Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/593065-bab4-4b6d-959a-45dae6fedc33/1/R8bfanwj5tVZfqlB4qu9FqqCOdI.mft
File:                     R8bfanwj5tVZfqlB4qu9FqqCOdI.mft (raw, json)
Hash identifier:          KP8CeGC1M65oK5bs2mCZKinYXurD8B6ef1Rv0f1jJ/c=
Subject key identifier:   8F:6A:A9:34:1A:06:7E:91:20:2A:FA:C7:30:07:92:46:F8:B5:49:F1
Authority key identifier: 47:C6:DF:6A:7C:23:E6:D5:59:7E:A9:41:E2:AB:BD:16:AA:82:39:D2
Certificate issuer:       /CN=47c6df6a7c23e6d5597ea941e2abbd16aa8239d2
Certificate serial:       019326AF94E8C2DCB61AE48D30F8409B9FBD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R8bfanwj5tVZfqlB4qu9FqqCOdI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/593065-bab4-4b6d-959a-45dae6fedc33/1/R8bfanwj5tVZfqlB4qu9FqqCOdI.mft
Manifest number:          1357
Signing time:             Wed 13 Nov 2024 18:01:01 +0000
Manifest this update:     Wed 13 Nov 2024 18:01:01 +0000
Manifest next update:     Thu 14 Nov 2024 18:01:01 +0000
Files and hashes:         1: R8bfanwj5tVZfqlB4qu9FqqCOdI.crl (hash: rcCg0RAzddC+Q5Ec9CGmN0TR1bLrGhB3uNzMBzzWyz8=)
                          2: tHY2dsgEX9XrSp0yFRWqbui8MZc.roa (hash: LQMv+lCdGkaS5WhQctP23ck+HaxLN0CesKcS9TDl41w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:26:af:94:e8:c2:dc:b6:1a:e4:8d:30:f8:40:9b:9f:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47c6df6a7c23e6d5597ea941e2abbd16aa8239d2
        Validity
            Not Before: Nov 13 18:01:01 2024 GMT
            Not After : Nov 14 18:01:01 2024 GMT
        Subject: CN=8f6aa9341a067e91202afac730079246f8b549f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:65:11:99:26:00:31:05:da:5b:5d:88:34:0b:
                    fc:5e:17:94:51:08:2d:33:aa:18:11:dd:44:4e:cc:
                    48:c5:f0:63:d0:64:07:48:bd:69:be:38:40:d1:a2:
                    8d:0e:ec:cd:2e:8b:4d:24:57:69:6a:96:e4:5a:89:
                    b2:c7:f1:a4:be:2b:dc:f8:87:df:4e:b3:81:ed:7d:
                    2e:66:48:47:46:c9:a6:9f:33:a1:f6:98:3f:41:b3:
                    2c:f5:5d:a6:14:04:e5:20:f3:38:57:84:e9:5d:1c:
                    f0:27:4c:ab:56:02:b0:06:b2:be:d0:00:43:4a:d7:
                    3c:65:10:3d:f4:58:37:07:43:ff:f6:0d:eb:dd:e8:
                    27:ef:79:3d:f7:30:3c:2d:82:d9:7d:18:53:43:c2:
                    c1:95:28:8f:a6:8d:28:84:60:62:08:c1:72:92:66:
                    e8:27:52:e9:a6:92:65:5a:9f:33:2e:c6:f4:16:59:
                    bb:41:b7:69:a0:5f:8c:7e:52:5a:61:b3:20:88:76:
                    d1:f8:23:7d:05:96:e6:2b:e8:9a:6d:c0:9b:49:f7:
                    47:3f:60:79:8f:25:68:4d:3b:1c:c4:06:8e:79:f4:
                    ee:2c:2f:35:61:37:54:5b:f0:af:94:2e:d8:3f:bf:
                    05:8a:db:97:b9:a3:1d:25:80:24:43:fb:01:55:86:
                    c8:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:6A:A9:34:1A:06:7E:91:20:2A:FA:C7:30:07:92:46:F8:B5:49:F1
            X509v3 Authority Key Identifier:
                keyid:47:C6:DF:6A:7C:23:E6:D5:59:7E:A9:41:E2:AB:BD:16:AA:82:39:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R8bfanwj5tVZfqlB4qu9FqqCOdI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/593065-bab4-4b6d-959a-45dae6fedc33/1/R8bfanwj5tVZfqlB4qu9FqqCOdI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/593065-bab4-4b6d-959a-45dae6fedc33/1/R8bfanwj5tVZfqlB4qu9FqqCOdI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:75:8c:a3:a8:9e:db:40:a4:15:1b:37:7e:d7:df:8c:06:a3:
         29:f1:1d:50:a7:80:b6:30:d8:25:0a:8b:e4:0a:61:db:70:8a:
         ca:76:f4:55:e2:74:22:92:5c:e7:b9:ce:34:c2:06:4b:fe:fa:
         c4:71:9b:f9:af:d2:05:c7:ac:93:46:e5:32:bc:00:3d:6d:20:
         12:42:1c:0b:b4:17:0b:18:4e:19:6a:02:68:62:21:14:8d:67:
         1c:e9:13:ad:9b:52:a1:30:b6:67:f8:28:e2:bc:c4:fb:9f:75:
         9f:7e:3d:31:d4:c4:40:36:fd:14:70:6c:aa:1f:f9:1e:62:6d:
         69:b2:97:c0:2c:0a:21:ed:06:c0:f1:9e:d4:4b:96:b0:e3:6b:
         7d:0d:2f:0f:4e:4c:15:5f:6f:c7:7a:fc:6e:4d:86:26:e4:b3:
         88:b8:9b:ba:53:ed:b4:75:15:6e:e3:33:5c:89:53:09:cd:a3:
         50:b5:14:ba:8f:06:3e:80:48:eb:dd:0c:73:fc:36:3b:24:38:
         3c:3f:49:40:61:58:94:c9:09:47:84:18:06:71:1f:60:d9:c8:
         dd:81:42:ce:fc:48:9b:7f:54:f9:0e:5f:5a:d0:5c:95:ae:67:
         35:d1:69:dc:60:10:89:ec:01:aa:8e:65:f8:79:6d:33:51:07:
         00:30:20:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZMmr5Towty2GuSNMPhAm5+9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3YzZkZjZhN2MyM2U2ZDU1OTdlYTk0MWUyYWJiZDE2YWE4
MjM5ZDIwHhcNMjQxMTEzMTgwMTAxWhcNMjQxMTE0MTgwMTAxWjAzMTEwLwYDVQQD
Eyg4ZjZhYTkzNDFhMDY3ZTkxMjAyYWZhYzczMDA3OTI0NmY4YjU0OWYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWURmSYAMQXaW12INAv8XheUUQgt
M6oYEd1ETsxIxfBj0GQHSL1pvjhA0aKNDuzNLotNJFdpapbkWomyx/Gkvivc+Iff
TrOB7X0uZkhHRsmmnzOh9pg/QbMs9V2mFATlIPM4V4TpXRzwJ0yrVgKwBrK+0ABD
Stc8ZRA99Fg3B0P/9g3r3egn73k99zA8LYLZfRhTQ8LBlSiPpo0ohGBiCMFykmbo
J1LpppJlWp8zLsb0Flm7QbdpoF+MflJaYbMgiHbR+CN9BZbmK+iabcCbSfdHP2B5
jyVoTTscxAaOefTuLC81YTdUW/CvlC7YP78FituXuaMdJYAkQ/sBVYbIOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI9qqTQaBn6RICr6xzAHkkb4tUnxMB8GA1UdIwQY
MBaAFEfG32p8I+bVWX6pQeKrvRaqgjnSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjhiZmFud2o1dFZaZnFsQjRxdTlGcXFDT2RJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi81OTMwNjUtYmFiNC00YjZkLTk1OWEt
NDVkYWU2ZmVkYzMzLzEvUjhiZmFud2o1dFZaZnFsQjRxdTlGcXFDT2RJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi81OTMwNjUtYmFiNC00YjZkLTk1OWEtNDVkYWU2ZmVkYzMz
LzEvUjhiZmFud2o1dFZaZnFsQjRxdTlGcXFDT2RJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJHWMo6ie
20CkFRs3ftffjAajKfEdUKeAtjDYJQqL5Aph23CKynb0VeJ0IpJc57nONMIGS/76
xHGb+a/SBcesk0blMrwAPW0gEkIcC7QXCxhOGWoCaGIhFI1nHOkTrZtSoTC2Z/go
4rzE+591n349MdTEQDb9FHBsqh/5HmJtabKXwCwKIe0GwPGe1EuWsONrfQ0vD05M
FV9vx3r8bk2GJuSziLibulPttHUVbuMzXIlTCc2jULUUuo8GPoBI690Mc/w2OyQ4
PD9JQGFYlMkJR4QYBnEfYNnI3YFCzvxIm39U+Q5fWtBcla5nNdFp3GAQiewBqo5l
+HltM1EHADAgbA==
-----END CERTIFICATE-----