Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/d28e01-ad19-48e2-9689-e659d1af68fe/1/RWgxZQC6ZThCCp1Vxl2ciN0yqZ4.mft
File:                     RWgxZQC6ZThCCp1Vxl2ciN0yqZ4.mft (raw, json)
Hash identifier:          lEkxlW0xT9LaQgqKEehZPFQhPsWBhnljbDlzU3U12HY=
Subject key identifier:   1F:51:E3:16:D8:C6:FC:E9:F3:E0:F8:EF:42:91:6A:EF:46:D2:8C:EC
Authority key identifier: 45:68:31:65:00:BA:65:38:42:0A:9D:55:C6:5D:9C:88:DD:32:A9:9E
Certificate issuer:       /CN=4568316500ba6538420a9d55c65d9c88dd32a99e
Certificate serial:       0193471808B897A5BF26347182A99F374F44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RWgxZQC6ZThCCp1Vxl2ciN0yqZ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/d28e01-ad19-48e2-9689-e659d1af68fe/1/RWgxZQC6ZThCCp1Vxl2ciN0yqZ4.mft
Manifest number:          0248
Signing time:             Wed 20 Nov 2024 01:02:57 +0000
Manifest this update:     Wed 20 Nov 2024 01:02:57 +0000
Manifest next update:     Thu 21 Nov 2024 01:02:57 +0000
Files and hashes:         1: RWgxZQC6ZThCCp1Vxl2ciN0yqZ4.crl (hash: sL5Ln9KuIGj31owbCaW/FooJajc/pQiJRzFS3cs433I=)
                          2: avJbMkRskX4F9XD7k3EqzlAfb6Y.roa (hash: OzhNq76WW1OpyRFwGSNAnNIq4tRvrBl2I9SY8p/OvoU=)
                          3: iPiwsmlf1rH2EPsk6fLPEKI8zgk.roa (hash: HEK+snEMm6LUTQyQQSBxHaP2/pNnax46exjNdpcjZeg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:47:18:08:b8:97:a5:bf:26:34:71:82:a9:9f:37:4f:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4568316500ba6538420a9d55c65d9c88dd32a99e
        Validity
            Not Before: Nov 20 01:02:57 2024 GMT
            Not After : Nov 21 01:02:57 2024 GMT
        Subject: CN=1f51e316d8c6fce9f3e0f8ef42916aef46d28cec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:db:e9:7a:9f:ef:d0:8c:7b:3c:73:b2:de:6c:
                    c9:33:99:6a:cb:3e:f8:c1:3e:6b:ab:e2:d8:98:2c:
                    c3:74:73:55:1f:41:ea:8e:27:35:70:60:a0:d4:0f:
                    07:77:9f:c4:c2:e8:08:1a:9c:17:51:84:76:80:7a:
                    d7:9e:1b:f2:b1:c8:ce:02:9c:e1:13:92:50:e5:35:
                    db:e0:9a:1c:99:88:df:85:b6:c3:95:e0:57:92:78:
                    dd:37:33:1b:cc:d2:99:39:b0:aa:bc:8e:2d:7e:43:
                    d6:76:f5:39:49:e9:8a:e4:13:ae:87:e9:5c:d9:cf:
                    83:b9:c0:4e:6b:d6:c8:b1:af:85:48:06:ea:cc:d2:
                    3d:3a:7e:19:55:12:86:7f:90:aa:d1:fd:19:81:9a:
                    fd:14:7a:99:93:2a:5d:01:e0:c7:cf:9e:c1:e2:63:
                    e2:76:b0:91:d3:ab:3b:4e:88:cd:73:58:36:e3:e3:
                    d6:aa:ab:e7:2e:0b:13:fc:01:fd:8a:d6:a0:b3:46:
                    62:9c:78:1b:bc:4f:f9:d2:82:2d:aa:9b:00:7e:09:
                    b2:5a:55:d2:fc:f9:e5:56:89:b1:ad:4b:a3:5a:9e:
                    01:84:db:a2:f9:52:54:f1:ea:10:ae:40:b8:bc:14:
                    1d:03:4d:ae:89:16:bf:71:5e:09:f9:2a:c4:f6:50:
                    1e:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:51:E3:16:D8:C6:FC:E9:F3:E0:F8:EF:42:91:6A:EF:46:D2:8C:EC
            X509v3 Authority Key Identifier:
                keyid:45:68:31:65:00:BA:65:38:42:0A:9D:55:C6:5D:9C:88:DD:32:A9:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RWgxZQC6ZThCCp1Vxl2ciN0yqZ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/d28e01-ad19-48e2-9689-e659d1af68fe/1/RWgxZQC6ZThCCp1Vxl2ciN0yqZ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/d28e01-ad19-48e2-9689-e659d1af68fe/1/RWgxZQC6ZThCCp1Vxl2ciN0yqZ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:a0:11:d3:61:8c:12:b1:54:76:cc:f3:f0:95:f0:cf:83:8c:
         07:90:cd:b0:e9:4f:46:df:ba:88:2d:1d:02:8d:c0:1d:77:6c:
         65:cb:9a:29:fd:0e:55:22:62:84:a3:24:02:46:10:f9:22:64:
         70:ab:19:51:c1:ae:3c:2e:ca:89:56:e7:46:91:ff:a9:8b:a8:
         55:98:8b:71:0d:80:3d:2d:70:60:26:7e:6d:fc:9b:7b:12:ff:
         34:a8:a9:f1:02:5f:b6:ec:0b:29:6c:f5:29:6b:fd:28:0a:bd:
         55:65:8c:d4:c5:ac:bb:29:37:15:ad:41:8f:c6:ac:bc:67:cb:
         fd:44:85:8f:31:82:d9:db:4d:49:4b:1c:eb:e2:54:4a:88:5c:
         d3:33:0d:e6:d4:54:a9:93:5b:3b:ac:0c:4c:03:fc:33:18:54:
         1e:76:c4:f9:a0:d8:94:cc:38:0c:1c:e1:5f:a9:87:c3:7b:b8:
         e7:42:57:37:bc:53:e6:be:af:c8:f6:89:e6:b8:a5:a3:0d:ea:
         3c:96:94:67:95:b8:b3:b7:41:25:47:17:cb:a9:1e:0d:15:42:
         9e:42:9e:3f:f3:df:69:34:68:68:d1:1e:e3:70:55:09:f9:0b:
         e2:ba:a3:2c:38:df:da:7e:c3:8c:d8:4e:b2:d8:9e:34:23:83:
         18:38:a6:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNHGAi4l6W/JjRxgqmfN09EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1NjgzMTY1MDBiYTY1Mzg0MjBhOWQ1NWM2NWQ5Yzg4ZGQz
MmE5OWUwHhcNMjQxMTIwMDEwMjU3WhcNMjQxMTIxMDEwMjU3WjAzMTEwLwYDVQQD
EygxZjUxZTMxNmQ4YzZmY2U5ZjNlMGY4ZWY0MjkxNmFlZjQ2ZDI4Y2VjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNvpep/v0Ix7PHOy3mzJM5lqyz74
wT5rq+LYmCzDdHNVH0Hqjic1cGCg1A8Hd5/EwugIGpwXUYR2gHrXnhvyscjOApzh
E5JQ5TXb4JocmYjfhbbDleBXknjdNzMbzNKZObCqvI4tfkPWdvU5SemK5BOuh+lc
2c+DucBOa9bIsa+FSAbqzNI9On4ZVRKGf5Cq0f0ZgZr9FHqZkypdAeDHz57B4mPi
drCR06s7TojNc1g24+PWqqvnLgsT/AH9itags0ZinHgbvE/50oItqpsAfgmyWlXS
/PnlVomxrUujWp4BhNui+VJU8eoQrkC4vBQdA02uiRa/cV4J+SrE9lAeMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB9R4xbYxvzp8+D470KRau9G0ozsMB8GA1UdIwQY
MBaAFEVoMWUAumU4QgqdVcZdnIjdMqmeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUldneFpRQzZaVGhDQ3AxVnhsMmNpTjB5cVo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9kMjhlMDEtYWQxOS00OGUyLTk2ODkt
ZTY1OWQxYWY2OGZlLzEvUldneFpRQzZaVGhDQ3AxVnhsMmNpTjB5cVo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS9kMjhlMDEtYWQxOS00OGUyLTk2ODktZTY1OWQxYWY2OGZl
LzEvUldneFpRQzZaVGhDQ3AxVnhsMmNpTjB5cVo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR6AR02GM
ErFUdszz8JXwz4OMB5DNsOlPRt+6iC0dAo3AHXdsZcuaKf0OVSJihKMkAkYQ+SJk
cKsZUcGuPC7KiVbnRpH/qYuoVZiLcQ2APS1wYCZ+bfybexL/NKip8QJftuwLKWz1
KWv9KAq9VWWM1MWsuyk3Fa1Bj8asvGfL/USFjzGC2dtNSUsc6+JUSohc0zMN5tRU
qZNbO6wMTAP8MxhUHnbE+aDYlMw4DBzhX6mHw3u450JXN7xT5r6vyPaJ5rilow3q
PJaUZ5W4s7dBJUcXy6keDRVCnkKeP/PfaTRoaNEe43BVCfkL4rqjLDjf2n7DjNhO
stieNCODGDimRg==
-----END CERTIFICATE-----