Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/917bd9-6d7b-4fde-8a83-a96646d06e18/1/Ift-HrRQvW4uuJDCsl1gel5Cddw.mft
File:                     Ift-HrRQvW4uuJDCsl1gel5Cddw.mft (raw, json)
Hash identifier:          K6X2KEjV2gZfKe5iz2mvrbw/dbOKKUEf5xyE6xyNb4Q=
Subject key identifier:   AE:7A:4B:9C:48:DD:9E:76:36:9F:DF:B6:81:D5:EF:83:60:10:A3:65
Authority key identifier: 21:FB:7E:1E:B4:50:BD:6E:2E:B8:90:C2:B2:5D:60:7A:5E:42:75:DC
Certificate issuer:       /CN=21fb7e1eb450bd6e2eb890c2b25d607a5e4275dc
Certificate serial:       018ACA120E6D43596E5F2EAFD1A0488FB4AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ift-HrRQvW4uuJDCsl1gel5Cddw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/917bd9-6d7b-4fde-8a83-a96646d06e18/1/Ift-HrRQvW4uuJDCsl1gel5Cddw.mft
Manifest number:          0861
Signing time:             Mon 25 Sep 2023 02:01:35 +0000
Manifest this update:     Mon 25 Sep 2023 02:01:35 +0000
Manifest next update:     Tue 26 Sep 2023 02:01:35 +0000
Files and hashes:         1: Ift-HrRQvW4uuJDCsl1gel5Cddw.crl (hash: 53AohSXvTMSNJAgULajo/YYCoxf1v/xuzWPU3mE/A9k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:ca:12:0e:6d:43:59:6e:5f:2e:af:d1:a0:48:8f:b4:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21fb7e1eb450bd6e2eb890c2b25d607a5e4275dc
        Validity
            Not Before: Sep 25 02:01:35 2023 GMT
            Not After : Sep 26 02:01:35 2023 GMT
        Subject: CN=ae7a4b9c48dd9e76369fdfb681d5ef836010a365
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b3:53:24:e5:5c:36:88:99:83:d8:9e:60:df:
                    49:19:22:51:fb:52:98:be:28:82:ad:08:91:6e:6b:
                    c8:9a:64:87:2e:e4:d1:72:31:33:8f:6c:32:0c:25:
                    7a:b1:ef:88:49:af:39:7a:c5:03:20:a9:14:4f:fa:
                    10:64:28:68:f5:3d:e6:66:1b:74:2b:64:75:ac:f4:
                    f3:f3:0c:d2:49:94:74:d4:e8:7b:a7:bd:8c:65:fa:
                    5e:37:46:c6:01:eb:e7:3d:bd:cf:9a:e7:ea:01:80:
                    83:c7:76:78:5a:58:7d:89:fc:6b:86:29:db:8d:0f:
                    be:1a:2e:be:fe:8e:fb:67:a6:5c:49:db:23:07:02:
                    5a:ad:c4:4b:63:f6:d0:33:82:62:80:ee:d7:a8:0b:
                    0d:cc:21:2d:14:3b:ba:ba:48:e4:e2:d5:b1:e5:e9:
                    92:2c:f8:53:96:3f:82:e9:2e:67:48:08:b7:e6:f5:
                    7c:a7:65:25:85:07:7d:2b:fa:c6:8e:41:9a:9b:34:
                    46:3e:fa:77:68:0c:b4:7d:06:92:33:6d:70:a7:10:
                    56:8f:15:7c:89:bf:26:09:67:e3:c9:0d:d5:02:13:
                    85:08:a8:12:ed:90:04:ab:86:d6:64:b8:88:a2:a9:
                    e3:47:d1:77:4e:44:d9:d0:ed:e8:34:ea:ec:c9:b2:
                    1c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:7A:4B:9C:48:DD:9E:76:36:9F:DF:B6:81:D5:EF:83:60:10:A3:65
            X509v3 Authority Key Identifier:
                keyid:21:FB:7E:1E:B4:50:BD:6E:2E:B8:90:C2:B2:5D:60:7A:5E:42:75:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ift-HrRQvW4uuJDCsl1gel5Cddw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/917bd9-6d7b-4fde-8a83-a96646d06e18/1/Ift-HrRQvW4uuJDCsl1gel5Cddw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/917bd9-6d7b-4fde-8a83-a96646d06e18/1/Ift-HrRQvW4uuJDCsl1gel5Cddw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:e1:ff:d0:aa:12:fe:a9:fd:63:c0:43:a6:59:63:9d:21:dc:
         86:28:ca:dd:c5:c0:14:7b:67:d3:8a:bd:04:7e:c3:82:b6:89:
         cf:e1:f9:a3:b7:19:7c:98:32:aa:f9:e4:1f:d8:8a:98:15:f3:
         ed:37:64:db:dc:4f:f6:06:ed:50:0d:13:b3:a3:30:5a:fe:e2:
         eb:22:6a:2a:0e:3e:2d:ae:01:87:06:ef:62:25:f8:c7:f7:a8:
         fc:03:2c:4b:a5:dd:44:a1:bb:c9:27:4d:1e:d1:d2:f1:23:f9:
         ac:e5:33:c3:d4:75:ce:ca:14:53:58:eb:ec:77:9b:3e:ba:5e:
         a9:6b:4a:da:ea:b0:c6:62:90:36:33:d8:d3:68:fd:62:b8:83:
         bb:17:b0:55:24:89:29:e8:13:f4:4e:7f:26:52:c8:ec:6a:71:
         c8:de:98:9d:ce:63:00:4f:a2:e1:2a:82:18:8d:42:83:c7:2e:
         7b:27:da:be:83:a7:04:aa:43:d9:ab:74:7c:9c:91:92:93:08:
         99:df:a6:a4:38:4a:a3:72:95:bf:09:95:23:89:23:55:62:7d:
         a0:50:92:70:b1:0a:60:24:6f:70:2e:b7:aa:68:83:c6:8a:94:
         a0:6e:b9:e8:6b:01:b0:61:8a:04:76:33:a5:f5:51:be:89:98:
         90:73:7c:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYrKEg5tQ1luXy6v0aBIj7StMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxZmI3ZTFlYjQ1MGJkNmUyZWI4OTBjMmIyNWQ2MDdhNWU0
Mjc1ZGMwHhcNMjMwOTI1MDIwMTM1WhcNMjMwOTI2MDIwMTM1WjAzMTEwLwYDVQQD
EyhhZTdhNGI5YzQ4ZGQ5ZTc2MzY5ZmRmYjY4MWQ1ZWY4MzYwMTBhMzY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7NTJOVcNoiZg9ieYN9JGSJR+1KY
viiCrQiRbmvImmSHLuTRcjEzj2wyDCV6se+ISa85esUDIKkUT/oQZCho9T3mZht0
K2R1rPTz8wzSSZR01Oh7p72MZfpeN0bGAevnPb3PmufqAYCDx3Z4Wlh9ifxrhinb
jQ++Gi6+/o77Z6ZcSdsjBwJarcRLY/bQM4JigO7XqAsNzCEtFDu6ukjk4tWx5emS
LPhTlj+C6S5nSAi35vV8p2UlhQd9K/rGjkGamzRGPvp3aAy0fQaSM21wpxBWjxV8
ib8mCWfjyQ3VAhOFCKgS7ZAEq4bWZLiIoqnjR9F3TkTZ0O3oNOrsybIcMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK56S5xI3Z52Np/ftoHV74NgEKNlMB8GA1UdIwQY
MBaAFCH7fh60UL1uLriQwrJdYHpeQnXcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWZ0LUhyUlF2VzR1dUpEQ3NsMWdlbDVDZGR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy85MTdiZDktNmQ3Yi00ZmRlLThhODMt
YTk2NjQ2ZDA2ZTE4LzEvSWZ0LUhyUlF2VzR1dUpEQ3NsMWdlbDVDZGR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy85MTdiZDktNmQ3Yi00ZmRlLThhODMtYTk2NjQ2ZDA2ZTE4
LzEvSWZ0LUhyUlF2VzR1dUpEQ3NsMWdlbDVDZGR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHuH/0KoS
/qn9Y8BDplljnSHchijK3cXAFHtn04q9BH7DgraJz+H5o7cZfJgyqvnkH9iKmBXz
7Tdk29xP9gbtUA0Ts6MwWv7i6yJqKg4+La4BhwbvYiX4x/eo/AMsS6XdRKG7ySdN
HtHS8SP5rOUzw9R1zsoUU1jr7HebPrpeqWtK2uqwxmKQNjPY02j9YriDuxewVSSJ
KegT9E5/JlLI7GpxyN6Ync5jAE+i4SqCGI1Cg8cueyfavoOnBKpD2at0fJyRkpMI
md+mpDhKo3KVvwmVI4kjVWJ9oFCScLEKYCRvcC63qmiDxoqUoG656GsBsGGKBHYz
pfVRvomYkHN8Cg==
-----END CERTIFICATE-----