Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/7142fe-8513-4de6-851e-6a4255674642/1/4qSQ41rZxh_VM04qHoVtgX0XMMI.mft
File:                     4qSQ41rZxh_VM04qHoVtgX0XMMI.mft (raw, json)
Hash identifier:          L3Mnh/g+gHVNHlz9Hs66H3ZYkl3J4R/h0LVynK8m1ns=
Subject key identifier:   C7:79:D0:82:FE:C1:BC:1B:81:D8:05:15:23:2F:A5:2C:E4:96:77:99
Authority key identifier: E2:A4:90:E3:5A:D9:C6:1F:D5:33:4E:2A:1E:85:6D:81:7D:17:30:C2
Certificate issuer:       /CN=e2a490e35ad9c61fd5334e2a1e856d817d1730c2
Certificate serial:       0193FAB074399F2201C50F84F6A489D5508A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4qSQ41rZxh_VM04qHoVtgX0XMMI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/7142fe-8513-4de6-851e-6a4255674642/1/4qSQ41rZxh_VM04qHoVtgX0XMMI.mft
Manifest number:          06D1
Signing time:             Tue 24 Dec 2024 22:01:28 +0000
Manifest this update:     Tue 24 Dec 2024 22:01:28 +0000
Manifest next update:     Wed 25 Dec 2024 22:01:28 +0000
Files and hashes:         1: 4qSQ41rZxh_VM04qHoVtgX0XMMI.crl (hash: vMljeFD8TYuWRd4awVMjyBg7bU9x7mH7GCouljjsa8I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:fa:b0:74:39:9f:22:01:c5:0f:84:f6:a4:89:d5:50:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2a490e35ad9c61fd5334e2a1e856d817d1730c2
        Validity
            Not Before: Dec 24 22:01:28 2024 GMT
            Not After : Dec 25 22:01:28 2024 GMT
        Subject: CN=c779d082fec1bc1b81d80515232fa52ce4967799
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:df:ff:00:c8:02:1d:f9:97:8d:33:08:69:a6:
                    38:b2:a1:c3:a9:73:8f:24:c0:3c:6f:4f:9c:87:d7:
                    9a:78:56:d5:60:50:cb:bf:31:f5:91:d0:3c:1e:dd:
                    cd:50:e6:63:29:c0:f4:85:80:2a:1e:ca:f3:c1:e7:
                    d9:ce:cc:40:5d:76:66:13:15:f8:d7:df:91:61:2b:
                    e1:46:17:a3:ca:0a:29:0f:5b:bd:6f:0f:67:71:4c:
                    0f:21:19:b8:03:6c:2f:18:4a:e2:62:2b:31:32:a4:
                    bb:3f:7e:2f:2f:69:6f:ea:fa:e6:30:fa:7b:d8:ec:
                    b2:50:a2:3f:dd:02:52:58:dc:f7:1f:50:11:fd:e4:
                    21:33:24:2b:ee:49:33:1c:be:7a:7b:7c:bf:c7:d0:
                    49:06:55:49:c2:e0:6d:b1:a9:f5:0b:95:7d:e3:a0:
                    22:f7:d1:b8:7b:d4:53:d4:a4:e3:60:78:d0:bb:b6:
                    3e:13:33:62:23:20:8e:94:99:b9:ae:4c:ce:12:57:
                    d7:ce:fe:06:ba:11:61:c3:df:85:29:b4:ee:3b:56:
                    22:c6:80:33:d0:17:ce:eb:d0:1a:51:0e:1f:f8:a9:
                    f7:51:7f:93:13:f8:ff:0e:21:1d:1c:2b:02:6f:ee:
                    10:e4:a7:45:a0:a4:52:84:ea:24:23:0c:a7:68:77:
                    fd:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:79:D0:82:FE:C1:BC:1B:81:D8:05:15:23:2F:A5:2C:E4:96:77:99
            X509v3 Authority Key Identifier:
                keyid:E2:A4:90:E3:5A:D9:C6:1F:D5:33:4E:2A:1E:85:6D:81:7D:17:30:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4qSQ41rZxh_VM04qHoVtgX0XMMI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/7142fe-8513-4de6-851e-6a4255674642/1/4qSQ41rZxh_VM04qHoVtgX0XMMI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/7142fe-8513-4de6-851e-6a4255674642/1/4qSQ41rZxh_VM04qHoVtgX0XMMI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:94:3e:48:4e:eb:af:61:f2:4d:fa:31:39:ac:c9:71:bb:92:
         f0:ba:ab:c4:ce:e7:1f:5d:0c:c5:9a:16:dc:cb:c0:7d:c2:69:
         60:89:33:f8:e5:8d:61:1f:c6:ad:88:59:72:82:4d:b4:74:bf:
         ee:da:d3:60:e6:3e:db:00:6c:31:3e:d7:94:1c:b2:14:e9:81:
         db:a6:e5:4d:1b:0f:6d:7b:c7:26:b1:4c:dd:3f:0a:42:ab:d3:
         7d:13:28:79:bf:93:82:73:c5:ef:d8:6d:1b:b8:cf:10:f2:31:
         88:5a:2c:6c:05:44:0b:3d:1a:53:b8:c7:cf:1b:2c:3b:6c:93:
         9c:8a:dc:81:37:cd:f7:c5:09:93:c5:c0:b5:bb:6f:2b:76:fc:
         4b:ca:b0:5e:20:9b:4f:4d:0a:72:57:75:ca:74:29:cf:17:b1:
         40:52:94:23:fd:6a:6d:1c:2e:ff:6d:d1:1a:2d:c3:54:f2:85:
         a7:f4:31:02:4b:48:21:8d:b5:6e:8b:67:41:6d:f6:6d:da:20:
         68:67:13:d7:04:b4:26:8e:28:f6:e3:49:09:a2:54:96:9c:98:
         e3:38:bb:73:87:d7:95:c3:cf:e5:96:0e:40:71:47:0b:22:28:
         97:dc:69:14:71:cf:d5:bb:73:2f:1c:83:55:4b:3d:25:43:96:
         d0:e0:1c:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZP6sHQ5nyIBxQ+E9qSJ1VCKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyYTQ5MGUzNWFkOWM2MWZkNTMzNGUyYTFlODU2ZDgxN2Qx
NzMwYzIwHhcNMjQxMjI0MjIwMTI4WhcNMjQxMjI1MjIwMTI4WjAzMTEwLwYDVQQD
EyhjNzc5ZDA4MmZlYzFiYzFiODFkODA1MTUyMzJmYTUyY2U0OTY3Nzk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnd//AMgCHfmXjTMIaaY4sqHDqXOP
JMA8b0+ch9eaeFbVYFDLvzH1kdA8Ht3NUOZjKcD0hYAqHsrzwefZzsxAXXZmExX4
19+RYSvhRhejygopD1u9bw9ncUwPIRm4A2wvGEriYisxMqS7P34vL2lv6vrmMPp7
2OyyUKI/3QJSWNz3H1AR/eQhMyQr7kkzHL56e3y/x9BJBlVJwuBtsan1C5V946Ai
99G4e9RT1KTjYHjQu7Y+EzNiIyCOlJm5rkzOElfXzv4GuhFhw9+FKbTuO1YixoAz
0BfO69AaUQ4f+Kn3UX+TE/j/DiEdHCsCb+4Q5KdFoKRShOokIwynaHf9ZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMd50IL+wbwbgdgFFSMvpSzklneZMB8GA1UdIwQY
MBaAFOKkkONa2cYf1TNOKh6FbYF9FzDCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHFTUTQxclp4aF9WTTA0cUhvVnRnWDBYTU1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi83MTQyZmUtODUxMy00ZGU2LTg1MWUt
NmE0MjU1Njc0NjQyLzEvNHFTUTQxclp4aF9WTTA0cUhvVnRnWDBYTU1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi83MTQyZmUtODUxMy00ZGU2LTg1MWUtNmE0MjU1Njc0NjQy
LzEvNHFTUTQxclp4aF9WTTA0cUhvVnRnWDBYTU1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYpQ+SE7r
r2HyTfoxOazJcbuS8LqrxM7nH10MxZoW3MvAfcJpYIkz+OWNYR/GrYhZcoJNtHS/
7trTYOY+2wBsMT7XlByyFOmB26blTRsPbXvHJrFM3T8KQqvTfRMoeb+TgnPF79ht
G7jPEPIxiFosbAVECz0aU7jHzxssO2yTnIrcgTfN98UJk8XAtbtvK3b8S8qwXiCb
T00Kcld1ynQpzxexQFKUI/1qbRwu/23RGi3DVPKFp/QxAktIIY21botnQW32bdog
aGcT1wS0Jo4o9uNJCaJUlpyY4zi7c4fXlcPP5ZYOQHFHCyIol9xpFHHP1btzLxyD
VUs9JUOW0OAcFg==
-----END CERTIFICATE-----