Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/d3e6d2-adaa-4306-ad2a-9feb36cc2fcd/1/r-0UKpzSs9FPSXsT7MISa6IAFdg.mft
File:                     r-0UKpzSs9FPSXsT7MISa6IAFdg.mft (raw, json)
Hash identifier:          DLorvafF9CoG7yS4RoBOsmnlTYHx3IdzCOy7ZhwBq7c=
Subject key identifier:   4A:BA:3A:63:7E:B6:5F:97:3D:3A:00:FA:83:F9:F8:D7:BD:4D:C5:DD
Authority key identifier: AF:ED:14:2A:9C:D2:B3:D1:4F:49:7B:13:EC:C2:12:6B:A2:00:15:D8
Certificate issuer:       /CN=afed142a9cd2b3d14f497b13ecc2126ba20015d8
Certificate serial:       018C1A4F254DBB06EA0795927FDCCC3C9FBC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r-0UKpzSs9FPSXsT7MISa6IAFdg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/d3e6d2-adaa-4306-ad2a-9feb36cc2fcd/1/r-0UKpzSs9FPSXsT7MISa6IAFdg.mft
Manifest number:          58
Signing time:             Wed 29 Nov 2023 09:00:43 +0000
Manifest this update:     Wed 29 Nov 2023 09:00:43 +0000
Manifest next update:     Thu 30 Nov 2023 09:00:43 +0000
Files and hashes:         1: r-0UKpzSs9FPSXsT7MISa6IAFdg.crl (hash: bI/+nT+ww1nqvhSpIMd+hyB6Z99+kwhxSxNn5ZQ9EXc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:1a:4f:25:4d:bb:06:ea:07:95:92:7f:dc:cc:3c:9f:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afed142a9cd2b3d14f497b13ecc2126ba20015d8
        Validity
            Not Before: Nov 29 09:00:43 2023 GMT
            Not After : Nov 30 09:00:43 2023 GMT
        Subject: CN=4aba3a637eb65f973d3a00fa83f9f8d7bd4dc5dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:0a:f6:90:f8:75:cf:d0:4d:77:5b:13:b3:fd:
                    67:3a:e3:02:c4:70:6f:80:a8:aa:5a:d1:dc:30:da:
                    68:6a:b1:5a:a7:bc:3d:14:43:52:2d:9c:15:d0:e2:
                    77:bc:e9:a3:a4:ac:bf:dc:ed:7a:15:95:f6:b3:54:
                    11:f1:30:66:b8:25:ed:d7:87:d9:bb:b0:02:3c:f4:
                    74:aa:cf:cf:1d:97:be:e0:cb:2f:2e:62:ed:58:d7:
                    81:16:6d:f2:12:41:4b:a7:1e:30:c3:e2:c1:50:65:
                    ec:90:63:c0:92:78:2f:3a:05:43:cf:9f:ca:2e:f4:
                    7f:55:cb:4d:62:42:d9:49:9f:d1:dc:ce:6a:cb:ae:
                    b6:94:af:b5:e1:a2:27:84:32:60:63:23:6e:a4:dc:
                    1e:4d:6f:c3:53:60:7e:f4:88:59:40:73:a3:ec:88:
                    09:0e:66:01:f3:0e:8d:9e:75:43:06:ed:eb:08:33:
                    8a:5f:ae:70:12:0a:f0:e1:75:0b:9f:4b:7d:a0:86:
                    e0:5e:a5:4a:7c:54:4a:78:61:e6:28:be:a7:31:8c:
                    de:d4:ff:ef:8e:24:46:f1:b0:1a:d0:24:76:3b:5d:
                    5d:91:ed:5d:bf:a9:26:b8:e5:69:43:80:59:73:92:
                    1e:48:ae:c8:78:38:80:e4:b7:73:68:c3:67:0c:28:
                    ca:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:BA:3A:63:7E:B6:5F:97:3D:3A:00:FA:83:F9:F8:D7:BD:4D:C5:DD
            X509v3 Authority Key Identifier:
                keyid:AF:ED:14:2A:9C:D2:B3:D1:4F:49:7B:13:EC:C2:12:6B:A2:00:15:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-0UKpzSs9FPSXsT7MISa6IAFdg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d3e6d2-adaa-4306-ad2a-9feb36cc2fcd/1/r-0UKpzSs9FPSXsT7MISa6IAFdg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d3e6d2-adaa-4306-ad2a-9feb36cc2fcd/1/r-0UKpzSs9FPSXsT7MISa6IAFdg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:cd:ba:e2:7f:8c:f2:7e:57:a4:dd:b2:4b:bf:28:3a:81:de:
         c1:d5:19:0d:f0:0b:dc:9e:71:4a:44:aa:b8:27:f5:c4:dd:a0:
         bd:ce:ba:a0:80:47:24:08:27:12:49:2d:e8:16:29:25:46:ee:
         be:bf:0f:48:93:ea:b1:a9:8d:47:41:1e:26:57:0a:a6:c5:1c:
         c0:02:b0:af:ae:29:fc:72:3a:c6:0f:ce:84:dc:e6:f9:3f:6a:
         d9:b4:a8:b7:dd:3f:ab:ae:52:c0:c9:d7:4d:86:49:e9:e3:cc:
         32:d7:b1:4b:8d:22:0f:5d:bb:68:7b:77:e9:b7:f5:00:32:b2:
         7b:8f:83:5d:3f:17:25:18:a2:ae:c6:33:8f:9e:89:15:9b:24:
         9a:b7:f6:e2:66:95:0c:23:22:6d:35:28:a5:25:e6:49:64:d5:
         26:c5:1e:82:ff:40:f8:94:d6:08:d7:cb:40:67:ae:6f:f6:ba:
         53:8b:6d:9c:b6:89:9c:24:3c:7d:0a:5f:10:a3:ef:27:26:cc:
         ee:a5:15:5f:45:c2:a0:d2:c2:36:ac:b1:07:a4:f3:16:ab:7b:
         3f:95:b5:59:2f:c5:8a:a8:d7:c8:41:7e:b1:13:67:18:85:51:
         97:92:3d:21:cb:e1:aa:9b:9d:de:93:64:81:0d:70:e4:d6:8c:
         99:91:8c:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYwaTyVNuwbqB5WSf9zMPJ+8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmZWQxNDJhOWNkMmIzZDE0ZjQ5N2IxM2VjYzIxMjZiYTIw
MDE1ZDgwHhcNMjMxMTI5MDkwMDQzWhcNMjMxMTMwMDkwMDQzWjAzMTEwLwYDVQQD
Eyg0YWJhM2E2MzdlYjY1Zjk3M2QzYTAwZmE4M2Y5ZjhkN2JkNGRjNWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwr2kPh1z9BNd1sTs/1nOuMCxHBv
gKiqWtHcMNpoarFap7w9FENSLZwV0OJ3vOmjpKy/3O16FZX2s1QR8TBmuCXt14fZ
u7ACPPR0qs/PHZe+4MsvLmLtWNeBFm3yEkFLpx4ww+LBUGXskGPAkngvOgVDz5/K
LvR/VctNYkLZSZ/R3M5qy662lK+14aInhDJgYyNupNweTW/DU2B+9IhZQHOj7IgJ
DmYB8w6NnnVDBu3rCDOKX65wEgrw4XULn0t9oIbgXqVKfFRKeGHmKL6nMYze1P/v
jiRG8bAa0CR2O11dke1dv6kmuOVpQ4BZc5IeSK7IeDiA5LdzaMNnDCjKkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEq6OmN+tl+XPToA+oP5+Ne9TcXdMB8GA1UdIwQY
MBaAFK/tFCqc0rPRT0l7E+zCEmuiABXYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvci0wVUtwelNzOUZQU1hzVDdNSVNhNklBRmRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9kM2U2ZDItYWRhYS00MzA2LWFkMmEt
OWZlYjM2Y2MyZmNkLzEvci0wVUtwelNzOUZQU1hzVDdNSVNhNklBRmRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9kM2U2ZDItYWRhYS00MzA2LWFkMmEtOWZlYjM2Y2MyZmNk
LzEvci0wVUtwelNzOUZQU1hzVDdNSVNhNklBRmRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAps264n+M
8n5XpN2yS78oOoHewdUZDfAL3J5xSkSquCf1xN2gvc66oIBHJAgnEkkt6BYpJUbu
vr8PSJPqsamNR0EeJlcKpsUcwAKwr64p/HI6xg/OhNzm+T9q2bSot90/q65SwMnX
TYZJ6ePMMtexS40iD127aHt36bf1ADKye4+DXT8XJRiirsYzj56JFZskmrf24maV
DCMibTUopSXmSWTVJsUegv9A+JTWCNfLQGeub/a6U4ttnLaJnCQ8fQpfEKPvJybM
7qUVX0XCoNLCNqyxB6TzFqt7P5W1WS/FiqjXyEF+sRNnGIVRl5I9Icvhqpud3pNk
gQ1w5NaMmZGMbQ==
-----END CERTIFICATE-----