Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/4ab35b-0a61-4b40-9623-d0fd82c23f6d/1/a-8_6GtyevJqkO8cwLEaoshoX_4.mft
File:                     a-8_6GtyevJqkO8cwLEaoshoX_4.mft (raw, json)
Hash identifier:          CrYXZeNXFw5LR6hTMkb9BGpz7V9Y81+SdQafJZlN2bw=
Subject key identifier:   3A:79:C5:FB:6B:15:F6:A3:52:4B:9F:FC:EB:7C:94:85:55:6D:56:19
Authority key identifier: 6B:EF:3F:E8:6B:72:7A:F2:6A:90:EF:1C:C0:B1:1A:A2:C8:68:5F:FE
Certificate issuer:       /CN=6bef3fe86b727af26a90ef1cc0b11aa2c8685ffe
Certificate serial:       0192AE864F76900233747BE65506FD6E1135
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a-8_6GtyevJqkO8cwLEaoshoX_4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/4ab35b-0a61-4b40-9623-d0fd82c23f6d/1/a-8_6GtyevJqkO8cwLEaoshoX_4.mft
Manifest number:          1248
Signing time:             Mon 21 Oct 2024 10:01:30 +0000
Manifest this update:     Mon 21 Oct 2024 10:01:30 +0000
Manifest next update:     Tue 22 Oct 2024 10:01:30 +0000
Files and hashes:         1: F1YZDQ_UfkV6OflZtRmSrcv2Ju4.roa (hash: vGQWftBb+pnvf+zQxUIYW6+JqQ/wZVm/Sigi1+2Fot0=)
                          2: a-8_6GtyevJqkO8cwLEaoshoX_4.crl (hash: fK3/pe5JESt8oUJzRuKfq75UfZc0IZdml6BpVQIbgI4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:ae:86:4f:76:90:02:33:74:7b:e6:55:06:fd:6e:11:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bef3fe86b727af26a90ef1cc0b11aa2c8685ffe
        Validity
            Not Before: Oct 21 10:01:30 2024 GMT
            Not After : Oct 22 10:01:30 2024 GMT
        Subject: CN=3a79c5fb6b15f6a3524b9ffceb7c9485556d5619
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:39:f8:85:12:c1:0b:82:58:cb:a5:d5:c2:55:
                    91:76:ce:fe:c6:7d:68:85:ca:f8:e9:74:e0:5c:f3:
                    08:c6:f9:6b:4d:45:15:27:c1:dd:76:57:ef:00:1d:
                    ea:dd:b1:6a:b2:3f:6a:2c:59:a7:10:fb:e0:7a:cd:
                    d7:35:f3:d0:57:94:d1:5e:c2:e4:5f:b9:53:d8:df:
                    9a:ac:b7:75:ce:1b:c6:c4:28:a2:f0:3d:09:7f:b7:
                    bd:3c:b2:36:6d:c9:72:28:4f:65:bc:1e:4e:72:53:
                    c9:95:14:bb:13:61:f3:e9:20:ce:f9:1c:b1:11:1b:
                    2e:c1:a6:49:9d:b8:8b:55:01:a4:7d:15:f8:f8:5f:
                    8e:7e:0a:64:50:4c:aa:ea:88:a6:70:2e:71:5b:5d:
                    5a:ed:3f:87:f4:cb:c2:7c:78:a5:32:d6:fa:fb:be:
                    fe:e3:18:57:b3:21:36:90:c8:d7:e6:ff:b8:8c:ff:
                    8a:fa:0f:f6:69:66:84:8d:80:80:16:1e:d4:1a:9e:
                    a0:87:7b:2e:79:bd:09:ff:6a:4c:18:98:2a:de:a8:
                    7c:e2:c7:b0:09:66:a3:64:16:4a:32:72:5f:b2:d3:
                    7c:a7:db:db:78:cb:37:37:7c:d9:73:42:44:8d:7c:
                    2a:75:da:5f:e6:1f:da:28:18:9f:09:da:5d:48:19:
                    f2:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:79:C5:FB:6B:15:F6:A3:52:4B:9F:FC:EB:7C:94:85:55:6D:56:19
            X509v3 Authority Key Identifier:
                keyid:6B:EF:3F:E8:6B:72:7A:F2:6A:90:EF:1C:C0:B1:1A:A2:C8:68:5F:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-8_6GtyevJqkO8cwLEaoshoX_4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/4ab35b-0a61-4b40-9623-d0fd82c23f6d/1/a-8_6GtyevJqkO8cwLEaoshoX_4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/4ab35b-0a61-4b40-9623-d0fd82c23f6d/1/a-8_6GtyevJqkO8cwLEaoshoX_4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:0e:b5:1a:1d:3b:9f:7f:70:07:c4:5f:67:b7:01:36:6a:d2:
         94:3b:1e:7b:da:7a:13:5a:9a:50:2c:b2:db:7c:e7:39:6f:e6:
         fc:ef:32:25:e3:e8:ee:05:0f:8f:2a:35:78:c4:9f:bf:6a:a3:
         75:43:32:12:97:aa:74:04:0b:f5:a8:31:e4:59:f3:d7:af:04:
         ac:09:44:b7:07:b1:b8:05:74:5a:ea:1e:bc:b8:39:8c:30:43:
         6b:07:e2:3a:4b:f9:98:1c:35:b3:b6:53:ef:b9:32:e7:98:10:
         70:90:d7:b8:f0:85:8e:aa:d5:53:4f:7c:ff:e5:1c:df:ad:9b:
         b6:9b:5b:03:69:64:cc:60:29:36:a6:bb:63:29:ee:ca:04:13:
         89:70:f4:c3:82:81:ed:5a:86:bd:c1:e9:6c:36:cb:39:06:ee:
         af:ab:38:ea:cd:97:7a:36:b0:69:e2:5b:ad:dc:64:2d:fe:38:
         52:99:1f:1b:28:43:d3:c0:eb:c7:93:2e:95:76:3b:d4:7c:47:
         fb:fe:d1:35:8b:61:23:83:9f:e7:07:db:9b:4c:7d:28:ab:cc:
         ad:c6:2e:2e:e1:64:fc:b2:66:c8:7c:8e:7a:34:37:9f:9e:2c:
         83:e6:40:87:73:1a:82:bc:a3:7b:72:25:cb:f1:80:11:43:5c:
         87:7a:4a:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZKuhk92kAIzdHvmVQb9bhE1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiZWYzZmU4NmI3MjdhZjI2YTkwZWYxY2MwYjExYWEyYzg2
ODVmZmUwHhcNMjQxMDIxMTAwMTMwWhcNMjQxMDIyMTAwMTMwWjAzMTEwLwYDVQQD
EygzYTc5YzVmYjZiMTVmNmEzNTI0YjlmZmNlYjdjOTQ4NTU1NmQ1NjE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjn4hRLBC4JYy6XVwlWRds7+xn1o
hcr46XTgXPMIxvlrTUUVJ8HddlfvAB3q3bFqsj9qLFmnEPvges3XNfPQV5TRXsLk
X7lT2N+arLd1zhvGxCii8D0Jf7e9PLI2bclyKE9lvB5OclPJlRS7E2Hz6SDO+Ryx
ERsuwaZJnbiLVQGkfRX4+F+OfgpkUEyq6oimcC5xW11a7T+H9MvCfHilMtb6+77+
4xhXsyE2kMjX5v+4jP+K+g/2aWaEjYCAFh7UGp6gh3sueb0J/2pMGJgq3qh84sew
CWajZBZKMnJfstN8p9vbeMs3N3zZc0JEjXwqddpf5h/aKBifCdpdSBnyUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDp5xftrFfajUkuf/Ot8lIVVbVYZMB8GA1UdIwQY
MBaAFGvvP+hrcnryapDvHMCxGqLIaF/+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYS04XzZHdHlldkpxa084Y3dMRWFvc2hvWF80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi80YWIzNWItMGE2MS00YjQwLTk2MjMt
ZDBmZDgyYzIzZjZkLzEvYS04XzZHdHlldkpxa084Y3dMRWFvc2hvWF80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi80YWIzNWItMGE2MS00YjQwLTk2MjMtZDBmZDgyYzIzZjZk
LzEvYS04XzZHdHlldkpxa084Y3dMRWFvc2hvWF80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArA61Gh07
n39wB8RfZ7cBNmrSlDsee9p6E1qaUCyy23znOW/m/O8yJePo7gUPjyo1eMSfv2qj
dUMyEpeqdAQL9agx5Fnz168ErAlEtwexuAV0WuoevLg5jDBDawfiOkv5mBw1s7ZT
77ky55gQcJDXuPCFjqrVU098/+Uc362btptbA2lkzGApNqa7YynuygQTiXD0w4KB
7VqGvcHpbDbLOQbur6s46s2XejawaeJbrdxkLf44UpkfGyhD08Drx5MulXY71HxH
+/7RNYthI4Of5wfbm0x9KKvMrcYuLuFk/LJmyHyOejQ3n54sg+ZAh3Magryje3Il
y/GAEUNch3pKiw==
-----END CERTIFICATE-----