Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/7a5fd3-faae-4120-a4a8-1dc2a52368c1/1/GvFqPPgRZyGvrYweWz6DopWc65k.mft
File:                     GvFqPPgRZyGvrYweWz6DopWc65k.mft (raw, json)
Hash identifier:          hNt6n+WBs30LVoT68Iyr7xrtUlp0fZA4OUY7tThZBC4=
Subject key identifier:   D9:38:68:DA:CA:73:04:05:2A:42:90:E4:38:82:1C:5B:31:AA:46:5D
Authority key identifier: 1A:F1:6A:3C:F8:11:67:21:AF:AD:8C:1E:5B:3E:83:A2:95:9C:EB:99
Certificate issuer:       /CN=1af16a3cf8116721afad8c1e5b3e83a2959ceb99
Certificate serial:       019346A7DAEBFB7B78DF04A9A3E0F662145B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GvFqPPgRZyGvrYweWz6DopWc65k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/7a5fd3-faae-4120-a4a8-1dc2a52368c1/1/GvFqPPgRZyGvrYweWz6DopWc65k.mft
Manifest number:          0B47
Signing time:             Tue 19 Nov 2024 23:00:25 +0000
Manifest this update:     Tue 19 Nov 2024 23:00:25 +0000
Manifest next update:     Wed 20 Nov 2024 23:00:25 +0000
Files and hashes:         1: 3M8ohd4vZsoKlPACyKdzUGtkgrU.roa (hash: NriHifjaJM/ZNQ2f3LLNISQiISu1fzsqY4Jv31tLHmo=)
                          2: GvFqPPgRZyGvrYweWz6DopWc65k.crl (hash: nGUn9EhXg/vmc72qBb7Y6A3/r6YhIrJW6Ja+S3exQF8=)
                          3: XIayUu2C62hwdRNhnKrB9VYomZ0.roa (hash: kuV/UXmInbcFbXhlPFftVp7zRawdtjmfM+9dJArQ0jQ=)
                          4: zmBhEe6G9U1599jVEFw8wusHNDQ.roa (hash: XeqbZWQCFUM7QXNVWUxMIPVFjN9gyZBOvIIuO4a6/CE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:46:a7:da:eb:fb:7b:78:df:04:a9:a3:e0:f6:62:14:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1af16a3cf8116721afad8c1e5b3e83a2959ceb99
        Validity
            Not Before: Nov 19 23:00:25 2024 GMT
            Not After : Nov 20 23:00:25 2024 GMT
        Subject: CN=d93868daca7304052a4290e438821c5b31aa465d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ef:99:15:e8:00:ab:a2:5b:46:40:72:41:ca:
                    a0:dd:a7:f0:ad:d0:d7:df:68:a1:f1:b4:05:05:e3:
                    1b:fe:cd:dc:c5:ed:eb:ab:ba:ab:f3:88:2f:f6:e4:
                    cd:1e:fa:bb:b9:24:91:94:10:f6:5d:95:41:0d:91:
                    86:56:79:10:d5:35:2c:8e:2c:a8:ff:4d:b6:83:35:
                    6f:06:6b:47:bd:28:63:ce:f9:fb:ed:39:70:7d:8a:
                    cb:22:ef:b6:45:17:bd:62:d1:b8:3e:e9:d2:12:db:
                    a4:e3:86:77:1c:93:1a:5f:a9:17:1b:c7:68:20:80:
                    35:56:fa:87:77:4f:bd:9d:ee:66:55:e0:93:60:d6:
                    40:96:b4:44:ba:ae:9e:c3:51:92:75:18:c5:55:83:
                    4f:e2:ba:e5:13:b4:79:41:d0:1c:02:05:e4:f4:b3:
                    34:24:ae:a3:a6:a7:53:e6:2f:61:4f:aa:f6:b6:da:
                    ad:82:92:2e:43:54:e2:1b:66:2f:c9:8c:38:8d:09:
                    b3:26:e3:be:13:f5:e1:9a:2b:a8:bd:40:ba:8a:f7:
                    56:21:f1:0b:c5:1e:1a:e1:ef:aa:f0:3c:ef:32:51:
                    33:ca:7a:dd:2d:15:1d:ac:ef:15:6f:5a:14:62:5e:
                    76:3b:39:da:d6:0a:66:bb:01:c4:bf:ab:62:d5:fb:
                    32:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:38:68:DA:CA:73:04:05:2A:42:90:E4:38:82:1C:5B:31:AA:46:5D
            X509v3 Authority Key Identifier:
                keyid:1A:F1:6A:3C:F8:11:67:21:AF:AD:8C:1E:5B:3E:83:A2:95:9C:EB:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GvFqPPgRZyGvrYweWz6DopWc65k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7a5fd3-faae-4120-a4a8-1dc2a52368c1/1/GvFqPPgRZyGvrYweWz6DopWc65k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7a5fd3-faae-4120-a4a8-1dc2a52368c1/1/GvFqPPgRZyGvrYweWz6DopWc65k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:39:96:f3:7d:ba:11:9e:1d:72:a8:c1:a1:e4:b9:19:06:d6:
         86:00:7c:8a:a8:cc:f4:b2:28:46:a2:a3:6f:bf:c5:7c:b5:3a:
         e9:06:5a:8b:22:db:59:ac:e6:41:0c:3d:5b:9f:bf:ad:f2:6e:
         a9:bc:9f:81:dd:6d:91:b3:10:39:1f:7e:a7:f0:c6:a9:4f:39:
         43:4e:4b:4e:36:f3:6f:95:32:dc:ce:d6:9e:1a:ea:d8:ba:51:
         7b:be:b9:10:0a:f2:c6:01:f0:1d:e6:f1:5e:6d:68:c0:72:85:
         d0:35:18:be:ea:ac:10:81:b9:db:9d:c3:41:50:61:41:2f:fd:
         dd:2f:42:ce:b9:0b:35:4e:15:6c:1a:ed:83:00:a9:3e:8c:2c:
         3c:e5:32:e0:b0:0b:d6:71:d9:f2:43:5a:a8:b2:e8:63:98:7f:
         0e:83:76:c8:11:b2:ba:02:ff:b9:9b:d8:f1:6c:e5:22:fc:a5:
         35:7d:d8:df:67:41:59:ab:b9:31:7e:34:42:a0:f7:b3:a2:c1:
         3c:99:d6:dd:a2:30:e2:47:13:05:ed:82:e9:67:96:38:ba:d1:
         f1:20:26:c1:a2:85:e8:75:07:0c:69:4a:c1:89:a3:f8:22:da:
         56:68:d3:dc:ad:3a:fd:3b:5d:a9:e6:54:b2:56:8e:32:aa:89:
         4f:ca:5e:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNGp9rr+3t43wSpo+D2YhRbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhZjE2YTNjZjgxMTY3MjFhZmFkOGMxZTViM2U4M2EyOTU5
Y2ViOTkwHhcNMjQxMTE5MjMwMDI1WhcNMjQxMTIwMjMwMDI1WjAzMTEwLwYDVQQD
EyhkOTM4NjhkYWNhNzMwNDA1MmE0MjkwZTQzODgyMWM1YjMxYWE0NjVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr++ZFegAq6JbRkByQcqg3afwrdDX
32ih8bQFBeMb/s3cxe3rq7qr84gv9uTNHvq7uSSRlBD2XZVBDZGGVnkQ1TUsjiyo
/022gzVvBmtHvShjzvn77TlwfYrLIu+2RRe9YtG4PunSEtuk44Z3HJMaX6kXG8do
IIA1VvqHd0+9ne5mVeCTYNZAlrREuq6ew1GSdRjFVYNP4rrlE7R5QdAcAgXk9LM0
JK6jpqdT5i9hT6r2ttqtgpIuQ1TiG2YvyYw4jQmzJuO+E/XhmiuovUC6ivdWIfEL
xR4a4e+q8DzvMlEzynrdLRUdrO8Vb1oUYl52Ozna1gpmuwHEv6ti1fsyjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNk4aNrKcwQFKkKQ5DiCHFsxqkZdMB8GA1UdIwQY
MBaAFBrxajz4EWchr62MHls+g6KVnOuZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3ZGcVBQZ1JaeUd2cll3ZVd6NkRvcFdjNjVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy83YTVmZDMtZmFhZS00MTIwLWE0YTgt
MWRjMmE1MjM2OGMxLzEvR3ZGcVBQZ1JaeUd2cll3ZVd6NkRvcFdjNjVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy83YTVmZDMtZmFhZS00MTIwLWE0YTgtMWRjMmE1MjM2OGMx
LzEvR3ZGcVBQZ1JaeUd2cll3ZVd6NkRvcFdjNjVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANjmW8326
EZ4dcqjBoeS5GQbWhgB8iqjM9LIoRqKjb7/FfLU66QZaiyLbWazmQQw9W5+/rfJu
qbyfgd1tkbMQOR9+p/DGqU85Q05LTjbzb5Uy3M7Wnhrq2LpRe765EAryxgHwHebx
Xm1owHKF0DUYvuqsEIG5253DQVBhQS/93S9CzrkLNU4VbBrtgwCpPowsPOUy4LAL
1nHZ8kNaqLLoY5h/DoN2yBGyugL/uZvY8WzlIvylNX3Y32dBWau5MX40QqD3s6LB
PJnW3aIw4kcTBe2C6WeWOLrR8SAmwaKF6HUHDGlKwYmj+CLaVmjT3K06/TtdqeZU
slaOMqqJT8peTw==
-----END CERTIFICATE-----