Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/084f13-5028-430c-8e16-a68506dac39d/1/uq5VoWmyIHyHJkixHskIQCfHZis.mft
File:                     uq5VoWmyIHyHJkixHskIQCfHZis.mft (raw, json)
Hash identifier:          jwejNh1VcFmTW4w7SL2kzrmfmH8AiI8P4e0iuEFPOzQ=
Subject key identifier:   7C:F8:7A:E1:81:D9:6F:28:8A:1A:B3:70:2B:56:01:B0:5D:B7:01:28
Authority key identifier: BA:AE:55:A1:69:B2:20:7C:87:26:48:B1:1E:C9:08:40:27:C7:66:2B
Certificate issuer:       /CN=baae55a169b2207c872648b11ec9084027c7662b
Certificate serial:       0191DF3DD20332AD7405983619E1F07E93B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uq5VoWmyIHyHJkixHskIQCfHZis.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/084f13-5028-430c-8e16-a68506dac39d/1/uq5VoWmyIHyHJkixHskIQCfHZis.mft
Manifest number:          8B
Signing time:             Wed 11 Sep 2024 04:00:56 +0000
Manifest this update:     Wed 11 Sep 2024 04:00:56 +0000
Manifest next update:     Thu 12 Sep 2024 04:00:56 +0000
Files and hashes:         1: uq5VoWmyIHyHJkixHskIQCfHZis.crl (hash: FVU2RZ79dZodUTJzoM2/pgS7wBZDe/5fI2OQ9yso+iY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:df:3d:d2:03:32:ad:74:05:98:36:19:e1:f0:7e:93:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=baae55a169b2207c872648b11ec9084027c7662b
        Validity
            Not Before: Sep 11 04:00:56 2024 GMT
            Not After : Sep 12 04:00:56 2024 GMT
        Subject: CN=7cf87ae181d96f288a1ab3702b5601b05db70128
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:2d:f2:03:95:77:78:f3:05:50:84:5c:69:4f:
                    2c:b5:6b:ba:c2:1e:f8:7d:bb:75:9d:c8:13:7d:b7:
                    58:db:62:92:ce:d3:33:7f:20:dd:48:89:e4:ce:cf:
                    b7:ff:82:dc:1e:b6:c2:03:c7:bd:07:3e:72:9b:d7:
                    dc:aa:89:af:65:32:22:f7:00:d1:50:29:9e:0e:68:
                    e9:f5:76:ae:3c:0d:81:04:8c:5d:bc:a5:05:8b:6c:
                    ef:bf:f2:3a:cd:d7:35:e4:04:7f:2e:4a:c4:da:e2:
                    c7:f5:3f:0b:39:a9:ae:f0:58:e0:9d:6c:0d:d4:54:
                    4f:31:7d:11:73:cd:81:76:91:23:77:c5:03:64:cb:
                    e9:36:92:32:41:de:ae:5f:98:70:eb:59:00:09:c7:
                    9f:e5:ad:4b:83:68:73:d2:85:7e:d5:06:16:1b:1f:
                    d0:62:65:fa:96:f4:ab:2d:8b:d4:bb:ea:71:54:fc:
                    b5:de:c8:7e:6b:f0:68:cc:e4:76:c4:3e:fd:ac:42:
                    51:1d:e7:64:57:04:31:4c:5b:af:f9:9f:e0:66:31:
                    36:d6:8a:63:e0:a7:b9:7d:8c:d8:ce:c9:cf:75:3d:
                    82:10:59:55:af:92:f6:ad:ee:5a:f5:d0:9e:8b:41:
                    91:c6:c5:2d:f4:3b:96:44:5c:13:80:0b:d3:46:26:
                    2f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:F8:7A:E1:81:D9:6F:28:8A:1A:B3:70:2B:56:01:B0:5D:B7:01:28
            X509v3 Authority Key Identifier:
                keyid:BA:AE:55:A1:69:B2:20:7C:87:26:48:B1:1E:C9:08:40:27:C7:66:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uq5VoWmyIHyHJkixHskIQCfHZis.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/084f13-5028-430c-8e16-a68506dac39d/1/uq5VoWmyIHyHJkixHskIQCfHZis.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/084f13-5028-430c-8e16-a68506dac39d/1/uq5VoWmyIHyHJkixHskIQCfHZis.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:26:ab:3c:48:a5:c1:90:97:90:65:06:6c:7b:40:1b:7f:7b:
         fc:57:ca:cb:bd:2e:63:9f:ff:c6:e3:06:9f:b5:46:a3:d0:12:
         36:1a:b2:f1:71:ef:52:76:49:08:92:1a:a7:23:46:16:c8:47:
         6a:08:c2:c0:d3:bd:f5:9d:2a:42:12:a7:57:a5:2f:8f:86:a7:
         95:97:12:e3:61:f0:f4:06:74:65:b2:8b:19:aa:b4:7c:ec:6a:
         72:80:b4:28:a9:c7:1e:e1:fa:29:90:a2:cb:7d:12:6b:c1:39:
         59:a4:96:c9:9a:63:02:2f:a4:1c:5f:d6:68:f5:18:4c:4a:98:
         9f:c6:1f:11:b7:f0:f7:1d:2a:9e:c9:59:7f:cf:ec:79:42:b9:
         e5:08:5e:50:14:a0:9b:17:ec:a8:c7:de:c5:fd:5f:f7:ad:5f:
         0b:4b:cd:79:56:e7:ba:24:62:b8:a4:6a:5e:d1:51:4c:ad:85:
         80:d7:db:15:60:7f:df:aa:a6:49:98:b7:1e:a5:16:d8:a8:bf:
         45:19:85:aa:ab:84:44:b0:ba:3a:0f:f4:f2:c5:10:6d:ba:f5:
         1e:78:5a:ab:85:24:3f:9d:24:d4:3f:5a:58:1f:cd:cd:34:e3:
         24:8b:d5:de:f7:25:7c:e7:1d:62:f2:22:37:fb:ac:0f:64:61:
         0c:d0:ab:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZHfPdIDMq10BZg2GeHwfpOzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhYWU1NWExNjliMjIwN2M4NzI2NDhiMTFlYzkwODQwMjdj
NzY2MmIwHhcNMjQwOTExMDQwMDU2WhcNMjQwOTEyMDQwMDU2WjAzMTEwLwYDVQQD
Eyg3Y2Y4N2FlMTgxZDk2ZjI4OGExYWIzNzAyYjU2MDFiMDVkYjcwMTI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqC3yA5V3ePMFUIRcaU8stWu6wh74
fbt1ncgTfbdY22KSztMzfyDdSInkzs+3/4LcHrbCA8e9Bz5ym9fcqomvZTIi9wDR
UCmeDmjp9XauPA2BBIxdvKUFi2zvv/I6zdc15AR/LkrE2uLH9T8LOamu8FjgnWwN
1FRPMX0Rc82BdpEjd8UDZMvpNpIyQd6uX5hw61kACcef5a1Lg2hz0oV+1QYWGx/Q
YmX6lvSrLYvUu+pxVPy13sh+a/BozOR2xD79rEJRHedkVwQxTFuv+Z/gZjE21opj
4Ke5fYzYzsnPdT2CEFlVr5L2re5a9dCei0GRxsUt9DuWRFwTgAvTRiYvUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHz4euGB2W8oihqzcCtWAbBdtwEoMB8GA1UdIwQY
MBaAFLquVaFpsiB8hyZIsR7JCEAnx2YrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXE1Vm9XbXlJSHlISmtpeEhza0lRQ2ZIWmlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8wODRmMTMtNTAyOC00MzBjLThlMTYt
YTY4NTA2ZGFjMzlkLzEvdXE1Vm9XbXlJSHlISmtpeEhza0lRQ2ZIWmlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi8wODRmMTMtNTAyOC00MzBjLThlMTYtYTY4NTA2ZGFjMzlk
LzEvdXE1Vm9XbXlJSHlISmtpeEhza0lRQ2ZIWmlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnSarPEil
wZCXkGUGbHtAG397/FfKy70uY5//xuMGn7VGo9ASNhqy8XHvUnZJCJIapyNGFshH
agjCwNO99Z0qQhKnV6Uvj4anlZcS42Hw9AZ0ZbKLGaq0fOxqcoC0KKnHHuH6KZCi
y30Sa8E5WaSWyZpjAi+kHF/WaPUYTEqYn8YfEbfw9x0qnslZf8/seUK55QheUBSg
mxfsqMfexf1f961fC0vNeVbnuiRiuKRqXtFRTK2FgNfbFWB/36qmSZi3HqUW2Ki/
RRmFqquERLC6Og/08sUQbbr1Hnhaq4UkP50k1D9aWB/NzTTjJIvV3vclfOcdYvIi
N/usD2RhDNCr2g==
-----END CERTIFICATE-----