Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/ff3a3f-ce58-423c-b835-c77ba520791b/1/Ag4ZVoXWIxK4YDzMdIZM_ozTZI4.mft
File:                     Ag4ZVoXWIxK4YDzMdIZM_ozTZI4.mft (raw, json)
Hash identifier:          EgHC0NyvUaKGitO7Xf01D921n0ArxuOf6UGbetnhRTw=
Subject key identifier:   4A:28:71:DA:13:85:B2:31:1A:B5:7B:3B:9A:71:D2:50:AE:75:30:B9
Authority key identifier: 02:0E:19:56:85:D6:23:12:B8:60:3C:CC:74:86:4C:FE:8C:D3:64:8E
Certificate issuer:       /CN=020e195685d62312b8603ccc74864cfe8cd3648e
Certificate serial:       018B5AB0DDCF82BAFECD0A2CB1883D54117E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ag4ZVoXWIxK4YDzMdIZM_ozTZI4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/ff3a3f-ce58-423c-b835-c77ba520791b/1/Ag4ZVoXWIxK4YDzMdIZM_ozTZI4.mft
Manifest number:          082F
Signing time:             Mon 23 Oct 2023 04:00:22 +0000
Manifest this update:     Mon 23 Oct 2023 04:00:22 +0000
Manifest next update:     Tue 24 Oct 2023 04:00:22 +0000
Files and hashes:         1: Ag4ZVoXWIxK4YDzMdIZM_ozTZI4.crl (hash: HIN/XkX8qBdwZizSxpFXDBdXaQm8Di1zq2f4XOTjycI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:5a:b0:dd:cf:82:ba:fe:cd:0a:2c:b1:88:3d:54:11:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=020e195685d62312b8603ccc74864cfe8cd3648e
        Validity
            Not Before: Oct 23 04:00:22 2023 GMT
            Not After : Oct 24 04:00:22 2023 GMT
        Subject: CN=4a2871da1385b2311ab57b3b9a71d250ae7530b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:04:e8:b9:f0:3c:8d:0c:e7:a4:a5:37:c0:4c:
                    41:43:48:cb:48:c2:be:e5:7b:be:e5:3d:a8:c4:36:
                    47:dc:4b:cf:9d:a3:29:aa:3e:d4:de:c2:98:8e:56:
                    1a:88:3e:8d:30:26:7e:cb:2a:ac:ee:22:4b:e8:d8:
                    75:1e:0c:c7:4d:19:a1:5e:6a:33:10:41:51:26:0a:
                    3b:26:f2:85:a9:5e:33:f9:0f:a2:51:df:33:86:17:
                    59:a4:ec:ee:7d:e6:5c:a0:08:1e:3c:7a:84:47:00:
                    55:3c:62:e9:5b:5e:8e:0d:6d:12:99:fc:11:94:fb:
                    6f:84:3a:84:a9:70:a9:aa:22:0e:aa:10:5f:b5:90:
                    c0:e2:2b:96:5a:1b:6c:b2:36:be:ab:b4:42:f6:57:
                    db:d9:b2:72:db:b7:7d:75:b7:3f:3f:bd:0f:fc:64:
                    5b:df:c5:44:8b:60:d5:b5:e3:3c:a0:55:5b:c5:86:
                    6c:91:81:45:79:70:00:3b:5d:60:5c:13:af:7e:f9:
                    b5:16:d7:96:ed:9d:96:5d:42:a6:10:4f:8f:2b:7a:
                    e9:45:bb:ff:14:8c:74:19:42:93:54:57:02:07:bc:
                    55:f6:2c:c9:aa:18:e0:6b:df:55:fe:aa:ea:53:d2:
                    d4:78:92:d8:6b:0d:87:cd:9f:8a:3d:9b:95:1a:20:
                    f9:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:28:71:DA:13:85:B2:31:1A:B5:7B:3B:9A:71:D2:50:AE:75:30:B9
            X509v3 Authority Key Identifier:
                keyid:02:0E:19:56:85:D6:23:12:B8:60:3C:CC:74:86:4C:FE:8C:D3:64:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ag4ZVoXWIxK4YDzMdIZM_ozTZI4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ff3a3f-ce58-423c-b835-c77ba520791b/1/Ag4ZVoXWIxK4YDzMdIZM_ozTZI4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ff3a3f-ce58-423c-b835-c77ba520791b/1/Ag4ZVoXWIxK4YDzMdIZM_ozTZI4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:6d:eb:d9:76:9b:b8:93:8d:b6:d6:33:5e:3c:9f:17:ca:17:
         76:00:97:d4:e3:95:09:7f:92:e8:0e:5f:6e:2f:e9:b3:8a:8d:
         cc:d9:1d:5d:ba:ed:a7:62:22:fc:d5:7b:2d:97:75:d5:50:42:
         1a:d8:9c:77:ba:3e:bf:67:b3:8b:c3:63:10:53:ab:3a:06:ce:
         04:c4:37:5c:c2:80:a7:92:20:b0:46:28:ce:07:5a:47:df:8a:
         4d:e7:4f:81:7b:c9:2e:9f:2e:a3:c2:82:a4:11:36:3c:4a:40:
         69:c6:40:7a:1d:09:5c:3c:ce:20:b6:fe:3b:c3:ea:e2:98:62:
         73:04:5d:55:06:5d:95:5d:8a:27:0a:10:be:c7:b0:21:29:ed:
         c7:c2:9f:17:08:ef:c1:aa:45:71:72:6b:c8:9e:71:66:4c:16:
         ef:9e:40:e3:95:dc:32:e5:90:a9:d1:fe:39:62:15:01:3e:7b:
         5f:fa:7c:85:b4:f8:c7:4a:27:25:f0:2c:1f:93:6d:95:5c:34:
         8f:0f:fd:cb:15:05:e9:ad:99:da:05:6a:a6:62:ff:23:f9:2b:
         32:b5:dc:44:15:26:20:bc:98:d9:0b:96:5b:9a:5c:76:e6:39:
         32:4a:bd:96:08:bf:12:75:84:26:07:0c:a4:75:ca:7a:66:89:
         d1:41:d0:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYtasN3Pgrr+zQossYg9VBF+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyMGUxOTU2ODVkNjIzMTJiODYwM2NjYzc0ODY0Y2ZlOGNk
MzY0OGUwHhcNMjMxMDIzMDQwMDIyWhcNMjMxMDI0MDQwMDIyWjAzMTEwLwYDVQQD
Eyg0YTI4NzFkYTEzODViMjMxMWFiNTdiM2I5YTcxZDI1MGFlNzUzMGI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQToufA8jQznpKU3wExBQ0jLSMK+
5Xu+5T2oxDZH3EvPnaMpqj7U3sKYjlYaiD6NMCZ+yyqs7iJL6Nh1HgzHTRmhXmoz
EEFRJgo7JvKFqV4z+Q+iUd8zhhdZpOzufeZcoAgePHqERwBVPGLpW16ODW0SmfwR
lPtvhDqEqXCpqiIOqhBftZDA4iuWWhtssja+q7RC9lfb2bJy27d9dbc/P70P/GRb
38VEi2DVteM8oFVbxYZskYFFeXAAO11gXBOvfvm1FteW7Z2WXUKmEE+PK3rpRbv/
FIx0GUKTVFcCB7xV9izJqhjga99V/qrqU9LUeJLYaw2HzZ+KPZuVGiD5QwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEoocdoThbIxGrV7O5px0lCudTC5MB8GA1UdIwQY
MBaAFAIOGVaF1iMSuGA8zHSGTP6M02SOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWc0WlZvWFdJeEs0WUR6TWRJWk1fb3pUWkk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9mZjNhM2YtY2U1OC00MjNjLWI4MzUt
Yzc3YmE1MjA3OTFiLzEvQWc0WlZvWFdJeEs0WUR6TWRJWk1fb3pUWkk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9mZjNhM2YtY2U1OC00MjNjLWI4MzUtYzc3YmE1MjA3OTFi
LzEvQWc0WlZvWFdJeEs0WUR6TWRJWk1fb3pUWkk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkW3r2Xab
uJONttYzXjyfF8oXdgCX1OOVCX+S6A5fbi/ps4qNzNkdXbrtp2Ii/NV7LZd11VBC
Gticd7o+v2ezi8NjEFOrOgbOBMQ3XMKAp5IgsEYozgdaR9+KTedPgXvJLp8uo8KC
pBE2PEpAacZAeh0JXDzOILb+O8Pq4phicwRdVQZdlV2KJwoQvsewISntx8KfFwjv
wapFcXJryJ5xZkwW755A45XcMuWQqdH+OWIVAT57X/p8hbT4x0onJfAsH5NtlVw0
jw/9yxUF6a2Z2gVqpmL/I/krMrXcRBUmILyY2QuWW5pcduY5Mkq9lgi/EnWEJgcM
pHXKemaJ0UHQsg==
-----END CERTIFICATE-----