   C9:68:52:7A:0B:5D:49:4A:49:DB:14:B7:CD:2D:C3:E7:CD:53:D5:76
Authority key identifier: CE:E0:C0:A5:AC:13:3A:8F:0F:24:81:61:27:6E:89:39:85:D8:D3:E1
Certificate issuer:       /CN=cee0c0a5ac133a8f0f248161276e893985d8d3e1
Certificate serial:       01894A181250434EA27399EB9CF83DD3280E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zuDApawTOo8PJIFhJ26JOYXY0-E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/35f632-db7b-4fb4-98a6-79d817202ae5/1/zuDApawTOo8PJIFhJ26JOYXY0-E.mft
Manifest number:          09D0
Signing time:             Wed 12 Jul 2023 12:33:58 +0000
Manifest this update:     Wed 12 Jul 2023 12:33:58 +0000
Manifest next update:     Thu 13 Jul 2023 12:33:58 +0000
Files and hashes:         1: SrY1DxDLcUJosFnWAXk5oy4-XzY.roa (hash: DgW33cnWLvjWDawHa+zG2HUuHaaXh8MkLBKNbv4M4/M=)
                          2: zuDApawTOo8PJIFhJ26JOYXY0-E.crl (hash: Fu0w8DC7730Zy/IU5iVZ9oUAwEBnRz76HBbBdZOtUc8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:4a:18:12:50:43:4e:a2:73:99:eb:9c:f8:3d:d3:28:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cee0c0a5ac133a8f0f248161276e893985d8d3e1
        Validity
            Not Before: Jul 12 12:33:58 2023 GMT
            Not After : Jul 13 12:33:58 2023 GMT
        Subject: CN=c968527a0b5d494a49db14b7cd2dc3e7cd53d576
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f8:e2:35:35:87:fc:da:cf:df:93:cd:9b:64:
                    4c:7d:df:7f:e4:77:a0:62:01:33:e7:89:f7:7e:60:
                    4a:ec:15:26:46:b2:a8:c8:a2:ff:f2:2c:f8:09:cc:
                    69:98:ff:6e:df:a4:ee:48:7e:f1:2b:83:94:56:89:
                    0b:85:64:b9:2a:b3:7e:c3:1a:ca:bb:8c:a3:27:35:
                    80:25:51:69:8a:51:5c:a5:8b:3f:27:ff:39:90:cc:
                    f3:59:12:0f:e5:5b:d5:cc:3a:45:92:51:3b:16:2e:
                    0b:39:a9:3e:d0:9b:6c:a2:8e:28:be:f6:38:22:2a:
                    74:57:3b:f6:2c:6d:d0:8b:6b:ba:fb:e8:f5:79:96:
                    05:2c:95:0d:c4:84:bb:17:35:57:5a:71:34:b1:75:
                    19:36:21:b0:c3:bf:31:ab:b1:b0:6f:24:9a:34:b0:
                    6b:2f:0c:5e:56:3d:b5:3c:22:42:c1:fc:ff:4a:90:
                    93:dd:52:b5:36:ac:e5:00:fb:b7:0a:dc:8f:31:62:
                    90:b5:14:63:85:b9:cd:18:3c:4f:c2:ec:3b:14:27:
                    fa:fc:7c:37:00:13:ea:c6:05:2b:35:13:be:c9:fb:
                    40:34:12:1a:bd:7d:24:b1:5a:d3:5e:3a:d4:33:dc:
                    2a:93:da:9e:2b:05:eb:42:93:e8:65:67:bb:5e:7f:
                    b2:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:68:52:7A:0B:5D:49:4A:49:DB:14:B7:CD:2D:C3:E7:CD:53:D5:76
            X509v3 Authority Key Identifier:
                keyid:CE:E0:C0:A5:AC:13:3A:8F:0F:24:81:61:27:6E:89:39:85:D8:D3:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zuDApawTOo8PJIFhJ26JOYXY0-E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/35f632-db7b-4fb4-98a6-79d817202ae5/1/zuDApawTOo8PJIFhJ26JOYXY0-E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/35f632-db7b-4fb4-98a6-79d817202ae5/1/zuDApawTOo8PJIFhJ26JOYXY0-E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:39:0d:da:45:82:03:f9:91:d1:1b:44:c0:b0:2d:ae:b0:23:
         f0:86:2c:e7:7e:6d:7a:2f:6d:7b:de:66:04:52:52:26:a9:03:
         fd:9d:68:67:f6:a1:32:70:94:46:51:79:d3:b4:5a:f7:12:2a:
         97:6b:97:9d:a2:8d:54:b2:53:99:f0:fe:d7:84:29:e3:47:4b:
         75:24:1f:1b:a6:4e:6f:66:b2:ac:f6:c1:4c:e5:2a:c6:11:a0:
         77:0e:b7:92:61:82:c5:56:d4:4c:ff:1d:28:ff:5d:86:88:3f:
         00:4f:df:b7:63:40:89:83:a5:d5:9c:e3:5c:96:5c:8b:22:46:
         4f:19:1f:7b:b2:d3:60:36:e2:b8:aa:0a:be:98:4b:8a:be:9c:
         4f:c1:9c:74:f4:b8:f9:fd:b6:66:40:81:28:ee:d7:46:fd:a6:
         09:94:a1:b9:f6:4e:d0:ec:56:7d:92:7e:2c:87:17:38:8d:e5:
         e0:30:16:89:80:e1:eb:f8:fb:30:0e:8d:50:14:29:c5:df:08:
         de:8b:c4:d4:8f:10:d8:9d:95:2b:f4:db:86:38:9c:59:25:f0:
         d2:2a:f0:a0:6f:57:e9:1e:8c:51:54:b5:ed:8f:75:93:d9:e0:
         79:75:4b:d7:5e:7d:36:e1:35:d8:7b:52:b9:fe:cc:0c:43:bd:
         b3:30:60:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYlKGBJQQ06ic5nrnPg90ygOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlZTBjMGE1YWMxMzNhOGYwZjI0ODE2MTI3NmU4OTM5ODVk
OGQzZTEwHhcNMjMwNzEyMTIzMzU4WhcNMjMwNzEzMTIzMzU4WjAzMTEwLwYDVQQD
EyhjOTY4NTI3YTBiNWQ0OTRhNDlkYjE0YjdjZDJkYzNlN2NkNTNkNTc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvjiNTWH/NrP35PNm2RMfd9/5Heg
YgEz54n3fmBK7BUmRrKoyKL/8iz4CcxpmP9u36TuSH7xK4OUVokLhWS5KrN+wxrK
u4yjJzWAJVFpilFcpYs/J/85kMzzWRIP5VvVzDpFklE7Fi4LOak+0Jtsoo4ovvY4
Iip0Vzv2LG3Qi2u6++j1eZYFLJUNxIS7FzVXWnE0sXUZNiGww78xq7GwbySaNLBr
LwxeVj21PCJCwfz/SpCT3VK1NqzlAPu3CtyPMWKQtRRjhbnNGDxPwuw7FCf6/Hw3
ABPqxgUrNRO+yftANBIavX0ksVrTXjrUM9wqk9qeKwXrQpPoZWe7Xn+y7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMloUnoLXUlKSdsUt80tw+fNU9V2MB8GA1UdIwQY
MBaAFM7gwKWsEzqPDySBYSduiTmF2NPhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenVEQXBhd1RPbzhQSklGaEoyNkpPWVhZMC1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8zNWY2MzItZGI3Yi00ZmI0LTk4YTYt
NzlkODE3MjAyYWU1LzEvenVEQXBhd1RPbzhQSklGaEoyNkpPWVhZMC1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi8zNWY2MzItZGI3Yi00ZmI0LTk4YTYtNzlkODE3MjAyYWU1
LzEvenVEQXBhd1RPbzhQSklGaEoyNkpPWVhZMC1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmzkN2kWC
A/mR0RtEwLAtrrAj8IYs535tei9te95mBFJSJqkD/Z1oZ/ahMnCURlF507Ra9xIq
l2uXnaKNVLJTmfD+14Qp40dLdSQfG6ZOb2ayrPbBTOUqxhGgdw63kmGCxVbUTP8d
KP9dhog/AE/ft2NAiYOl1ZzjXJZciyJGTxkfe7LTYDbiuKoKvphLir6cT8GcdPS4
+f22ZkCBKO7XRv2mCZShufZO0OxWfZJ+LIcXOI3l4DAWiYDh6/j7MA6NUBQpxd8I
3ovE1I8Q2J2VK/TbhjicWSXw0irwoG9X6R6MUVS17Y91k9ngeXVL1159NuE12HtS
uf7MDEO9szBgSg==
-----END CERTIFICATE-----