Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/df6c28-8860-43dd-b86a-6c4c73bfe616/1/kNsAB0OFNxZs8-WWltskCpQSvvE.mft
File:                     kNsAB0OFNxZs8-WWltskCpQSvvE.mft (raw, json)
Hash identifier:          Inbc4IciG+WoANGJtQr0r72KnCLNKLRltjv8W2Y7IEk=
Subject key identifier:   DF:39:E4:89:43:8B:D2:74:42:E7:36:38:89:FB:D3:62:CB:B6:D6:D9
Authority key identifier: 90:DB:00:07:43:85:37:16:6C:F3:E5:96:96:DB:24:0A:94:12:BE:F1
Certificate issuer:       /CN=90db0007438537166cf3e59696db240a9412bef1
Certificate serial:       01922F106470A803BF0F927F2C02871B5803
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kNsAB0OFNxZs8-WWltskCpQSvvE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/df6c28-8860-43dd-b86a-6c4c73bfe616/1/kNsAB0OFNxZs8-WWltskCpQSvvE.mft
Manifest number:          0A78
Signing time:             Thu 26 Sep 2024 16:00:56 +0000
Manifest this update:     Thu 26 Sep 2024 16:00:56 +0000
Manifest next update:     Fri 27 Sep 2024 16:00:56 +0000
Files and hashes:         1: EZ-uG791xT4_kyLh71Y9NKol9es.roa (hash: gxp65J5FxS0gwZJopWnRREKK5kAEfnh3NLZ6wRpIigA=)
                          2: kNsAB0OFNxZs8-WWltskCpQSvvE.crl (hash: Tqtwrvau12Mc/eEjIbFIDoNpfSoOEzVWNQ/cB1acWOM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:2f:10:64:70:a8:03:bf:0f:92:7f:2c:02:87:1b:58:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90db0007438537166cf3e59696db240a9412bef1
        Validity
            Not Before: Sep 26 16:00:56 2024 GMT
            Not After : Sep 27 16:00:56 2024 GMT
        Subject: CN=df39e489438bd27442e7363889fbd362cbb6d6d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:09:d5:3b:31:83:87:0f:66:5b:62:4c:d4:6e:
                    6b:1d:22:2c:5f:0a:89:b9:fc:30:f4:53:92:6f:15:
                    ec:9a:55:4e:a3:ff:97:a6:16:c9:a1:9d:24:e0:cf:
                    86:c7:af:a5:2a:3c:fe:c0:a9:65:a5:10:15:a9:21:
                    0a:0d:b0:75:c8:6e:1d:f0:87:8d:b8:1f:20:28:9c:
                    14:f5:00:12:33:c2:34:07:fb:87:50:50:c3:32:90:
                    80:4a:76:7d:18:73:bb:43:ce:c6:84:66:52:e8:82:
                    45:db:a2:7e:ca:2d:1d:70:12:0f:65:56:48:b6:87:
                    59:7a:a4:1a:9e:e6:53:ec:7e:2a:34:39:2a:c0:22:
                    90:27:07:97:86:99:af:ba:9b:e2:5e:0a:49:4f:c5:
                    ef:8a:32:33:a1:09:c9:99:0c:7f:6a:a1:ee:c9:f6:
                    72:7e:a0:37:49:22:62:3c:9d:f4:e3:85:c5:7d:82:
                    68:c3:47:4a:73:22:53:b2:15:2f:bb:0b:4f:26:b1:
                    42:d1:fe:d9:19:96:12:73:e6:e7:30:2b:15:f4:b1:
                    c0:e0:01:48:7e:ca:15:bc:7d:5f:cc:dd:04:e6:f4:
                    c3:cc:ff:1d:c5:59:94:b3:5d:ba:b2:b2:38:ec:d8:
                    87:11:8a:9e:06:c3:a2:86:52:15:fe:c6:c3:2e:cb:
                    38:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:39:E4:89:43:8B:D2:74:42:E7:36:38:89:FB:D3:62:CB:B6:D6:D9
            X509v3 Authority Key Identifier:
                keyid:90:DB:00:07:43:85:37:16:6C:F3:E5:96:96:DB:24:0A:94:12:BE:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kNsAB0OFNxZs8-WWltskCpQSvvE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/df6c28-8860-43dd-b86a-6c4c73bfe616/1/kNsAB0OFNxZs8-WWltskCpQSvvE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/df6c28-8860-43dd-b86a-6c4c73bfe616/1/kNsAB0OFNxZs8-WWltskCpQSvvE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:3d:a2:f6:05:e2:14:31:32:05:0e:94:cf:f5:7f:bb:49:aa:
         20:f6:d5:05:0d:07:4c:bd:20:ce:4e:94:56:5f:95:49:10:1a:
         c0:08:73:f2:2f:4a:86:d5:db:34:3f:3d:47:2a:e3:04:b2:e0:
         b7:f1:68:bf:9e:c2:85:96:53:77:93:4e:7e:16:61:43:8b:a4:
         d7:17:35:38:16:9d:db:a4:13:72:07:a4:6d:f5:e8:91:1f:c5:
         e4:cc:8f:cf:2f:b8:ec:59:79:27:03:8f:15:6a:4d:09:7d:c5:
         bc:1a:e4:7b:f6:2a:14:06:80:71:14:e5:35:e9:8e:5d:9d:c6:
         69:20:71:c9:ae:96:e2:c9:41:aa:9b:90:b1:7c:2a:72:90:a3:
         b6:c0:35:fc:7b:e1:c7:07:5b:72:0d:5b:23:44:a5:60:e5:cd:
         fa:a9:ea:b5:b6:09:2d:a2:7d:c3:b0:05:10:65:eb:83:ec:9d:
         60:9c:3b:0a:03:e1:aa:96:c6:31:f8:95:b2:f1:79:e7:84:dc:
         a0:5b:fd:bf:0b:d3:38:a4:08:ca:42:c4:67:49:1c:34:06:e9:
         37:dd:65:10:40:d6:48:1f:fe:d1:4f:f5:8c:d2:32:2e:de:50:
         a7:b5:77:56:4f:0d:d6:f9:bc:23:35:70:20:b8:55:54:92:79:
         a6:16:16:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZIvEGRwqAO/D5J/LAKHG1gDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwZGIwMDA3NDM4NTM3MTY2Y2YzZTU5Njk2ZGIyNDBhOTQx
MmJlZjEwHhcNMjQwOTI2MTYwMDU2WhcNMjQwOTI3MTYwMDU2WjAzMTEwLwYDVQQD
EyhkZjM5ZTQ4OTQzOGJkMjc0NDJlNzM2Mzg4OWZiZDM2MmNiYjZkNmQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgnVOzGDhw9mW2JM1G5rHSIsXwqJ
ufww9FOSbxXsmlVOo/+XphbJoZ0k4M+Gx6+lKjz+wKllpRAVqSEKDbB1yG4d8IeN
uB8gKJwU9QASM8I0B/uHUFDDMpCASnZ9GHO7Q87GhGZS6IJF26J+yi0dcBIPZVZI
todZeqQanuZT7H4qNDkqwCKQJweXhpmvupviXgpJT8XvijIzoQnJmQx/aqHuyfZy
fqA3SSJiPJ3044XFfYJow0dKcyJTshUvuwtPJrFC0f7ZGZYSc+bnMCsV9LHA4AFI
fsoVvH1fzN0E5vTDzP8dxVmUs126srI47NiHEYqeBsOihlIV/sbDLss40wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN855IlDi9J0Quc2OIn702LLttbZMB8GA1UdIwQY
MBaAFJDbAAdDhTcWbPPllpbbJAqUEr7xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva05zQUIwT0ZOeFpzOC1XV2x0c2tDcFFTdnZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9kZjZjMjgtODg2MC00M2RkLWI4NmEt
NmM0YzczYmZlNjE2LzEva05zQUIwT0ZOeFpzOC1XV2x0c2tDcFFTdnZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS9kZjZjMjgtODg2MC00M2RkLWI4NmEtNmM0YzczYmZlNjE2
LzEva05zQUIwT0ZOeFpzOC1XV2x0c2tDcFFTdnZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZz2i9gXi
FDEyBQ6Uz/V/u0mqIPbVBQ0HTL0gzk6UVl+VSRAawAhz8i9KhtXbND89RyrjBLLg
t/Fov57ChZZTd5NOfhZhQ4uk1xc1OBad26QTcgekbfXokR/F5MyPzy+47Fl5JwOP
FWpNCX3FvBrke/YqFAaAcRTlNemOXZ3GaSBxya6W4slBqpuQsXwqcpCjtsA1/Hvh
xwdbcg1bI0SlYOXN+qnqtbYJLaJ9w7AFEGXrg+ydYJw7CgPhqpbGMfiVsvF554Tc
oFv9vwvTOKQIykLEZ0kcNAbpN91lEEDWSB/+0U/1jNIyLt5Qp7V3Vk8N1vm8IzVw
ILhVVJJ5phYWHA==
-----END CERTIFICATE-----