Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/35c426-27fa-409e-a8da-f28683424623/1/57nHwL3lwmrI5fa1YNpwGLzOjJk.mft
File:                     57nHwL3lwmrI5fa1YNpwGLzOjJk.mft (raw, json)
Hash identifier:          rT8FAw3GQ/i2wEEUOWCpZ6j1kMTmeiPQBb8GqQ4vONo=
Subject key identifier:   2E:A3:3C:2F:9B:6E:6D:04:12:51:96:22:0A:65:9C:40:17:FD:75:3F
Authority key identifier: E7:B9:C7:C0:BD:E5:C2:6A:C8:E5:F6:B5:60:DA:70:18:BC:CE:8C:99
Certificate issuer:       /CN=e7b9c7c0bde5c26ac8e5f6b560da7018bcce8c99
Certificate serial:       019345CC7D87791AF4AE89D166531FC8136F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/57nHwL3lwmrI5fa1YNpwGLzOjJk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/35c426-27fa-409e-a8da-f28683424623/1/57nHwL3lwmrI5fa1YNpwGLzOjJk.mft
Manifest number:          0FFC
Signing time:             Tue 19 Nov 2024 19:00:49 +0000
Manifest this update:     Tue 19 Nov 2024 19:00:49 +0000
Manifest next update:     Wed 20 Nov 2024 19:00:49 +0000
Files and hashes:         1: 57nHwL3lwmrI5fa1YNpwGLzOjJk.crl (hash: e2fqSLHw93cx0byb2dzfazxFbBeN0lTKAiSduaRF9yM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:45:cc:7d:87:79:1a:f4:ae:89:d1:66:53:1f:c8:13:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b9c7c0bde5c26ac8e5f6b560da7018bcce8c99
        Validity
            Not Before: Nov 19 19:00:49 2024 GMT
            Not After : Nov 20 19:00:49 2024 GMT
        Subject: CN=2ea33c2f9b6e6d04125196220a659c4017fd753f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f2:0a:6c:8e:d0:37:79:e9:58:42:14:51:64:
                    22:7c:a2:4b:f6:bc:88:c0:22:68:90:a1:97:6f:88:
                    8f:69:e4:95:a5:dd:5a:c1:1c:66:68:f8:8f:41:25:
                    c6:df:3e:6d:cb:6d:2c:db:f8:d6:76:9a:d9:03:48:
                    e6:cf:36:75:f4:7d:1f:1e:9f:94:25:24:b5:2f:45:
                    b1:62:51:a3:9c:78:63:79:75:cf:cb:e2:bf:d4:72:
                    6f:d5:80:c1:7b:ec:04:e7:0c:ee:cc:37:f1:e2:ef:
                    4a:79:75:0a:d2:74:77:c8:2b:e4:17:b1:59:8d:df:
                    a2:11:ea:a8:43:8a:72:7e:e6:ae:52:6c:f1:d4:90:
                    74:f9:7f:b8:60:a9:ec:16:77:db:b8:98:29:77:9d:
                    80:1c:43:89:33:8e:f4:2e:ac:15:92:be:a2:e3:cc:
                    b4:f0:3b:27:d8:b4:f8:37:1e:28:be:9f:2d:15:c5:
                    ac:08:ad:aa:08:c1:4b:9d:eb:9e:cc:16:56:16:41:
                    8b:dc:f5:24:ca:1f:44:e6:01:c9:5b:92:50:12:bb:
                    71:ed:b5:da:43:7a:20:57:e1:b4:06:21:35:42:dd:
                    75:49:a0:86:4b:b6:32:12:60:e6:6c:05:d2:7c:9c:
                    6a:cb:8e:9e:3a:5d:49:df:28:2e:8a:91:ba:30:c1:
                    ab:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:A3:3C:2F:9B:6E:6D:04:12:51:96:22:0A:65:9C:40:17:FD:75:3F
            X509v3 Authority Key Identifier:
                keyid:E7:B9:C7:C0:BD:E5:C2:6A:C8:E5:F6:B5:60:DA:70:18:BC:CE:8C:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/57nHwL3lwmrI5fa1YNpwGLzOjJk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/35c426-27fa-409e-a8da-f28683424623/1/57nHwL3lwmrI5fa1YNpwGLzOjJk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/35c426-27fa-409e-a8da-f28683424623/1/57nHwL3lwmrI5fa1YNpwGLzOjJk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:34:e1:97:ce:ae:58:00:df:84:e5:24:73:27:3d:db:82:c0:
         6c:72:1e:8b:e8:af:8f:90:89:fb:e2:f3:4b:e7:16:ae:31:ba:
         9c:e9:a6:1d:f0:4f:21:7e:f8:c1:df:33:93:80:82:89:e4:03:
         a1:cb:7d:fa:ba:67:f9:d7:85:0d:a1:9e:f2:18:98:1a:d3:5b:
         d8:2d:1b:57:b2:c0:7a:37:5f:3f:6c:f4:fe:cb:74:f5:5d:c2:
         02:fd:76:60:ea:b7:e3:45:2b:59:73:09:9c:2e:42:6d:92:54:
         43:71:46:9f:90:b0:f7:0a:fb:be:c5:97:be:0d:a7:3c:96:e7:
         25:b9:19:76:ee:a7:c7:42:3b:8d:dc:cd:ef:19:42:62:e2:e7:
         23:ea:62:1e:d3:35:38:84:87:f5:7a:fc:94:68:3d:eb:e5:0f:
         b8:e4:66:b9:1c:4f:0b:dc:4c:a9:3e:ee:2d:1b:25:0f:aa:4c:
         33:21:11:93:74:0d:7e:3d:b8:6a:08:26:b1:56:ea:d9:75:b1:
         af:be:ab:f7:c5:ff:f6:89:a5:bd:df:0d:56:bb:93:df:58:00:
         ba:f9:1e:28:e2:bc:32:f4:63:15:f5:07:62:70:51:fd:1f:6a:
         c1:fb:3e:52:5d:90:0a:c6:5c:d4:8f:31:48:64:ed:e4:19:50:
         94:9f:e2:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNFzH2HeRr0ronRZlMfyBNvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3YjljN2MwYmRlNWMyNmFjOGU1ZjZiNTYwZGE3MDE4YmNj
ZThjOTkwHhcNMjQxMTE5MTkwMDQ5WhcNMjQxMTIwMTkwMDQ5WjAzMTEwLwYDVQQD
EygyZWEzM2MyZjliNmU2ZDA0MTI1MTk2MjIwYTY1OWM0MDE3ZmQ3NTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfIKbI7QN3npWEIUUWQifKJL9ryI
wCJokKGXb4iPaeSVpd1awRxmaPiPQSXG3z5ty20s2/jWdprZA0jmzzZ19H0fHp+U
JSS1L0WxYlGjnHhjeXXPy+K/1HJv1YDBe+wE5wzuzDfx4u9KeXUK0nR3yCvkF7FZ
jd+iEeqoQ4pyfuauUmzx1JB0+X+4YKnsFnfbuJgpd52AHEOJM470LqwVkr6i48y0
8Dsn2LT4Nx4ovp8tFcWsCK2qCMFLneuezBZWFkGL3PUkyh9E5gHJW5JQErtx7bXa
Q3ogV+G0BiE1Qt11SaCGS7YyEmDmbAXSfJxqy46eOl1J3yguipG6MMGrNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC6jPC+bbm0EElGWIgplnEAX/XU/MB8GA1UdIwQY
MBaAFOe5x8C95cJqyOX2tWDacBi8zoyZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTduSHdMM2x3bXJJNWZhMVlOcHdHTHpPakprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8zNWM0MjYtMjdmYS00MDllLWE4ZGEt
ZjI4NjgzNDI0NjIzLzEvNTduSHdMM2x3bXJJNWZhMVlOcHdHTHpPakprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8zNWM0MjYtMjdmYS00MDllLWE4ZGEtZjI4NjgzNDI0NjIz
LzEvNTduSHdMM2x3bXJJNWZhMVlOcHdHTHpPakprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAczThl86u
WADfhOUkcyc924LAbHIei+ivj5CJ++LzS+cWrjG6nOmmHfBPIX74wd8zk4CCieQD
oct9+rpn+deFDaGe8hiYGtNb2C0bV7LAejdfP2z0/st09V3CAv12YOq340UrWXMJ
nC5CbZJUQ3FGn5Cw9wr7vsWXvg2nPJbnJbkZdu6nx0I7jdzN7xlCYuLnI+piHtM1
OISH9Xr8lGg96+UPuORmuRxPC9xMqT7uLRslD6pMMyERk3QNfj24aggmsVbq2XWx
r76r98X/9omlvd8NVruT31gAuvkeKOK8MvRjFfUHYnBR/R9qwfs+Ul2QCsZc1I8x
SGTt5BlQlJ/ilw==
-----END CERTIFICATE-----