Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/27d4f2-d1dc-41bd-b8e6-9545b133c4e3/1/2fNJ1pBu0e3TyJ51bmqM5MGRAFQ.mft
File:                     2fNJ1pBu0e3TyJ51bmqM5MGRAFQ.mft (raw, json)
Hash identifier:          nD94+uho0UfTKFi8dBcsDP5aHba4ShiuB6X4LZpiysA=
Subject key identifier:   D2:0E:C9:50:DC:57:8D:99:30:A2:EA:D4:EB:FE:4A:DB:7A:EB:EA:EF
Authority key identifier: D9:F3:49:D6:90:6E:D1:ED:D3:C8:9E:75:6E:6A:8C:E4:C1:91:00:54
Certificate issuer:       /CN=d9f349d6906ed1edd3c89e756e6a8ce4c1910054
Certificate serial:       018D8672185FC949F4018E06CBD8166630A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2fNJ1pBu0e3TyJ51bmqM5MGRAFQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/27d4f2-d1dc-41bd-b8e6-9545b133c4e3/1/2fNJ1pBu0e3TyJ51bmqM5MGRAFQ.mft
Manifest number:          085C
Signing time:             Thu 08 Feb 2024 02:00:40 +0000
Manifest this update:     Thu 08 Feb 2024 02:00:40 +0000
Manifest next update:     Fri 09 Feb 2024 02:00:40 +0000
Files and hashes:         1: 2fNJ1pBu0e3TyJ51bmqM5MGRAFQ.crl (hash: 6u9AffeWMgRowSuSPF6uVJwjLJv8snWlPXti33zJp+4=)
                          2: NrTpD5c914SBDtc0rJO1EOwl7jk.roa (hash: QyCVbSSBvvdhse4tROxxjgjpsadmEiL/13R8nlaB0oc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:86:72:18:5f:c9:49:f4:01:8e:06:cb:d8:16:66:30:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f349d6906ed1edd3c89e756e6a8ce4c1910054
        Validity
            Not Before: Feb  8 02:00:40 2024 GMT
            Not After : Feb  9 02:00:40 2024 GMT
        Subject: CN=d20ec950dc578d9930a2ead4ebfe4adb7aebeaef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:43:0c:2b:35:d0:58:08:b3:35:8e:8f:39:61:
                    5e:60:3a:07:fc:24:2c:02:1e:79:db:47:b1:df:d7:
                    d1:65:e2:20:78:58:0a:54:86:c6:3d:ef:8f:d4:c7:
                    52:85:53:69:6c:ca:f6:c9:80:b8:86:cb:4d:9a:24:
                    69:d5:b4:a1:c6:5f:39:58:e3:0d:04:17:27:64:96:
                    0f:92:ec:cf:08:d3:8f:55:82:51:92:e2:e2:9b:bf:
                    e0:0b:21:bc:ad:f2:87:fe:fc:90:8e:8f:51:b5:2e:
                    b0:54:59:9c:7b:9f:cf:3d:74:75:49:b2:eb:e3:63:
                    af:49:81:c3:a5:4c:6e:17:f4:16:2e:8f:7a:8b:6c:
                    8f:ec:32:20:8d:eb:9b:72:7a:74:79:f4:33:b5:57:
                    bb:ff:4f:9e:10:dc:b6:51:72:73:6e:07:55:2f:c3:
                    df:b6:a5:85:0d:d7:28:c0:cb:30:c0:33:8f:8b:0b:
                    f6:60:fe:ee:d6:5c:51:6a:56:4f:99:07:56:15:5d:
                    69:80:4a:1b:9a:eb:f9:dd:e6:02:cd:51:bc:4f:22:
                    4c:ef:b5:21:04:2d:0e:3f:8a:6d:83:4e:72:b1:3c:
                    a7:52:22:c3:89:21:ff:2e:e0:ab:18:78:4d:f4:cb:
                    59:77:ee:13:cf:7d:8d:5e:a0:c8:f3:09:9f:a2:0c:
                    7f:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:0E:C9:50:DC:57:8D:99:30:A2:EA:D4:EB:FE:4A:DB:7A:EB:EA:EF
            X509v3 Authority Key Identifier:
                keyid:D9:F3:49:D6:90:6E:D1:ED:D3:C8:9E:75:6E:6A:8C:E4:C1:91:00:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fNJ1pBu0e3TyJ51bmqM5MGRAFQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/27d4f2-d1dc-41bd-b8e6-9545b133c4e3/1/2fNJ1pBu0e3TyJ51bmqM5MGRAFQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/27d4f2-d1dc-41bd-b8e6-9545b133c4e3/1/2fNJ1pBu0e3TyJ51bmqM5MGRAFQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:ed:43:f1:cc:57:75:a4:84:7e:66:37:01:53:67:85:0f:e5:
         9b:d7:0f:1f:b3:c3:25:b2:de:6c:fd:16:d5:3f:fb:52:b8:4a:
         c1:89:34:77:8d:41:61:7f:c2:f4:76:de:66:1f:9c:e3:3b:f2:
         b0:eb:35:87:93:18:4a:0a:f1:31:89:dc:73:90:1f:e3:8e:9e:
         38:7e:0b:6b:a0:18:ff:c6:38:2b:0e:27:48:43:9a:d7:a8:05:
         6e:29:01:4e:35:aa:4f:8c:8f:51:9d:52:d5:9c:48:7d:38:8c:
         f1:db:46:17:ed:8c:e9:2e:31:1a:0e:c4:21:16:88:a9:3b:71:
         1d:84:37:50:19:f5:73:73:f6:e1:8f:81:d8:3b:8c:72:e7:ac:
         bb:65:c0:9c:e8:94:5f:09:b3:2b:8f:13:e6:63:6a:0e:5d:80:
         87:1b:36:50:73:55:70:57:8b:4f:de:a9:31:f9:34:ac:1a:48:
         f9:9d:92:45:b5:88:b7:7b:57:14:6a:78:d0:1d:40:86:19:db:
         b1:e6:4c:34:03:3c:28:5a:b6:0b:6c:7a:80:7f:29:48:23:7c:
         b5:b9:cb:62:31:47:27:c1:12:b0:24:0d:94:36:2b:bc:38:47:
         1f:d2:c9:4e:42:a6:a5:ae:cf:57:5f:4a:c2:df:9e:26:cc:a8:
         e0:84:60:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY2GchhfyUn0AY4Gy9gWZjCkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5ZjM0OWQ2OTA2ZWQxZWRkM2M4OWU3NTZlNmE4Y2U0YzE5
MTAwNTQwHhcNMjQwMjA4MDIwMDQwWhcNMjQwMjA5MDIwMDQwWjAzMTEwLwYDVQQD
EyhkMjBlYzk1MGRjNTc4ZDk5MzBhMmVhZDRlYmZlNGFkYjdhZWJlYWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0MMKzXQWAizNY6POWFeYDoH/CQs
Ah5520ex39fRZeIgeFgKVIbGPe+P1MdShVNpbMr2yYC4hstNmiRp1bShxl85WOMN
BBcnZJYPkuzPCNOPVYJRkuLim7/gCyG8rfKH/vyQjo9RtS6wVFmce5/PPXR1SbLr
42OvSYHDpUxuF/QWLo96i2yP7DIgjeubcnp0efQztVe7/0+eENy2UXJzbgdVL8Pf
tqWFDdcowMswwDOPiwv2YP7u1lxRalZPmQdWFV1pgEobmuv53eYCzVG8TyJM77Uh
BC0OP4ptg05ysTynUiLDiSH/LuCrGHhN9MtZd+4Tz32NXqDI8wmfogx/awIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNIOyVDcV42ZMKLq1Ov+Stt66+rvMB8GA1UdIwQY
MBaAFNnzSdaQbtHt08iedW5qjOTBkQBUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmZOSjFwQnUwZTNUeUo1MWJtcU01TUdSQUZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi8yN2Q0ZjItZDFkYy00MWJkLWI4ZTYt
OTU0NWIxMzNjNGUzLzEvMmZOSjFwQnUwZTNUeUo1MWJtcU01TUdSQUZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi8yN2Q0ZjItZDFkYy00MWJkLWI4ZTYtOTU0NWIxMzNjNGUz
LzEvMmZOSjFwQnUwZTNUeUo1MWJtcU01TUdSQUZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApe1D8cxX
daSEfmY3AVNnhQ/lm9cPH7PDJbLebP0W1T/7UrhKwYk0d41BYX/C9HbeZh+c4zvy
sOs1h5MYSgrxMYncc5Af446eOH4La6AY/8Y4Kw4nSEOa16gFbikBTjWqT4yPUZ1S
1ZxIfTiM8dtGF+2M6S4xGg7EIRaIqTtxHYQ3UBn1c3P24Y+B2DuMcuesu2XAnOiU
XwmzK48T5mNqDl2Ahxs2UHNVcFeLT96pMfk0rBpI+Z2SRbWIt3tXFGp40B1Ahhnb
seZMNAM8KFq2C2x6gH8pSCN8tbnLYjFHJ8ESsCQNlDYrvDhHH9LJTkKmpa7PV19K
wt+eJsyo4IRgkw==
-----END CERTIFICATE-----