Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/974672-32b4-438f-ab4a-4454c2fcdb68/1/c8FZaUBHicgVIlw3Rjqn4ds_LkU.mft
File:                     c8FZaUBHicgVIlw3Rjqn4ds_LkU.mft (raw, json)
Hash identifier:          oTpxnq0JytEgHkaoICaC2OaLHPw4zEUstvvYC29dF9c=
Subject key identifier:   6A:D0:B6:85:21:74:57:9B:8D:E4:8B:BE:2B:F9:5C:84:F2:28:C3:AA
Authority key identifier: 73:C1:59:69:40:47:89:C8:15:22:5C:37:46:3A:A7:E1:DB:3F:2E:45
Certificate issuer:       /CN=73c15969404789c815225c37463aa7e1db3f2e45
Certificate serial:       0190C881D69A32693AF3D096DE194D750E2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c8FZaUBHicgVIlw3Rjqn4ds_LkU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/974672-32b4-438f-ab4a-4454c2fcdb68/1/c8FZaUBHicgVIlw3Rjqn4ds_LkU.mft
Manifest number:          01FE
Signing time:             Fri 19 Jul 2024 01:01:10 +0000
Manifest this update:     Fri 19 Jul 2024 01:01:10 +0000
Manifest next update:     Sat 20 Jul 2024 01:01:10 +0000
Files and hashes:         1: c8FZaUBHicgVIlw3Rjqn4ds_LkU.crl (hash: W4cmj4oYX1GDN7NIOnhxWV5gYeNK4lSc7RsoUJk84z4=)
                          2: pwXRtHONVqgIkOU9pk3Id4btOpI.roa (hash: tVHD1zQhr9W4iK7a8TmbY1MeoQRVmQr3nz2vN6gNVqQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:c8:81:d6:9a:32:69:3a:f3:d0:96:de:19:4d:75:0e:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c15969404789c815225c37463aa7e1db3f2e45
        Validity
            Not Before: Jul 19 01:01:10 2024 GMT
            Not After : Jul 20 01:01:10 2024 GMT
        Subject: CN=6ad0b6852174579b8de48bbe2bf95c84f228c3aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:54:a9:26:7a:8e:db:f5:fe:28:c1:15:85:be:
                    a5:d9:99:89:97:be:77:5b:d0:82:d7:78:bc:96:fc:
                    10:ba:ec:ec:26:fe:1f:89:cc:5a:a6:97:9a:07:b5:
                    80:7e:25:33:2e:d6:b5:c7:d1:3c:7d:31:ab:96:74:
                    d0:49:60:ed:a4:b4:b6:52:1d:28:8f:92:4b:24:f3:
                    f1:a2:88:a9:4e:f2:23:ad:9f:a0:ef:d0:f9:5a:e1:
                    a6:dd:74:d7:f0:8a:d3:ec:20:c4:9a:c9:0d:2e:1e:
                    5d:df:1c:7f:24:fd:a8:27:41:ea:b2:28:aa:11:70:
                    c3:38:16:18:32:55:ae:d9:75:46:21:a8:8d:66:30:
                    78:01:60:28:62:11:09:31:d0:ee:1c:68:d6:d1:dd:
                    8d:0e:08:d3:6e:67:9d:7d:93:fc:1f:0d:bf:14:4c:
                    49:42:4a:7e:d1:73:cb:bd:f7:9e:49:82:28:d0:17:
                    39:f3:30:f6:6c:0b:23:c9:84:f9:7a:29:7a:13:e9:
                    21:c3:ce:e5:4b:6b:3b:97:80:8f:fb:f7:68:fa:2e:
                    19:de:de:c0:6f:3c:9b:df:fc:23:d1:4c:e4:fc:aa:
                    9f:ba:14:bc:16:14:1b:57:45:fd:2f:11:b7:b3:fc:
                    cc:ba:3b:52:ef:db:87:7b:55:fa:26:9b:c6:0d:a3:
                    c3:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:D0:B6:85:21:74:57:9B:8D:E4:8B:BE:2B:F9:5C:84:F2:28:C3:AA
            X509v3 Authority Key Identifier:
                keyid:73:C1:59:69:40:47:89:C8:15:22:5C:37:46:3A:A7:E1:DB:3F:2E:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8FZaUBHicgVIlw3Rjqn4ds_LkU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/974672-32b4-438f-ab4a-4454c2fcdb68/1/c8FZaUBHicgVIlw3Rjqn4ds_LkU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/974672-32b4-438f-ab4a-4454c2fcdb68/1/c8FZaUBHicgVIlw3Rjqn4ds_LkU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:5b:d7:f7:ef:5a:2d:bd:eb:18:e5:30:7e:88:a3:ad:15:58:
         16:65:69:ed:41:43:4a:50:25:00:13:6e:7a:2a:35:2b:ea:1f:
         34:84:33:eb:24:92:e1:eb:bd:8f:07:80:c5:f1:22:b3:03:d5:
         32:6a:17:de:a1:1a:f4:d7:ee:cb:04:49:4e:24:5c:40:4e:f8:
         89:c5:15:9b:57:38:6f:af:be:1d:e1:49:ee:7e:ed:c3:fe:75:
         cb:66:53:e6:c1:09:63:2a:97:5a:c0:21:4a:07:eb:fa:ed:a5:
         0c:e6:9a:ee:72:5c:bc:d7:ac:ce:dd:cd:d0:4b:ce:f7:b9:7d:
         39:e7:fb:d7:cc:a6:1e:f0:28:71:27:b6:3a:10:9a:38:bd:54:
         1e:22:6d:04:9f:e6:42:4b:2d:00:9a:89:6a:ba:55:59:6f:f4:
         af:d6:1b:5e:df:b3:c7:1a:d3:9c:93:2b:71:cc:69:4b:16:9f:
         16:f1:19:d6:b1:64:e2:ee:56:e8:86:a4:3a:9b:36:e9:a2:f5:
         b9:aa:6a:9b:b9:32:21:6d:15:61:38:fa:72:54:f1:54:53:f4:
         51:2f:7f:72:04:c4:9f:a7:b8:61:32:0c:20:03:b1:2e:d8:be:
         7b:f5:ea:e1:60:72:9d:44:1f:5e:43:6a:61:78:a2:60:77:d8:
         e1:c6:3d:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZDIgdaaMmk689CW3hlNdQ4sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczYzE1OTY5NDA0Nzg5YzgxNTIyNWMzNzQ2M2FhN2UxZGIz
ZjJlNDUwHhcNMjQwNzE5MDEwMTEwWhcNMjQwNzIwMDEwMTEwWjAzMTEwLwYDVQQD
Eyg2YWQwYjY4NTIxNzQ1NzliOGRlNDhiYmUyYmY5NWM4NGYyMjhjM2FhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA11SpJnqO2/X+KMEVhb6l2ZmJl753
W9CC13i8lvwQuuzsJv4ficxappeaB7WAfiUzLta1x9E8fTGrlnTQSWDtpLS2Uh0o
j5JLJPPxooipTvIjrZ+g79D5WuGm3XTX8IrT7CDEmskNLh5d3xx/JP2oJ0Hqsiiq
EXDDOBYYMlWu2XVGIaiNZjB4AWAoYhEJMdDuHGjW0d2NDgjTbmedfZP8Hw2/FExJ
Qkp+0XPLvfeeSYIo0Bc58zD2bAsjyYT5eil6E+khw87lS2s7l4CP+/do+i4Z3t7A
bzyb3/wj0Uzk/KqfuhS8FhQbV0X9LxG3s/zMujtS79uHe1X6JpvGDaPDUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGrQtoUhdFebjeSLviv5XITyKMOqMB8GA1UdIwQY
MBaAFHPBWWlAR4nIFSJcN0Y6p+HbPy5FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzhGWmFVQkhpY2dWSWx3M1JqcW40ZHNfTGtVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS85NzQ2NzItMzJiNC00MzhmLWFiNGEt
NDQ1NGMyZmNkYjY4LzEvYzhGWmFVQkhpY2dWSWx3M1JqcW40ZHNfTGtVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS85NzQ2NzItMzJiNC00MzhmLWFiNGEtNDQ1NGMyZmNkYjY4
LzEvYzhGWmFVQkhpY2dWSWx3M1JqcW40ZHNfTGtVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALlvX9+9a
Lb3rGOUwfoijrRVYFmVp7UFDSlAlABNueio1K+ofNIQz6ySS4eu9jweAxfEiswPV
MmoX3qEa9NfuywRJTiRcQE74icUVm1c4b6++HeFJ7n7tw/51y2ZT5sEJYyqXWsAh
Sgfr+u2lDOaa7nJcvNeszt3N0EvO97l9Oef718ymHvAocSe2OhCaOL1UHiJtBJ/m
QkstAJqJarpVWW/0r9YbXt+zxxrTnJMrccxpSxafFvEZ1rFk4u5W6IakOps26aL1
uapqm7kyIW0VYTj6clTxVFP0US9/cgTEn6e4YTIMIAOxLti+e/Xq4WBynUQfXkNq
YXiiYHfY4cY9iw==
-----END CERTIFICATE-----