Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/9ec680-ae36-494b-a2f1-54c58b476e9a/1/sgtRGvnyeKCteI6TdBVL9q1eo6s.mft
File:                     sgtRGvnyeKCteI6TdBVL9q1eo6s.mft (raw, json)
Hash identifier:          lQ9kcrwTB7QuANvTL9olxSTkvBsago68Ll0RmJ/PWRo=
Subject key identifier:   AE:F1:8F:BE:76:81:5C:53:F6:17:F9:2F:12:7C:7D:47:6E:A2:00:8D
Authority key identifier: B2:0B:51:1A:F9:F2:78:A0:AD:78:8E:93:74:15:4B:F6:AD:5E:A3:AB
Certificate issuer:       /CN=b20b511af9f278a0ad788e9374154bf6ad5ea3ab
Certificate serial:       01932E68E7B410D557FDC51E4867517CDFF9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sgtRGvnyeKCteI6TdBVL9q1eo6s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/9ec680-ae36-494b-a2f1-54c58b476e9a/1/sgtRGvnyeKCteI6TdBVL9q1eo6s.mft
Manifest number:          135C
Signing time:             Fri 15 Nov 2024 06:00:47 +0000
Manifest this update:     Fri 15 Nov 2024 06:00:47 +0000
Manifest next update:     Sat 16 Nov 2024 06:00:47 +0000
Files and hashes:         1: gsFbo8YC8jXFM7d-mPLdV3ZkiZY.roa (hash: Bb5nKVUVxQWA6J1/fPoqe+k/13A+QQMVYyS+H+SiBjA=)
                          2: sgtRGvnyeKCteI6TdBVL9q1eo6s.crl (hash: kqWsU1AKcl9ZuG7rcycuG9eklQoeABBCZG4Q96eL+LI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:2e:68:e7:b4:10:d5:57:fd:c5:1e:48:67:51:7c:df:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b20b511af9f278a0ad788e9374154bf6ad5ea3ab
        Validity
            Not Before: Nov 15 06:00:47 2024 GMT
            Not After : Nov 16 06:00:47 2024 GMT
        Subject: CN=aef18fbe76815c53f617f92f127c7d476ea2008d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7c:9b:15:51:5c:bf:a0:da:92:d0:9f:d5:1f:
                    f7:76:56:0d:74:6f:14:14:fb:b2:ac:d3:e1:71:45:
                    ca:26:56:cd:a6:c8:a6:cf:d4:21:6c:1c:66:19:ac:
                    d1:04:7a:50:c5:c4:56:b9:44:25:e7:67:14:56:4c:
                    f5:ac:c6:98:aa:c3:18:8e:6b:c2:ca:9c:88:4a:ed:
                    21:e2:2e:b6:1e:35:a8:34:75:70:1b:4a:c6:83:40:
                    ac:33:aa:72:36:92:45:12:76:4a:cd:61:05:f1:b0:
                    38:88:fa:86:5d:96:5a:80:e0:ae:98:5e:1b:87:a1:
                    40:e9:f6:46:ab:af:8c:53:a6:3b:d1:64:65:f4:59:
                    78:97:eb:e5:ee:2b:05:45:70:af:e6:7b:fa:59:e5:
                    2f:a5:4a:69:a7:b9:0b:e1:7d:ee:70:38:a3:4e:ba:
                    e3:91:25:af:02:d0:12:9c:d2:cf:10:fd:eb:ce:0d:
                    d8:5f:41:7c:cd:c8:c3:18:e2:ac:e9:b6:52:94:53:
                    8d:e5:54:7e:ef:e8:e4:25:67:f7:8a:d0:37:d7:30:
                    93:6b:95:f7:d2:ed:4e:46:e3:03:81:f8:75:58:61:
                    eb:02:85:aa:f2:38:a8:d3:58:4c:b8:9d:1b:84:a9:
                    8d:d0:ca:2a:52:09:48:fc:ec:85:78:e5:d6:17:e8:
                    ba:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:F1:8F:BE:76:81:5C:53:F6:17:F9:2F:12:7C:7D:47:6E:A2:00:8D
            X509v3 Authority Key Identifier:
                keyid:B2:0B:51:1A:F9:F2:78:A0:AD:78:8E:93:74:15:4B:F6:AD:5E:A3:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sgtRGvnyeKCteI6TdBVL9q1eo6s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/9ec680-ae36-494b-a2f1-54c58b476e9a/1/sgtRGvnyeKCteI6TdBVL9q1eo6s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/9ec680-ae36-494b-a2f1-54c58b476e9a/1/sgtRGvnyeKCteI6TdBVL9q1eo6s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:a9:33:43:8e:2f:2d:21:e3:5e:cd:28:17:59:0c:00:fc:2f:
         96:44:0e:d1:65:97:3b:c0:38:9c:1a:26:4e:cb:09:fb:3f:97:
         7d:dc:9a:63:6a:3e:21:e9:d5:34:71:6b:a4:df:4b:05:f2:d6:
         90:b1:cf:6f:fd:2f:c1:cd:e1:0e:47:e8:21:9e:a4:a1:99:a1:
         b8:34:ab:83:93:45:df:bc:b2:30:a8:fe:11:4e:44:61:c8:35:
         26:4b:80:d9:aa:78:34:e0:62:fb:1d:14:93:3c:9b:7f:0e:5e:
         d4:2e:92:99:91:1f:a9:73:2a:87:b2:c4:ae:6e:c9:8a:fe:0a:
         5e:bc:24:c6:7d:31:b8:da:d5:d8:63:ba:10:cb:4b:33:fa:ab:
         11:93:e9:80:2d:ce:49:c7:88:48:2c:7d:7e:e9:b1:22:1d:91:
         b2:8d:eb:cd:1d:7d:59:6e:12:f0:ba:4e:80:13:46:e5:7f:93:
         21:45:1d:19:16:3b:8f:33:0b:50:51:3b:7a:31:f7:6f:de:bb:
         5b:48:36:97:1d:b2:d9:fe:7b:7a:0f:d8:bd:9e:dc:3b:09:a7:
         e8:2f:a4:ff:41:ab:1a:ad:1a:f1:4b:aa:4b:7c:1b:d3:42:55:
         81:2d:96:bb:6b:3c:9c:d0:af:26:0b:0b:d3:e2:62:0b:a9:68:
         d2:f6:21:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZMuaOe0ENVX/cUeSGdRfN/5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyMGI1MTFhZjlmMjc4YTBhZDc4OGU5Mzc0MTU0YmY2YWQ1
ZWEzYWIwHhcNMjQxMTE1MDYwMDQ3WhcNMjQxMTE2MDYwMDQ3WjAzMTEwLwYDVQQD
EyhhZWYxOGZiZTc2ODE1YzUzZjYxN2Y5MmYxMjdjN2Q0NzZlYTIwMDhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3ybFVFcv6DaktCf1R/3dlYNdG8U
FPuyrNPhcUXKJlbNpsimz9QhbBxmGazRBHpQxcRWuUQl52cUVkz1rMaYqsMYjmvC
ypyISu0h4i62HjWoNHVwG0rGg0CsM6pyNpJFEnZKzWEF8bA4iPqGXZZagOCumF4b
h6FA6fZGq6+MU6Y70WRl9Fl4l+vl7isFRXCv5nv6WeUvpUppp7kL4X3ucDijTrrj
kSWvAtASnNLPEP3rzg3YX0F8zcjDGOKs6bZSlFON5VR+7+jkJWf3itA31zCTa5X3
0u1ORuMDgfh1WGHrAoWq8jio01hMuJ0bhKmN0MoqUglI/OyFeOXWF+i6FwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK7xj752gVxT9hf5LxJ8fUduogCNMB8GA1UdIwQY
MBaAFLILURr58nigrXiOk3QVS/atXqOrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2d0Ukd2bnllS0N0ZUk2VGRCVkw5cTFlbzZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi85ZWM2ODAtYWUzNi00OTRiLWEyZjEt
NTRjNThiNDc2ZTlhLzEvc2d0Ukd2bnllS0N0ZUk2VGRCVkw5cTFlbzZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi85ZWM2ODAtYWUzNi00OTRiLWEyZjEtNTRjNThiNDc2ZTlh
LzEvc2d0Ukd2bnllS0N0ZUk2VGRCVkw5cTFlbzZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHqkzQ44v
LSHjXs0oF1kMAPwvlkQO0WWXO8A4nBomTssJ+z+XfdyaY2o+IenVNHFrpN9LBfLW
kLHPb/0vwc3hDkfoIZ6koZmhuDSrg5NF37yyMKj+EU5EYcg1JkuA2ap4NOBi+x0U
kzybfw5e1C6SmZEfqXMqh7LErm7Jiv4KXrwkxn0xuNrV2GO6EMtLM/qrEZPpgC3O
SceISCx9fumxIh2Rso3rzR19WW4S8LpOgBNG5X+TIUUdGRY7jzMLUFE7ejH3b967
W0g2lx2y2f57eg/YvZ7cOwmn6C+k/0GrGq0a8UuqS3wb00JVgS2Wu2s8nNCvJgsL
0+JiC6lo0vYhjA==
-----END CERTIFICATE-----