Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/1b24f5-9584-42f8-b740-0e8e1bc2d190/1/q7FleujHzIoUq5qohFzUurULpBw.mft
File:                     q7FleujHzIoUq5qohFzUurULpBw.mft (raw, json)
Hash identifier:          4GEAYbGFOcLtr84ReZpLrT/9iy28xZyD6nup3TQzhv8=
Subject key identifier:   C0:05:A9:21:19:C8:1A:7D:E8:BB:6F:03:13:47:0B:51:AB:E2:8F:F4
Authority key identifier: AB:B1:65:7A:E8:C7:CC:8A:14:AB:9A:A8:84:5C:D4:BA:B5:0B:A4:1C
Certificate issuer:       /CN=abb1657ae8c7cc8a14ab9aa8845cd4bab50ba41c
Certificate serial:       0193FA0B15C1621897D7B10892494A73F21D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q7FleujHzIoUq5qohFzUurULpBw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/1b24f5-9584-42f8-b740-0e8e1bc2d190/1/q7FleujHzIoUq5qohFzUurULpBw.mft
Manifest number:          0960
Signing time:             Tue 24 Dec 2024 19:00:50 +0000
Manifest this update:     Tue 24 Dec 2024 19:00:50 +0000
Manifest next update:     Wed 25 Dec 2024 19:00:50 +0000
Files and hashes:         1: q7FleujHzIoUq5qohFzUurULpBw.crl (hash: nZHo0gy2X5CZ7kyor7HYhvpS3rYmPIUAtf6Xue2VT4Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:fa:0b:15:c1:62:18:97:d7:b1:08:92:49:4a:73:f2:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abb1657ae8c7cc8a14ab9aa8845cd4bab50ba41c
        Validity
            Not Before: Dec 24 19:00:50 2024 GMT
            Not After : Dec 25 19:00:50 2024 GMT
        Subject: CN=c005a92119c81a7de8bb6f0313470b51abe28ff4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:45:8f:c7:47:12:32:1c:90:23:4e:05:7d:f1:
                    69:53:f1:2a:64:69:79:ca:6b:a1:cc:33:17:7f:16:
                    30:3c:91:65:c5:f0:91:ec:c4:c5:35:c2:67:7d:04:
                    b6:5a:5d:bf:b3:09:2b:fc:c1:de:99:60:7b:9c:fc:
                    37:6d:28:d7:90:5f:10:93:10:c6:09:f8:7e:f6:85:
                    01:da:2e:a0:c9:17:31:f7:8a:73:11:d9:24:9c:b8:
                    d0:e1:1a:06:05:dd:8a:7d:40:c0:15:47:a4:91:83:
                    72:16:3a:5e:bd:4b:ab:9b:81:eb:95:df:27:17:55:
                    e3:bc:e2:bf:fe:9e:18:1e:f4:7d:41:03:fc:3a:63:
                    92:5e:3b:ce:5a:2f:f9:9b:23:04:b1:68:c2:04:85:
                    04:8d:a8:7f:96:cc:ce:ed:e6:3e:29:cf:5f:16:a3:
                    31:8d:b3:a4:ea:ff:43:16:81:1f:10:6d:7f:0f:47:
                    db:7b:80:38:f7:f8:80:71:d4:ce:be:0b:54:c7:de:
                    88:2d:ef:3b:ca:b6:3e:98:2c:c1:43:b5:fd:6d:38:
                    19:61:fc:c3:4c:e3:61:15:9c:ce:4c:83:0b:08:92:
                    b7:88:03:86:95:b2:6e:bc:64:bf:eb:5a:73:bf:ac:
                    a8:27:1f:30:c4:84:d8:aa:b3:4b:52:4c:8f:e0:ae:
                    e8:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:05:A9:21:19:C8:1A:7D:E8:BB:6F:03:13:47:0B:51:AB:E2:8F:F4
            X509v3 Authority Key Identifier:
                keyid:AB:B1:65:7A:E8:C7:CC:8A:14:AB:9A:A8:84:5C:D4:BA:B5:0B:A4:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q7FleujHzIoUq5qohFzUurULpBw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/1b24f5-9584-42f8-b740-0e8e1bc2d190/1/q7FleujHzIoUq5qohFzUurULpBw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/1b24f5-9584-42f8-b740-0e8e1bc2d190/1/q7FleujHzIoUq5qohFzUurULpBw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e0:73:f2:a5:dd:84:2d:8a:fe:de:69:78:d7:10:f6:fe:1e:44:
         a5:ff:2a:57:eb:c7:b9:71:18:a3:ce:b5:35:4a:11:a4:bc:98:
         39:8c:ee:0d:03:03:f4:33:63:5c:0c:3f:1e:c3:ff:37:af:74:
         a7:61:40:31:23:48:77:73:cf:bc:e6:ea:3a:8d:0b:4d:3c:39:
         34:f5:e3:91:9a:cc:4d:f1:6a:31:f7:30:8a:0a:53:f8:96:36:
         d0:51:0c:18:01:a7:cb:b8:e8:32:90:34:d1:4f:df:a5:5a:ff:
         ec:1c:8f:c5:43:51:62:44:d5:dd:da:5a:68:44:f4:a9:be:d7:
         e5:63:76:11:ff:10:3e:12:f8:80:71:dd:89:65:e9:51:89:a8:
         a9:e3:b8:7c:34:e0:e5:61:4a:6a:8f:c0:f5:f9:77:a4:86:49:
         cc:fa:66:88:d1:c4:32:e5:3d:60:8a:25:75:99:71:8e:7e:65:
         d3:e1:6f:05:42:2a:9d:6c:73:95:ac:9b:3a:cf:cc:04:64:83:
         32:db:8f:68:f7:78:0d:d4:8a:f6:ed:a5:f5:c8:bd:48:33:c7:
         b5:34:9c:a6:2b:c4:41:20:3b:bc:d5:12:1f:89:5e:b3:27:d0:
         c3:be:4f:97:22:74:20:f1:a0:8b:fe:73:b9:5f:89:ca:7e:52:
         85:e0:61:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZP6CxXBYhiX17EIkklKc/IdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiYjE2NTdhZThjN2NjOGExNGFiOWFhODg0NWNkNGJhYjUw
YmE0MWMwHhcNMjQxMjI0MTkwMDUwWhcNMjQxMjI1MTkwMDUwWjAzMTEwLwYDVQQD
EyhjMDA1YTkyMTE5YzgxYTdkZThiYjZmMDMxMzQ3MGI1MWFiZTI4ZmY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0WPx0cSMhyQI04FffFpU/EqZGl5
ymuhzDMXfxYwPJFlxfCR7MTFNcJnfQS2Wl2/swkr/MHemWB7nPw3bSjXkF8QkxDG
Cfh+9oUB2i6gyRcx94pzEdkknLjQ4RoGBd2KfUDAFUekkYNyFjpevUurm4Hrld8n
F1XjvOK//p4YHvR9QQP8OmOSXjvOWi/5myMEsWjCBIUEjah/lszO7eY+Kc9fFqMx
jbOk6v9DFoEfEG1/D0fbe4A49/iAcdTOvgtUx96ILe87yrY+mCzBQ7X9bTgZYfzD
TONhFZzOTIMLCJK3iAOGlbJuvGS/61pzv6yoJx8wxITYqrNLUkyP4K7oEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMAFqSEZyBp96LtvAxNHC1Gr4o/0MB8GA1UdIwQY
MBaAFKuxZXrox8yKFKuaqIRc1Lq1C6QcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTdGbGV1akh6SW9VcTVxb2hGelV1clVMcEJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8xYjI0ZjUtOTU4NC00MmY4LWI3NDAt
MGU4ZTFiYzJkMTkwLzEvcTdGbGV1akh6SW9VcTVxb2hGelV1clVMcEJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi8xYjI0ZjUtOTU4NC00MmY4LWI3NDAtMGU4ZTFiYzJkMTkw
LzEvcTdGbGV1akh6SW9VcTVxb2hGelV1clVMcEJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4HPypd2E
LYr+3ml41xD2/h5Epf8qV+vHuXEYo861NUoRpLyYOYzuDQMD9DNjXAw/HsP/N690
p2FAMSNId3PPvObqOo0LTTw5NPXjkZrMTfFqMfcwigpT+JY20FEMGAGny7joMpA0
0U/fpVr/7ByPxUNRYkTV3dpaaET0qb7X5WN2Ef8QPhL4gHHdiWXpUYmoqeO4fDTg
5WFKao/A9fl3pIZJzPpmiNHEMuU9YIoldZlxjn5l0+FvBUIqnWxzlaybOs/MBGSD
MtuPaPd4DdSK9u2l9ci9SDPHtTScpivEQSA7vNUSH4lesyfQw75PlyJ0IPGgi/5z
uV+Jyn5SheBhpw==
-----END CERTIFICATE-----