Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/8f8cc0-f693-421c-bc54-a31708d40391/1/DYcUK9wrPw0ISKDYALaTCxq7NLw.mft
File:                     DYcUK9wrPw0ISKDYALaTCxq7NLw.mft (raw, json)
Hash identifier:          CPPT/co6vI0MIipmWPWsVH9zaREe2l8xZ8Y5wDE6gng=
Subject key identifier:   13:D3:41:5A:47:2E:7A:D1:13:A4:E4:13:E4:EC:9B:66:52:65:05:F5
Authority key identifier: 0D:87:14:2B:DC:2B:3F:0D:08:48:A0:D8:00:B6:93:0B:1A:BB:34:BC
Certificate issuer:       /CN=0d87142bdc2b3f0d0848a0d800b6930b1abb34bc
Certificate serial:       0191B2651898A2AD3C06519A775181A6228A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DYcUK9wrPw0ISKDYALaTCxq7NLw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/8f8cc0-f693-421c-bc54-a31708d40391/1/DYcUK9wrPw0ISKDYALaTCxq7NLw.mft
Manifest number:          10A0
Signing time:             Mon 02 Sep 2024 11:00:55 +0000
Manifest this update:     Mon 02 Sep 2024 11:00:55 +0000
Manifest next update:     Tue 03 Sep 2024 11:00:55 +0000
Files and hashes:         1: 4OIH-Un4yy4-pSE4nKbPDHGPbFk.roa (hash: y2kF5QVQDo4B+KA5N0Dskl5cwATEuYWUah4UN3OB11c=)
                          2: 4hV-WauH8aRe-matXISwnBbj0aE.roa (hash: blgTAYOtumzmTFxOPJSBWjRdn4nDb+K3lNVcRzjkJbI=)
                          3: 5wOPTST3NLbHllN1P7Knj0R04sI.roa (hash: OMJlpVtc4d/wtbKew6CSZzD4lZcaLM84sgd6XbZDd9g=)
                          4: 9zWDUYDTONhfjoox6avTGD92gRM.roa (hash: faetXrco7oo1Wv/x6UK2yIUKHT9B8MOEiCSiFEDBlsM=)
                          5: DYcUK9wrPw0ISKDYALaTCxq7NLw.crl (hash: qsOours3s8T8vCEhWd25s5wbTXUFI3Oke13QXiFFyvk=)
                          6: Ml4sQKTmSpS4eSt99aWN2P6Yb5k.roa (hash: J/tnVFJhggLagTowBPCIDcidDOt5xRUa54rWu3p0RLA=)
                          7: PUNiVgLPYhqs94F8IRCAJgl7j40.roa (hash: kb+h76iaXKsN43BZIN7e0s/Hc5JlhyjB4g2twrGBYPY=)
                          8: RziS74kv7uHp10fdkcU9eFNo_hY.roa (hash: WwqsUYvlQ69ekycXDe7ghd4BQ333M+urxU8PwrkpKu4=)
                          9: _4OJEmy-_xr_kOyO6EpYKRvyk_M.roa (hash: M6KX3NAag16FtxfM/8U8uJKiWDb1qs68R8f4zbgn6y8=)
                          10: c5rAqPU3OE2FKIkvJ4wjskmbrNg.roa (hash: JmuCUlo1CMWiEzTSEz4Q+Y4P55Z2DQoMPJ07S5iefiU=)
                          11: gEBD1SrlixKLUIhv281F9gdrYRU.roa (hash: zq165Ib3ZWzi609hfGZ6pOD80SzZXLMH5NgYIdn8C9M=)
                          12: hVSpcz72F_3hGT_ih8BBg9MjSz8.roa (hash: /aC7JTzrFSFyjshV3SREAKDrKAlAXukiZvxSVLATCaM=)
                          13: m9GjhS3o3nK9Hamrf2ATChjAq3w.roa (hash: 1A3lCSWc/s7Mlmo8/byV32XCq7Lprl8wU0qHTnFmpqg=)
                          14: u5Yj7oyXI4qvBjbxgtzlODQkogg.roa (hash: rDeTJ+dodsHpnjSYH8Tu5IF78etZ/GpO7qMEBIebRTw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:b2:65:18:98:a2:ad:3c:06:51:9a:77:51:81:a6:22:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d87142bdc2b3f0d0848a0d800b6930b1abb34bc
        Validity
            Not Before: Sep  2 11:00:55 2024 GMT
            Not After : Sep  3 11:00:55 2024 GMT
        Subject: CN=13d3415a472e7ad113a4e413e4ec9b66526505f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:1d:70:be:38:12:e6:b6:b5:01:f1:3e:15:28:
                    07:0a:ba:1f:24:5f:48:0d:da:80:ad:94:22:95:c3:
                    7d:c7:3d:4d:c4:23:b8:71:c3:3f:75:e3:35:56:a6:
                    c6:00:ba:e7:2a:83:fe:d5:79:1e:28:d1:97:63:3d:
                    81:f8:82:56:bf:5c:0c:0a:f1:3e:a5:1e:1c:36:3a:
                    20:94:e2:bf:f6:15:b5:10:de:18:12:5b:45:19:0d:
                    fc:44:30:78:e9:c2:45:d1:16:f5:7e:e1:ef:4c:a6:
                    95:83:2e:d7:3b:8f:f7:c9:eb:b6:08:88:6c:d5:52:
                    fb:62:19:91:28:25:7b:18:fb:58:e5:1e:1d:0e:fe:
                    75:ea:d9:6b:cd:33:0c:89:b3:b0:2b:50:f6:f0:77:
                    67:d5:63:89:64:2a:89:9d:39:48:07:b7:9a:16:b7:
                    20:9b:bd:fe:be:f0:c8:e0:d5:2c:99:4f:bc:ac:ac:
                    c9:55:c3:28:13:72:22:58:2b:86:54:f9:45:f3:3a:
                    8f:1c:03:69:62:1b:98:c4:79:13:ce:ec:0f:21:f1:
                    c1:25:6b:77:50:ce:35:ad:7d:b7:e3:da:db:30:6c:
                    cb:5a:57:ce:92:95:6b:31:08:b6:da:d9:ea:dd:09:
                    21:04:17:ac:83:e7:b8:0c:d7:65:9d:07:e8:a9:71:
                    3a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:D3:41:5A:47:2E:7A:D1:13:A4:E4:13:E4:EC:9B:66:52:65:05:F5
            X509v3 Authority Key Identifier:
                keyid:0D:87:14:2B:DC:2B:3F:0D:08:48:A0:D8:00:B6:93:0B:1A:BB:34:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYcUK9wrPw0ISKDYALaTCxq7NLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8f8cc0-f693-421c-bc54-a31708d40391/1/DYcUK9wrPw0ISKDYALaTCxq7NLw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8f8cc0-f693-421c-bc54-a31708d40391/1/DYcUK9wrPw0ISKDYALaTCxq7NLw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:e6:a2:df:e8:ad:a2:33:92:49:79:fd:d9:ef:86:3e:59:cc:
         ab:97:73:e7:11:0b:1a:e6:6a:cb:55:f8:a9:8a:d4:5e:11:0d:
         96:21:93:54:2d:87:74:d0:9a:07:5e:1c:31:2b:0d:bf:3f:12:
         51:ff:0f:dc:92:47:3b:58:d7:6b:0e:b9:af:b1:56:4d:d8:4f:
         cf:42:90:0e:fb:71:8a:f7:fc:09:3d:ed:cc:da:00:d2:a6:44:
         63:e6:c0:84:cf:41:0d:e7:c7:bb:d5:5c:2a:cb:86:a8:93:3b:
         0a:7b:35:d6:72:81:05:95:9f:4c:f6:ba:f5:84:b4:6c:e8:82:
         ca:89:39:a4:32:d6:f9:3b:64:5e:d5:18:71:32:12:82:61:8f:
         92:66:0c:28:80:5f:02:cd:ec:b1:b7:88:ce:69:c8:c7:4c:8d:
         96:69:c3:55:4b:75:77:0b:87:e8:42:4a:77:61:9b:47:f0:09:
         36:b8:a0:6e:22:17:d9:11:e0:5e:ad:a3:27:1a:c6:ea:ab:d9:
         14:e3:f7:e1:0e:d3:00:53:36:5c:38:43:b0:e8:04:0b:0b:34:
         4e:27:0b:51:b3:d8:f0:dc:eb:95:19:d9:47:13:4c:72:20:26:
         82:d0:f8:d0:75:12:b6:e1:84:45:38:1c:49:09:8d:56:b8:a8:
         9b:8b:2a:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZGyZRiYoq08BlGad1GBpiKKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkODcxNDJiZGMyYjNmMGQwODQ4YTBkODAwYjY5MzBiMWFi
YjM0YmMwHhcNMjQwOTAyMTEwMDU1WhcNMjQwOTAzMTEwMDU1WjAzMTEwLwYDVQQD
EygxM2QzNDE1YTQ3MmU3YWQxMTNhNGU0MTNlNGVjOWI2NjUyNjUwNWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAph1wvjgS5ra1AfE+FSgHCrofJF9I
DdqArZQilcN9xz1NxCO4ccM/deM1VqbGALrnKoP+1XkeKNGXYz2B+IJWv1wMCvE+
pR4cNjoglOK/9hW1EN4YEltFGQ38RDB46cJF0Rb1fuHvTKaVgy7XO4/3yeu2CIhs
1VL7YhmRKCV7GPtY5R4dDv516tlrzTMMibOwK1D28Hdn1WOJZCqJnTlIB7eaFrcg
m73+vvDI4NUsmU+8rKzJVcMoE3IiWCuGVPlF8zqPHANpYhuYxHkTzuwPIfHBJWt3
UM41rX2349rbMGzLWlfOkpVrMQi22tnq3QkhBBesg+e4DNdlnQfoqXE61QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBPTQVpHLnrRE6TkE+Tsm2ZSZQX1MB8GA1UdIwQY
MBaAFA2HFCvcKz8NCEig2AC2kwsauzS8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFljVUs5d3JQdzBJU0tEWUFMYVRDeHE3Tkx3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC84ZjhjYzAtZjY5My00MjFjLWJjNTQt
YTMxNzA4ZDQwMzkxLzEvRFljVUs5d3JQdzBJU0tEWUFMYVRDeHE3Tkx3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC84ZjhjYzAtZjY5My00MjFjLWJjNTQtYTMxNzA4ZDQwMzkx
LzEvRFljVUs5d3JQdzBJU0tEWUFMYVRDeHE3Tkx3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATOai3+it
ojOSSXn92e+GPlnMq5dz5xELGuZqy1X4qYrUXhENliGTVC2HdNCaB14cMSsNvz8S
Uf8P3JJHO1jXaw65r7FWTdhPz0KQDvtxivf8CT3tzNoA0qZEY+bAhM9BDefHu9Vc
KsuGqJM7Cns11nKBBZWfTPa69YS0bOiCyok5pDLW+TtkXtUYcTISgmGPkmYMKIBf
As3ssbeIzmnIx0yNlmnDVUt1dwuH6EJKd2GbR/AJNrigbiIX2RHgXq2jJxrG6qvZ
FOP34Q7TAFM2XDhDsOgECws0TicLUbPY8NzrlRnZRxNMciAmgtD40HUStuGERTgc
SQmNVriom4sqQw==
-----END CERTIFICATE-----