Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/1f618f-0353-4d07-a10c-e12c4881fcb2/1/cL0cDqfcDmi5jOvAfX-_gH7-nRo.mft
File:                     cL0cDqfcDmi5jOvAfX-_gH7-nRo.mft (raw, json)
Hash identifier:          h0CoDb1XrhMq060VRLX09gsh8NcCBFR9Bk1N5Wqk6+0=
Subject key identifier:   02:34:58:8A:E4:07:39:BA:12:E9:65:F5:4D:6D:99:06:BA:AA:47:CB
Authority key identifier: 70:BD:1C:0E:A7:DC:0E:68:B9:8C:EB:C0:7D:7F:BF:80:7E:FE:9D:1A
Certificate issuer:       /CN=70bd1c0ea7dc0e68b98cebc07d7fbf807efe9d1a
Certificate serial:       01922F11EA763BDEE6918BBAD39E03A6182F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cL0cDqfcDmi5jOvAfX-_gH7-nRo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/1f618f-0353-4d07-a10c-e12c4881fcb2/1/cL0cDqfcDmi5jOvAfX-_gH7-nRo.mft
Manifest number:          0713
Signing time:             Thu 26 Sep 2024 16:02:36 +0000
Manifest this update:     Thu 26 Sep 2024 16:02:36 +0000
Manifest next update:     Fri 27 Sep 2024 16:02:36 +0000
Files and hashes:         1: 0Kk0oWTRglInPcFpkMq6wjVZJTQ.roa (hash: 4G6qZVQqNxTVS31fVfi3l+kTeo/oGQnmwLVWvMyJxx4=)
                          2: cL0cDqfcDmi5jOvAfX-_gH7-nRo.crl (hash: s40THN0hYThPxgfG0+6GlnON7k10BhkSQnCLeGhTH8I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:2f:11:ea:76:3b:de:e6:91:8b:ba:d3:9e:03:a6:18:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70bd1c0ea7dc0e68b98cebc07d7fbf807efe9d1a
        Validity
            Not Before: Sep 26 16:02:36 2024 GMT
            Not After : Sep 27 16:02:36 2024 GMT
        Subject: CN=0234588ae40739ba12e965f54d6d9906baaa47cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:df:d5:a2:0a:30:70:7d:9b:36:5b:18:e3:0c:
                    01:fb:54:80:ac:2c:8c:04:83:7c:54:c5:d4:dc:f9:
                    8f:e5:22:ff:55:51:d7:c0:e5:a7:26:00:d2:f1:d8:
                    9f:6c:56:1b:e6:df:22:c2:53:d9:5e:78:7b:91:04:
                    f6:2c:41:a9:53:2d:d7:2f:39:01:10:7d:24:72:d8:
                    fe:14:76:0d:f3:26:79:28:db:12:c5:a7:e9:e6:c2:
                    d3:56:d7:be:ba:70:63:78:98:0c:87:4f:c8:7d:19:
                    43:9b:cd:30:da:52:9a:d9:a2:b0:40:95:0f:58:b4:
                    20:05:40:4e:92:71:38:aa:ca:0a:d8:6b:37:1a:22:
                    37:81:bb:3b:0c:a8:07:ca:6c:61:a0:d4:9d:ef:66:
                    e8:c5:dc:03:73:a1:f3:18:a2:d3:04:ff:ea:c1:ec:
                    40:6d:5b:18:e9:3c:ff:8d:2f:fc:fa:49:e4:21:02:
                    72:ee:d5:2e:d8:4c:25:ee:39:d1:7f:28:8e:9f:98:
                    94:31:13:a3:94:51:87:14:d0:37:54:28:2c:97:d0:
                    7b:4b:c0:1a:92:7e:f3:29:e8:11:7c:30:30:29:9e:
                    a7:7b:34:55:31:53:b4:5d:34:cd:31:a2:a6:a4:b9:
                    27:43:34:e3:61:20:81:f1:18:c6:ad:8d:be:72:e0:
                    e8:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:34:58:8A:E4:07:39:BA:12:E9:65:F5:4D:6D:99:06:BA:AA:47:CB
            X509v3 Authority Key Identifier:
                keyid:70:BD:1C:0E:A7:DC:0E:68:B9:8C:EB:C0:7D:7F:BF:80:7E:FE:9D:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cL0cDqfcDmi5jOvAfX-_gH7-nRo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/1f618f-0353-4d07-a10c-e12c4881fcb2/1/cL0cDqfcDmi5jOvAfX-_gH7-nRo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/1f618f-0353-4d07-a10c-e12c4881fcb2/1/cL0cDqfcDmi5jOvAfX-_gH7-nRo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:78:73:3a:b5:0b:ea:63:39:46:34:6b:1b:b0:48:26:0f:9d:
         fb:49:72:81:9e:5e:8b:29:ee:ed:83:a8:13:7c:c8:50:3b:e4:
         4b:ce:bd:c2:fd:0f:6f:c5:9e:01:e8:ef:5f:8c:c9:fe:d3:c8:
         ef:80:71:e1:94:5b:6d:6d:0f:80:c8:db:2c:dc:9d:6e:19:d2:
         1a:56:f5:bf:e9:ee:e9:64:d1:e5:21:f0:af:bf:02:41:5c:b8:
         7b:b7:d0:96:ec:d3:90:13:b2:22:6c:a1:6a:55:f2:41:29:74:
         61:06:d9:2d:5c:02:ab:15:e3:65:d6:2b:c9:03:c3:a8:61:d3:
         93:fc:ec:9b:10:e4:d6:dc:6f:d0:a3:c4:ac:ef:ea:2d:bf:2b:
         f7:06:2a:ba:ee:3b:03:6f:07:01:48:20:d7:51:19:55:21:44:
         11:21:16:c3:6a:11:aa:27:1f:81:a0:fe:d2:a1:6d:bb:bc:e7:
         77:1a:1c:d1:cd:76:37:c1:7e:66:28:3a:12:78:3f:4e:a6:a4:
         24:37:26:d7:cd:89:b4:85:67:a1:cd:7b:9c:ae:f7:a6:68:19:
         09:04:b0:5a:04:16:af:f2:28:82:20:1b:37:b1:6c:98:36:5c:
         26:e1:91:2f:e1:1e:02:64:67:4e:ae:e2:06:d5:d8:86:7a:53:
         b2:f8:2c:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZIvEep2O97mkYu6054DphgvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwYmQxYzBlYTdkYzBlNjhiOThjZWJjMDdkN2ZiZjgwN2Vm
ZTlkMWEwHhcNMjQwOTI2MTYwMjM2WhcNMjQwOTI3MTYwMjM2WjAzMTEwLwYDVQQD
EygwMjM0NTg4YWU0MDczOWJhMTJlOTY1ZjU0ZDZkOTkwNmJhYWE0N2NiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwN/VogowcH2bNlsY4wwB+1SArCyM
BIN8VMXU3PmP5SL/VVHXwOWnJgDS8difbFYb5t8iwlPZXnh7kQT2LEGpUy3XLzkB
EH0kctj+FHYN8yZ5KNsSxafp5sLTVte+unBjeJgMh0/IfRlDm80w2lKa2aKwQJUP
WLQgBUBOknE4qsoK2Gs3GiI3gbs7DKgHymxhoNSd72boxdwDc6HzGKLTBP/qwexA
bVsY6Tz/jS/8+knkIQJy7tUu2Ewl7jnRfyiOn5iUMROjlFGHFNA3VCgsl9B7S8Aa
kn7zKegRfDAwKZ6nezRVMVO0XTTNMaKmpLknQzTjYSCB8RjGrY2+cuDohwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAI0WIrkBzm6Eull9U1tmQa6qkfLMB8GA1UdIwQY
MBaAFHC9HA6n3A5ouYzrwH1/v4B+/p0aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0wwY0RxZmNEbWk1ak92QWZYLV9nSDctblJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC8xZjYxOGYtMDM1My00ZDA3LWExMGMt
ZTEyYzQ4ODFmY2IyLzEvY0wwY0RxZmNEbWk1ak92QWZYLV9nSDctblJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC8xZjYxOGYtMDM1My00ZDA3LWExMGMtZTEyYzQ4ODFmY2Iy
LzEvY0wwY0RxZmNEbWk1ak92QWZYLV9nSDctblJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1HhzOrUL
6mM5RjRrG7BIJg+d+0lygZ5eiynu7YOoE3zIUDvkS869wv0Pb8WeAejvX4zJ/tPI
74Bx4ZRbbW0PgMjbLNydbhnSGlb1v+nu6WTR5SHwr78CQVy4e7fQluzTkBOyImyh
alXyQSl0YQbZLVwCqxXjZdYryQPDqGHTk/zsmxDk1txv0KPErO/qLb8r9wYquu47
A28HAUgg11EZVSFEESEWw2oRqicfgaD+0qFtu7zndxoc0c12N8F+Zig6Eng/Tqak
JDcm182JtIVnoc17nK73pmgZCQSwWgQWr/IogiAbN7FsmDZcJuGRL+EeAmRnTq7i
BtXYhnpTsvgsmw==
-----END CERTIFICATE-----