Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/062a94-cf27-4a87-b000-b63bb8b05292/1/MTySvjSc_VOvpeyqCQ-cfpXN0cc.mft
File:                     MTySvjSc_VOvpeyqCQ-cfpXN0cc.mft (raw, json)
Hash identifier:          qgBsHoQp/nNIgc4Gpqg8hvjlRWibOdwHKt3Qf5EQkRs=
Subject key identifier:   83:15:31:A2:00:84:59:B4:A5:49:AA:36:56:AD:86:EF:58:DC:F5:62
Authority key identifier: 31:3C:92:BE:34:9C:FD:53:AF:A5:EC:AA:09:0F:9C:7E:95:CD:D1:C7
Certificate issuer:       /CN=313c92be349cfd53afa5ecaa090f9c7e95cdd1c7
Certificate serial:       0194832865243B9F711E7BF17781933EEE88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MTySvjSc_VOvpeyqCQ-cfpXN0cc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/062a94-cf27-4a87-b000-b63bb8b05292/1/MTySvjSc_VOvpeyqCQ-cfpXN0cc.mft
Manifest number:          0D3E
Signing time:             Mon 20 Jan 2025 10:00:50 +0000
Manifest this update:     Mon 20 Jan 2025 10:00:50 +0000
Manifest next update:     Tue 21 Jan 2025 10:00:50 +0000
Files and hashes:         1: MTySvjSc_VOvpeyqCQ-cfpXN0cc.crl (hash: smD/yKDzrACp5fiJpS6LUTBzmpJ0oCSK4IrU67+3r6E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:83:28:65:24:3b:9f:71:1e:7b:f1:77:81:93:3e:ee:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=313c92be349cfd53afa5ecaa090f9c7e95cdd1c7
        Validity
            Not Before: Jan 20 10:00:50 2025 GMT
            Not After : Jan 21 10:00:50 2025 GMT
        Subject: CN=831531a2008459b4a549aa3656ad86ef58dcf562
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5b:30:ba:24:59:9a:f5:4d:aa:b6:9d:61:95:
                    64:9e:b3:53:e3:02:87:84:30:d7:e5:4b:00:f6:c1:
                    4f:19:ba:de:69:92:4c:0b:5d:8c:c3:74:8f:1d:99:
                    2b:5f:37:36:d0:94:99:0c:8e:a7:56:03:09:7b:70:
                    74:c8:ef:0e:d7:fa:ba:4c:5c:10:12:ca:6a:74:ae:
                    94:4b:85:f6:4d:e0:78:8f:30:d4:be:a6:8c:f6:90:
                    62:71:01:fa:a4:b2:94:77:7b:8c:de:e5:cd:de:62:
                    ce:fa:0c:99:62:a1:5d:5d:92:71:9d:9f:e2:0f:28:
                    1a:c5:82:6a:f0:8e:47:f8:e3:70:f3:ec:02:13:4e:
                    fc:96:4c:45:7f:1c:b0:94:70:70:05:8a:c6:b9:ab:
                    87:ad:9b:90:8b:87:f7:80:83:d5:64:ff:0e:3e:e5:
                    ea:66:34:af:4d:51:b7:20:70:d2:4e:e7:70:fd:42:
                    9c:f5:bb:6c:87:e9:d6:59:d8:4a:44:e2:8d:ad:a8:
                    15:a3:86:bb:61:33:87:28:63:a7:9a:95:ce:6b:7a:
                    da:33:bd:2b:76:05:81:64:29:ac:7f:92:a0:46:e3:
                    3c:11:d0:80:2c:cc:29:a2:9f:ce:3b:0f:51:ae:92:
                    37:7d:5d:47:63:00:8b:43:ba:da:32:35:a0:4e:b1:
                    eb:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:15:31:A2:00:84:59:B4:A5:49:AA:36:56:AD:86:EF:58:DC:F5:62
            X509v3 Authority Key Identifier:
                keyid:31:3C:92:BE:34:9C:FD:53:AF:A5:EC:AA:09:0F:9C:7E:95:CD:D1:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MTySvjSc_VOvpeyqCQ-cfpXN0cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/062a94-cf27-4a87-b000-b63bb8b05292/1/MTySvjSc_VOvpeyqCQ-cfpXN0cc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/062a94-cf27-4a87-b000-b63bb8b05292/1/MTySvjSc_VOvpeyqCQ-cfpXN0cc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:b8:26:94:61:52:d3:62:77:cf:87:f6:c6:96:d0:5a:d0:fc:
         2b:f8:6b:8a:f6:44:05:3d:4c:50:24:70:79:f6:ae:80:a1:7e:
         c8:fa:e5:d2:67:80:bf:17:00:72:a3:6a:e6:30:38:47:cb:f9:
         e3:7d:4d:13:be:32:43:1f:6f:d5:5c:7c:b3:75:c2:62:37:9a:
         df:7b:31:bc:4f:e7:c3:2e:f9:c3:de:d5:e4:c9:00:36:82:4e:
         db:68:65:0f:6c:04:85:8a:3d:ae:de:4f:2a:06:c8:50:8b:bf:
         d9:dc:44:c4:e1:70:78:be:55:bc:49:fa:e0:d2:b9:c4:31:23:
         e7:dd:ef:e1:80:b7:f3:d2:fe:4d:64:8e:23:21:00:f3:7d:ed:
         d6:b5:c2:82:91:4c:f7:06:c6:4f:e1:97:76:be:6b:58:6b:21:
         b3:00:58:1e:b1:c6:af:a1:f4:7c:c8:0f:93:0f:e5:c2:19:d7:
         cb:9c:75:ab:66:87:0f:d8:a2:8f:65:67:8b:bd:32:e2:0b:03:
         e9:11:af:15:50:1d:33:10:97:83:bd:9a:c7:57:e9:0b:6d:4a:
         ab:28:c8:8b:6f:17:27:e5:bb:48:c5:75:64:26:88:92:9c:0e:
         db:ae:aa:d1:4b:64:45:55:cb:1d:11:4c:07:49:29:a4:b0:17:
         b4:7c:05:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZSDKGUkO59xHnvxd4GTPu6IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxM2M5MmJlMzQ5Y2ZkNTNhZmE1ZWNhYTA5MGY5YzdlOTVj
ZGQxYzcwHhcNMjUwMTIwMTAwMDUwWhcNMjUwMTIxMTAwMDUwWjAzMTEwLwYDVQQD
Eyg4MzE1MzFhMjAwODQ1OWI0YTU0OWFhMzY1NmFkODZlZjU4ZGNmNTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFswuiRZmvVNqradYZVknrNT4wKH
hDDX5UsA9sFPGbreaZJMC12Mw3SPHZkrXzc20JSZDI6nVgMJe3B0yO8O1/q6TFwQ
EspqdK6US4X2TeB4jzDUvqaM9pBicQH6pLKUd3uM3uXN3mLO+gyZYqFdXZJxnZ/i
DygaxYJq8I5H+ONw8+wCE078lkxFfxywlHBwBYrGuauHrZuQi4f3gIPVZP8OPuXq
ZjSvTVG3IHDSTudw/UKc9btsh+nWWdhKROKNragVo4a7YTOHKGOnmpXOa3raM70r
dgWBZCmsf5KgRuM8EdCALMwpop/OOw9RrpI3fV1HYwCLQ7raMjWgTrHr3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIMVMaIAhFm0pUmqNlathu9Y3PViMB8GA1UdIwQY
MBaAFDE8kr40nP1Tr6XsqgkPnH6VzdHHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVR5U3ZqU2NfVk92cGV5cUNRLWNmcFhOMGNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8wNjJhOTQtY2YyNy00YTg3LWIwMDAt
YjYzYmI4YjA1MjkyLzEvTVR5U3ZqU2NfVk92cGV5cUNRLWNmcFhOMGNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC8wNjJhOTQtY2YyNy00YTg3LWIwMDAtYjYzYmI4YjA1Mjky
LzEvTVR5U3ZqU2NfVk92cGV5cUNRLWNmcFhOMGNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr7gmlGFS
02J3z4f2xpbQWtD8K/hrivZEBT1MUCRwefaugKF+yPrl0meAvxcAcqNq5jA4R8v5
431NE74yQx9v1Vx8s3XCYjea33sxvE/nwy75w97V5MkANoJO22hlD2wEhYo9rt5P
KgbIUIu/2dxExOFweL5VvEn64NK5xDEj593v4YC389L+TWSOIyEA833t1rXCgpFM
9wbGT+GXdr5rWGshswBYHrHGr6H0fMgPkw/lwhnXy5x1q2aHD9iij2Vni70y4gsD
6RGvFVAdMxCXg72ax1fpC21KqyjIi28XJ+W7SMV1ZCaIkpwO266q0UtkRVXLHRFM
B0kppLAXtHwFmg==
-----END CERTIFICATE-----