Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/e64dff-8730-4393-a9f0-61646d737892/1/cKTtAlNu4aKmyB6reDVUc9rycRQ.mft
File:                     cKTtAlNu4aKmyB6reDVUc9rycRQ.mft (raw, json)
Hash identifier:          LrMxVOthHqUTBhgUjKssN40/IzNX0nqoNUBt0LFge8Y=
Subject key identifier:   D9:3D:69:BB:C1:2F:82:06:F9:55:0E:BD:DD:60:19:D2:04:66:EF:A9
Authority key identifier: 70:A4:ED:02:53:6E:E1:A2:A6:C8:1E:AB:78:35:54:73:DA:F2:71:14
Certificate issuer:       /CN=70a4ed02536ee1a2a6c81eab78355473daf27114
Certificate serial:       018EDF459F425DC8D77EBDF25558E538A431
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cKTtAlNu4aKmyB6reDVUc9rycRQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/e64dff-8730-4393-a9f0-61646d737892/1/cKTtAlNu4aKmyB6reDVUc9rycRQ.mft
Manifest number:          08AF
Signing time:             Mon 15 Apr 2024 01:01:05 +0000
Manifest this update:     Mon 15 Apr 2024 01:01:05 +0000
Manifest next update:     Tue 16 Apr 2024 01:01:05 +0000
Files and hashes:         1: cKTtAlNu4aKmyB6reDVUc9rycRQ.crl (hash: J0JrN21/sluorZI7IA8toWOpXlOEaPH0IZBGsPMPLU8=)
                          2: c_fBLAYiSCoAC5RI9aGFFq_ESZc.roa (hash: 3DEwScv441POXL3/KBw36z6dtyk1TTEbM4ZIil3VnMk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:df:45:9f:42:5d:c8:d7:7e:bd:f2:55:58:e5:38:a4:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70a4ed02536ee1a2a6c81eab78355473daf27114
        Validity
            Not Before: Apr 15 01:01:05 2024 GMT
            Not After : Apr 16 01:01:05 2024 GMT
        Subject: CN=d93d69bbc12f8206f9550ebddd6019d20466efa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:95:bf:83:43:a9:ad:88:1a:a2:7d:e2:0b:1c:
                    04:39:04:68:e2:3e:ce:57:3f:a1:52:21:91:17:00:
                    1f:d6:eb:9b:ac:ab:2d:52:99:fe:01:6c:54:4e:94:
                    b9:b3:2a:bb:a4:0f:7b:bf:2d:8e:03:73:a5:bb:8d:
                    88:f7:fa:b1:1d:92:de:59:24:47:50:a0:3d:0e:a3:
                    39:7a:d6:33:48:2a:f5:50:68:ca:81:4c:cd:8d:f0:
                    d5:90:1f:7d:3a:7f:c0:24:06:77:fc:a0:21:9e:19:
                    1c:23:14:46:0a:e0:1c:86:8b:22:4c:48:c5:75:92:
                    e2:aa:c1:75:3b:67:3c:24:dc:30:f4:44:c3:ac:b4:
                    78:9d:34:c0:bd:8a:1c:33:48:f7:c4:23:e2:88:8c:
                    ff:a1:fb:7f:92:2c:21:f4:a8:67:f4:65:d9:1e:e7:
                    83:b9:d6:71:bc:8c:e0:08:89:49:af:e2:44:4c:9a:
                    57:4b:8b:bb:98:10:66:58:c2:1b:81:71:df:e3:28:
                    d9:a6:db:3c:96:bf:9e:40:00:de:87:9d:e9:8b:42:
                    a6:7f:50:bb:e3:8e:ba:c9:71:a8:a4:ee:97:9a:d0:
                    42:3b:6a:62:d7:ba:92:5a:80:3f:79:c4:2b:d3:75:
                    04:99:28:5b:2e:ca:02:6a:b9:88:c8:fa:cf:6a:4d:
                    26:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:3D:69:BB:C1:2F:82:06:F9:55:0E:BD:DD:60:19:D2:04:66:EF:A9
            X509v3 Authority Key Identifier:
                keyid:70:A4:ED:02:53:6E:E1:A2:A6:C8:1E:AB:78:35:54:73:DA:F2:71:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cKTtAlNu4aKmyB6reDVUc9rycRQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/e64dff-8730-4393-a9f0-61646d737892/1/cKTtAlNu4aKmyB6reDVUc9rycRQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/e64dff-8730-4393-a9f0-61646d737892/1/cKTtAlNu4aKmyB6reDVUc9rycRQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:0e:84:83:12:79:c0:5a:ce:78:71:74:a5:7f:bb:19:9d:21:
         49:c8:46:03:cf:93:86:0f:fe:db:83:fd:2d:68:fa:9e:9b:81:
         99:c3:a4:99:0a:1f:82:35:e4:0e:c9:b5:32:7d:f6:13:86:ba:
         99:e5:e0:57:d9:b1:dc:fc:58:f6:3e:7a:ef:8a:bd:dd:71:77:
         90:83:10:25:54:28:09:12:97:c2:35:53:e6:e9:fc:6c:be:f8:
         a0:bc:62:ba:62:10:66:07:47:18:83:89:b6:85:6d:60:d5:07:
         58:d9:54:6c:1b:f2:58:05:8a:b3:eb:ff:84:e2:89:ba:ae:08:
         41:6c:0a:27:ee:87:a3:ef:a1:5c:58:01:15:e8:38:35:21:23:
         a6:af:32:9c:e3:17:d9:71:82:6d:fe:5a:6f:6c:21:e4:07:eb:
         34:15:95:85:56:73:02:df:7b:18:5e:79:61:e5:41:26:b8:50:
         f6:d4:35:41:e5:30:49:29:aa:5b:69:65:42:9c:71:14:63:da:
         d5:c5:2f:30:95:80:ac:ea:00:3f:e8:26:66:a3:ad:66:79:59:
         88:22:66:4f:50:fb:89:19:00:92:f2:22:00:4e:de:fd:c0:1f:
         2c:9e:66:d7:43:a9:36:90:4e:19:dc:59:eb:b9:01:28:8f:38:
         48:22:f7:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY7fRZ9CXcjXfr3yVVjlOKQxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwYTRlZDAyNTM2ZWUxYTJhNmM4MWVhYjc4MzU1NDczZGFm
MjcxMTQwHhcNMjQwNDE1MDEwMTA1WhcNMjQwNDE2MDEwMTA1WjAzMTEwLwYDVQQD
EyhkOTNkNjliYmMxMmY4MjA2Zjk1NTBlYmRkZDYwMTlkMjA0NjZlZmE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5W/g0OprYgaon3iCxwEOQRo4j7O
Vz+hUiGRFwAf1uubrKstUpn+AWxUTpS5syq7pA97vy2OA3Olu42I9/qxHZLeWSRH
UKA9DqM5etYzSCr1UGjKgUzNjfDVkB99On/AJAZ3/KAhnhkcIxRGCuAchosiTEjF
dZLiqsF1O2c8JNww9ETDrLR4nTTAvYocM0j3xCPiiIz/oft/kiwh9Khn9GXZHueD
udZxvIzgCIlJr+JETJpXS4u7mBBmWMIbgXHf4yjZpts8lr+eQADeh53pi0Kmf1C7
4466yXGopO6XmtBCO2pi17qSWoA/ecQr03UEmShbLsoCarmIyPrPak0meQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNk9abvBL4IG+VUOvd1gGdIEZu+pMB8GA1UdIwQY
MBaAFHCk7QJTbuGipsgeq3g1VHPa8nEUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0tUdEFsTnU0YUtteUI2cmVEVlVjOXJ5Y1JRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9lNjRkZmYtODczMC00MzkzLWE5ZjAt
NjE2NDZkNzM3ODkyLzEvY0tUdEFsTnU0YUtteUI2cmVEVlVjOXJ5Y1JRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9lNjRkZmYtODczMC00MzkzLWE5ZjAtNjE2NDZkNzM3ODky
LzEvY0tUdEFsTnU0YUtteUI2cmVEVlVjOXJ5Y1JRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYA6EgxJ5
wFrOeHF0pX+7GZ0hSchGA8+Thg/+24P9LWj6npuBmcOkmQofgjXkDsm1Mn32E4a6
meXgV9mx3PxY9j5674q93XF3kIMQJVQoCRKXwjVT5un8bL74oLxiumIQZgdHGIOJ
toVtYNUHWNlUbBvyWAWKs+v/hOKJuq4IQWwKJ+6Ho++hXFgBFeg4NSEjpq8ynOMX
2XGCbf5ab2wh5AfrNBWVhVZzAt97GF55YeVBJrhQ9tQ1QeUwSSmqW2llQpxxFGPa
1cUvMJWArOoAP+gmZqOtZnlZiCJmT1D7iRkAkvIiAE7e/cAfLJ5m10OpNpBOGdxZ
67kBKI84SCL3fA==
-----END CERTIFICATE-----