Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/491f6d-5a2d-44db-a05f-d729239a7321/1/elAFZYHHeA6LbClE4MZPCRTfmD4.mft
File:                     elAFZYHHeA6LbClE4MZPCRTfmD4.mft (raw, json)
Hash identifier:          GJ7TFvMN9KRQ1k8wLUI/BzpTHQ8ADbcj0NBOyliGwdo=
Subject key identifier:   04:BE:41:C4:0D:F2:03:82:D1:D9:F7:93:DD:B5:62:76:45:BA:C3:70
Authority key identifier: 7A:50:05:65:81:C7:78:0E:8B:6C:29:44:E0:C6:4F:09:14:DF:98:3E
Certificate issuer:       /CN=7a50056581c7780e8b6c2944e0c64f0914df983e
Certificate serial:       01922F7E69C96C4DFAC6199F8406EA7F0528
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/elAFZYHHeA6LbClE4MZPCRTfmD4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/491f6d-5a2d-44db-a05f-d729239a7321/1/elAFZYHHeA6LbClE4MZPCRTfmD4.mft
Manifest number:          11D1
Signing time:             Thu 26 Sep 2024 18:01:06 +0000
Manifest this update:     Thu 26 Sep 2024 18:01:06 +0000
Manifest next update:     Fri 27 Sep 2024 18:01:06 +0000
Files and hashes:         1: elAFZYHHeA6LbClE4MZPCRTfmD4.crl (hash: vXxEdhMOpGr075pwUfs2BhPb5NI6+Z+pZAYrJgurlSY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:2f:7e:69:c9:6c:4d:fa:c6:19:9f:84:06:ea:7f:05:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a50056581c7780e8b6c2944e0c64f0914df983e
        Validity
            Not Before: Sep 26 18:01:06 2024 GMT
            Not After : Sep 27 18:01:06 2024 GMT
        Subject: CN=04be41c40df20382d1d9f793ddb5627645bac370
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d2:9b:0a:ac:b6:09:fb:63:0a:a2:37:b8:d9:
                    a7:f8:53:5a:44:b1:7a:f1:26:cd:73:80:54:01:c3:
                    1e:a3:18:ee:56:87:21:30:45:89:7e:44:07:2c:ff:
                    6c:c1:b4:dc:e5:b1:c9:22:6e:13:99:26:ff:52:c8:
                    0e:65:f9:a8:1b:51:7a:dc:08:c0:eb:14:c0:40:8d:
                    ce:ca:88:3f:bc:3c:93:cf:66:85:79:64:61:a9:b4:
                    97:9f:71:eb:13:fe:9b:2d:a2:4d:80:cf:15:b9:bc:
                    dd:25:20:e0:9c:c4:ef:c0:da:99:cb:5e:ac:f1:6b:
                    da:43:2f:23:f7:2e:74:b4:2a:12:79:47:81:c3:cf:
                    8d:53:62:bf:5f:6c:5e:61:d6:82:19:30:9d:01:eb:
                    2c:90:3d:b8:7e:01:fc:c3:e6:a7:4e:4c:54:00:70:
                    9b:5d:75:b1:4b:d0:7b:6d:86:c8:aa:cd:af:d5:fc:
                    8f:cc:d1:66:d1:34:6c:da:cf:b6:29:90:20:31:e5:
                    47:60:40:85:65:cb:da:3d:ca:d1:f7:80:61:87:e0:
                    27:09:01:6a:a9:97:74:dc:61:ad:bb:70:8e:76:d5:
                    41:d4:48:99:39:ed:e2:64:d6:72:35:30:fa:1d:a0:
                    0d:a2:ef:c6:98:36:6d:10:d1:e9:ca:c5:e1:8f:d3:
                    6f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:BE:41:C4:0D:F2:03:82:D1:D9:F7:93:DD:B5:62:76:45:BA:C3:70
            X509v3 Authority Key Identifier:
                keyid:7A:50:05:65:81:C7:78:0E:8B:6C:29:44:E0:C6:4F:09:14:DF:98:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/elAFZYHHeA6LbClE4MZPCRTfmD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/491f6d-5a2d-44db-a05f-d729239a7321/1/elAFZYHHeA6LbClE4MZPCRTfmD4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/491f6d-5a2d-44db-a05f-d729239a7321/1/elAFZYHHeA6LbClE4MZPCRTfmD4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:c2:7b:22:d3:4a:7d:eb:d7:b5:46:43:c7:68:cb:7c:53:27:
         37:bc:1d:e1:ec:0d:e5:6d:a7:70:ae:4e:2e:f0:a1:9c:df:bd:
         d1:cc:47:60:02:47:a1:72:6f:27:68:cb:83:ea:ec:c3:2d:57:
         61:b5:dc:ea:28:0b:a8:d0:b4:07:76:ad:00:98:24:98:33:88:
         f0:b4:44:9c:e3:18:25:b4:c0:7c:9e:08:4d:af:6e:d3:a1:1d:
         c3:99:88:b8:d3:e0:98:5d:49:d5:79:c8:f5:e5:d1:91:cd:17:
         70:07:8c:40:73:d0:3a:cd:21:fd:e8:93:da:77:63:36:ea:cd:
         88:58:f2:82:e1:d3:64:da:ef:97:b4:58:ca:b5:4d:d4:3f:cc:
         c7:3c:6b:bc:ab:3d:39:d4:ec:34:b0:b1:63:74:05:d1:15:aa:
         87:14:dd:68:f6:6b:6f:bc:82:75:3b:50:08:a2:da:ab:e2:bb:
         51:b3:80:42:15:bd:a2:ec:53:e0:a3:6e:98:b5:e3:2e:8a:80:
         c6:36:a6:d6:e8:05:1a:dc:44:35:55:94:d7:c0:76:95:de:e0:
         f8:d6:56:e7:e3:ce:9d:c0:eb:89:15:02:ea:be:3b:0a:d1:fa:
         b6:01:55:12:1c:53:0a:d7:3b:38:54:af:25:0e:a2:5a:c6:6d:
         62:6f:86:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZIvfmnJbE36xhmfhAbqfwUoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhNTAwNTY1ODFjNzc4MGU4YjZjMjk0NGUwYzY0ZjA5MTRk
Zjk4M2UwHhcNMjQwOTI2MTgwMTA2WhcNMjQwOTI3MTgwMTA2WjAzMTEwLwYDVQQD
EygwNGJlNDFjNDBkZjIwMzgyZDFkOWY3OTNkZGI1NjI3NjQ1YmFjMzcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9KbCqy2CftjCqI3uNmn+FNaRLF6
8SbNc4BUAcMeoxjuVochMEWJfkQHLP9swbTc5bHJIm4TmSb/UsgOZfmoG1F63AjA
6xTAQI3Oyog/vDyTz2aFeWRhqbSXn3HrE/6bLaJNgM8VubzdJSDgnMTvwNqZy16s
8WvaQy8j9y50tCoSeUeBw8+NU2K/X2xeYdaCGTCdAesskD24fgH8w+anTkxUAHCb
XXWxS9B7bYbIqs2v1fyPzNFm0TRs2s+2KZAgMeVHYECFZcvaPcrR94Bhh+AnCQFq
qZd03GGtu3COdtVB1EiZOe3iZNZyNTD6HaANou/GmDZtENHpysXhj9NvkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAS+QcQN8gOC0dn3k921YnZFusNwMB8GA1UdIwQY
MBaAFHpQBWWBx3gOi2wpRODGTwkU35g+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWxBRlpZSEhlQTZMYkNsRTRNWlBDUlRmbUQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS80OTFmNmQtNWEyZC00NGRiLWEwNWYt
ZDcyOTIzOWE3MzIxLzEvZWxBRlpZSEhlQTZMYkNsRTRNWlBDUlRmbUQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS80OTFmNmQtNWEyZC00NGRiLWEwNWYtZDcyOTIzOWE3MzIx
LzEvZWxBRlpZSEhlQTZMYkNsRTRNWlBDUlRmbUQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAccJ7ItNK
fevXtUZDx2jLfFMnN7wd4ewN5W2ncK5OLvChnN+90cxHYAJHoXJvJ2jLg+rswy1X
YbXc6igLqNC0B3atAJgkmDOI8LREnOMYJbTAfJ4ITa9u06Edw5mIuNPgmF1J1XnI
9eXRkc0XcAeMQHPQOs0h/eiT2ndjNurNiFjyguHTZNrvl7RYyrVN1D/MxzxrvKs9
OdTsNLCxY3QF0RWqhxTdaPZrb7yCdTtQCKLaq+K7UbOAQhW9ouxT4KNumLXjLoqA
xjam1ugFGtxENVWU18B2ld7g+NZW5+POncDriRUC6r47CtH6tgFVEhxTCtc7OFSv
JQ6iWsZtYm+GxQ==
-----END CERTIFICATE-----