Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/3d556b-0e57-4ac3-a899-6050da000727/1/aF9PBdnrLDMH7AIGvK7_L81fPdo.mft
File:                     aF9PBdnrLDMH7AIGvK7_L81fPdo.mft (raw, json)
Hash identifier:          Db5fkZBSYM9kGxbVps6MlCzGOPyX+Pj1FOIklA22l8Y=
Subject key identifier:   D8:B2:8A:ED:8D:B8:7E:A6:69:6D:5C:6C:0B:F1:47:0B:68:6D:DB:44
Authority key identifier: 68:5F:4F:05:D9:EB:2C:33:07:EC:02:06:BC:AE:FF:2F:CD:5F:3D:DA
Certificate issuer:       /CN=685f4f05d9eb2c3307ec0206bcaeff2fcd5f3dda
Certificate serial:       0192AFCEE951474D7EC341D78940D045130B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aF9PBdnrLDMH7AIGvK7_L81fPdo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/3d556b-0e57-4ac3-a899-6050da000727/1/aF9PBdnrLDMH7AIGvK7_L81fPdo.mft
Manifest number:          B2
Signing time:             Mon 21 Oct 2024 16:00:25 +0000
Manifest this update:     Mon 21 Oct 2024 16:00:25 +0000
Manifest next update:     Tue 22 Oct 2024 16:00:25 +0000
Files and hashes:         1: aF9PBdnrLDMH7AIGvK7_L81fPdo.crl (hash: cuzALyzbqmQZYkjfiwnT7/ot7DD9NYB+6oOskpltdfo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:af:ce:e9:51:47:4d:7e:c3:41:d7:89:40:d0:45:13:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=685f4f05d9eb2c3307ec0206bcaeff2fcd5f3dda
        Validity
            Not Before: Oct 21 16:00:25 2024 GMT
            Not After : Oct 22 16:00:25 2024 GMT
        Subject: CN=d8b28aed8db87ea6696d5c6c0bf1470b686ddb44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:fe:b3:c4:4c:50:b3:c6:6b:89:fc:57:22:92:
                    dd:80:b7:c4:f7:0b:1f:97:58:a7:9d:a5:b3:d8:73:
                    ad:a2:96:64:3d:cd:5d:cd:02:8b:d9:cc:4d:be:53:
                    91:d2:60:f6:27:72:2c:26:0c:8b:ae:1c:d9:b6:68:
                    31:93:ff:fb:af:f7:ca:46:9f:c7:33:50:e3:54:24:
                    c6:61:b8:47:f2:c4:69:ce:aa:5a:18:ba:fd:a7:62:
                    22:52:5a:4c:38:27:fc:35:0b:db:4d:fd:90:c2:00:
                    78:a2:19:eb:62:84:80:af:67:6b:ee:a5:ef:a0:ad:
                    2b:d0:ce:d9:e1:89:9c:11:e0:c2:7b:1f:64:23:72:
                    30:9e:7d:05:e0:39:a5:9f:f9:45:97:15:68:fb:9c:
                    31:95:9e:99:b4:9e:30:ec:c8:63:70:11:da:b3:7c:
                    85:e0:a4:70:e7:f6:43:75:7b:4d:23:15:af:bf:58:
                    71:ad:8a:70:c8:9a:33:7b:70:12:8d:06:b9:7e:d2:
                    5b:c2:01:ec:3a:07:b5:92:eb:3f:e7:6d:e8:c8:45:
                    e3:55:ad:19:75:d1:d8:44:fa:53:df:1a:fa:97:98:
                    60:3e:ae:2a:ab:42:d6:d3:2b:5e:a6:5a:97:37:78:
                    b2:38:5e:e3:3e:4d:69:14:c9:f0:5f:15:f6:f9:a6:
                    aa:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:B2:8A:ED:8D:B8:7E:A6:69:6D:5C:6C:0B:F1:47:0B:68:6D:DB:44
            X509v3 Authority Key Identifier:
                keyid:68:5F:4F:05:D9:EB:2C:33:07:EC:02:06:BC:AE:FF:2F:CD:5F:3D:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aF9PBdnrLDMH7AIGvK7_L81fPdo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3d556b-0e57-4ac3-a899-6050da000727/1/aF9PBdnrLDMH7AIGvK7_L81fPdo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3d556b-0e57-4ac3-a899-6050da000727/1/aF9PBdnrLDMH7AIGvK7_L81fPdo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:68:75:9f:51:78:b5:e8:d2:a3:fa:c9:e8:a6:82:8e:65:05:
         7b:33:f6:85:b1:7d:48:d6:0a:e2:23:9f:11:2c:ad:19:df:1c:
         89:2c:ee:52:0d:04:77:6b:cb:64:e4:74:ce:43:a6:1b:09:93:
         b3:0f:41:8a:4e:86:ba:c6:8e:30:78:58:61:02:fe:12:d5:98:
         c3:f7:8e:c3:85:5b:67:fe:ab:24:2b:59:d5:ce:8d:d0:06:0e:
         14:00:9b:8d:ff:aa:34:ab:37:98:47:ea:8f:e4:b6:c4:e5:af:
         9b:02:24:63:74:71:3f:61:89:d2:2f:70:09:f2:3d:ad:70:94:
         1b:0c:b0:40:7b:75:0c:0a:d6:7b:fc:51:bd:78:95:e7:21:67:
         8e:56:60:d7:3f:d2:a7:33:9d:f4:db:30:54:db:24:79:80:c1:
         fe:44:4f:1f:ab:51:ef:be:9c:ee:cf:38:8f:3f:51:d2:bd:e7:
         b0:d6:12:a7:2b:0b:6d:86:f8:96:0f:30:5c:31:ab:1b:97:dd:
         ec:d6:c3:39:4a:4c:c7:55:b3:53:9d:ea:11:47:27:30:ba:27:
         93:04:be:98:09:18:73:57:38:94:ad:b7:95:38:d0:ab:56:82:
         91:8b:da:e2:10:58:d0:6b:09:8a:ea:4e:7f:ed:79:32:04:b7:
         53:9c:d2:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZKvzulRR01+w0HXiUDQRRMLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4NWY0ZjA1ZDllYjJjMzMwN2VjMDIwNmJjYWVmZjJmY2Q1
ZjNkZGEwHhcNMjQxMDIxMTYwMDI1WhcNMjQxMDIyMTYwMDI1WjAzMTEwLwYDVQQD
EyhkOGIyOGFlZDhkYjg3ZWE2Njk2ZDVjNmMwYmYxNDcwYjY4NmRkYjQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvv6zxExQs8ZrifxXIpLdgLfE9wsf
l1innaWz2HOtopZkPc1dzQKL2cxNvlOR0mD2J3IsJgyLrhzZtmgxk//7r/fKRp/H
M1DjVCTGYbhH8sRpzqpaGLr9p2IiUlpMOCf8NQvbTf2QwgB4ohnrYoSAr2dr7qXv
oK0r0M7Z4YmcEeDCex9kI3Iwnn0F4Dmln/lFlxVo+5wxlZ6ZtJ4w7MhjcBHas3yF
4KRw5/ZDdXtNIxWvv1hxrYpwyJoze3ASjQa5ftJbwgHsOge1kus/523oyEXjVa0Z
ddHYRPpT3xr6l5hgPq4qq0LW0yteplqXN3iyOF7jPk1pFMnwXxX2+aaqXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNiyiu2NuH6maW1cbAvxRwtobdtEMB8GA1UdIwQY
MBaAFGhfTwXZ6ywzB+wCBryu/y/NXz3aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUY5UEJkbnJMRE1IN0FJR3ZLN19MODFmUGRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My8zZDU1NmItMGU1Ny00YWMzLWE4OTkt
NjA1MGRhMDAwNzI3LzEvYUY5UEJkbnJMRE1IN0FJR3ZLN19MODFmUGRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My8zZDU1NmItMGU1Ny00YWMzLWE4OTktNjA1MGRhMDAwNzI3
LzEvYUY5UEJkbnJMRE1IN0FJR3ZLN19MODFmUGRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq2h1n1F4
tejSo/rJ6KaCjmUFezP2hbF9SNYK4iOfESytGd8ciSzuUg0Ed2vLZOR0zkOmGwmT
sw9Bik6GusaOMHhYYQL+EtWYw/eOw4VbZ/6rJCtZ1c6N0AYOFACbjf+qNKs3mEfq
j+S2xOWvmwIkY3RxP2GJ0i9wCfI9rXCUGwywQHt1DArWe/xRvXiV5yFnjlZg1z/S
pzOd9NswVNskeYDB/kRPH6tR776c7s84jz9R0r3nsNYSpysLbYb4lg8wXDGrG5fd
7NbDOUpMx1WzU53qEUcnMLonkwS+mAkYc1c4lK23lTjQq1aCkYva4hBY0GsJiupO
f+15MgS3U5zSGQ==
-----END CERTIFICATE-----