Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/67e9fb-060c-4534-889e-37797dd463d3/1/EYj_Twoq8AByuoZoNi2a2PQD1dk.mft
File:                     EYj_Twoq8AByuoZoNi2a2PQD1dk.mft (raw, json)
Hash identifier:          IVfNVWak6dsx+L5MSPyh5zdZUVHqb0qHomP/0Ofl0z4=
Subject key identifier:   D7:87:EE:A9:E4:07:3A:47:9D:E0:C3:BB:53:9B:A1:14:F4:2D:3B:5F
Authority key identifier: 11:88:FF:4F:0A:2A:F0:00:72:BA:86:68:36:2D:9A:D8:F4:03:D5:D9
Certificate issuer:       /CN=1188ff4f0a2af00072ba8668362d9ad8f403d5d9
Certificate serial:       019001CF4C86C83D41BD779768980033820E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EYj_Twoq8AByuoZoNi2a2PQD1dk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/67e9fb-060c-4534-889e-37797dd463d3/1/EYj_Twoq8AByuoZoNi2a2PQD1dk.mft
Manifest number:          1F
Signing time:             Mon 10 Jun 2024 11:01:20 +0000
Manifest this update:     Mon 10 Jun 2024 11:01:20 +0000
Manifest next update:     Tue 11 Jun 2024 11:01:20 +0000
Files and hashes:         1: EYj_Twoq8AByuoZoNi2a2PQD1dk.crl (hash: aol+ir6+xaY2ii+abCXLAbBG2nb70yjppjbZnYqPgcE=)
                          2: sE-QaRZzksPdAYP69OYkB5PjmB4.roa (hash: ef59Y7vif0QT7VFXkYP40sy70xG6xzeMrwgmO5D9iPw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:01:cf:4c:86:c8:3d:41:bd:77:97:68:98:00:33:82:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1188ff4f0a2af00072ba8668362d9ad8f403d5d9
        Validity
            Not Before: Jun 10 11:01:20 2024 GMT
            Not After : Jun 11 11:01:20 2024 GMT
        Subject: CN=d787eea9e4073a479de0c3bb539ba114f42d3b5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:8b:83:29:10:87:6d:52:7e:60:28:a0:e6:44:
                    27:d9:69:a8:6a:1e:6e:6f:07:c4:3b:b8:1d:1a:c9:
                    b3:f5:33:eb:21:d4:74:12:85:8f:31:81:37:58:32:
                    c0:01:f3:ef:f0:11:e6:b3:03:c2:ee:d9:97:b9:cb:
                    29:1b:52:91:35:ce:95:20:6d:8b:0e:7f:09:bd:27:
                    e3:6a:73:7f:63:8f:ca:dc:f6:45:58:2c:2e:30:5a:
                    07:cd:99:13:8a:a4:b9:85:77:9d:80:23:ae:a5:86:
                    56:5a:0d:fc:37:e8:97:18:2c:2e:8f:d7:e0:c0:4e:
                    34:8d:d9:52:0b:1e:72:d7:9f:8b:74:17:e3:da:c8:
                    3e:2b:9e:ac:2c:ff:10:a2:fa:69:0f:23:93:11:f0:
                    b1:43:c1:ea:3b:9b:2d:07:41:96:3c:51:c4:d9:03:
                    48:d7:cb:77:52:20:73:d4:02:79:73:a7:4f:56:88:
                    3d:5f:44:14:28:4e:4d:cb:cd:32:36:fa:c1:1b:62:
                    d6:75:a0:ee:b3:b0:07:9e:f4:81:35:2c:dd:d8:91:
                    29:db:f7:37:39:1e:8e:d6:4f:17:df:ba:39:2e:2a:
                    ea:12:60:ff:1e:51:0a:46:4c:f0:ad:b1:db:29:9c:
                    23:26:1f:85:95:97:6e:8e:25:80:07:f5:0b:eb:eb:
                    46:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:87:EE:A9:E4:07:3A:47:9D:E0:C3:BB:53:9B:A1:14:F4:2D:3B:5F
            X509v3 Authority Key Identifier:
                keyid:11:88:FF:4F:0A:2A:F0:00:72:BA:86:68:36:2D:9A:D8:F4:03:D5:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EYj_Twoq8AByuoZoNi2a2PQD1dk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/67e9fb-060c-4534-889e-37797dd463d3/1/EYj_Twoq8AByuoZoNi2a2PQD1dk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/67e9fb-060c-4534-889e-37797dd463d3/1/EYj_Twoq8AByuoZoNi2a2PQD1dk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:0a:1d:43:cd:d1:62:58:cb:90:12:d0:f7:0b:8e:12:90:8e:
         ea:08:f2:e8:54:6d:6d:2d:1f:43:3d:0c:99:2e:e6:dd:a5:f6:
         4e:cc:08:71:42:ce:cb:c6:e5:fa:25:ad:80:fc:83:00:60:0c:
         13:54:6d:3a:8e:1f:fd:13:a5:b6:af:64:9d:9a:bb:af:7c:3c:
         90:ed:a0:7b:0b:dd:a6:fe:c7:6f:3e:5d:a3:3e:a9:fa:ab:6e:
         3d:0d:05:b2:dc:c0:bf:ad:21:cb:f0:43:13:81:a9:9f:8b:d6:
         1b:4e:d5:55:78:b0:e4:8e:59:4d:70:b3:66:6f:13:28:b3:8f:
         36:12:7d:8e:75:c8:12:b5:5b:73:d9:d1:cd:b6:4f:37:d5:23:
         e2:d5:a4:48:38:ef:7f:80:45:7d:17:0d:f5:d9:ac:78:6a:1f:
         c8:cb:8e:fa:f8:77:72:f2:c2:18:40:3d:91:14:91:7a:53:84:
         db:6c:68:66:c6:00:ac:95:31:50:e2:2e:6f:c6:12:2d:01:5b:
         4d:e6:ef:d9:8a:a9:ea:7b:05:fa:44:a1:49:6c:eb:d7:88:a7:
         b5:7c:d0:58:9d:ae:55:b7:76:0e:73:80:11:9d:f0:49:88:13:
         c5:3c:36:73:d4:c8:b8:06:93:4f:1d:e7:08:84:63:09:ad:f3:
         71:2b:6d:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZABz0yGyD1BvXeXaJgAM4IOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExODhmZjRmMGEyYWYwMDA3MmJhODY2ODM2MmQ5YWQ4ZjQw
M2Q1ZDkwHhcNMjQwNjEwMTEwMTIwWhcNMjQwNjExMTEwMTIwWjAzMTEwLwYDVQQD
EyhkNzg3ZWVhOWU0MDczYTQ3OWRlMGMzYmI1MzliYTExNGY0MmQzYjVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnouDKRCHbVJ+YCig5kQn2Wmoah5u
bwfEO7gdGsmz9TPrIdR0EoWPMYE3WDLAAfPv8BHmswPC7tmXucspG1KRNc6VIG2L
Dn8JvSfjanN/Y4/K3PZFWCwuMFoHzZkTiqS5hXedgCOupYZWWg38N+iXGCwuj9fg
wE40jdlSCx5y15+LdBfj2sg+K56sLP8QovppDyOTEfCxQ8HqO5stB0GWPFHE2QNI
18t3UiBz1AJ5c6dPVog9X0QUKE5Ny80yNvrBG2LWdaDus7AHnvSBNSzd2JEp2/c3
OR6O1k8X37o5LirqEmD/HlEKRkzwrbHbKZwjJh+FlZdujiWAB/UL6+tGjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNeH7qnkBzpHneDDu1OboRT0LTtfMB8GA1UdIwQY
MBaAFBGI/08KKvAAcrqGaDYtmtj0A9XZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVlqX1R3b3E4QUJ5dW9ab05pMmEyUFFEMWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi82N2U5ZmItMDYwYy00NTM0LTg4OWUt
Mzc3OTdkZDQ2M2QzLzEvRVlqX1R3b3E4QUJ5dW9ab05pMmEyUFFEMWRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi82N2U5ZmItMDYwYy00NTM0LTg4OWUtMzc3OTdkZDQ2M2Qz
LzEvRVlqX1R3b3E4QUJ5dW9ab05pMmEyUFFEMWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzgodQ83R
YljLkBLQ9wuOEpCO6gjy6FRtbS0fQz0MmS7m3aX2TswIcULOy8bl+iWtgPyDAGAM
E1RtOo4f/ROltq9knZq7r3w8kO2gewvdpv7Hbz5doz6p+qtuPQ0FstzAv60hy/BD
E4Gpn4vWG07VVXiw5I5ZTXCzZm8TKLOPNhJ9jnXIErVbc9nRzbZPN9Uj4tWkSDjv
f4BFfRcN9dmseGofyMuO+vh3cvLCGEA9kRSRelOE22xoZsYArJUxUOIub8YSLQFb
Tebv2Yqp6nsF+kShSWzr14intXzQWJ2uVbd2DnOAEZ3wSYgTxTw2c9TIuAaTTx3n
CIRjCa3zcStt3A==
-----END CERTIFICATE-----