Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/c2945b-4a71-456a-8735-800dfc2df04c/1/mGexqpRQqeVgZtXFUBOtRrmdQeg.mft
File:                     mGexqpRQqeVgZtXFUBOtRrmdQeg.mft (raw, json)
Hash identifier:          I04UrD9EkbqtNMaaTKTRl/X7O8tqq74Tu/Yzi9ivIq0=
Subject key identifier:   FB:29:69:59:18:C9:64:55:1F:61:5E:B9:01:32:98:90:8C:A0:BA:90
Authority key identifier: 98:67:B1:AA:94:50:A9:E5:60:66:D5:C5:50:13:AD:46:B9:9D:41:E8
Certificate issuer:       /CN=9867b1aa9450a9e56066d5c55013ad46b99d41e8
Certificate serial:       01922FB5AE5E0F464AF89285ADA25D634C27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mGexqpRQqeVgZtXFUBOtRrmdQeg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/c2945b-4a71-456a-8735-800dfc2df04c/1/mGexqpRQqeVgZtXFUBOtRrmdQeg.mft
Manifest number:          0C57
Signing time:             Thu 26 Sep 2024 19:01:28 +0000
Manifest this update:     Thu 26 Sep 2024 19:01:28 +0000
Manifest next update:     Fri 27 Sep 2024 19:01:28 +0000
Files and hashes:         1: mGexqpRQqeVgZtXFUBOtRrmdQeg.crl (hash: y/6NZMVdyH1rktaznmNS6VlrFNWZNIUS9MKqeRQrGxg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:2f:b5:ae:5e:0f:46:4a:f8:92:85:ad:a2:5d:63:4c:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9867b1aa9450a9e56066d5c55013ad46b99d41e8
        Validity
            Not Before: Sep 26 19:01:28 2024 GMT
            Not After : Sep 27 19:01:28 2024 GMT
        Subject: CN=fb29695918c964551f615eb9013298908ca0ba90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:15:93:3b:11:61:b9:de:54:ae:c8:2d:2e:b2:
                    1e:39:f8:6f:2c:79:25:67:da:fa:34:77:e7:66:47:
                    45:e0:bc:f0:31:ed:3c:ad:54:a4:4f:75:54:c1:fe:
                    f8:11:2d:a2:6d:df:19:c0:11:95:bd:ed:29:7f:62:
                    9a:70:76:81:30:b1:cc:10:b9:47:1a:bb:ed:b1:6c:
                    c5:ef:8c:bb:d0:14:24:4a:09:8e:fd:df:86:4b:b2:
                    f4:ab:02:ec:b5:42:f4:91:6d:c7:66:1c:06:6e:e3:
                    d0:e6:f3:c7:9b:66:bc:d6:b3:18:2b:f6:0c:fa:5c:
                    62:ca:1d:67:d4:be:bb:4e:41:5c:08:1d:3e:fe:49:
                    22:4c:03:73:2e:0e:a6:61:85:72:b5:85:d4:1f:50:
                    50:a4:88:57:1a:22:9e:19:09:34:52:2d:94:a3:fa:
                    93:b1:87:35:c9:82:af:b3:97:e9:2b:fe:9b:fb:04:
                    f8:3f:0a:36:52:ca:f9:e2:28:67:88:78:18:20:90:
                    68:7e:8c:b5:2b:8c:ec:16:a6:8d:a7:90:2d:4f:ae:
                    03:d9:af:2c:a1:55:b4:c9:ff:c8:ba:cf:da:31:f9:
                    8a:a1:4d:94:aa:23:8e:6a:64:de:ce:e4:38:8e:f3:
                    3f:a2:a9:3f:06:76:c1:a1:a3:5d:31:1f:85:98:de:
                    b0:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:29:69:59:18:C9:64:55:1F:61:5E:B9:01:32:98:90:8C:A0:BA:90
            X509v3 Authority Key Identifier:
                keyid:98:67:B1:AA:94:50:A9:E5:60:66:D5:C5:50:13:AD:46:B9:9D:41:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGexqpRQqeVgZtXFUBOtRrmdQeg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/c2945b-4a71-456a-8735-800dfc2df04c/1/mGexqpRQqeVgZtXFUBOtRrmdQeg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/c2945b-4a71-456a-8735-800dfc2df04c/1/mGexqpRQqeVgZtXFUBOtRrmdQeg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:4a:55:5c:cf:d2:f4:06:39:d3:ca:f7:8c:af:0a:e4:be:97:
         1d:e3:de:a1:74:24:54:ad:91:4d:36:af:9b:46:09:d5:db:b8:
         b3:af:2b:fe:cc:c0:72:e4:4f:ba:60:67:18:f8:4d:3b:18:41:
         66:c0:2c:d8:ca:46:66:88:0b:a6:f0:e5:8d:b8:ba:dd:69:56:
         4b:5e:95:3b:19:2f:a0:ed:7c:8c:35:ad:1d:cc:53:e1:e5:60:
         4d:8e:27:0e:02:b6:d2:1c:c2:e5:d1:f8:98:72:e3:b8:dd:db:
         0f:ea:32:12:f9:78:ca:6a:98:ba:5c:03:1f:eb:ff:c0:cf:9f:
         35:da:2d:84:e3:b1:1b:79:78:c4:2a:20:91:02:46:f6:d9:17:
         f6:44:e1:e0:ab:07:da:98:d1:61:b2:01:49:54:ec:b3:40:17:
         57:90:b2:d0:88:b9:00:2c:be:64:52:df:b3:dc:64:59:b9:5a:
         37:1a:10:39:a6:c3:d5:6a:c2:a1:0b:6e:9b:48:b9:50:d5:37:
         de:eb:a0:5d:22:97:f5:69:93:fd:83:e9:33:ef:ee:19:f4:74:
         88:18:b2:be:82:89:03:f2:3b:29:03:49:1d:c2:1f:00:d5:57:
         c2:07:11:9c:00:93:e0:4e:77:ec:63:60:0f:bb:e1:30:49:d8:
         22:dc:13:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZIvta5eD0ZK+JKFraJdY0wnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4NjdiMWFhOTQ1MGE5ZTU2MDY2ZDVjNTUwMTNhZDQ2Yjk5
ZDQxZTgwHhcNMjQwOTI2MTkwMTI4WhcNMjQwOTI3MTkwMTI4WjAzMTEwLwYDVQQD
EyhmYjI5Njk1OTE4Yzk2NDU1MWY2MTVlYjkwMTMyOTg5MDhjYTBiYTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxWTOxFhud5UrsgtLrIeOfhvLHkl
Z9r6NHfnZkdF4LzwMe08rVSkT3VUwf74ES2ibd8ZwBGVve0pf2KacHaBMLHMELlH
GrvtsWzF74y70BQkSgmO/d+GS7L0qwLstUL0kW3HZhwGbuPQ5vPHm2a81rMYK/YM
+lxiyh1n1L67TkFcCB0+/kkiTANzLg6mYYVytYXUH1BQpIhXGiKeGQk0Ui2Uo/qT
sYc1yYKvs5fpK/6b+wT4Pwo2Usr54ihniHgYIJBofoy1K4zsFqaNp5AtT64D2a8s
oVW0yf/Ius/aMfmKoU2UqiOOamTezuQ4jvM/oqk/BnbBoaNdMR+FmN6wqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPspaVkYyWRVH2FeuQEymJCMoLqQMB8GA1UdIwQY
MBaAFJhnsaqUUKnlYGbVxVATrUa5nUHoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUdleHFwUlFxZVZnWnRYRlVCT3RScm1kUWVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9jMjk0NWItNGE3MS00NTZhLTg3MzUt
ODAwZGZjMmRmMDRjLzEvbUdleHFwUlFxZVZnWnRYRlVCT3RScm1kUWVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi9jMjk0NWItNGE3MS00NTZhLTg3MzUtODAwZGZjMmRmMDRj
LzEvbUdleHFwUlFxZVZnWnRYRlVCT3RScm1kUWVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOUpVXM/S
9AY508r3jK8K5L6XHePeoXQkVK2RTTavm0YJ1du4s68r/szAcuRPumBnGPhNOxhB
ZsAs2MpGZogLpvDljbi63WlWS16VOxkvoO18jDWtHcxT4eVgTY4nDgK20hzC5dH4
mHLjuN3bD+oyEvl4ymqYulwDH+v/wM+fNdothOOxG3l4xCogkQJG9tkX9kTh4KsH
2pjRYbIBSVTss0AXV5Cy0Ii5ACy+ZFLfs9xkWblaNxoQOabD1WrCoQtum0i5UNU3
3uugXSKX9WmT/YPpM+/uGfR0iBiyvoKJA/I7KQNJHcIfANVXwgcRnACT4E537GNg
D7vhMEnYItwTSw==
-----END CERTIFICATE-----