Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/052f29-d545-4a8a-8672-40e34c061968/1/SmIrgZq_NQPIGOv7bYc8IcG_z7Q.mft
File:                     SmIrgZq_NQPIGOv7bYc8IcG_z7Q.mft (raw, json)
Hash identifier:          pkfilwZJrfsp1zDSc4r1rRtrF6r+gjbC/D85N1uH7IY=
Subject key identifier:   58:06:F3:B6:13:C8:12:99:B4:B5:76:60:B5:88:5D:E2:37:CA:80:39
Authority key identifier: 4A:62:2B:81:9A:BF:35:03:C8:18:EB:FB:6D:87:3C:21:C1:BF:CF:B4
Certificate issuer:       /CN=4a622b819abf3503c818ebfb6d873c21c1bfcfb4
Certificate serial:       01934715AD3BC6CDC737944B2E998C7F07BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SmIrgZq_NQPIGOv7bYc8IcG_z7Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/052f29-d545-4a8a-8672-40e34c061968/1/SmIrgZq_NQPIGOv7bYc8IcG_z7Q.mft
Manifest number:          01B9
Signing time:             Wed 20 Nov 2024 01:00:23 +0000
Manifest this update:     Wed 20 Nov 2024 01:00:23 +0000
Manifest next update:     Thu 21 Nov 2024 01:00:23 +0000
Files and hashes:         1: SmIrgZq_NQPIGOv7bYc8IcG_z7Q.crl (hash: MWyPurJ4OkdWFuzn7gAvduYlzoSJxV1uzY1A6Cu3D8c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:47:15:ad:3b:c6:cd:c7:37:94:4b:2e:99:8c:7f:07:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a622b819abf3503c818ebfb6d873c21c1bfcfb4
        Validity
            Not Before: Nov 20 01:00:23 2024 GMT
            Not After : Nov 21 01:00:23 2024 GMT
        Subject: CN=5806f3b613c81299b4b57660b5885de237ca8039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d9:72:37:9a:a4:fe:ae:54:91:49:43:eb:a3:
                    a3:af:4a:c2:9a:82:7c:15:22:8b:d7:3d:83:9f:18:
                    ae:38:4c:96:6d:c9:ec:5a:71:35:06:55:f9:c9:2e:
                    bd:6c:50:cf:eb:6f:dc:12:51:fd:2e:d5:89:cd:47:
                    e3:4a:d8:7c:00:d5:61:7f:a6:ba:f6:20:11:22:88:
                    eb:cf:5e:0d:b0:35:2d:3b:05:68:62:a8:6d:80:f3:
                    4d:c7:55:dc:28:b6:e7:cf:2b:1b:59:fc:c5:7e:42:
                    e4:b8:09:c1:f4:fe:2d:66:95:5f:7f:f1:9b:15:0c:
                    d6:3f:09:b3:e5:82:37:67:e7:2d:60:b3:24:5f:b3:
                    1c:3a:ce:70:63:04:38:4f:55:ec:59:43:f2:0a:1c:
                    cc:dd:99:31:0e:8b:24:87:57:96:a4:e5:8f:c6:ef:
                    8d:14:0f:9b:47:5a:5b:5c:ac:39:80:0f:92:81:98:
                    5f:26:74:92:68:9c:8a:05:d9:9f:b9:3f:b2:49:bd:
                    3b:3c:69:19:12:23:c3:ec:2e:a7:d2:22:7a:e3:38:
                    68:be:7b:a6:d7:14:26:38:5f:be:06:9f:1f:f1:ac:
                    7e:a6:3d:6b:f6:b6:98:a8:0f:b9:87:c9:67:bb:eb:
                    a7:4a:eb:0a:c3:4d:9e:3d:83:1c:7d:ec:e1:82:ca:
                    3c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:06:F3:B6:13:C8:12:99:B4:B5:76:60:B5:88:5D:E2:37:CA:80:39
            X509v3 Authority Key Identifier:
                keyid:4A:62:2B:81:9A:BF:35:03:C8:18:EB:FB:6D:87:3C:21:C1:BF:CF:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmIrgZq_NQPIGOv7bYc8IcG_z7Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/052f29-d545-4a8a-8672-40e34c061968/1/SmIrgZq_NQPIGOv7bYc8IcG_z7Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/052f29-d545-4a8a-8672-40e34c061968/1/SmIrgZq_NQPIGOv7bYc8IcG_z7Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:02:a8:2e:65:b0:ce:d2:78:e8:ae:5f:c6:74:29:c9:6b:45:
         b1:a2:25:5b:f9:02:1c:77:2b:80:3f:84:b6:0a:ab:b4:60:af:
         99:70:78:a1:b8:c3:b7:6a:27:78:98:35:50:68:ee:53:0d:3a:
         2b:b2:2a:f2:93:82:3b:2c:4f:07:5f:ca:1c:38:bd:46:db:f6:
         95:9a:97:6d:bc:2f:ed:01:7b:89:9a:be:06:91:39:6a:58:10:
         75:ec:6f:b0:8a:b0:93:5f:57:a4:87:7a:17:4a:34:7c:40:da:
         48:43:b6:5f:aa:c5:05:32:ba:4c:47:bc:a5:61:a5:58:db:ec:
         04:82:52:4c:36:2d:6e:7d:e9:8f:4b:44:f5:80:4b:3c:11:2a:
         21:ff:94:e0:48:64:75:59:46:83:77:1a:e3:d3:ea:41:24:e9:
         42:63:1c:79:78:42:d5:72:c0:d9:3b:2f:65:95:e9:11:8e:16:
         4d:aa:01:a0:dc:8b:0c:df:85:c5:ed:c2:2f:29:45:98:15:74:
         2c:ec:93:63:17:7c:01:03:2c:5d:c9:05:12:4a:09:ee:b8:c4:
         d7:3a:b1:b5:3d:4c:24:0f:83:db:33:c5:38:29:3e:01:78:a7:
         30:35:8a:c8:03:6c:42:cb:33:a9:a7:c1:6d:be:f6:ed:f2:1d:
         dc:4a:81:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNHFa07xs3HN5RLLpmMfwe6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNjIyYjgxOWFiZjM1MDNjODE4ZWJmYjZkODczYzIxYzFi
ZmNmYjQwHhcNMjQxMTIwMDEwMDIzWhcNMjQxMTIxMDEwMDIzWjAzMTEwLwYDVQQD
Eyg1ODA2ZjNiNjEzYzgxMjk5YjRiNTc2NjBiNTg4NWRlMjM3Y2E4MDM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9lyN5qk/q5UkUlD66Ojr0rCmoJ8
FSKL1z2DnxiuOEyWbcnsWnE1BlX5yS69bFDP62/cElH9LtWJzUfjSth8ANVhf6a6
9iARIojrz14NsDUtOwVoYqhtgPNNx1XcKLbnzysbWfzFfkLkuAnB9P4tZpVff/Gb
FQzWPwmz5YI3Z+ctYLMkX7McOs5wYwQ4T1XsWUPyChzM3ZkxDoskh1eWpOWPxu+N
FA+bR1pbXKw5gA+SgZhfJnSSaJyKBdmfuT+ySb07PGkZEiPD7C6n0iJ64zhovnum
1xQmOF++Bp8f8ax+pj1r9raYqA+5h8lnu+unSusKw02ePYMcfezhgso8cwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFgG87YTyBKZtLV2YLWIXeI3yoA5MB8GA1UdIwQY
MBaAFEpiK4GavzUDyBjr+22HPCHBv8+0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU21JcmdacV9OUVBJR092N2JZYzhJY0dfejdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8wNTJmMjktZDU0NS00YThhLTg2NzIt
NDBlMzRjMDYxOTY4LzEvU21JcmdacV9OUVBJR092N2JZYzhJY0dfejdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS8wNTJmMjktZDU0NS00YThhLTg2NzItNDBlMzRjMDYxOTY4
LzEvU21JcmdacV9OUVBJR092N2JZYzhJY0dfejdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALgKoLmWw
ztJ46K5fxnQpyWtFsaIlW/kCHHcrgD+EtgqrtGCvmXB4objDt2oneJg1UGjuUw06
K7Iq8pOCOyxPB1/KHDi9Rtv2lZqXbbwv7QF7iZq+BpE5algQdexvsIqwk19XpId6
F0o0fEDaSEO2X6rFBTK6TEe8pWGlWNvsBIJSTDYtbn3pj0tE9YBLPBEqIf+U4Ehk
dVlGg3ca49PqQSTpQmMceXhC1XLA2TsvZZXpEY4WTaoBoNyLDN+Fxe3CLylFmBV0
LOyTYxd8AQMsXckFEkoJ7rjE1zqxtT1MJA+D2zPFOCk+AXinMDWKyANsQsszqafB
bb727fId3EqBhQ==
-----END CERTIFICATE-----