Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/e1fb65-0bab-4e6c-bd5d-3be6f9b7784c/1/urGrKgGTJTysA_eSIhqMYjiJDGk.mft
File:                     urGrKgGTJTysA_eSIhqMYjiJDGk.mft (raw, json)
Hash identifier:          rDz2A7hocRfITWxQZkO9XPbvgk9ET06zJJJ0dtIC+wQ=
Subject key identifier:   91:10:65:37:A2:A2:55:5A:42:1B:18:AF:C7:47:9D:EA:58:1B:8A:D2
Authority key identifier: BA:B1:AB:2A:01:93:25:3C:AC:03:F7:92:22:1A:8C:62:38:89:0C:69
Certificate issuer:       /CN=bab1ab2a0193253cac03f792221a8c6238890c69
Certificate serial:       01929232DDC3B33DB37590227909F50370D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/urGrKgGTJTysA_eSIhqMYjiJDGk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/e1fb65-0bab-4e6c-bd5d-3be6f9b7784c/1/urGrKgGTJTysA_eSIhqMYjiJDGk.mft
Manifest number:          0632
Signing time:             Tue 15 Oct 2024 22:01:00 +0000
Manifest this update:     Tue 15 Oct 2024 22:01:00 +0000
Manifest next update:     Wed 16 Oct 2024 22:01:00 +0000
Files and hashes:         1: urGrKgGTJTysA_eSIhqMYjiJDGk.crl (hash: Odbyxx0FeDlNXf2EXhoGILsreTDfcW9gshX2eTCNj1M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:92:32:dd:c3:b3:3d:b3:75:90:22:79:09:f5:03:70:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bab1ab2a0193253cac03f792221a8c6238890c69
        Validity
            Not Before: Oct 15 22:01:00 2024 GMT
            Not After : Oct 16 22:01:00 2024 GMT
        Subject: CN=91106537a2a2555a421b18afc7479dea581b8ad2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:cd:b3:56:2d:f5:37:87:ab:0a:10:83:01:84:
                    9d:29:f7:1b:02:fe:e6:65:1a:9e:3a:7e:5c:bf:77:
                    cf:9d:ef:dc:c7:65:d5:9b:44:fe:50:64:5e:6d:53:
                    70:c8:55:6f:a0:7d:21:ea:e8:b5:5c:47:47:77:4d:
                    49:d2:81:1a:a0:5e:95:cb:0a:0a:15:99:45:fa:68:
                    2a:1b:8a:ea:bf:34:66:3d:42:cc:1a:0e:10:4b:d8:
                    50:7e:e0:f0:09:74:d6:22:5e:8a:0c:76:a3:b6:d1:
                    80:b1:59:49:df:58:b7:f7:42:75:72:44:72:b4:b0:
                    fc:f3:36:8e:1c:4e:cd:ea:41:a1:0f:1e:c1:39:ba:
                    a2:a1:16:f9:72:91:ce:09:ae:98:29:1e:dd:8e:bb:
                    a1:da:80:27:a3:c8:d1:c5:ff:5d:55:6b:f2:90:e8:
                    31:a2:9a:be:82:72:0c:49:ec:4d:b0:fd:ae:a7:99:
                    c5:b4:47:39:4f:5c:ac:95:67:5b:05:4c:ce:6d:3a:
                    c9:08:ca:67:9d:ce:97:71:3d:c4:74:29:00:ab:be:
                    4b:f7:4c:e0:11:d6:e3:5a:ae:9b:f1:2c:3e:e1:2d:
                    a7:ab:69:94:9e:60:c5:50:13:b3:61:fe:19:fc:98:
                    70:76:80:38:43:f7:bf:6a:12:23:3c:9b:d0:09:76:
                    90:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:10:65:37:A2:A2:55:5A:42:1B:18:AF:C7:47:9D:EA:58:1B:8A:D2
            X509v3 Authority Key Identifier:
                keyid:BA:B1:AB:2A:01:93:25:3C:AC:03:F7:92:22:1A:8C:62:38:89:0C:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urGrKgGTJTysA_eSIhqMYjiJDGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e1fb65-0bab-4e6c-bd5d-3be6f9b7784c/1/urGrKgGTJTysA_eSIhqMYjiJDGk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e1fb65-0bab-4e6c-bd5d-3be6f9b7784c/1/urGrKgGTJTysA_eSIhqMYjiJDGk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:6d:48:6d:f3:82:96:48:5b:59:fe:a1:1e:4e:28:ad:e0:f3:
         10:23:74:56:4d:67:b3:11:f0:71:37:95:e0:f3:01:e9:fb:4b:
         cd:e2:96:44:e6:9f:dd:14:92:78:00:ef:81:ad:a4:40:8f:89:
         ec:58:55:eb:9b:4b:30:d5:36:51:10:3d:33:63:3a:8c:4a:53:
         45:a3:e7:66:cc:a1:67:85:46:1f:85:97:ff:33:4c:e0:2d:66:
         97:93:46:fc:ad:ca:24:e7:53:e2:6a:df:35:57:18:70:ba:8f:
         48:3c:c4:6d:a0:cc:cf:5c:47:d7:31:fd:fd:a8:1e:2b:6c:eb:
         4b:0d:34:bd:a7:19:df:47:95:2d:1d:97:b7:15:69:35:fd:44:
         5b:08:ae:95:0b:68:6f:5e:60:02:46:d5:5f:c1:3a:3b:0a:28:
         1d:31:b3:65:d3:fb:3f:8b:5b:75:ef:e3:49:8c:58:10:04:32:
         90:cd:6d:ef:e2:ce:f8:66:a2:7c:9a:3f:8b:0e:d7:f8:d2:5a:
         8e:ed:92:35:62:62:6c:55:e0:d8:2f:42:79:ba:a3:f2:72:23:
         d1:55:09:c5:bd:f1:b3:40:0b:63:05:84:2d:45:94:33:e4:25:
         76:62:53:a4:c9:7a:f9:eb:3b:69:82:a2:32:b1:87:bb:54:9b:
         10:03:a0:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZKSMt3Dsz2zdZAieQn1A3DVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhYjFhYjJhMDE5MzI1M2NhYzAzZjc5MjIyMWE4YzYyMzg4
OTBjNjkwHhcNMjQxMDE1MjIwMTAwWhcNMjQxMDE2MjIwMTAwWjAzMTEwLwYDVQQD
Eyg5MTEwNjUzN2EyYTI1NTVhNDIxYjE4YWZjNzQ3OWRlYTU4MWI4YWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6s2zVi31N4erChCDAYSdKfcbAv7m
ZRqeOn5cv3fPne/cx2XVm0T+UGRebVNwyFVvoH0h6ui1XEdHd01J0oEaoF6VywoK
FZlF+mgqG4rqvzRmPULMGg4QS9hQfuDwCXTWIl6KDHajttGAsVlJ31i390J1ckRy
tLD88zaOHE7N6kGhDx7BObqioRb5cpHOCa6YKR7djruh2oAno8jRxf9dVWvykOgx
opq+gnIMSexNsP2up5nFtEc5T1yslWdbBUzObTrJCMpnnc6XcT3EdCkAq75L90zg
EdbjWq6b8Sw+4S2nq2mUnmDFUBOzYf4Z/JhwdoA4Q/e/ahIjPJvQCXaQ6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJEQZTeiolVaQhsYr8dHnepYG4rSMB8GA1UdIwQY
MBaAFLqxqyoBkyU8rAP3kiIajGI4iQxpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXJHcktnR1RKVHlzQV9lU0locU1ZamlKREdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9lMWZiNjUtMGJhYi00ZTZjLWJkNWQt
M2JlNmY5Yjc3ODRjLzEvdXJHcktnR1RKVHlzQV9lU0locU1ZamlKREdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy9lMWZiNjUtMGJhYi00ZTZjLWJkNWQtM2JlNmY5Yjc3ODRj
LzEvdXJHcktnR1RKVHlzQV9lU0locU1ZamlKREdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcW1IbfOC
lkhbWf6hHk4oreDzECN0Vk1nsxHwcTeV4PMB6ftLzeKWROaf3RSSeADvga2kQI+J
7FhV65tLMNU2URA9M2M6jEpTRaPnZsyhZ4VGH4WX/zNM4C1ml5NG/K3KJOdT4mrf
NVcYcLqPSDzEbaDMz1xH1zH9/ageK2zrSw00vacZ30eVLR2XtxVpNf1EWwiulQto
b15gAkbVX8E6OwooHTGzZdP7P4tbde/jSYxYEAQykM1t7+LO+GaifJo/iw7X+NJa
ju2SNWJibFXg2C9Cebqj8nIj0VUJxb3xs0ALYwWELUWUM+QldmJTpMl6+es7aYKi
MrGHu1SbEAOgsQ==
-----END CERTIFICATE-----