Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/028fa2-4a3c-4107-aff3-b08dfc118ccc/1/otIJQ2BBB_arGBOenTB1-XwHHOM.mft
File:                     otIJQ2BBB_arGBOenTB1-XwHHOM.mft (raw, json)
Hash identifier:          ALKRrhTMQcSiyJtfPTnWokbmfHdHuCOsnMXZ1cFRZCU=
Subject key identifier:   6E:0E:AC:CF:E6:6F:5E:28:26:2F:B7:F9:79:9B:4B:0E:2D:D4:CA:49
Authority key identifier: A2:D2:09:43:60:41:07:F6:AB:18:13:9E:9D:30:75:F9:7C:07:1C:E3
Certificate issuer:       /CN=a2d20943604107f6ab18139e9d3075f97c071ce3
Certificate serial:       0192AE8608AE45DDB6CC5A3E452E26917D91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/otIJQ2BBB_arGBOenTB1-XwHHOM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/028fa2-4a3c-4107-aff3-b08dfc118ccc/1/otIJQ2BBB_arGBOenTB1-XwHHOM.mft
Manifest number:          03A4
Signing time:             Mon 21 Oct 2024 10:01:12 +0000
Manifest this update:     Mon 21 Oct 2024 10:01:12 +0000
Manifest next update:     Tue 22 Oct 2024 10:01:12 +0000
Files and hashes:         1: 4IhxN6dETtHZkB0lPspu0TztDOE.roa (hash: +wIiw37yVz5vQlP59JLEZorTG3qlEhqiR2+rSllq+s4=)
                          2: otIJQ2BBB_arGBOenTB1-XwHHOM.crl (hash: 2vjUmVgCvdWzk0xqv/gyA+rIJmQ/njmUCH5w9zC9Sc4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:ae:86:08:ae:45:dd:b6:cc:5a:3e:45:2e:26:91:7d:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2d20943604107f6ab18139e9d3075f97c071ce3
        Validity
            Not Before: Oct 21 10:01:12 2024 GMT
            Not After : Oct 22 10:01:12 2024 GMT
        Subject: CN=6e0eaccfe66f5e28262fb7f9799b4b0e2dd4ca49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:2c:70:6a:3a:35:1d:3d:f8:6e:be:15:54:31:
                    f1:96:dc:b2:28:b7:ef:ad:33:e7:78:f7:ee:23:ca:
                    04:f3:58:52:8b:cc:d5:51:b9:b5:5e:b9:11:13:a8:
                    7d:6b:57:5c:38:ec:d1:51:d2:30:e3:39:35:aa:1d:
                    bb:8d:a9:01:56:ba:42:97:e7:b3:1d:28:f5:4f:e5:
                    73:20:e9:78:80:2d:71:8d:5f:6e:d8:fb:4f:1b:52:
                    43:07:88:26:95:a2:98:16:1d:d4:c5:35:f5:16:36:
                    38:86:cb:68:b4:4f:7e:c0:6e:47:5b:ae:06:ef:9d:
                    5a:ab:3a:d1:a7:64:cc:dd:17:81:dd:e5:fe:ac:7a:
                    cf:fe:67:7e:da:ea:cd:b4:1f:a2:1c:e2:62:d6:87:
                    86:d8:cb:8c:f4:9e:22:2f:1f:ec:d7:ad:31:02:bd:
                    a8:53:08:f8:93:72:1c:b7:c7:85:3c:56:92:7a:e7:
                    b0:72:af:e7:4e:45:74:97:93:74:bc:30:9a:4a:6e:
                    53:36:ab:a8:e6:84:51:b3:24:75:f5:a5:a4:4a:56:
                    0e:0e:c2:1f:42:ef:80:69:62:d7:f6:69:c1:95:aa:
                    0d:73:8e:63:a0:3f:98:0d:b0:f2:f0:cf:40:0e:4b:
                    c0:77:9d:e3:75:bd:67:f3:90:f1:e9:06:e2:20:7b:
                    dc:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:0E:AC:CF:E6:6F:5E:28:26:2F:B7:F9:79:9B:4B:0E:2D:D4:CA:49
            X509v3 Authority Key Identifier:
                keyid:A2:D2:09:43:60:41:07:F6:AB:18:13:9E:9D:30:75:F9:7C:07:1C:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otIJQ2BBB_arGBOenTB1-XwHHOM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/028fa2-4a3c-4107-aff3-b08dfc118ccc/1/otIJQ2BBB_arGBOenTB1-XwHHOM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/028fa2-4a3c-4107-aff3-b08dfc118ccc/1/otIJQ2BBB_arGBOenTB1-XwHHOM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:c9:27:e9:8f:11:23:9d:0f:04:eb:69:0c:5e:bc:90:bf:0c:
         10:04:6f:22:f4:d3:d4:ad:b9:f6:61:2a:63:6f:74:5d:a7:51:
         0a:40:63:2b:25:f5:bb:ea:bd:9f:5f:ca:de:e2:9d:b0:fd:fc:
         b2:1c:2e:30:94:a0:77:1a:2a:1e:93:c9:ea:c8:8c:8a:40:9d:
         2c:27:e1:e2:94:38:3b:f0:54:12:a0:57:d7:77:a0:f5:b9:46:
         fa:1c:57:89:b9:3a:51:af:3f:7c:38:8d:c7:e7:ae:72:16:e7:
         07:83:aa:09:18:f1:7a:5f:60:13:4b:ce:2e:fd:f6:f2:02:bb:
         79:29:8d:2f:c8:b6:04:e4:5e:4d:23:77:0a:27:e4:32:8d:af:
         29:ee:76:13:2f:28:ee:4b:6d:13:7c:56:bc:5f:23:fc:de:da:
         e0:4c:65:ed:7a:bc:11:1f:ff:ea:f7:24:53:8a:0e:77:03:20:
         c2:11:01:3d:11:29:f6:13:f9:9e:14:96:41:7f:69:89:c3:fa:
         b5:ee:49:f6:e2:d6:7a:18:ef:b3:17:da:49:33:b2:06:73:12:
         b2:7c:47:b0:8d:85:76:c0:0c:25:10:05:02:cb:64:df:b2:bf:
         94:d2:fd:f0:95:3c:d9:73:02:a1:0b:9a:6c:e4:01:22:9f:36:
         f9:6b:4a:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZKuhgiuRd22zFo+RS4mkX2RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyZDIwOTQzNjA0MTA3ZjZhYjE4MTM5ZTlkMzA3NWY5N2Mw
NzFjZTMwHhcNMjQxMDIxMTAwMTEyWhcNMjQxMDIyMTAwMTEyWjAzMTEwLwYDVQQD
Eyg2ZTBlYWNjZmU2NmY1ZTI4MjYyZmI3Zjk3OTliNGIwZTJkZDRjYTQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1yxwajo1HT34br4VVDHxltyyKLfv
rTPnePfuI8oE81hSi8zVUbm1XrkRE6h9a1dcOOzRUdIw4zk1qh27jakBVrpCl+ez
HSj1T+VzIOl4gC1xjV9u2PtPG1JDB4gmlaKYFh3UxTX1FjY4hstotE9+wG5HW64G
751aqzrRp2TM3ReB3eX+rHrP/md+2urNtB+iHOJi1oeG2MuM9J4iLx/s160xAr2o
Uwj4k3Ict8eFPFaSeuewcq/nTkV0l5N0vDCaSm5TNquo5oRRsyR19aWkSlYODsIf
Qu+AaWLX9mnBlaoNc45joD+YDbDy8M9ADkvAd53jdb1n85Dx6QbiIHvcKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG4OrM/mb14oJi+3+XmbSw4t1MpJMB8GA1UdIwQY
MBaAFKLSCUNgQQf2qxgTnp0wdfl8BxzjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3RJSlEyQkJCX2FyR0JPZW5UQjEtWHdISE9NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS8wMjhmYTItNGEzYy00MTA3LWFmZjMt
YjA4ZGZjMTE4Y2NjLzEvb3RJSlEyQkJCX2FyR0JPZW5UQjEtWHdISE9NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS8wMjhmYTItNGEzYy00MTA3LWFmZjMtYjA4ZGZjMTE4Y2Nj
LzEvb3RJSlEyQkJCX2FyR0JPZW5UQjEtWHdISE9NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHskn6Y8R
I50PBOtpDF68kL8MEARvIvTT1K259mEqY290XadRCkBjKyX1u+q9n1/K3uKdsP38
shwuMJSgdxoqHpPJ6siMikCdLCfh4pQ4O/BUEqBX13eg9blG+hxXibk6Ua8/fDiN
x+euchbnB4OqCRjxel9gE0vOLv328gK7eSmNL8i2BOReTSN3CifkMo2vKe52Ey8o
7kttE3xWvF8j/N7a4Exl7Xq8ER//6vckU4oOdwMgwhEBPREp9hP5nhSWQX9picP6
te5J9uLWehjvsxfaSTOyBnMSsnxHsI2FdsAMJRAFAstk37K/lNL98JU82XMCoQua
bOQBIp82+WtKDQ==
-----END CERTIFICATE-----