Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/dc879e-b17e-49a3-8f03-5a09e9de9071/1/8ojFx-iiZ97JFmRCj9FHhLyGHrw.mft
File:                     8ojFx-iiZ97JFmRCj9FHhLyGHrw.mft (raw, json)
Hash identifier:          wBNu9vejMe8ZAvxxN50CaZtw392A+0LdzDaYrxdQsMk=
Subject key identifier:   A6:30:EA:55:44:E2:CA:32:8F:3F:E5:9F:F2:10:4B:F2:73:CB:57:9B
Authority key identifier: F2:88:C5:C7:E8:A2:67:DE:C9:16:64:42:8F:D1:47:84:BC:86:1E:BC
Certificate issuer:       /CN=f288c5c7e8a267dec91664428fd14784bc861ebc
Certificate serial:       018D8D18D730BAA1D1654E03842269BB45E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8ojFx-iiZ97JFmRCj9FHhLyGHrw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/dc879e-b17e-49a3-8f03-5a09e9de9071/1/8ojFx-iiZ97JFmRCj9FHhLyGHrw.mft
Manifest number:          083A
Signing time:             Fri 09 Feb 2024 09:00:31 +0000
Manifest this update:     Fri 09 Feb 2024 09:00:31 +0000
Manifest next update:     Sat 10 Feb 2024 09:00:31 +0000
Files and hashes:         1: 8ojFx-iiZ97JFmRCj9FHhLyGHrw.crl (hash: asWwy/Ogl3YWCV92aF5fc9D1ybDg9l8JTKMXTDV8HhM=)
                          2: GM--dj_JWY22EdyKpzsGP_rM96g.roa (hash: ypWLcDXsYrBF1V4BbB4kFlkWEMhK02IWzARiRIiUHvQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:8d:18:d7:30:ba:a1:d1:65:4e:03:84:22:69:bb:45:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f288c5c7e8a267dec91664428fd14784bc861ebc
        Validity
            Not Before: Feb  9 09:00:31 2024 GMT
            Not After : Feb 10 09:00:31 2024 GMT
        Subject: CN=a630ea5544e2ca328f3fe59ff2104bf273cb579b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:cd:b5:0a:39:91:5d:23:8c:02:1d:02:6a:e4:
                    6c:7b:98:87:6a:ee:07:86:6a:6c:d9:b8:c5:8b:c8:
                    58:88:1b:8a:3c:51:0a:2d:97:f4:27:89:25:b2:86:
                    6f:53:34:90:6b:c0:d2:41:2c:17:f7:17:7c:4e:dc:
                    48:d1:99:cc:cb:99:f9:75:9c:d4:3f:8f:d2:f9:f9:
                    38:0e:ed:33:7b:36:19:2b:cf:36:b3:03:34:1d:a9:
                    55:3d:2e:3b:e9:cd:cb:73:2f:22:93:8e:fb:3c:44:
                    9a:ec:6c:87:8b:fd:47:32:d2:3d:c1:2b:4b:3a:fa:
                    5e:2b:03:e4:c3:7a:9a:a4:f9:2e:be:6b:fa:26:0a:
                    e0:a6:bd:e8:15:18:90:ff:ae:05:35:d8:72:20:9d:
                    f7:33:07:1b:d7:65:ef:7e:ac:af:ca:f8:cd:fe:d5:
                    ad:6d:3b:4f:ee:cc:06:cd:de:9e:85:d7:35:15:4e:
                    64:6c:ef:0c:7e:55:11:a9:eb:69:ad:82:80:f9:5d:
                    9e:d5:2d:c2:1b:75:03:fa:e3:7b:0b:11:c2:52:7e:
                    d3:5d:1a:57:a2:8a:e7:c0:3a:0a:78:24:e9:a7:e2:
                    bf:b9:9f:00:72:7c:ca:fc:27:b2:76:6c:94:00:28:
                    61:01:f3:10:08:fd:43:75:c9:16:20:d6:13:76:f4:
                    ee:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:30:EA:55:44:E2:CA:32:8F:3F:E5:9F:F2:10:4B:F2:73:CB:57:9B
            X509v3 Authority Key Identifier:
                keyid:F2:88:C5:C7:E8:A2:67:DE:C9:16:64:42:8F:D1:47:84:BC:86:1E:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ojFx-iiZ97JFmRCj9FHhLyGHrw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/dc879e-b17e-49a3-8f03-5a09e9de9071/1/8ojFx-iiZ97JFmRCj9FHhLyGHrw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/dc879e-b17e-49a3-8f03-5a09e9de9071/1/8ojFx-iiZ97JFmRCj9FHhLyGHrw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:f1:01:f7:a8:a8:73:27:3b:18:85:6c:c6:1e:ad:ca:aa:31:
         43:a0:33:31:31:28:b2:22:a5:30:ca:da:fd:29:67:a8:9f:6e:
         b4:06:08:70:17:09:3e:64:f2:5b:88:bc:d8:87:f7:2d:7f:c3:
         88:89:c7:2b:5a:da:b1:28:f8:56:fe:f7:15:6a:e8:9b:34:6f:
         d0:c8:f4:d7:9c:98:f1:05:44:6c:fc:78:c5:6d:97:c1:8f:0e:
         4c:34:15:18:a3:32:3e:98:73:ae:cc:b3:4b:b8:4f:f3:9d:60:
         3d:b0:f4:2f:4b:2c:90:81:05:e7:67:99:f5:41:8c:4c:53:93:
         4d:b9:42:69:2b:f8:9f:a0:83:be:35:e7:89:97:14:68:24:17:
         c8:9b:4b:e8:90:15:fd:b8:7a:5a:5e:74:c9:4e:50:0a:8e:d2:
         19:75:a2:8c:56:0a:f9:73:09:40:a7:1a:6b:34:c3:80:10:45:
         c5:54:96:2d:3a:84:93:1d:fd:23:76:cc:cf:dd:77:18:6d:72:
         9c:8e:46:8e:be:c7:10:77:e9:63:19:0b:8c:5d:15:bc:8f:45:
         c2:91:ff:f8:bd:1e:44:1a:01:78:b6:74:15:25:62:42:a7:a9:
         c3:37:7f:fe:b7:e8:48:d4:a7:60:d1:d8:64:bc:4d:0a:31:20:
         ad:2d:68:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY2NGNcwuqHRZU4DhCJpu0XmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyODhjNWM3ZThhMjY3ZGVjOTE2NjQ0MjhmZDE0Nzg0YmM4
NjFlYmMwHhcNMjQwMjA5MDkwMDMxWhcNMjQwMjEwMDkwMDMxWjAzMTEwLwYDVQQD
EyhhNjMwZWE1NTQ0ZTJjYTMyOGYzZmU1OWZmMjEwNGJmMjczY2I1NzliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsc21CjmRXSOMAh0CauRse5iHau4H
hmps2bjFi8hYiBuKPFEKLZf0J4klsoZvUzSQa8DSQSwX9xd8TtxI0ZnMy5n5dZzU
P4/S+fk4Du0zezYZK882swM0HalVPS476c3Lcy8ik477PESa7GyHi/1HMtI9wStL
OvpeKwPkw3qapPkuvmv6Jgrgpr3oFRiQ/64FNdhyIJ33Mwcb12XvfqyvyvjN/tWt
bTtP7swGzd6ehdc1FU5kbO8MflURqetprYKA+V2e1S3CG3UD+uN7CxHCUn7TXRpX
oornwDoKeCTpp+K/uZ8AcnzK/CeydmyUAChhAfMQCP1DdckWINYTdvTuMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKYw6lVE4soyjz/ln/IQS/Jzy1ebMB8GA1UdIwQY
MBaAFPKIxcfoomfeyRZkQo/RR4S8hh68MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOG9qRngtaWlaOTdKRm1SQ2o5RkhoTHlHSHJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9kYzg3OWUtYjE3ZS00OWEzLThmMDMt
NWEwOWU5ZGU5MDcxLzEvOG9qRngtaWlaOTdKRm1SQ2o5RkhoTHlHSHJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi9kYzg3OWUtYjE3ZS00OWEzLThmMDMtNWEwOWU5ZGU5MDcx
LzEvOG9qRngtaWlaOTdKRm1SQ2o5RkhoTHlHSHJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlvEB96io
cyc7GIVsxh6tyqoxQ6AzMTEosiKlMMra/SlnqJ9utAYIcBcJPmTyW4i82If3LX/D
iInHK1rasSj4Vv73FWromzRv0Mj015yY8QVEbPx4xW2XwY8OTDQVGKMyPphzrsyz
S7hP851gPbD0L0sskIEF52eZ9UGMTFOTTblCaSv4n6CDvjXniZcUaCQXyJtL6JAV
/bh6Wl50yU5QCo7SGXWijFYK+XMJQKcaazTDgBBFxVSWLTqEkx39I3bMz913GG1y
nI5Gjr7HEHfpYxkLjF0VvI9FwpH/+L0eRBoBeLZ0FSViQqepwzd//rfoSNSnYNHY
ZLxNCjEgrS1oJQ==
-----END CERTIFICATE-----