Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/9b240c-0d28-4690-89b4-1a8a4a38a805/1/dHwuOlFInxsBtDcXWAmbyF3ZDwc.mft
File:                     dHwuOlFInxsBtDcXWAmbyF3ZDwc.mft (raw, json)
Hash identifier:          df5KN00PdXWtoS6hnYZDbsybbl9AgQiNH7IxGA58PxY=
Subject key identifier:   B4:0C:20:25:02:4E:F8:C5:4A:2C:86:4D:83:69:AE:7C:F0:43:FC:11
Authority key identifier: 74:7C:2E:3A:51:48:9F:1B:01:B4:37:17:58:09:9B:C8:5D:D9:0F:07
Certificate issuer:       /CN=747c2e3a51489f1b01b4371758099bc85dd90f07
Certificate serial:       0192AE867A3AA918815EF51E6362EEDE3D6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dHwuOlFInxsBtDcXWAmbyF3ZDwc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/9b240c-0d28-4690-89b4-1a8a4a38a805/1/dHwuOlFInxsBtDcXWAmbyF3ZDwc.mft
Manifest number:          081E
Signing time:             Mon 21 Oct 2024 10:01:41 +0000
Manifest this update:     Mon 21 Oct 2024 10:01:41 +0000
Manifest next update:     Tue 22 Oct 2024 10:01:41 +0000
Files and hashes:         1: Z89K2JO1WJVCdM6katDbE5ar0CY.roa (hash: iuz/TK/9oL0R5JJGqafe35EW3PGygqQfI8P8wD5et5s=)
                          2: aHVJ8Uam0mRlP7K0rCkm3Dcm6_k.roa (hash: vKfh9q3YB2jfqfXA+smPDKG9YgSjzzmFeD7L+bwm1XA=)
                          3: dHwuOlFInxsBtDcXWAmbyF3ZDwc.crl (hash: 6MDkkuIIfTBry7uILQR63nYfhTF1ieiAyjeeq/HTxws=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:ae:86:7a:3a:a9:18:81:5e:f5:1e:63:62:ee:de:3d:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=747c2e3a51489f1b01b4371758099bc85dd90f07
        Validity
            Not Before: Oct 21 10:01:41 2024 GMT
            Not After : Oct 22 10:01:41 2024 GMT
        Subject: CN=b40c2025024ef8c54a2c864d8369ae7cf043fc11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:79:99:4c:7f:5c:3c:26:4d:c3:16:09:a6:f2:
                    2d:77:19:95:03:c8:b1:b0:99:9c:9e:2f:87:bb:ca:
                    aa:4c:53:49:7d:06:b3:ab:a0:1b:e7:79:ae:d7:78:
                    56:c1:f7:f8:7d:b3:76:d4:a7:97:b8:2f:36:b9:e8:
                    08:68:06:51:19:a7:16:06:5d:ab:f3:52:12:d5:ae:
                    6d:5d:30:0c:aa:ea:7d:50:73:a1:b0:bc:b6:46:14:
                    ed:b7:58:1c:df:e1:2c:6c:ea:83:b9:07:3a:ae:5c:
                    df:c2:a6:47:4a:43:16:f5:ad:97:82:69:e6:62:be:
                    e3:d8:be:6f:57:4e:f9:87:b9:ff:dd:f2:d4:14:e3:
                    11:2e:de:53:3a:b4:13:ee:01:99:3f:60:7d:71:29:
                    dd:1e:d4:6d:33:b6:6f:86:3c:c1:ab:93:f0:0e:11:
                    f3:71:32:2f:36:c5:71:4d:2b:82:62:f4:fa:55:f0:
                    58:fe:f5:8d:94:bd:6a:7e:f8:6d:7b:4a:d0:35:65:
                    73:66:29:d3:e2:2d:4e:08:04:a1:f4:61:37:77:4f:
                    15:92:37:e9:6b:a5:80:4f:57:cc:f5:6b:ba:16:db:
                    19:08:7b:80:ec:e3:cd:60:9b:18:b9:bc:fe:c6:75:
                    5f:04:ec:bd:05:e1:69:1c:d4:be:c6:1c:47:f7:f4:
                    9b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:0C:20:25:02:4E:F8:C5:4A:2C:86:4D:83:69:AE:7C:F0:43:FC:11
            X509v3 Authority Key Identifier:
                keyid:74:7C:2E:3A:51:48:9F:1B:01:B4:37:17:58:09:9B:C8:5D:D9:0F:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHwuOlFInxsBtDcXWAmbyF3ZDwc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9b240c-0d28-4690-89b4-1a8a4a38a805/1/dHwuOlFInxsBtDcXWAmbyF3ZDwc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9b240c-0d28-4690-89b4-1a8a4a38a805/1/dHwuOlFInxsBtDcXWAmbyF3ZDwc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:af:eb:77:a6:cf:f8:86:1a:b6:19:bc:12:dc:d4:83:7f:f6:
         ad:7c:7c:05:18:60:3e:86:93:3e:ae:64:5b:b6:18:83:e2:c1:
         b1:60:92:fe:a3:ef:4e:98:54:db:73:20:d1:4c:56:ac:0e:ff:
         55:38:8b:20:b2:e8:b6:b9:a1:85:d5:03:bc:dd:4a:ea:81:c3:
         d5:87:66:96:49:06:ce:01:de:aa:0a:97:81:b0:0e:9e:71:cb:
         7d:c9:77:3e:c6:41:5c:a7:b9:a6:e1:f6:4e:59:ea:65:5c:c1:
         0c:af:01:8e:85:ad:9f:4c:74:0d:fd:8d:f4:96:b0:71:d8:95:
         89:4c:e8:a7:3b:7c:56:6e:ca:a7:a6:b6:ad:c1:b7:11:c4:8f:
         ba:0d:f9:a4:d6:b2:c3:73:22:09:a2:82:34:a0:57:9e:4b:17:
         27:e1:bb:12:ae:6c:08:40:ec:d4:33:67:2b:f1:e2:8f:50:2d:
         36:78:97:60:d5:a6:db:be:2e:a8:a3:17:51:ac:82:42:38:8a:
         57:cb:d3:7e:e6:b2:f9:4a:e2:d1:10:4d:4e:2e:4d:cc:a9:18:
         f1:07:8e:62:f6:8d:02:d9:e9:8f:ae:6d:1c:27:79:1f:fe:2f:
         f6:51:af:e1:c2:e9:c2:bb:af:c8:2b:0a:a4:36:29:3a:a7:95:
         e4:3c:cb:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZKuhno6qRiBXvUeY2Lu3j1vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0N2MyZTNhNTE0ODlmMWIwMWI0MzcxNzU4MDk5YmM4NWRk
OTBmMDcwHhcNMjQxMDIxMTAwMTQxWhcNMjQxMDIyMTAwMTQxWjAzMTEwLwYDVQQD
EyhiNDBjMjAyNTAyNGVmOGM1NGEyYzg2NGQ4MzY5YWU3Y2YwNDNmYzExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXmZTH9cPCZNwxYJpvItdxmVA8ix
sJmcni+Hu8qqTFNJfQazq6Ab53mu13hWwff4fbN21KeXuC82uegIaAZRGacWBl2r
81IS1a5tXTAMqup9UHOhsLy2RhTtt1gc3+EsbOqDuQc6rlzfwqZHSkMW9a2Xgmnm
Yr7j2L5vV075h7n/3fLUFOMRLt5TOrQT7gGZP2B9cSndHtRtM7ZvhjzBq5PwDhHz
cTIvNsVxTSuCYvT6VfBY/vWNlL1qfvhte0rQNWVzZinT4i1OCASh9GE3d08Vkjfp
a6WAT1fM9Wu6FtsZCHuA7OPNYJsYubz+xnVfBOy9BeFpHNS+xhxH9/SbWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLQMICUCTvjFSiyGTYNprnzwQ/wRMB8GA1UdIwQY
MBaAFHR8LjpRSJ8bAbQ3F1gJm8hd2Q8HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEh3dU9sRklueHNCdERjWFdBbWJ5RjNaRHdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85YjI0MGMtMGQyOC00NjkwLTg5YjQt
MWE4YTRhMzhhODA1LzEvZEh3dU9sRklueHNCdERjWFdBbWJ5RjNaRHdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85YjI0MGMtMGQyOC00NjkwLTg5YjQtMWE4YTRhMzhhODA1
LzEvZEh3dU9sRklueHNCdERjWFdBbWJ5RjNaRHdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn6/rd6bP
+IYathm8EtzUg3/2rXx8BRhgPoaTPq5kW7YYg+LBsWCS/qPvTphU23Mg0UxWrA7/
VTiLILLotrmhhdUDvN1K6oHD1YdmlkkGzgHeqgqXgbAOnnHLfcl3PsZBXKe5puH2
TlnqZVzBDK8BjoWtn0x0Df2N9JawcdiViUzopzt8Vm7Kp6a2rcG3EcSPug35pNay
w3MiCaKCNKBXnksXJ+G7Eq5sCEDs1DNnK/Hij1AtNniXYNWm274uqKMXUayCQjiK
V8vTfuay+Uri0RBNTi5NzKkY8QeOYvaNAtnpj65tHCd5H/4v9lGv4cLpwruvyCsK
pDYpOqeV5DzL2A==
-----END CERTIFICATE-----