Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/abf0b0-5b5e-4437-a052-3f99e5036f15/1/DNZRVJ7_2FnAM2tVPiN7pviH3SU.mft
File:                     DNZRVJ7_2FnAM2tVPiN7pviH3SU.mft (raw, json)
Hash identifier:          758ZASfQTqmxXMU2CU9GdOJXy4OmcA0XjfaDZGWicYE=
Subject key identifier:   96:31:4D:F1:1B:C5:D3:74:45:E8:09:28:10:F5:6D:04:31:A3:E2:44
Authority key identifier: 0C:D6:51:54:9E:FF:D8:59:C0:33:6B:55:3E:23:7B:A6:F8:87:DD:25
Certificate issuer:       /CN=0cd651549effd859c0336b553e237ba6f887dd25
Certificate serial:       01865290C9CE5BFD9CA6F236C807936F3A96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DNZRVJ7_2FnAM2tVPiN7pviH3SU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/abf0b0-5b5e-4437-a052-3f99e5036f15/1/DNZRVJ7_2FnAM2tVPiN7pviH3SU.mft
Manifest number:          0C7F
Signing time:             Wed 15 Feb 2023 00:54:25 +0000
Manifest this update:     Wed 15 Feb 2023 00:54:25 +0000
Manifest next update:     Thu 16 Feb 2023 00:54:25 +0000
Files and hashes:         1: DNZRVJ7_2FnAM2tVPiN7pviH3SU.crl (hash: cOm4ShA3QcZJXGvTRfvLSxYlrS4EcpY586apbugf8ps=)
                          2: pXU30XCegNSdK1hLjA8OHmqvvgQ.roa (hash: JPQNXe5ofnOjavL2j2Ju3bcx+YV5e6O/zNNpjz7bdIE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:52:90:c9:ce:5b:fd:9c:a6:f2:36:c8:07:93:6f:3a:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cd651549effd859c0336b553e237ba6f887dd25
        Validity
            Not Before: Feb 15 00:54:25 2023 GMT
            Not After : Feb 16 00:54:25 2023 GMT
        Subject: CN=96314df11bc5d37445e8092810f56d0431a3e244
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:9e:db:11:ef:cd:ff:6c:69:12:37:aa:56:66:
                    3b:c6:ab:98:c4:98:08:e9:54:02:7b:ad:f8:86:e9:
                    e2:f1:ca:8f:bd:01:a8:38:0a:47:9f:c5:da:1f:a0:
                    42:07:1f:b3:36:4e:98:36:c4:b0:ce:5f:a6:43:e3:
                    e9:8d:b0:c5:27:c3:9e:da:6a:90:87:4e:7d:f8:ab:
                    19:b8:22:a0:13:8d:46:f9:30:45:25:89:6f:0e:c6:
                    cc:3f:2e:3f:f7:6b:62:50:94:dc:dc:1d:90:e3:2b:
                    10:e4:60:36:e0:0a:b2:36:70:c7:f4:3a:94:c7:4e:
                    48:49:e9:c4:51:46:fd:ad:6b:72:66:da:af:b9:e0:
                    ca:80:97:91:fb:9a:0b:9c:70:c5:87:fa:38:69:75:
                    3d:6a:88:4c:94:26:43:3f:9e:d4:97:ef:08:40:ac:
                    63:03:9f:cf:fa:74:9e:b1:f9:6a:73:8f:68:a4:de:
                    a1:c3:fb:c3:c4:f8:61:ae:77:e0:c6:9f:df:db:9a:
                    7a:72:21:39:5e:0a:53:08:74:a9:d7:4f:d5:ac:21:
                    9b:73:fd:fe:5d:16:d7:70:57:6c:17:e6:5c:20:03:
                    ed:a7:f1:dc:3e:d8:85:55:ef:73:f1:d4:a2:95:06:
                    25:f9:02:cd:02:13:62:38:89:3a:8a:c9:86:76:55:
                    35:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:31:4D:F1:1B:C5:D3:74:45:E8:09:28:10:F5:6D:04:31:A3:E2:44
            X509v3 Authority Key Identifier:
                keyid:0C:D6:51:54:9E:FF:D8:59:C0:33:6B:55:3E:23:7B:A6:F8:87:DD:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNZRVJ7_2FnAM2tVPiN7pviH3SU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/abf0b0-5b5e-4437-a052-3f99e5036f15/1/DNZRVJ7_2FnAM2tVPiN7pviH3SU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/abf0b0-5b5e-4437-a052-3f99e5036f15/1/DNZRVJ7_2FnAM2tVPiN7pviH3SU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:35:f0:0d:ac:2c:97:b8:4a:5d:dd:ec:9e:13:96:95:8e:6d:
         00:4e:4d:e0:7b:e9:56:fd:0c:22:e9:5b:80:37:c8:97:04:7b:
         d7:5b:49:57:e7:ba:60:f5:2b:56:4c:d1:44:ac:71:20:e0:70:
         75:2e:26:d7:d0:82:40:cd:03:87:9b:dc:43:76:af:1b:c7:dd:
         4e:a7:a9:63:ae:e3:f4:15:d0:52:77:5e:7d:ee:9b:e9:5c:d5:
         09:61:f5:8a:2e:79:dc:e3:21:8e:fe:3a:8e:87:f0:27:27:05:
         00:89:6f:1b:b6:14:74:64:2f:e2:73:50:ff:af:e9:32:4a:14:
         3d:72:b6:ed:21:f4:75:dc:9a:1f:71:71:dc:97:c9:fb:ba:00:
         46:98:e7:25:e2:04:6e:5d:7f:de:77:1d:13:4d:19:79:d2:e1:
         92:c2:bd:06:a8:ce:0b:53:7c:12:59:b7:b1:cd:5f:71:3b:b7:
         46:57:d0:f4:d0:47:50:92:26:37:f4:b7:cd:7a:30:3e:50:f0:
         d2:a0:48:fc:b3:b3:d5:1b:16:c0:a9:9a:de:7b:7e:fb:d6:56:
         62:1e:06:1f:95:49:2f:2f:c6:cf:84:87:72:d8:55:68:4a:a1:
         95:2c:fa:a9:bd:01:7e:4c:e1:b1:c5:d4:91:7f:42:88:09:8d:
         49:59:f0:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYZSkMnOW/2cpvI2yAeTbzqWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZDY1MTU0OWVmZmQ4NTljMDMzNmI1NTNlMjM3YmE2Zjg4
N2RkMjUwHhcNMjMwMjE1MDA1NDI1WhcNMjMwMjE2MDA1NDI1WjAzMTEwLwYDVQQD
Eyg5NjMxNGRmMTFiYzVkMzc0NDVlODA5MjgxMGY1NmQwNDMxYTNlMjQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJ7bEe/N/2xpEjeqVmY7xquYxJgI
6VQCe634huni8cqPvQGoOApHn8XaH6BCBx+zNk6YNsSwzl+mQ+PpjbDFJ8Oe2mqQ
h059+KsZuCKgE41G+TBFJYlvDsbMPy4/92tiUJTc3B2Q4ysQ5GA24AqyNnDH9DqU
x05ISenEUUb9rWtyZtqvueDKgJeR+5oLnHDFh/o4aXU9aohMlCZDP57Ul+8IQKxj
A5/P+nSesflqc49opN6hw/vDxPhhrnfgxp/f25p6ciE5XgpTCHSp10/VrCGbc/3+
XRbXcFdsF+ZcIAPtp/HcPtiFVe9z8dSilQYl+QLNAhNiOIk6ismGdlU1KwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJYxTfEbxdN0RegJKBD1bQQxo+JEMB8GA1UdIwQY
MBaAFAzWUVSe/9hZwDNrVT4je6b4h90lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE5aUlZKN18yRm5BTTJ0VlBpTjdwdmlIM1NVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9hYmYwYjAtNWI1ZS00NDM3LWEwNTIt
M2Y5OWU1MDM2ZjE1LzEvRE5aUlZKN18yRm5BTTJ0VlBpTjdwdmlIM1NVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9hYmYwYjAtNWI1ZS00NDM3LWEwNTItM2Y5OWU1MDM2ZjE1
LzEvRE5aUlZKN18yRm5BTTJ0VlBpTjdwdmlIM1NVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOTXwDaws
l7hKXd3snhOWlY5tAE5N4HvpVv0MIulbgDfIlwR711tJV+e6YPUrVkzRRKxxIOBw
dS4m19CCQM0Dh5vcQ3avG8fdTqepY67j9BXQUndefe6b6VzVCWH1ii553OMhjv46
jofwJycFAIlvG7YUdGQv4nNQ/6/pMkoUPXK27SH0ddyaH3Fx3JfJ+7oARpjnJeIE
bl1/3ncdE00ZedLhksK9BqjOC1N8Elm3sc1fcTu3RlfQ9NBHUJImN/S3zXowPlDw
0qBI/LOz1RsWwKma3nt++9ZWYh4GH5VJLy/Gz4SHcthVaEqhlSz6qb0BfkzhscXU
kX9CiAmNSVnw7A==
-----END CERTIFICATE-----