Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/bdf80b-e152-46b5-b748-e41233731d79/1/cqO28qiJ5BjS61Kk8RCGKDzGY1A.mft
File:                     cqO28qiJ5BjS61Kk8RCGKDzGY1A.mft (raw, json)
Hash identifier:          zjhkpIoQ1CruKfhjA8Y0D3rEhHFb7wWHyF/poDLbCsY=
Subject key identifier:   63:51:02:27:DA:2F:75:81:3C:50:FF:87:C5:B2:DD:FB:71:3F:3E:2B
Authority key identifier: 72:A3:B6:F2:A8:89:E4:18:D2:EB:52:A4:F1:10:86:28:3C:C6:63:50
Certificate issuer:       /CN=72a3b6f2a889e418d2eb52a4f11086283cc66350
Certificate serial:       0190B4FB34570EAF54218F1BB66EBCFFD5DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cqO28qiJ5BjS61Kk8RCGKDzGY1A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/bdf80b-e152-46b5-b748-e41233731d79/1/cqO28qiJ5BjS61Kk8RCGKDzGY1A.mft
Manifest number:          0F
Signing time:             Mon 15 Jul 2024 06:01:19 +0000
Manifest this update:     Mon 15 Jul 2024 06:01:19 +0000
Manifest next update:     Tue 16 Jul 2024 06:01:19 +0000
Files and hashes:         1: cqO28qiJ5BjS61Kk8RCGKDzGY1A.crl (hash: QWtpGztuoA9V4uvuC3L3Zr58ZBvIYkR/lQ7BwYNgpt4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:b4:fb:34:57:0e:af:54:21:8f:1b:b6:6e:bc:ff:d5:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72a3b6f2a889e418d2eb52a4f11086283cc66350
        Validity
            Not Before: Jul 15 06:01:19 2024 GMT
            Not After : Jul 16 06:01:19 2024 GMT
        Subject: CN=63510227da2f75813c50ff87c5b2ddfb713f3e2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:37:ae:31:64:91:be:6f:1e:7b:da:c3:56:02:
                    64:a2:95:1f:c9:c4:4e:42:43:d9:fa:e2:9d:32:85:
                    d1:32:ae:2d:df:b4:30:26:09:9e:cc:9f:40:37:a4:
                    76:2d:d8:de:33:c5:b0:f1:c0:5d:0d:eb:cd:9b:6a:
                    1c:a1:81:72:9e:fc:b4:8e:9d:8b:da:45:67:06:5a:
                    b1:ba:37:3b:45:cf:71:43:8b:94:40:8c:01:94:36:
                    be:f3:be:29:10:1d:ea:47:cf:9a:1a:2d:47:d5:5c:
                    ca:96:5f:7d:43:ca:0e:90:57:50:41:c6:48:53:c0:
                    be:f7:6e:f9:46:65:28:91:6d:04:e6:89:73:56:3e:
                    52:6d:b3:70:a3:94:56:c7:c0:23:64:12:d6:e6:16:
                    98:d6:9b:87:2a:4e:0a:01:6f:fc:67:86:c4:33:d0:
                    bd:cc:c3:26:86:fa:b1:2b:26:3d:8e:a6:5d:24:73:
                    35:75:fa:c8:af:42:c5:15:2c:98:e3:73:72:58:1f:
                    0f:2e:89:cf:e0:d6:a7:9d:21:f4:9e:93:09:1f:b9:
                    13:be:1d:4e:f2:9b:73:e5:3a:3e:b4:8b:a9:68:86:
                    3c:01:49:08:fd:24:27:b1:fb:3d:3c:c3:32:d4:36:
                    b0:bc:bf:e9:15:32:eb:76:80:12:60:a7:26:e4:45:
                    34:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:51:02:27:DA:2F:75:81:3C:50:FF:87:C5:B2:DD:FB:71:3F:3E:2B
            X509v3 Authority Key Identifier:
                keyid:72:A3:B6:F2:A8:89:E4:18:D2:EB:52:A4:F1:10:86:28:3C:C6:63:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cqO28qiJ5BjS61Kk8RCGKDzGY1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/bdf80b-e152-46b5-b748-e41233731d79/1/cqO28qiJ5BjS61Kk8RCGKDzGY1A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/bdf80b-e152-46b5-b748-e41233731d79/1/cqO28qiJ5BjS61Kk8RCGKDzGY1A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:fd:cb:37:ee:58:39:dc:a2:66:c7:e2:4b:83:f5:cd:c8:5a:
         4b:29:c8:46:f7:25:32:a0:2b:f1:7f:9c:9a:61:4e:2e:35:83:
         a9:dd:9d:43:4b:e5:c5:ff:39:e4:aa:e2:40:8f:ef:79:71:fc:
         55:62:70:bd:e9:46:e3:b3:bf:6a:23:9f:17:91:eb:fe:e2:0b:
         31:ee:d5:3b:a6:be:22:d4:c8:2a:f9:c8:bf:b8:12:dc:0c:39:
         0e:56:bc:e5:db:84:0b:5b:a4:94:ac:44:f6:d8:2b:dc:04:b9:
         93:b3:50:c1:ae:4b:fa:c4:64:6d:a6:91:f1:45:8a:4d:e1:99:
         2f:a7:d5:69:8a:a0:ad:e6:76:a2:3c:c6:ef:d9:b9:ae:6f:39:
         4a:a5:4e:5d:57:5a:6b:0b:68:f3:e1:c8:d6:9d:73:51:2b:6e:
         7a:df:04:49:cd:eb:3e:72:91:0b:c3:ee:0e:74:e1:6a:1e:af:
         5a:cd:a1:ae:35:8d:06:b6:5f:7e:89:84:db:25:53:21:6f:77:
         c1:78:75:f2:73:e8:f7:06:94:df:9f:5c:41:a8:c4:2d:88:66:
         a7:83:ec:5a:7e:32:ae:33:df:28:d9:fe:32:55:a2:f1:e7:e5:
         44:44:e5:49:05:12:0b:e0:21:22:b7:c3:8f:31:c9:49:5b:49:
         e3:81:05:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZC0+zRXDq9UIY8btm68/9XbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyYTNiNmYyYTg4OWU0MThkMmViNTJhNGYxMTA4NjI4M2Nj
NjYzNTAwHhcNMjQwNzE1MDYwMTE5WhcNMjQwNzE2MDYwMTE5WjAzMTEwLwYDVQQD
Eyg2MzUxMDIyN2RhMmY3NTgxM2M1MGZmODdjNWIyZGRmYjcxM2YzZTJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDeuMWSRvm8ee9rDVgJkopUfycRO
QkPZ+uKdMoXRMq4t37QwJgmezJ9AN6R2LdjeM8Ww8cBdDevNm2ocoYFynvy0jp2L
2kVnBlqxujc7Rc9xQ4uUQIwBlDa+874pEB3qR8+aGi1H1VzKll99Q8oOkFdQQcZI
U8C+9275RmUokW0E5olzVj5SbbNwo5RWx8AjZBLW5haY1puHKk4KAW/8Z4bEM9C9
zMMmhvqxKyY9jqZdJHM1dfrIr0LFFSyY43NyWB8PLonP4NannSH0npMJH7kTvh1O
8ptz5To+tIupaIY8AUkI/SQnsfs9PMMy1DawvL/pFTLrdoASYKcm5EU0xQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGNRAifaL3WBPFD/h8Wy3ftxPz4rMB8GA1UdIwQY
MBaAFHKjtvKoieQY0utSpPEQhig8xmNQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3FPMjhxaUo1QmpTNjFLazhSQ0dLRHpHWTFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9iZGY4MGItZTE1Mi00NmI1LWI3NDgt
ZTQxMjMzNzMxZDc5LzEvY3FPMjhxaUo1QmpTNjFLazhSQ0dLRHpHWTFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9iZGY4MGItZTE1Mi00NmI1LWI3NDgtZTQxMjMzNzMxZDc5
LzEvY3FPMjhxaUo1QmpTNjFLazhSQ0dLRHpHWTFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEf3LN+5Y
OdyiZsfiS4P1zchaSynIRvclMqAr8X+cmmFOLjWDqd2dQ0vlxf855KriQI/veXH8
VWJwvelG47O/aiOfF5Hr/uILMe7VO6a+ItTIKvnIv7gS3Aw5Dla85duEC1uklKxE
9tgr3AS5k7NQwa5L+sRkbaaR8UWKTeGZL6fVaYqgreZ2ojzG79m5rm85SqVOXVda
awto8+HI1p1zUStuet8ESc3rPnKRC8PuDnThah6vWs2hrjWNBrZffomE2yVTIW93
wXh18nPo9waU359cQajELYhmp4PsWn4yrjPfKNn+MlWi8eflRETlSQUSC+AhIrfD
jzHJSVtJ44EFZA==
-----END CERTIFICATE-----