Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/b8367b-6eab-40d6-9df0-b6c79f337806/1/xtAUTB5z3irxCab_ldDQl0s6ydg.mft
File:                     xtAUTB5z3irxCab_ldDQl0s6ydg.mft (raw, json)
Hash identifier:          HtK8U2CLnxFzFS5O+aEo8zg7wpyybYgsO4QaSWfEkTU=
Subject key identifier:   DC:C2:3C:48:5D:AD:16:86:5C:75:CA:A4:39:E8:D6:8C:D0:81:96:CA
Authority key identifier: C6:D0:14:4C:1E:73:DE:2A:F1:09:A6:FF:95:D0:D0:97:4B:3A:C9:D8
Certificate issuer:       /CN=c6d0144c1e73de2af109a6ff95d0d0974b3ac9d8
Certificate serial:       01934783F7F86C8D695A267E3EAC27E5E2BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xtAUTB5z3irxCab_ldDQl0s6ydg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/b8367b-6eab-40d6-9df0-b6c79f337806/1/xtAUTB5z3irxCab_ldDQl0s6ydg.mft
Manifest number:          02B4
Signing time:             Wed 20 Nov 2024 03:00:51 +0000
Manifest this update:     Wed 20 Nov 2024 03:00:51 +0000
Manifest next update:     Thu 21 Nov 2024 03:00:51 +0000
Files and hashes:         1: xtAUTB5z3irxCab_ldDQl0s6ydg.crl (hash: EbgD4vnUwdtwUcctPBtJcHKKsZD1SLQOQKKpt4EfWAI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:47:83:f7:f8:6c:8d:69:5a:26:7e:3e:ac:27:e5:e2:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6d0144c1e73de2af109a6ff95d0d0974b3ac9d8
        Validity
            Not Before: Nov 20 03:00:51 2024 GMT
            Not After : Nov 21 03:00:51 2024 GMT
        Subject: CN=dcc23c485dad16865c75caa439e8d68cd08196ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:fd:fc:7a:ad:f1:9e:b6:f6:db:29:17:c6:a2:
                    1e:16:56:f3:8e:bc:1d:fd:21:e8:fd:5d:26:18:52:
                    3e:a3:75:0a:e8:62:93:f6:a4:b2:b3:7d:e9:d8:86:
                    14:c5:40:5c:20:a9:72:d6:1f:b9:c2:74:7c:ba:b4:
                    a3:a0:db:d1:50:8d:18:95:cb:5c:77:69:7e:b5:5f:
                    bf:da:c9:32:ac:fd:bf:7d:91:56:82:a1:60:8e:1d:
                    a5:2e:4f:ea:1e:17:d6:5d:ec:90:c3:f0:e0:97:54:
                    7c:63:c5:6a:b5:1b:ab:2a:00:e0:f4:dc:2d:ec:20:
                    c1:31:9d:4d:bb:42:0f:b1:e9:8e:e1:61:19:71:13:
                    bb:22:ef:be:a9:b6:95:45:c0:9d:89:99:20:23:a1:
                    8b:68:f9:ec:47:35:ea:b7:1e:43:68:3c:0b:b0:2b:
                    9a:df:17:4d:ce:fd:73:3f:42:69:bb:59:13:4a:de:
                    52:e8:92:5e:6c:0d:a3:d3:47:b9:0d:ec:9f:89:c3:
                    7b:55:f3:09:37:4e:3c:45:61:c5:a4:02:26:20:21:
                    21:bc:90:ed:a8:38:34:4b:46:77:83:5d:f4:75:92:
                    09:a9:4f:d4:52:80:a6:a8:ac:e1:8c:69:3c:ea:20:
                    bb:75:1b:ae:db:d0:f2:d8:d2:72:53:a3:f9:35:e4:
                    f3:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:C2:3C:48:5D:AD:16:86:5C:75:CA:A4:39:E8:D6:8C:D0:81:96:CA
            X509v3 Authority Key Identifier:
                keyid:C6:D0:14:4C:1E:73:DE:2A:F1:09:A6:FF:95:D0:D0:97:4B:3A:C9:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xtAUTB5z3irxCab_ldDQl0s6ydg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b8367b-6eab-40d6-9df0-b6c79f337806/1/xtAUTB5z3irxCab_ldDQl0s6ydg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b8367b-6eab-40d6-9df0-b6c79f337806/1/xtAUTB5z3irxCab_ldDQl0s6ydg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:f3:de:c0:8c:41:5b:c4:c8:d3:b9:ad:04:01:08:67:67:fc:
         69:77:f9:14:fe:53:b2:71:3a:cd:18:d9:5c:cd:bc:44:1f:95:
         0f:f8:8a:e1:f5:f9:06:70:86:b8:f4:69:8b:7e:a5:f8:c3:d4:
         a5:0c:a5:76:79:01:8b:d7:c5:45:d9:eb:8b:b8:46:d9:dc:87:
         e3:f9:be:9c:eb:11:05:53:05:0d:65:60:da:33:12:80:4d:2f:
         39:23:df:66:01:d6:a6:2e:37:95:5c:9a:e6:b2:06:54:9e:52:
         12:f2:74:17:3f:df:a2:a6:0a:23:e7:62:c8:69:27:51:d1:57:
         11:86:47:c6:c0:f6:44:52:f8:20:7d:57:00:3c:95:d0:fc:eb:
         03:27:8d:b9:9b:31:9d:c2:5a:7b:35:24:2b:25:6f:fa:81:ce:
         85:c8:3e:c6:4e:d4:85:14:39:e5:ff:3c:4c:3d:5b:d7:35:3e:
         de:a3:6e:7d:36:bd:14:29:e9:01:68:b1:b0:9e:e7:dd:ba:56:
         63:4c:38:2e:17:27:25:21:d5:e8:5c:1e:af:94:56:f5:ed:74:
         4b:af:12:56:ce:d1:fa:60:a4:74:ea:d3:78:bf:15:fc:4b:af:
         cb:fd:97:af:c9:17:cf:89:f3:bb:d6:09:40:45:0d:cc:e0:75:
         40:db:46:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNHg/f4bI1pWiZ+Pqwn5eK+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2ZDAxNDRjMWU3M2RlMmFmMTA5YTZmZjk1ZDBkMDk3NGIz
YWM5ZDgwHhcNMjQxMTIwMDMwMDUxWhcNMjQxMTIxMDMwMDUxWjAzMTEwLwYDVQQD
EyhkY2MyM2M0ODVkYWQxNjg2NWM3NWNhYTQzOWU4ZDY4Y2QwODE5NmNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1P38eq3xnrb22ykXxqIeFlbzjrwd
/SHo/V0mGFI+o3UK6GKT9qSys33p2IYUxUBcIKly1h+5wnR8urSjoNvRUI0Ylctc
d2l+tV+/2skyrP2/fZFWgqFgjh2lLk/qHhfWXeyQw/Dgl1R8Y8VqtRurKgDg9Nwt
7CDBMZ1Nu0IPsemO4WEZcRO7Iu++qbaVRcCdiZkgI6GLaPnsRzXqtx5DaDwLsCua
3xdNzv1zP0Jpu1kTSt5S6JJebA2j00e5DeyficN7VfMJN048RWHFpAImICEhvJDt
qDg0S0Z3g130dZIJqU/UUoCmqKzhjGk86iC7dRuu29Dy2NJyU6P5NeTzJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNzCPEhdrRaGXHXKpDno1ozQgZbKMB8GA1UdIwQY
MBaAFMbQFEwec94q8Qmm/5XQ0JdLOsnYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHRBVVRCNXozaXJ4Q2FiX2xkRFFsMHM2eWRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9iODM2N2ItNmVhYi00MGQ2LTlkZjAt
YjZjNzlmMzM3ODA2LzEveHRBVVRCNXozaXJ4Q2FiX2xkRFFsMHM2eWRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy9iODM2N2ItNmVhYi00MGQ2LTlkZjAtYjZjNzlmMzM3ODA2
LzEveHRBVVRCNXozaXJ4Q2FiX2xkRFFsMHM2eWRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF/PewIxB
W8TI07mtBAEIZ2f8aXf5FP5TsnE6zRjZXM28RB+VD/iK4fX5BnCGuPRpi36l+MPU
pQyldnkBi9fFRdnri7hG2dyH4/m+nOsRBVMFDWVg2jMSgE0vOSPfZgHWpi43lVya
5rIGVJ5SEvJ0Fz/foqYKI+diyGknUdFXEYZHxsD2RFL4IH1XADyV0PzrAyeNuZsx
ncJaezUkKyVv+oHOhcg+xk7UhRQ55f88TD1b1zU+3qNufTa9FCnpAWixsJ7n3bpW
Y0w4LhcnJSHV6Fwer5RW9e10S68SVs7R+mCkdOrTeL8V/Euvy/2Xr8kXz4nzu9YJ
QEUNzOB1QNtGvA==
-----END CERTIFICATE-----