Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/7f56fd-b177-40e0-9c18-cd34a433e615/1/qfBi_X8yUpX76ehotu_TGma7HbU.mft
File:                     qfBi_X8yUpX76ehotu_TGma7HbU.mft (raw, json)
Hash identifier:          BLEC/U5BVCWNSqDn0DOnr3Ks7E3YucfeNaGeCFdFoxs=
Subject key identifier:   C2:40:0A:4B:CA:14:F2:1D:FE:35:69:02:B2:8A:76:9A:61:93:34:6A
Authority key identifier: A9:F0:62:FD:7F:32:52:95:FB:E9:E8:68:B6:EF:D3:1A:66:BB:1D:B5
Certificate issuer:       /CN=a9f062fd7f325295fbe9e868b6efd31a66bb1db5
Certificate serial:       0193FAB1172326106C23CCFFD11F84664152
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qfBi_X8yUpX76ehotu_TGma7HbU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/7f56fd-b177-40e0-9c18-cd34a433e615/1/qfBi_X8yUpX76ehotu_TGma7HbU.mft
Manifest number:          0DBA
Signing time:             Tue 24 Dec 2024 22:02:09 +0000
Manifest this update:     Tue 24 Dec 2024 22:02:09 +0000
Manifest next update:     Wed 25 Dec 2024 22:02:09 +0000
Files and hashes:         1: qfBi_X8yUpX76ehotu_TGma7HbU.crl (hash: h7u1wqgk2tTCDBy9ZYTRlIZieEkvoZ8hDVRaeD3ZFos=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:fa:b1:17:23:26:10:6c:23:cc:ff:d1:1f:84:66:41:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9f062fd7f325295fbe9e868b6efd31a66bb1db5
        Validity
            Not Before: Dec 24 22:02:09 2024 GMT
            Not After : Dec 25 22:02:09 2024 GMT
        Subject: CN=c2400a4bca14f21dfe356902b28a769a6193346a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:e3:20:67:13:cb:ee:f1:c5:c4:1c:42:cb:05:
                    4f:77:b9:bd:e0:26:bc:2e:e5:d9:c0:26:5a:f1:b0:
                    77:cf:46:87:38:d5:b1:07:8b:db:22:d1:23:08:58:
                    4d:b4:c8:2b:7b:47:3b:92:bf:c1:a5:17:f7:b2:37:
                    14:04:24:b9:29:9f:e7:17:c4:69:29:5e:98:52:d7:
                    b1:02:c9:ba:f1:83:b1:e1:4e:43:76:b5:fa:a2:b4:
                    18:d6:cb:1b:af:65:9e:8e:6a:81:1c:8f:ae:40:a5:
                    ff:b2:69:5e:b4:b6:81:16:65:93:fe:76:b2:d0:be:
                    22:d9:8d:35:da:1b:37:c5:c3:f4:fa:84:7c:4e:f6:
                    a8:a0:f9:e8:25:a1:35:51:ff:44:1f:53:8f:7a:a4:
                    82:c8:e4:36:3c:be:c7:34:6c:4a:e1:d6:29:33:ab:
                    7a:28:0f:b4:4d:2e:6f:37:43:28:18:cc:cd:bd:24:
                    b0:de:6e:1d:df:fa:af:a4:5e:07:1f:3b:9f:d0:65:
                    50:fb:4f:ab:89:f0:b1:0d:3f:1c:35:03:8e:2a:0d:
                    2f:9a:50:b4:1b:e5:60:95:22:bd:45:2f:e8:48:1d:
                    83:c1:66:ad:54:f6:33:3a:c8:8e:a0:4b:ed:cf:cd:
                    34:94:6b:fc:51:1b:18:ad:6b:bd:f6:2f:46:4c:b0:
                    27:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:40:0A:4B:CA:14:F2:1D:FE:35:69:02:B2:8A:76:9A:61:93:34:6A
            X509v3 Authority Key Identifier:
                keyid:A9:F0:62:FD:7F:32:52:95:FB:E9:E8:68:B6:EF:D3:1A:66:BB:1D:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qfBi_X8yUpX76ehotu_TGma7HbU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7f56fd-b177-40e0-9c18-cd34a433e615/1/qfBi_X8yUpX76ehotu_TGma7HbU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7f56fd-b177-40e0-9c18-cd34a433e615/1/qfBi_X8yUpX76ehotu_TGma7HbU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:5a:17:ed:d9:cd:e7:11:d4:cb:6d:21:c4:28:91:c9:1c:75:
         76:19:8b:93:9a:6a:be:49:60:fc:00:ac:0d:7f:70:1f:24:c5:
         31:9d:2c:16:cf:59:96:19:d6:cd:e4:51:67:c8:b2:5b:2c:93:
         b2:80:69:20:1b:1a:cf:64:ec:3a:5f:8a:2e:88:d3:62:09:66:
         37:ef:2e:1e:39:ad:54:de:31:71:4d:bc:11:c1:85:be:64:45:
         fc:82:13:5c:a0:8f:cd:18:d9:7d:a3:ae:db:fc:0f:e1:51:ae:
         4d:c2:98:ea:15:f1:1c:77:13:68:ec:30:31:c5:1e:d3:da:28:
         96:b0:af:21:4a:a5:4d:31:7e:b2:e9:c6:f3:01:d6:8c:4c:93:
         e5:6c:d0:c8:b3:1a:07:31:9f:24:d8:4e:27:1a:4c:ff:29:e6:
         2f:ff:e5:05:66:3c:de:79:e5:68:c0:0d:54:d6:62:78:45:d9:
         5e:69:f9:9b:95:ab:33:72:cd:d7:b2:6c:12:a2:ef:96:99:1e:
         5b:5e:bb:b3:a8:ca:b0:c3:92:84:c1:2b:ec:58:61:fc:bc:d3:
         82:de:b7:e3:6e:b3:c9:91:a9:d9:1e:3b:b0:28:b1:46:5b:b2:
         c4:7e:a3:3e:c4:49:6e:8e:ee:75:bf:8f:63:6d:07:e7:fc:f0:
         87:23:da:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZP6sRcjJhBsI8z/0R+EZkFSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5ZjA2MmZkN2YzMjUyOTVmYmU5ZTg2OGI2ZWZkMzFhNjZi
YjFkYjUwHhcNMjQxMjI0MjIwMjA5WhcNMjQxMjI1MjIwMjA5WjAzMTEwLwYDVQQD
EyhjMjQwMGE0YmNhMTRmMjFkZmUzNTY5MDJiMjhhNzY5YTYxOTMzNDZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4eMgZxPL7vHFxBxCywVPd7m94Ca8
LuXZwCZa8bB3z0aHONWxB4vbItEjCFhNtMgre0c7kr/BpRf3sjcUBCS5KZ/nF8Rp
KV6YUtexAsm68YOx4U5DdrX6orQY1ssbr2WejmqBHI+uQKX/smletLaBFmWT/nay
0L4i2Y012hs3xcP0+oR8TvaooPnoJaE1Uf9EH1OPeqSCyOQ2PL7HNGxK4dYpM6t6
KA+0TS5vN0MoGMzNvSSw3m4d3/qvpF4HHzuf0GVQ+0+rifCxDT8cNQOOKg0vmlC0
G+VglSK9RS/oSB2DwWatVPYzOsiOoEvtz800lGv8URsYrWu99i9GTLAnjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMJACkvKFPId/jVpArKKdpphkzRqMB8GA1UdIwQY
MBaAFKnwYv1/MlKV++noaLbv0xpmux21MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWZCaV9YOHlVcFg3NmVob3R1X1RHbWE3SGJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi83ZjU2ZmQtYjE3Ny00MGUwLTljMTgt
Y2QzNGE0MzNlNjE1LzEvcWZCaV9YOHlVcFg3NmVob3R1X1RHbWE3SGJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi83ZjU2ZmQtYjE3Ny00MGUwLTljMTgtY2QzNGE0MzNlNjE1
LzEvcWZCaV9YOHlVcFg3NmVob3R1X1RHbWE3SGJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcFoX7dnN
5xHUy20hxCiRyRx1dhmLk5pqvklg/ACsDX9wHyTFMZ0sFs9ZlhnWzeRRZ8iyWyyT
soBpIBsaz2TsOl+KLojTYglmN+8uHjmtVN4xcU28EcGFvmRF/IITXKCPzRjZfaOu
2/wP4VGuTcKY6hXxHHcTaOwwMcUe09oolrCvIUqlTTF+sunG8wHWjEyT5WzQyLMa
BzGfJNhOJxpM/ynmL//lBWY83nnlaMANVNZieEXZXmn5m5WrM3LN17JsEqLvlpke
W167s6jKsMOShMEr7Fhh/LzTgt63426zyZGp2R47sCixRluyxH6jPsRJbo7udb+P
Y20H5/zwhyPafw==
-----END CERTIFICATE-----