Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/6e4ecc-ad79-4603-84c5-b64e61e280ab/1/C9q6hz7hi-VHvZNZQ8B5jdz3CTU.mft
File:                     C9q6hz7hi-VHvZNZQ8B5jdz3CTU.mft (raw, json)
Hash identifier:          BrPkmMpw11ZoQ6vnxdY0WHpKrOFKTorxrai8rXws7kg=
Subject key identifier:   15:0F:66:1E:8F:83:8E:D9:9F:71:90:06:A9:71:78:B4:DB:4D:64:59
Authority key identifier: 0B:DA:BA:87:3E:E1:8B:E5:47:BD:93:59:43:C0:79:8D:DC:F7:09:35
Certificate issuer:       /CN=0bdaba873ee18be547bd935943c0798ddcf70935
Certificate serial:       018E3554B17011B7439EA6A2FE6D90397014
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C9q6hz7hi-VHvZNZQ8B5jdz3CTU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/6e4ecc-ad79-4603-84c5-b64e61e280ab/1/C9q6hz7hi-VHvZNZQ8B5jdz3CTU.mft
Manifest number:          0956
Signing time:             Wed 13 Mar 2024 01:02:06 +0000
Manifest this update:     Wed 13 Mar 2024 01:02:06 +0000
Manifest next update:     Thu 14 Mar 2024 01:02:06 +0000
Files and hashes:         1: C9q6hz7hi-VHvZNZQ8B5jdz3CTU.crl (hash: J/h62oey/liw591XkM1olqkBYNHOxin0RV8GBunbhS8=)
                          2: it39_g-FyH5gKskITWNmlQskR_c.roa (hash: vP6yQPmsaGycw6J2wQYmt6+SAXmMIA+ozuRZq/VDGpU=)
                          3: lpRrsalf_MNIyna6hqO6KqA9V2M.roa (hash: 4xQqS00iBxuPJZoLIO1XX3SqrNzwwF6bzrLU7cEjTlQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:35:54:b1:70:11:b7:43:9e:a6:a2:fe:6d:90:39:70:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bdaba873ee18be547bd935943c0798ddcf70935
        Validity
            Not Before: Mar 13 01:02:06 2024 GMT
            Not After : Mar 14 01:02:06 2024 GMT
        Subject: CN=150f661e8f838ed99f719006a97178b4db4d6459
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:6a:6a:6e:9f:d9:59:b3:74:48:bc:2e:97:17:
                    b6:df:f9:3d:45:16:69:b1:c8:48:ea:1d:d0:e9:3b:
                    20:20:e9:20:2b:d7:1e:e5:b1:30:fd:63:a0:e0:1d:
                    53:6a:61:83:bf:25:8c:4b:6b:e7:19:1c:9b:bd:3f:
                    cd:bc:57:0e:ef:f3:85:65:19:f3:60:6f:39:b1:c8:
                    3e:03:04:eb:03:af:7c:5d:e4:a9:73:1c:da:79:79:
                    33:63:42:89:1c:5d:4c:66:25:d7:ad:2c:5e:c4:1e:
                    d7:21:6a:ff:c0:61:a0:3b:f5:61:fc:0d:11:71:49:
                    ff:f3:02:48:6e:0c:eb:42:69:00:a5:44:37:95:65:
                    ca:06:8b:e6:14:4b:72:f0:48:d1:e7:ee:96:7c:78:
                    fa:24:b7:0c:27:5b:96:d8:86:29:f9:1d:d3:d3:28:
                    7f:65:4e:e6:44:fe:c0:0b:7a:6d:9d:9e:0f:73:8e:
                    c6:9c:46:a9:31:cd:c2:15:2e:e5:c0:1b:eb:d3:5b:
                    6d:38:95:89:47:53:fa:54:dd:d7:8a:2b:46:d9:0a:
                    30:46:89:79:43:54:6a:db:c3:6c:9e:29:f0:e8:d3:
                    4d:1f:5a:05:14:67:92:1a:86:54:ca:77:f9:5d:ba:
                    9d:bd:77:3a:3a:e3:e7:22:8e:84:f1:c5:03:f4:fd:
                    db:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:0F:66:1E:8F:83:8E:D9:9F:71:90:06:A9:71:78:B4:DB:4D:64:59
            X509v3 Authority Key Identifier:
                keyid:0B:DA:BA:87:3E:E1:8B:E5:47:BD:93:59:43:C0:79:8D:DC:F7:09:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C9q6hz7hi-VHvZNZQ8B5jdz3CTU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/6e4ecc-ad79-4603-84c5-b64e61e280ab/1/C9q6hz7hi-VHvZNZQ8B5jdz3CTU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/6e4ecc-ad79-4603-84c5-b64e61e280ab/1/C9q6hz7hi-VHvZNZQ8B5jdz3CTU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:88:33:13:72:cf:7b:82:f7:37:bc:e4:46:c6:08:ef:c7:97:
         c3:06:61:cf:38:39:2e:c2:4b:3a:c4:4e:47:8d:f0:a4:c5:95:
         7b:d4:ae:29:36:8c:01:4b:20:43:2c:d9:37:88:24:6c:24:41:
         aa:d7:28:4f:cd:be:7f:4c:33:c9:4b:a7:ca:be:25:31:85:4a:
         ee:e9:3e:75:f0:1a:ac:e0:f3:40:a9:13:90:1b:dc:86:e9:b7:
         ca:8e:b0:db:24:43:44:0a:6d:85:13:99:3f:7c:05:80:d5:00:
         72:30:7e:4d:90:1e:59:80:a4:89:ca:76:bc:10:11:b4:cb:f4:
         58:6a:fe:5a:e5:12:1c:84:e5:87:d2:d7:89:61:fe:7b:fb:62:
         28:0f:b0:78:15:46:d6:ab:cf:e8:ea:39:dd:28:0b:3f:87:a6:
         5d:a2:3d:23:76:1a:5f:ec:75:20:6f:74:f1:96:4b:f8:38:41:
         f2:56:13:44:9a:5c:36:c2:81:84:d2:bb:ac:1f:7f:49:9e:7c:
         e3:2d:e3:db:53:20:fc:12:01:7e:33:f7:66:08:71:98:d9:95:
         51:01:ae:c8:03:fe:30:cd:68:95:62:90:8c:07:e0:e7:52:c0:
         da:b9:72:b6:e4:83:bb:bf:ef:4f:fb:c6:e6:b2:88:fd:06:e6:
         bf:1a:f6:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY41VLFwEbdDnqai/m2QOXAUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiZGFiYTg3M2VlMThiZTU0N2JkOTM1OTQzYzA3OThkZGNm
NzA5MzUwHhcNMjQwMzEzMDEwMjA2WhcNMjQwMzE0MDEwMjA2WjAzMTEwLwYDVQQD
EygxNTBmNjYxZThmODM4ZWQ5OWY3MTkwMDZhOTcxNzhiNGRiNGQ2NDU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWpqbp/ZWbN0SLwulxe23/k9RRZp
schI6h3Q6TsgIOkgK9ce5bEw/WOg4B1TamGDvyWMS2vnGRybvT/NvFcO7/OFZRnz
YG85scg+AwTrA698XeSpcxzaeXkzY0KJHF1MZiXXrSxexB7XIWr/wGGgO/Vh/A0R
cUn/8wJIbgzrQmkApUQ3lWXKBovmFEty8EjR5+6WfHj6JLcMJ1uW2IYp+R3T0yh/
ZU7mRP7AC3ptnZ4Pc47GnEapMc3CFS7lwBvr01ttOJWJR1P6VN3XiitG2QowRol5
Q1Rq28Nsninw6NNNH1oFFGeSGoZUynf5XbqdvXc6OuPnIo6E8cUD9P3bmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBUPZh6Pg47Zn3GQBqlxeLTbTWRZMB8GA1UdIwQY
MBaAFAvauoc+4YvlR72TWUPAeY3c9wk1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzlxNmh6N2hpLVZIdlpOWlE4QjVqZHozQ1RVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi82ZTRlY2MtYWQ3OS00NjAzLTg0YzUt
YjY0ZTYxZTI4MGFiLzEvQzlxNmh6N2hpLVZIdlpOWlE4QjVqZHozQ1RVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi82ZTRlY2MtYWQ3OS00NjAzLTg0YzUtYjY0ZTYxZTI4MGFi
LzEvQzlxNmh6N2hpLVZIdlpOWlE4QjVqZHozQ1RVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaYgzE3LP
e4L3N7zkRsYI78eXwwZhzzg5LsJLOsROR43wpMWVe9SuKTaMAUsgQyzZN4gkbCRB
qtcoT82+f0wzyUunyr4lMYVK7uk+dfAarODzQKkTkBvchum3yo6w2yRDRApthROZ
P3wFgNUAcjB+TZAeWYCkicp2vBARtMv0WGr+WuUSHITlh9LXiWH+e/tiKA+weBVG
1qvP6Oo53SgLP4emXaI9I3YaX+x1IG908ZZL+DhB8lYTRJpcNsKBhNK7rB9/SZ58
4y3j21Mg/BIBfjP3ZghxmNmVUQGuyAP+MM1olWKQjAfg51LA2rlytuSDu7/vT/vG
5rKI/Qbmvxr2wA==
-----END CERTIFICATE-----