Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/420229-4d92-491f-82d7-4d990d72ddbf/1/KF2zkwU489Eade4GhYSe8DfUwPs.mft
File:                     KF2zkwU489Eade4GhYSe8DfUwPs.mft (raw, json)
Hash identifier:          hGn+WEb2SDy7J/utvq5GHpPbkeSZIbJoftubTtzCNyo=
Subject key identifier:   D0:A5:03:84:41:65:6B:0A:D3:68:0F:75:31:43:1C:82:30:B5:BB:E1
Authority key identifier: 28:5D:B3:93:05:38:F3:D1:1A:75:EE:06:85:84:9E:F0:37:D4:C0:FB
Certificate issuer:       /CN=285db3930538f3d11a75ee0685849ef037d4c0fb
Certificate serial:       018CAA4B0A4C7D468393830349BA8905A4D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KF2zkwU489Eade4GhYSe8DfUwPs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/420229-4d92-491f-82d7-4d990d72ddbf/1/KF2zkwU489Eade4GhYSe8DfUwPs.mft
Manifest number:          0FFD
Signing time:             Wed 27 Dec 2023 08:01:33 +0000
Manifest this update:     Wed 27 Dec 2023 08:01:33 +0000
Manifest next update:     Thu 28 Dec 2023 08:01:33 +0000
Files and hashes:         1: KF2zkwU489Eade4GhYSe8DfUwPs.crl (hash: xU7NSc4pwXGChbt/+X2xvMz0ob1xQbuWCeS05KPBtNc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:aa:4b:0a:4c:7d:46:83:93:83:03:49:ba:89:05:a4:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=285db3930538f3d11a75ee0685849ef037d4c0fb
        Validity
            Not Before: Dec 27 08:01:33 2023 GMT
            Not After : Dec 28 08:01:33 2023 GMT
        Subject: CN=d0a5038441656b0ad3680f7531431c8230b5bbe1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:63:80:ce:42:82:85:71:6b:8a:8c:8e:77:92:
                    82:4c:75:4d:f7:b3:e9:d5:ec:56:f3:24:96:06:d4:
                    58:33:90:5e:b1:31:d5:90:28:f4:13:93:13:47:c4:
                    a1:73:5e:dd:e8:48:c7:18:e9:ab:45:64:8e:02:ae:
                    a3:d1:57:1d:40:13:d6:85:99:81:d2:ce:54:c2:6c:
                    ae:ad:f6:c1:22:b7:ed:7b:b2:c9:60:25:7e:7a:3d:
                    19:75:e9:1a:6f:da:8e:dd:0e:ab:dd:aa:f6:8f:b5:
                    94:84:ee:8a:f9:df:6b:02:4c:f1:55:b5:2e:7a:b2:
                    02:d0:22:0c:61:ec:c1:0b:55:1a:30:08:67:54:34:
                    1a:cc:67:c5:1c:2f:2f:27:6f:d2:ed:de:50:66:34:
                    61:21:df:d4:a7:bb:7e:a2:59:26:80:a6:d9:e8:5f:
                    0f:42:d8:6b:2d:d8:30:2e:0e:23:a3:5c:b4:6e:0c:
                    8c:8c:ca:bb:9f:18:94:eb:9c:a4:9f:03:03:fa:99:
                    eb:69:8b:01:85:a4:32:89:60:9d:bf:9a:af:3d:71:
                    82:c5:55:cc:1a:91:9f:8d:1d:87:01:92:ec:42:37:
                    54:ac:9a:9e:78:8b:b1:78:14:f8:84:52:db:d3:58:
                    d9:f8:9a:6f:f2:40:22:74:76:fa:0f:8a:74:2f:f1:
                    8b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:A5:03:84:41:65:6B:0A:D3:68:0F:75:31:43:1C:82:30:B5:BB:E1
            X509v3 Authority Key Identifier:
                keyid:28:5D:B3:93:05:38:F3:D1:1A:75:EE:06:85:84:9E:F0:37:D4:C0:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KF2zkwU489Eade4GhYSe8DfUwPs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/420229-4d92-491f-82d7-4d990d72ddbf/1/KF2zkwU489Eade4GhYSe8DfUwPs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/420229-4d92-491f-82d7-4d990d72ddbf/1/KF2zkwU489Eade4GhYSe8DfUwPs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:f5:0d:49:3a:12:ec:79:ca:0b:d7:45:a2:0b:c0:68:59:a7:
         af:11:74:1f:8f:6a:42:e8:bd:09:84:14:79:5c:bc:ec:27:b8:
         7e:23:e9:2f:2e:9f:35:52:e2:23:ef:c2:84:a1:af:b8:db:2c:
         ed:3e:8c:54:95:09:54:2d:91:8e:6b:69:94:db:30:7f:3f:1f:
         f1:fe:16:76:af:85:ee:52:47:95:85:bc:2b:d9:dc:07:6c:86:
         38:1e:7d:be:08:cc:4f:34:6b:93:a8:ba:25:93:33:0b:87:9c:
         97:c6:c6:df:c0:c2:ef:a4:56:4d:62:3e:eb:01:51:22:5d:73:
         de:68:0e:77:9a:2f:c6:24:79:98:bb:c8:14:82:85:e5:a7:37:
         2c:2a:d1:7d:2b:3c:76:02:27:8e:6c:84:16:d2:b2:d1:bf:e2:
         1d:81:30:e5:cb:3a:6d:ca:f5:06:ef:3f:85:60:bc:e4:16:2b:
         f7:1a:df:81:5c:81:56:2e:dd:3c:a9:89:e7:54:f3:a7:ae:b4:
         af:cf:f5:ba:b9:2d:50:c3:2a:92:d9:b7:67:dc:f3:6f:07:0f:
         56:61:1d:64:92:1f:25:25:df:ae:d5:f5:83:03:1b:5a:2b:d1:
         5f:6e:0c:09:ea:ed:86:0a:7b:7c:79:4b:71:15:80:5a:e7:ed:
         0f:58:be:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYyqSwpMfUaDk4MDSbqJBaTWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4NWRiMzkzMDUzOGYzZDExYTc1ZWUwNjg1ODQ5ZWYwMzdk
NGMwZmIwHhcNMjMxMjI3MDgwMTMzWhcNMjMxMjI4MDgwMTMzWjAzMTEwLwYDVQQD
EyhkMGE1MDM4NDQxNjU2YjBhZDM2ODBmNzUzMTQzMWM4MjMwYjViYmUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2OAzkKChXFrioyOd5KCTHVN97Pp
1exW8ySWBtRYM5BesTHVkCj0E5MTR8Shc17d6EjHGOmrRWSOAq6j0VcdQBPWhZmB
0s5UwmyurfbBIrfte7LJYCV+ej0Zdekab9qO3Q6r3ar2j7WUhO6K+d9rAkzxVbUu
erIC0CIMYezBC1UaMAhnVDQazGfFHC8vJ2/S7d5QZjRhId/Up7t+olkmgKbZ6F8P
QthrLdgwLg4jo1y0bgyMjMq7nxiU65yknwMD+pnraYsBhaQyiWCdv5qvPXGCxVXM
GpGfjR2HAZLsQjdUrJqeeIuxeBT4hFLb01jZ+Jpv8kAidHb6D4p0L/GLFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNClA4RBZWsK02gPdTFDHIIwtbvhMB8GA1UdIwQY
MBaAFChds5MFOPPRGnXuBoWEnvA31MD7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0Yyemt3VTQ4OUVhZGU0R2hZU2U4RGZVd1BzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS80MjAyMjktNGQ5Mi00OTFmLTgyZDct
NGQ5OTBkNzJkZGJmLzEvS0Yyemt3VTQ4OUVhZGU0R2hZU2U4RGZVd1BzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS80MjAyMjktNGQ5Mi00OTFmLTgyZDctNGQ5OTBkNzJkZGJm
LzEvS0Yyemt3VTQ4OUVhZGU0R2hZU2U4RGZVd1BzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnvUNSToS
7HnKC9dFogvAaFmnrxF0H49qQui9CYQUeVy87Ce4fiPpLy6fNVLiI+/ChKGvuNss
7T6MVJUJVC2RjmtplNswfz8f8f4Wdq+F7lJHlYW8K9ncB2yGOB59vgjMTzRrk6i6
JZMzC4ecl8bG38DC76RWTWI+6wFRIl1z3mgOd5ovxiR5mLvIFIKF5ac3LCrRfSs8
dgInjmyEFtKy0b/iHYEw5cs6bcr1Bu8/hWC85BYr9xrfgVyBVi7dPKmJ51Tzp660
r8/1urktUMMqktm3Z9zzbwcPVmEdZJIfJSXfrtX1gwMbWivRX24MCerthgp7fHlL
cRWAWuftD1i+Gg==