Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/69a51d-92a1-48ad-b7e7-c4c879c6724c/1/yWrrday7XyEjNeptzLDDbzZ9tPg.mft
File:                     yWrrday7XyEjNeptzLDDbzZ9tPg.mft (raw, json)
Hash identifier:          5cC7DVJMqRibRWETvzIgf8251MyKSxri+xMBGWBR4Yo=
Subject key identifier:   17:89:CB:85:14:1A:A7:03:DD:5D:CC:A1:AC:D4:2B:70:27:FF:75:DC
Authority key identifier: C9:6A:EB:75:AC:BB:5F:21:23:35:EA:6D:CC:B0:C3:6F:36:7D:B4:F8
Certificate issuer:       /CN=c96aeb75acbb5f212335ea6dccb0c36f367db4f8
Certificate serial:       01922F1055B571F981883F038E18BFAB95F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yWrrday7XyEjNeptzLDDbzZ9tPg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/69a51d-92a1-48ad-b7e7-c4c879c6724c/1/yWrrday7XyEjNeptzLDDbzZ9tPg.mft
Manifest number:          12D9
Signing time:             Thu 26 Sep 2024 16:00:52 +0000
Manifest this update:     Thu 26 Sep 2024 16:00:52 +0000
Manifest next update:     Fri 27 Sep 2024 16:00:52 +0000
Files and hashes:         1: N1GQq6PrgEqECZ_D6G86ZzVHdVc.roa (hash: ze9XLgcSLr5D7asiuVCsSkgm8+mRcLFwD4iJ0pP6fg4=)
                          2: yWrrday7XyEjNeptzLDDbzZ9tPg.crl (hash: tSXoIRZl+XcbFF/avUcOEl5oV2H0Au6BehpVPHWDK+8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:2f:10:55:b5:71:f9:81:88:3f:03:8e:18:bf:ab:95:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c96aeb75acbb5f212335ea6dccb0c36f367db4f8
        Validity
            Not Before: Sep 26 16:00:52 2024 GMT
            Not After : Sep 27 16:00:52 2024 GMT
        Subject: CN=1789cb85141aa703dd5dcca1acd42b7027ff75dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ef:46:2d:20:ee:ae:f9:43:77:b8:ab:20:95:
                    21:3f:ae:bc:f7:f4:14:c9:eb:22:e1:82:87:e8:35:
                    cc:22:bb:0e:f8:fd:68:b9:9e:e5:45:04:53:59:b6:
                    57:86:5e:3e:39:eb:81:e8:74:f7:4e:d4:2c:c2:c6:
                    19:55:c3:d6:4f:66:40:5e:8a:60:ca:5b:9b:8b:fe:
                    99:26:6f:ed:de:23:69:0c:72:40:25:b4:08:2b:20:
                    ed:d7:c3:45:90:01:b4:19:84:89:a7:ad:fb:1d:50:
                    cf:b3:16:25:6d:4e:d5:da:56:b1:3e:b6:3e:62:24:
                    9b:53:57:71:bf:61:54:83:bd:29:51:eb:a6:81:1f:
                    63:33:19:ed:d9:33:75:d6:63:4b:a5:39:90:64:d8:
                    ee:15:73:f5:d2:d4:88:8b:34:63:25:94:a7:f4:e8:
                    a6:f4:2b:f2:31:7f:80:5c:fb:8a:32:77:cd:00:1c:
                    62:52:9e:ce:aa:83:db:99:0d:c8:0c:40:54:23:2b:
                    cf:71:4b:1d:ab:3e:4b:97:6d:4a:d1:fe:20:23:98:
                    a6:83:7e:82:15:3c:0b:04:ed:da:71:96:fc:30:78:
                    44:9f:94:33:b5:a6:82:fe:2c:53:eb:20:5a:2c:21:
                    43:da:32:2c:90:a4:0f:73:20:08:f1:5e:38:06:15:
                    03:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:89:CB:85:14:1A:A7:03:DD:5D:CC:A1:AC:D4:2B:70:27:FF:75:DC
            X509v3 Authority Key Identifier:
                keyid:C9:6A:EB:75:AC:BB:5F:21:23:35:EA:6D:CC:B0:C3:6F:36:7D:B4:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yWrrday7XyEjNeptzLDDbzZ9tPg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/69a51d-92a1-48ad-b7e7-c4c879c6724c/1/yWrrday7XyEjNeptzLDDbzZ9tPg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/69a51d-92a1-48ad-b7e7-c4c879c6724c/1/yWrrday7XyEjNeptzLDDbzZ9tPg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:a7:4b:00:4d:2f:e7:32:9b:ec:6f:07:05:5c:f5:46:bb:71:
         68:ca:5d:f3:c9:9c:4e:14:c1:56:3b:61:48:e1:25:10:a6:b9:
         04:95:1a:6e:0a:6d:73:70:9c:49:e7:53:ad:36:69:12:94:ce:
         59:0d:c8:97:9a:76:45:94:2e:79:2b:0f:62:bf:45:b8:7f:c0:
         53:d6:cf:a1:23:a5:76:fe:4b:9f:5f:c5:2d:7e:98:fd:f4:59:
         8d:48:31:eb:4c:20:8b:88:7c:f7:5b:d1:23:64:fc:fb:3f:71:
         88:12:16:61:cf:75:4c:c9:15:02:4c:89:14:65:c0:20:9d:69:
         fc:91:6f:48:7f:e9:a9:84:38:d6:40:8f:9d:59:16:ed:be:2c:
         b5:73:f6:f5:61:f5:c7:30:2a:1c:39:67:7a:6d:33:ee:eb:33:
         9f:71:79:e3:cd:0a:b1:e1:76:e3:ba:12:5e:90:e1:4b:48:05:
         de:1c:f9:92:49:87:39:81:30:43:d2:16:ef:d8:b6:31:6c:99:
         22:97:78:47:1a:5a:35:38:c6:c2:6e:31:6f:16:61:d2:e9:47:
         16:09:2b:e1:27:e2:9e:3d:76:c9:f1:c2:46:e1:24:c9:c0:8b:
         53:6f:cf:93:98:48:f8:3c:8a:53:ee:46:c1:ac:e7:be:3d:10:
         79:b3:1f:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZIvEFW1cfmBiD8Djhi/q5X0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5NmFlYjc1YWNiYjVmMjEyMzM1ZWE2ZGNjYjBjMzZmMzY3
ZGI0ZjgwHhcNMjQwOTI2MTYwMDUyWhcNMjQwOTI3MTYwMDUyWjAzMTEwLwYDVQQD
EygxNzg5Y2I4NTE0MWFhNzAzZGQ1ZGNjYTFhY2Q0MmI3MDI3ZmY3NWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2+9GLSDurvlDd7irIJUhP6689/QU
yesi4YKH6DXMIrsO+P1ouZ7lRQRTWbZXhl4+OeuB6HT3TtQswsYZVcPWT2ZAXopg
ylubi/6ZJm/t3iNpDHJAJbQIKyDt18NFkAG0GYSJp637HVDPsxYlbU7V2laxPrY+
YiSbU1dxv2FUg70pUeumgR9jMxnt2TN11mNLpTmQZNjuFXP10tSIizRjJZSn9Oim
9CvyMX+AXPuKMnfNABxiUp7OqoPbmQ3IDEBUIyvPcUsdqz5Ll21K0f4gI5img36C
FTwLBO3acZb8MHhEn5QztaaC/ixT6yBaLCFD2jIskKQPcyAI8V44BhUDoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBeJy4UUGqcD3V3MoazUK3An/3XcMB8GA1UdIwQY
MBaAFMlq63Wsu18hIzXqbcyww282fbT4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVdycmRheTdYeUVqTmVwdHpMRERielo5dFBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS82OWE1MWQtOTJhMS00OGFkLWI3ZTct
YzRjODc5YzY3MjRjLzEveVdycmRheTdYeUVqTmVwdHpMRERielo5dFBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS82OWE1MWQtOTJhMS00OGFkLWI3ZTctYzRjODc5YzY3MjRj
LzEveVdycmRheTdYeUVqTmVwdHpMRERielo5dFBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtKdLAE0v
5zKb7G8HBVz1RrtxaMpd88mcThTBVjthSOElEKa5BJUabgptc3CcSedTrTZpEpTO
WQ3Il5p2RZQueSsPYr9FuH/AU9bPoSOldv5Ln1/FLX6Y/fRZjUgx60wgi4h891vR
I2T8+z9xiBIWYc91TMkVAkyJFGXAIJ1p/JFvSH/pqYQ41kCPnVkW7b4stXP29WH1
xzAqHDlnem0z7uszn3F5480KseF247oSXpDhS0gF3hz5kkmHOYEwQ9IW79i2MWyZ
Ipd4RxpaNTjGwm4xbxZh0ulHFgkr4Sfinj12yfHCRuEkycCLU2/Pk5hI+DyKU+5G
waznvj0QebMf9w==
-----END CERTIFICATE-----