Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/5db6fa-6a52-4a48-b8cd-8e04403a325a/1/2qnMSPdVJW71JU-6HRuftrr_kaA.mft
File:                     2qnMSPdVJW71JU-6HRuftrr_kaA.mft (raw, json)
Hash identifier:          0sVzgqLsg6xj2lIX2svCkkSQIYJvxmQFyTJ0CenldJc=
Subject key identifier:   15:72:E8:9F:34:52:57:99:D3:69:12:D3:3A:76:A8:8A:BF:D3:EC:D9
Authority key identifier: DA:A9:CC:48:F7:55:25:6E:F5:25:4F:BA:1D:1B:9F:B6:BA:FF:91:A0
Certificate issuer:       /CN=daa9cc48f755256ef5254fba1d1b9fb6baff91a0
Certificate serial:       018E58BB84AC236690DBBF03A991CFAB7C77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2qnMSPdVJW71JU-6HRuftrr_kaA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/5db6fa-6a52-4a48-b8cd-8e04403a325a/1/2qnMSPdVJW71JU-6HRuftrr_kaA.mft
Manifest number:          02FD
Signing time:             Tue 19 Mar 2024 22:01:07 +0000
Manifest this update:     Tue 19 Mar 2024 22:01:07 +0000
Manifest next update:     Wed 20 Mar 2024 22:01:07 +0000
Files and hashes:         1: 2qnMSPdVJW71JU-6HRuftrr_kaA.crl (hash: nOrZxush/mkcUW46TG/8TBrWBsNosBJWzPLcfiNzhsA=)
                          2: y6qQNJ-i6pf-Q2q0o7fSpNdtooo.roa (hash: bNcrkainz5RHeXvJqBbYP2TxUyzDrQiRicAqavxrCCI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:58:bb:84:ac:23:66:90:db:bf:03:a9:91:cf:ab:7c:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=daa9cc48f755256ef5254fba1d1b9fb6baff91a0
        Validity
            Not Before: Mar 19 22:01:07 2024 GMT
            Not After : Mar 20 22:01:07 2024 GMT
        Subject: CN=1572e89f34525799d36912d33a76a88abfd3ecd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6d:dd:f7:d2:2b:37:6c:c3:d6:47:7c:b8:b0:
                    87:62:d7:f3:ba:35:fe:95:cc:4d:4c:70:47:eb:4b:
                    41:74:d4:90:1d:f3:bb:f2:bb:66:17:ef:f9:36:0a:
                    84:90:d7:6e:3d:a5:2f:45:7b:94:48:32:42:60:ef:
                    ca:c0:68:60:19:f7:c3:27:f7:04:86:2a:1f:f3:a7:
                    01:20:f7:ba:66:e5:0b:15:95:6b:fe:10:30:55:1b:
                    9d:af:3b:59:19:f3:ab:e2:9d:a5:83:e7:5a:5d:82:
                    85:4e:dd:2f:1b:65:16:0c:35:e1:5a:5f:22:2a:52:
                    1b:8d:3d:16:ab:4f:6a:ab:4f:a1:04:18:0f:43:38:
                    bf:bd:71:00:3a:77:62:de:4e:a0:10:17:be:53:c7:
                    e7:85:d8:ca:e2:67:b3:b2:e3:18:01:8f:d9:f7:e4:
                    20:cf:28:03:26:59:e1:72:7a:4a:e3:ab:66:0d:bb:
                    a0:72:39:2f:f4:7d:8c:40:9e:11:b7:f3:a9:c7:d1:
                    8d:cf:a5:80:e7:7e:69:a1:bc:f6:58:b4:16:75:9e:
                    c7:98:69:2f:da:1a:7e:eb:74:69:25:dd:28:7c:94:
                    22:8c:50:c0:34:97:2b:64:9c:f6:4d:5e:e9:88:dd:
                    8c:84:98:66:1a:e0:b3:ea:1d:aa:6f:bf:3c:51:a5:
                    8d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:72:E8:9F:34:52:57:99:D3:69:12:D3:3A:76:A8:8A:BF:D3:EC:D9
            X509v3 Authority Key Identifier:
                keyid:DA:A9:CC:48:F7:55:25:6E:F5:25:4F:BA:1D:1B:9F:B6:BA:FF:91:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qnMSPdVJW71JU-6HRuftrr_kaA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/5db6fa-6a52-4a48-b8cd-8e04403a325a/1/2qnMSPdVJW71JU-6HRuftrr_kaA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/5db6fa-6a52-4a48-b8cd-8e04403a325a/1/2qnMSPdVJW71JU-6HRuftrr_kaA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:76:83:94:28:e2:c2:ca:c8:be:a9:0e:80:1e:eb:0c:0e:c9:
         39:e4:7d:b9:fc:d6:17:66:31:57:0f:8f:36:3b:5b:52:ac:67:
         d2:72:48:91:2d:a7:18:6e:98:1e:89:fa:b9:87:52:b4:a9:13:
         fa:75:ab:f9:df:df:09:34:d9:66:19:06:91:c0:41:bf:27:48:
         cb:93:f8:7f:42:a5:25:66:a9:8e:e3:84:f2:91:74:f7:57:ff:
         9a:64:5f:4e:68:ed:e2:d9:eb:51:03:35:9f:ab:2f:de:5e:96:
         e9:64:5c:dc:4d:67:fd:19:a2:16:4f:49:ad:95:f8:8f:df:e1:
         90:6b:d0:21:7d:28:2a:a1:7a:05:74:54:92:f5:69:07:65:b4:
         08:43:df:04:5a:12:85:b5:c7:82:df:9c:24:67:93:b5:e5:c1:
         f2:e5:84:53:ec:ec:8e:6e:b4:82:f8:01:0a:57:eb:78:51:79:
         2f:2a:a3:d0:07:53:ce:6c:1e:20:2c:a5:82:99:99:d1:fc:e9:
         f8:15:2b:05:29:a8:63:46:7a:e5:34:73:91:f3:6e:4c:38:8d:
         95:92:7c:22:9a:8c:35:98:8b:f6:ff:b2:44:26:50:a7:03:1f:
         e0:90:80:56:21:34:b2:36:3e:45:3d:4d:fe:22:58:4b:ef:59:
         aa:4d:8c:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY5Yu4SsI2aQ278DqZHPq3x3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYTljYzQ4Zjc1NTI1NmVmNTI1NGZiYTFkMWI5ZmI2YmFm
ZjkxYTAwHhcNMjQwMzE5MjIwMTA3WhcNMjQwMzIwMjIwMTA3WjAzMTEwLwYDVQQD
EygxNTcyZTg5ZjM0NTI1Nzk5ZDM2OTEyZDMzYTc2YTg4YWJmZDNlY2Q5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArG3d99IrN2zD1kd8uLCHYtfzujX+
lcxNTHBH60tBdNSQHfO78rtmF+/5NgqEkNduPaUvRXuUSDJCYO/KwGhgGffDJ/cE
hiof86cBIPe6ZuULFZVr/hAwVRudrztZGfOr4p2lg+daXYKFTt0vG2UWDDXhWl8i
KlIbjT0Wq09qq0+hBBgPQzi/vXEAOndi3k6gEBe+U8fnhdjK4mezsuMYAY/Z9+Qg
zygDJlnhcnpK46tmDbugcjkv9H2MQJ4Rt/Opx9GNz6WA535pobz2WLQWdZ7HmGkv
2hp+63RpJd0ofJQijFDANJcrZJz2TV7piN2MhJhmGuCz6h2qb788UaWNtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBVy6J80UleZ02kS0zp2qIq/0+zZMB8GA1UdIwQY
MBaAFNqpzEj3VSVu9SVPuh0bn7a6/5GgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnFuTVNQZFZKVzcxSlUtNkhSdWZ0cnJfa2FBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS81ZGI2ZmEtNmE1Mi00YTQ4LWI4Y2Qt
OGUwNDQwM2EzMjVhLzEvMnFuTVNQZFZKVzcxSlUtNkhSdWZ0cnJfa2FBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS81ZGI2ZmEtNmE1Mi00YTQ4LWI4Y2QtOGUwNDQwM2EzMjVh
LzEvMnFuTVNQZFZKVzcxSlUtNkhSdWZ0cnJfa2FBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALXaDlCji
wsrIvqkOgB7rDA7JOeR9ufzWF2YxVw+PNjtbUqxn0nJIkS2nGG6YHon6uYdStKkT
+nWr+d/fCTTZZhkGkcBBvydIy5P4f0KlJWapjuOE8pF091f/mmRfTmjt4tnrUQM1
n6sv3l6W6WRc3E1n/RmiFk9JrZX4j9/hkGvQIX0oKqF6BXRUkvVpB2W0CEPfBFoS
hbXHgt+cJGeTteXB8uWEU+zsjm60gvgBClfreFF5Lyqj0AdTzmweICylgpmZ0fzp
+BUrBSmoY0Z65TRzkfNuTDiNlZJ8IpqMNZiL9v+yRCZQpwMf4JCAViE0sjY+RT1N
/iJYS+9Zqk2MKQ==
-----END CERTIFICATE-----