Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/bd0d2d-68c4-4b0e-b0f2-1e1e39033508/1/UoIehJbfUWAz73YZvsw9VV7MgTI.mft
File:                     UoIehJbfUWAz73YZvsw9VV7MgTI.mft (raw, json)
Hash identifier:          osASeePwTZH7LucpU9XaPM3VeMDMzPMdV/TcvZUb+nE=
Subject key identifier:   53:B1:A6:F1:55:A8:67:0E:F3:2A:E8:AF:D7:B9:F0:3F:0F:0B:B6:54
Authority key identifier: 52:82:1E:84:96:DF:51:60:33:EF:76:19:BE:CC:3D:55:5E:CC:81:32
Certificate issuer:       /CN=52821e8496df516033ef7619becc3d555ecc8132
Certificate serial:       018CEDE218CF66B9B3076C603BAFD518FE40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UoIehJbfUWAz73YZvsw9VV7MgTI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/bd0d2d-68c4-4b0e-b0f2-1e1e39033508/1/UoIehJbfUWAz73YZvsw9VV7MgTI.mft
Manifest number:          0B35
Signing time:             Tue 09 Jan 2024 11:01:06 +0000
Manifest this update:     Tue 09 Jan 2024 11:01:06 +0000
Manifest next update:     Wed 10 Jan 2024 11:01:06 +0000
Files and hashes:         1: UoIehJbfUWAz73YZvsw9VV7MgTI.crl (hash: BJ5FM+i3XT7qrYemWd84woXf78RH77NXpoLxkZ49Gs4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ed:e2:18:cf:66:b9:b3:07:6c:60:3b:af:d5:18:fe:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52821e8496df516033ef7619becc3d555ecc8132
        Validity
            Not Before: Jan  9 11:01:06 2024 GMT
            Not After : Jan 10 11:01:06 2024 GMT
        Subject: CN=53b1a6f155a8670ef32ae8afd7b9f03f0f0bb654
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:82:b0:c6:3c:a4:1f:15:46:73:e5:bd:cb:6f:
                    40:5d:bb:8a:d1:28:85:55:45:b8:00:1f:8d:92:63:
                    8a:6d:68:6f:dd:5d:18:fe:ba:4d:c5:30:53:3a:f9:
                    07:ec:4f:be:3c:83:16:13:54:28:30:b9:cb:e8:54:
                    45:0e:c4:cc:5b:82:81:9f:54:af:83:9f:28:58:84:
                    1d:62:ee:6e:ee:0b:72:d8:b0:dc:d9:9c:67:fa:98:
                    cd:3c:7a:42:12:ef:b5:8f:2b:06:c5:04:a5:f7:0c:
                    84:41:91:40:80:52:09:0c:b6:08:0e:fc:49:8f:e3:
                    3d:23:f6:1a:6e:ba:01:3d:73:ae:f2:7c:88:6a:16:
                    2f:a1:56:60:a0:d5:9e:9d:54:c1:47:56:3a:06:0c:
                    b0:4a:8a:7c:af:1c:26:78:12:19:8c:a0:78:70:17:
                    a5:ae:b0:c3:a5:9d:45:d0:c6:cb:70:43:84:4a:80:
                    69:3a:76:2d:8e:e3:74:ed:f7:6a:d8:1b:67:93:25:
                    bf:5c:66:9a:33:80:24:b1:48:52:2b:d5:d5:82:ac:
                    32:40:3d:74:52:5b:2d:98:cd:14:3a:75:19:39:42:
                    e8:1a:24:ba:ef:0a:0a:3b:9d:a5:3b:26:d9:13:61:
                    85:97:17:7d:f6:f0:7d:d9:33:16:7e:0e:39:4f:c5:
                    d1:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:B1:A6:F1:55:A8:67:0E:F3:2A:E8:AF:D7:B9:F0:3F:0F:0B:B6:54
            X509v3 Authority Key Identifier:
                keyid:52:82:1E:84:96:DF:51:60:33:EF:76:19:BE:CC:3D:55:5E:CC:81:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UoIehJbfUWAz73YZvsw9VV7MgTI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/bd0d2d-68c4-4b0e-b0f2-1e1e39033508/1/UoIehJbfUWAz73YZvsw9VV7MgTI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/bd0d2d-68c4-4b0e-b0f2-1e1e39033508/1/UoIehJbfUWAz73YZvsw9VV7MgTI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:e3:10:8c:c6:39:7f:8b:f9:2c:7a:08:d7:9c:52:7d:83:3b:
         c8:2d:1d:f4:ec:87:be:f9:f8:55:1e:01:a9:48:9b:8d:b5:9e:
         6f:42:b7:af:94:5a:e9:4c:df:9b:7e:ee:ba:91:33:1b:95:14:
         4a:07:9c:bf:df:98:67:60:d8:83:9c:90:71:53:21:32:73:8b:
         32:b7:a8:2a:d6:bc:3f:17:86:97:75:e1:30:f7:9e:05:d3:bb:
         44:76:e3:e0:ff:93:f1:53:45:1a:74:4f:e5:e6:72:5b:68:95:
         15:ee:ab:b8:df:0d:36:7e:c8:80:40:df:c3:e7:e6:23:fa:45:
         bd:01:9a:c2:2a:c8:cd:7b:e3:b6:11:c4:c2:9a:42:54:eb:b8:
         95:89:8d:4f:5b:f8:9b:15:ac:65:4c:95:da:e0:96:63:40:32:
         2d:e0:57:6a:3c:cc:b9:ae:57:15:8d:b4:22:52:ca:57:ea:1a:
         df:26:f3:73:57:82:3c:50:a2:e1:39:d4:d3:b8:d9:e4:75:e6:
         a2:a0:8e:c5:0e:da:56:15:d6:af:66:90:61:81:66:a3:27:db:
         12:12:bb:e3:05:c4:41:43:ef:37:83:fb:55:c1:1a:4a:58:d7:
         41:9f:93:c8:90:84:31:98:e2:90:18:64:fc:9b:01:a9:38:3e:
         31:f8:ae:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYzt4hjPZrmzB2xgO6/VGP5AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyODIxZTg0OTZkZjUxNjAzM2VmNzYxOWJlY2MzZDU1NWVj
YzgxMzIwHhcNMjQwMTA5MTEwMTA2WhcNMjQwMTEwMTEwMTA2WjAzMTEwLwYDVQQD
Eyg1M2IxYTZmMTU1YTg2NzBlZjMyYWU4YWZkN2I5ZjAzZjBmMGJiNjU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoKwxjykHxVGc+W9y29AXbuK0SiF
VUW4AB+NkmOKbWhv3V0Y/rpNxTBTOvkH7E++PIMWE1QoMLnL6FRFDsTMW4KBn1Sv
g58oWIQdYu5u7gty2LDc2Zxn+pjNPHpCEu+1jysGxQSl9wyEQZFAgFIJDLYIDvxJ
j+M9I/YabroBPXOu8nyIahYvoVZgoNWenVTBR1Y6BgywSop8rxwmeBIZjKB4cBel
rrDDpZ1F0MbLcEOESoBpOnYtjuN07fdq2BtnkyW/XGaaM4AksUhSK9XVgqwyQD10
UlstmM0UOnUZOULoGiS67woKO52lOybZE2GFlxd99vB92TMWfg45T8XRIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFOxpvFVqGcO8yror9e58D8PC7ZUMB8GA1UdIwQY
MBaAFFKCHoSW31FgM+92Gb7MPVVezIEyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW9JZWhKYmZVV0F6NzNZWnZzdzlWVjdNZ1RJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9iZDBkMmQtNjhjNC00YjBlLWIwZjIt
MWUxZTM5MDMzNTA4LzEvVW9JZWhKYmZVV0F6NzNZWnZzdzlWVjdNZ1RJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS9iZDBkMmQtNjhjNC00YjBlLWIwZjItMWUxZTM5MDMzNTA4
LzEvVW9JZWhKYmZVV0F6NzNZWnZzdzlWVjdNZ1RJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYuMQjMY5
f4v5LHoI15xSfYM7yC0d9OyHvvn4VR4BqUibjbWeb0K3r5Ra6Uzfm37uupEzG5UU
Sgecv9+YZ2DYg5yQcVMhMnOLMreoKta8PxeGl3XhMPeeBdO7RHbj4P+T8VNFGnRP
5eZyW2iVFe6ruN8NNn7IgEDfw+fmI/pFvQGawirIzXvjthHEwppCVOu4lYmNT1v4
mxWsZUyV2uCWY0AyLeBXajzMua5XFY20IlLKV+oa3ybzc1eCPFCi4TnU07jZ5HXm
oqCOxQ7aVhXWr2aQYYFmoyfbEhK74wXEQUPvN4P7VcEaSljXQZ+TyJCEMZjikBhk
/JsBqTg+Mfiugg==
-----END CERTIFICATE-----