Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/801735-97c5-467e-9bc5-9e9da9edf258/1/qzOcrtI-GP4Ww9CwkqKAgVx_fMo.mft
File:                     qzOcrtI-GP4Ww9CwkqKAgVx_fMo.mft (raw, json)
Hash identifier:          TAXFtJplMx/pZDG59pAuaQwFUf6piFU6z5RIotkwrdQ=
Subject key identifier:   DA:72:16:1F:80:04:3C:34:DF:FE:02:03:E9:05:7A:17:6D:86:78:CD
Authority key identifier: AB:33:9C:AE:D2:3E:18:FE:16:C3:D0:B0:92:A2:80:81:5C:7F:7C:CA
Certificate issuer:       /CN=ab339caed23e18fe16c3d0b092a280815c7f7cca
Certificate serial:       018C78EFB54B77A52FDE9907808A4D2C6333
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qzOcrtI-GP4Ww9CwkqKAgVx_fMo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/801735-97c5-467e-9bc5-9e9da9edf258/1/qzOcrtI-GP4Ww9CwkqKAgVx_fMo.mft
Manifest number:          0327
Signing time:             Sun 17 Dec 2023 18:00:24 +0000
Manifest this update:     Sun 17 Dec 2023 18:00:24 +0000
Manifest next update:     Mon 18 Dec 2023 18:00:24 +0000
Files and hashes:         1: qzOcrtI-GP4Ww9CwkqKAgVx_fMo.crl (hash: VwChvSL/FDPEcrfjuro8eT6mOcW3kH/FhKrJQgMBVHA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:78:ef:b5:4b:77:a5:2f:de:99:07:80:8a:4d:2c:63:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab339caed23e18fe16c3d0b092a280815c7f7cca
        Validity
            Not Before: Dec 17 18:00:24 2023 GMT
            Not After : Dec 18 18:00:24 2023 GMT
        Subject: CN=da72161f80043c34dffe0203e9057a176d8678cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:b2:a3:d0:a3:d3:32:55:dd:4b:94:23:fe:1d:
                    4e:f3:05:58:84:f4:45:dc:6c:15:61:b1:00:6f:ef:
                    ff:99:ed:72:26:8e:93:c7:d9:31:72:ea:c4:17:43:
                    bd:b2:e1:08:ab:69:a8:12:b7:49:47:86:8a:e8:3e:
                    11:32:76:30:13:78:6a:96:6f:33:d2:df:a8:a7:c1:
                    f1:f9:f0:09:16:7e:32:bd:95:4e:2e:69:b2:11:0d:
                    ea:8c:6d:40:a3:00:60:b5:c7:b2:55:3d:73:23:15:
                    23:17:0f:50:9e:32:35:42:9a:d3:7f:f0:4d:7d:0a:
                    f0:0b:8e:d1:8b:cd:24:07:54:15:02:fa:7b:9c:27:
                    11:a9:a5:22:0c:16:b7:ca:6d:dd:7e:e3:a7:c5:e4:
                    b5:89:1f:d2:7a:42:14:50:24:40:1f:a0:5c:63:e1:
                    e4:69:6b:e8:e7:36:7c:16:84:d2:b6:7e:ff:08:dd:
                    af:ec:58:38:4d:08:da:70:9a:dd:b2:82:2b:ea:e2:
                    61:7e:e4:7b:70:4d:b8:da:20:b6:3f:d5:a0:bb:de:
                    d9:e2:c2:03:96:9a:a0:34:89:93:19:15:19:a6:8a:
                    1d:d8:11:cf:b6:d8:a6:fc:08:8e:63:ce:a1:9d:a4:
                    77:b4:45:7f:84:77:7a:b7:5c:79:6a:0f:f9:0c:42:
                    fc:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:72:16:1F:80:04:3C:34:DF:FE:02:03:E9:05:7A:17:6D:86:78:CD
            X509v3 Authority Key Identifier:
                keyid:AB:33:9C:AE:D2:3E:18:FE:16:C3:D0:B0:92:A2:80:81:5C:7F:7C:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qzOcrtI-GP4Ww9CwkqKAgVx_fMo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/801735-97c5-467e-9bc5-9e9da9edf258/1/qzOcrtI-GP4Ww9CwkqKAgVx_fMo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/801735-97c5-467e-9bc5-9e9da9edf258/1/qzOcrtI-GP4Ww9CwkqKAgVx_fMo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:ae:d3:a1:dd:21:fd:64:a5:3a:00:bb:3c:f7:66:3c:9b:66:
         24:7a:3c:56:2c:8f:64:56:3b:86:0b:11:2f:14:4b:27:f2:80:
         db:82:63:fd:84:ba:36:d8:60:c9:be:95:d1:d4:4b:ac:14:10:
         7f:24:73:8f:db:bc:ef:4a:1c:8d:ef:e7:09:ce:6b:5d:c9:b2:
         f0:82:1d:61:c5:cf:f1:e9:78:d8:a3:80:7d:c4:18:3c:2a:41:
         27:37:8b:e2:1f:49:fb:27:1d:6c:f7:5c:89:3a:12:38:00:67:
         66:5a:23:c6:ef:f3:03:23:2e:e5:40:17:f4:52:d2:ee:58:06:
         1a:96:4d:13:39:83:2f:85:92:8d:83:9a:73:26:89:eb:eb:af:
         51:a8:10:d2:2b:83:10:e4:02:eb:78:62:0c:f7:83:71:f9:8a:
         0a:61:82:c5:24:00:c0:e5:9e:48:5a:63:92:de:21:fc:f5:3f:
         91:06:38:00:d4:d2:d5:c8:40:28:60:8f:44:05:6c:f5:0f:4e:
         80:73:0a:2b:c9:17:9e:fa:e1:68:b1:ac:14:a2:2f:6a:81:c1:
         48:d2:3d:f0:22:f4:e1:e5:8e:96:4c:07:48:66:a7:b1:a6:a8:
         ec:34:dd:2a:a5:fe:cc:42:7b:33:e5:cd:bc:82:36:10:70:62:
         d7:55:f8:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYx477VLd6Uv3pkHgIpNLGMzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiMzM5Y2FlZDIzZTE4ZmUxNmMzZDBiMDkyYTI4MDgxNWM3
ZjdjY2EwHhcNMjMxMjE3MTgwMDI0WhcNMjMxMjE4MTgwMDI0WjAzMTEwLwYDVQQD
EyhkYTcyMTYxZjgwMDQzYzM0ZGZmZTAyMDNlOTA1N2ExNzZkODY3OGNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgrKj0KPTMlXdS5Qj/h1O8wVYhPRF
3GwVYbEAb+//me1yJo6Tx9kxcurEF0O9suEIq2moErdJR4aK6D4RMnYwE3hqlm8z
0t+op8Hx+fAJFn4yvZVOLmmyEQ3qjG1AowBgtceyVT1zIxUjFw9QnjI1QprTf/BN
fQrwC47Ri80kB1QVAvp7nCcRqaUiDBa3ym3dfuOnxeS1iR/SekIUUCRAH6BcY+Hk
aWvo5zZ8FoTStn7/CN2v7Fg4TQjacJrdsoIr6uJhfuR7cE242iC2P9Wgu97Z4sID
lpqgNImTGRUZpood2BHPttim/AiOY86hnaR3tEV/hHd6t1x5ag/5DEL82wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNpyFh+ABDw03/4CA+kFehdthnjNMB8GA1UdIwQY
MBaAFKsznK7SPhj+FsPQsJKigIFcf3zKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXpPY3J0SS1HUDRXdzlDd2txS0FnVnhfZk1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84MDE3MzUtOTdjNS00NjdlLTliYzUt
OWU5ZGE5ZWRmMjU4LzEvcXpPY3J0SS1HUDRXdzlDd2txS0FnVnhfZk1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy84MDE3MzUtOTdjNS00NjdlLTliYzUtOWU5ZGE5ZWRmMjU4
LzEvcXpPY3J0SS1HUDRXdzlDd2txS0FnVnhfZk1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFq7Tod0h
/WSlOgC7PPdmPJtmJHo8ViyPZFY7hgsRLxRLJ/KA24Jj/YS6Nthgyb6V0dRLrBQQ
fyRzj9u870ocje/nCc5rXcmy8IIdYcXP8el42KOAfcQYPCpBJzeL4h9J+ycdbPdc
iToSOABnZlojxu/zAyMu5UAX9FLS7lgGGpZNEzmDL4WSjYOacyaJ6+uvUagQ0iuD
EOQC63hiDPeDcfmKCmGCxSQAwOWeSFpjkt4h/PU/kQY4ANTS1chAKGCPRAVs9Q9O
gHMKK8kXnvrhaLGsFKIvaoHBSNI98CL04eWOlkwHSGansaao7DTdKqX+zEJ7M+XN
vII2EHBi11X4Rw==
-----END CERTIFICATE-----