Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/a48791-cafd-423f-bd61-816a8c210624/1/RAzmhNVwHdsComtV4p6sn-gE3to.mft
File:                     RAzmhNVwHdsComtV4p6sn-gE3to.mft (raw, json)
Hash identifier:          vuvigMHKf3HD2AyZi6uNsXpZ0kcUjWtmsVOwH3Rlnjg=
Subject key identifier:   4B:A8:C7:8C:3C:50:4F:5A:51:0A:FB:8A:33:5A:7E:AA:D6:EB:4A:90
Authority key identifier: 44:0C:E6:84:D5:70:1D:DB:02:A2:6B:55:E2:9E:AC:9F:E8:04:DE:DA
Certificate issuer:       /CN=440ce684d5701ddb02a26b55e29eac9fe804deda
Certificate serial:       018CF6ADEB92EF268FA743B08918E21258D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RAzmhNVwHdsComtV4p6sn-gE3to.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/a48791-cafd-423f-bd61-816a8c210624/1/RAzmhNVwHdsComtV4p6sn-gE3to.mft
Manifest number:          096F
Signing time:             Thu 11 Jan 2024 04:00:42 +0000
Manifest this update:     Thu 11 Jan 2024 04:00:42 +0000
Manifest next update:     Fri 12 Jan 2024 04:00:42 +0000
Files and hashes:         1: RAnmXqkHvmI5yrM1SgLdMtUxBlU.roa (hash: HNnxJXViyqcUPaZXdicUqT+jXNTQntUacyrAwA2762A=)
                          2: RAzmhNVwHdsComtV4p6sn-gE3to.crl (hash: NRFI2KdbfqyY/Xa5h0ntP6BVVanz4+qKf3WVIfYSA8s=)
                          3: i6X5UggHVk0CQgHWtu1LQisOfNI.roa (hash: x6M3L3pJxdnTfX7sYLXnEIdy1V2akMAELRSztowPRdY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:f6:ad:eb:92:ef:26:8f:a7:43:b0:89:18:e2:12:58:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=440ce684d5701ddb02a26b55e29eac9fe804deda
        Validity
            Not Before: Jan 11 04:00:42 2024 GMT
            Not After : Jan 12 04:00:42 2024 GMT
        Subject: CN=4ba8c78c3c504f5a510afb8a335a7eaad6eb4a90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:92:ff:0e:b4:38:49:07:30:44:f6:88:a3:00:
                    9f:8c:e8:e7:6f:39:7b:98:cf:1d:d4:6d:e6:28:0c:
                    77:fd:2d:83:f2:ee:98:99:aa:7f:5b:c6:d2:16:a2:
                    5d:15:9d:5d:2c:3d:88:00:85:d3:b3:b7:23:67:53:
                    96:f4:5b:ca:11:3b:69:32:cd:dc:d0:7a:1a:27:50:
                    43:7c:c5:bb:6c:82:f2:7d:44:df:89:82:95:20:7f:
                    d0:9e:41:64:a6:d9:b5:a2:9e:4f:ee:21:36:b4:b9:
                    df:6f:3d:e3:7f:bd:17:69:8f:fd:95:70:12:bc:19:
                    95:ec:19:90:12:60:91:11:c3:74:41:82:cb:8d:40:
                    cc:e0:7d:3a:7e:58:8f:b7:4c:b0:92:e0:82:69:d7:
                    9c:c3:48:92:06:dd:9a:54:20:7d:c8:ad:50:c2:cf:
                    65:aa:c0:c1:1d:8a:43:c7:16:a7:43:4f:9c:3d:2d:
                    5b:f1:59:07:08:0e:fa:65:3b:52:1c:79:eb:84:bd:
                    49:f2:53:67:39:bc:a9:18:07:06:0e:c3:9a:e1:d5:
                    b8:75:98:6c:da:e8:f8:5f:7c:17:c5:d7:70:ff:0d:
                    1b:50:2c:ac:dc:bf:05:d8:dc:b0:93:a2:a5:23:be:
                    8c:ee:3f:60:03:7a:30:69:c2:e8:44:94:61:4e:c3:
                    df:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:A8:C7:8C:3C:50:4F:5A:51:0A:FB:8A:33:5A:7E:AA:D6:EB:4A:90
            X509v3 Authority Key Identifier:
                keyid:44:0C:E6:84:D5:70:1D:DB:02:A2:6B:55:E2:9E:AC:9F:E8:04:DE:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RAzmhNVwHdsComtV4p6sn-gE3to.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a48791-cafd-423f-bd61-816a8c210624/1/RAzmhNVwHdsComtV4p6sn-gE3to.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a48791-cafd-423f-bd61-816a8c210624/1/RAzmhNVwHdsComtV4p6sn-gE3to.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:67:e7:80:84:b6:ec:6e:a3:22:4c:79:3d:f9:97:f8:f7:4e:
         c3:8e:d7:bf:3c:12:ba:7d:67:ed:aa:6a:b2:db:59:15:2b:8f:
         d0:42:a5:2c:29:d5:cf:c8:98:2e:ef:fe:6a:e1:d0:f5:ce:c1:
         02:c8:59:b7:5a:4e:b8:73:7c:7a:14:21:e5:d0:f1:d1:5b:52:
         d8:8e:f5:8a:4c:dd:aa:6a:d1:cb:2b:26:0a:e9:16:4c:2e:cd:
         4b:d1:bd:1d:0e:47:f1:8c:dc:a6:9a:d3:f4:b8:5f:f2:03:02:
         64:44:6d:5c:7d:da:b1:6e:8d:73:77:83:0a:76:f9:5a:05:f0:
         71:a1:b0:f3:40:42:31:5c:a2:78:39:4f:6e:ee:10:a9:05:63:
         42:bf:85:5f:2f:af:6b:5e:8e:e3:76:14:f1:a2:78:d9:c4:dd:
         69:ab:3e:2e:1d:7d:19:d6:ab:a3:3a:38:a4:fd:8b:f2:d0:ea:
         3d:fb:d9:22:30:92:91:31:ab:1b:8b:6c:a1:d5:3d:1a:8b:31:
         07:5f:89:2b:63:30:7a:99:3d:53:0c:da:1d:97:d0:0d:0e:59:
         a0:cc:c6:da:89:65:22:22:b8:7f:b6:91:36:c6:48:17:22:3a:
         52:47:c3:c7:bc:9c:bf:b3:ff:5f:c4:d5:db:5c:4a:1e:06:25:
         41:9f:f5:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYz2reuS7yaPp0OwiRjiEljSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0MGNlNjg0ZDU3MDFkZGIwMmEyNmI1NWUyOWVhYzlmZTgw
NGRlZGEwHhcNMjQwMTExMDQwMDQyWhcNMjQwMTEyMDQwMDQyWjAzMTEwLwYDVQQD
Eyg0YmE4Yzc4YzNjNTA0ZjVhNTEwYWZiOGEzMzVhN2VhYWQ2ZWI0YTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9JL/DrQ4SQcwRPaIowCfjOjnbzl7
mM8d1G3mKAx3/S2D8u6Ymap/W8bSFqJdFZ1dLD2IAIXTs7cjZ1OW9FvKETtpMs3c
0HoaJ1BDfMW7bILyfUTfiYKVIH/QnkFkptm1op5P7iE2tLnfbz3jf70XaY/9lXAS
vBmV7BmQEmCREcN0QYLLjUDM4H06fliPt0ywkuCCadecw0iSBt2aVCB9yK1Qws9l
qsDBHYpDxxanQ0+cPS1b8VkHCA76ZTtSHHnrhL1J8lNnObypGAcGDsOa4dW4dZhs
2uj4X3wXxddw/w0bUCys3L8F2Nywk6KlI76M7j9gA3owacLoRJRhTsPf3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEuox4w8UE9aUQr7ijNafqrW60qQMB8GA1UdIwQY
MBaAFEQM5oTVcB3bAqJrVeKerJ/oBN7aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkF6bWhOVndIZHNDb210VjRwNnNuLWdFM3RvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9hNDg3OTEtY2FmZC00MjNmLWJkNjEt
ODE2YThjMjEwNjI0LzEvUkF6bWhOVndIZHNDb210VjRwNnNuLWdFM3RvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi9hNDg3OTEtY2FmZC00MjNmLWJkNjEtODE2YThjMjEwNjI0
LzEvUkF6bWhOVndIZHNDb210VjRwNnNuLWdFM3RvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcGfngIS2
7G6jIkx5PfmX+PdOw47XvzwSun1n7apqsttZFSuP0EKlLCnVz8iYLu/+auHQ9c7B
AshZt1pOuHN8ehQh5dDx0VtS2I71ikzdqmrRyysmCukWTC7NS9G9HQ5H8YzcpprT
9Lhf8gMCZERtXH3asW6Nc3eDCnb5WgXwcaGw80BCMVyieDlPbu4QqQVjQr+FXy+v
a16O43YU8aJ42cTdaas+Lh19Gdarozo4pP2L8tDqPfvZIjCSkTGrG4tsodU9Gosx
B1+JK2Mwepk9UwzaHZfQDQ5ZoMzG2ollIiK4f7aRNsZIFyI6UkfDx7ycv7P/X8TV
21xKHgYlQZ/1gQ==
-----END CERTIFICATE-----