Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/cb69b1-fb85-46cc-9045-ef0178c4d7d5/1/OVvDo1qz3In2lAN7ZxiHLgtIKj4.mft
File:                     OVvDo1qz3In2lAN7ZxiHLgtIKj4.mft (raw, json)
Hash identifier:          cQoYN4alVcoX9KK5LsRqo4VkFkqgEQPVPFWkq+HNlYo=
Subject key identifier:   FE:B5:1A:A7:93:76:FE:C9:E7:47:E5:A4:B5:B6:D1:86:F3:4E:CE:02
Authority key identifier: 39:5B:C3:A3:5A:B3:DC:89:F6:94:03:7B:67:18:87:2E:0B:48:2A:3E
Certificate issuer:       /CN=395bc3a35ab3dc89f694037b6718872e0b482a3e
Certificate serial:       0190BA590DFB6A61AB10170AB055DEC47489
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OVvDo1qz3In2lAN7ZxiHLgtIKj4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/cb69b1-fb85-46cc-9045-ef0178c4d7d5/1/OVvDo1qz3In2lAN7ZxiHLgtIKj4.mft
Manifest number:          01C9
Signing time:             Tue 16 Jul 2024 07:01:56 +0000
Manifest this update:     Tue 16 Jul 2024 07:01:56 +0000
Manifest next update:     Wed 17 Jul 2024 07:01:56 +0000
Files and hashes:         1: OVvDo1qz3In2lAN7ZxiHLgtIKj4.crl (hash: OEHyRyhQMr6rWZ9xk03Yqoub3wwu0vnZstDtu+i5E5k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:ba:59:0d:fb:6a:61:ab:10:17:0a:b0:55:de:c4:74:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=395bc3a35ab3dc89f694037b6718872e0b482a3e
        Validity
            Not Before: Jul 16 07:01:56 2024 GMT
            Not After : Jul 17 07:01:56 2024 GMT
        Subject: CN=feb51aa79376fec9e747e5a4b5b6d186f34ece02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a3:a5:46:75:c9:9b:30:eb:7b:f0:9b:84:34:
                    ef:bf:44:da:43:aa:a1:03:a6:ed:96:b8:09:3d:13:
                    5c:df:21:ef:48:c7:70:93:02:cc:84:db:45:ad:88:
                    16:fb:07:87:85:29:0d:df:6e:80:2e:c3:6a:8c:76:
                    2e:47:65:05:ce:04:03:c3:3f:a4:1d:2a:bb:a6:9e:
                    98:92:76:ff:e2:c9:de:3d:1e:50:bd:22:37:c7:a5:
                    a6:5e:4b:19:3d:72:a1:ac:05:34:86:ce:f7:1a:8e:
                    78:2b:fc:6c:31:0f:8e:a1:66:ac:e6:2c:f7:61:71:
                    03:ae:47:f6:d5:e3:2a:91:d3:be:c4:27:3b:9e:77:
                    c7:31:86:0b:f3:6f:d0:87:72:6d:ea:0d:12:63:b6:
                    f2:98:7e:f8:26:68:ad:5d:ad:45:58:f3:2a:af:78:
                    6e:e3:01:38:0f:a9:05:c5:e9:4f:11:0b:c5:83:81:
                    4b:d9:aa:62:43:b2:52:13:fa:5c:e8:31:b5:0a:1e:
                    c8:04:b2:f4:ce:ef:3a:c3:00:5b:19:06:3e:dd:ca:
                    12:46:66:6c:f7:5c:c4:cd:bf:13:e4:a5:ac:5f:b3:
                    fa:45:a0:48:31:82:d9:82:b5:5d:98:2e:01:52:3c:
                    f5:2e:55:9d:28:a2:d2:7a:40:91:60:9b:a1:1e:f5:
                    9b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:B5:1A:A7:93:76:FE:C9:E7:47:E5:A4:B5:B6:D1:86:F3:4E:CE:02
            X509v3 Authority Key Identifier:
                keyid:39:5B:C3:A3:5A:B3:DC:89:F6:94:03:7B:67:18:87:2E:0B:48:2A:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OVvDo1qz3In2lAN7ZxiHLgtIKj4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cb69b1-fb85-46cc-9045-ef0178c4d7d5/1/OVvDo1qz3In2lAN7ZxiHLgtIKj4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cb69b1-fb85-46cc-9045-ef0178c4d7d5/1/OVvDo1qz3In2lAN7ZxiHLgtIKj4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:5f:4c:b5:a7:d3:12:bc:93:c3:dd:21:9c:79:4d:fd:7c:47:
         4d:0b:f1:7b:08:3c:40:63:8c:83:0e:ec:4f:ce:ac:57:0c:8e:
         8b:a9:89:3f:1a:86:0f:19:5f:57:5c:37:b3:04:d1:be:7d:3e:
         41:d5:41:61:da:35:2d:a0:1f:70:0a:34:c0:57:1b:3d:33:89:
         7f:15:de:c5:fa:0c:ee:44:3d:06:ab:eb:fa:f1:fd:7c:96:5a:
         8e:51:80:24:af:56:19:4f:57:7a:87:93:91:bc:46:c8:1c:55:
         00:1e:30:d1:18:ad:4a:99:fa:40:84:4a:2b:1e:0e:6c:8e:77:
         22:ed:a6:9c:25:03:81:15:44:77:18:4a:8a:1f:df:b2:bc:18:
         f3:e9:53:18:30:6a:c8:b4:7b:e1:82:0b:d8:30:98:50:8c:f1:
         3f:98:41:83:6b:b8:48:63:24:b7:ec:9b:1c:34:01:01:0b:c7:
         ca:ba:22:08:d5:6c:b0:05:69:a2:32:07:bc:ea:3c:cc:46:ef:
         72:8a:b8:29:f6:ce:ce:26:22:15:8e:fe:c0:91:ea:51:cc:9c:
         8e:28:81:5d:a0:36:ea:47:df:ed:7f:7c:b2:e9:8e:a1:33:92:
         47:ab:33:66:16:14:a6:60:99:ab:3a:30:40:68:99:0e:69:df:
         14:d3:bc:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZC6WQ37amGrEBcKsFXexHSJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5NWJjM2EzNWFiM2RjODlmNjk0MDM3YjY3MTg4NzJlMGI0
ODJhM2UwHhcNMjQwNzE2MDcwMTU2WhcNMjQwNzE3MDcwMTU2WjAzMTEwLwYDVQQD
EyhmZWI1MWFhNzkzNzZmZWM5ZTc0N2U1YTRiNWI2ZDE4NmYzNGVjZTAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzaOlRnXJmzDre/CbhDTvv0TaQ6qh
A6btlrgJPRNc3yHvSMdwkwLMhNtFrYgW+weHhSkN326ALsNqjHYuR2UFzgQDwz+k
HSq7pp6Yknb/4snePR5QvSI3x6WmXksZPXKhrAU0hs73Go54K/xsMQ+OoWas5iz3
YXEDrkf21eMqkdO+xCc7nnfHMYYL82/Qh3Jt6g0SY7bymH74JmitXa1FWPMqr3hu
4wE4D6kFxelPEQvFg4FL2apiQ7JSE/pc6DG1Ch7IBLL0zu86wwBbGQY+3coSRmZs
91zEzb8T5KWsX7P6RaBIMYLZgrVdmC4BUjz1LlWdKKLSekCRYJuhHvWbewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP61GqeTdv7J50flpLW20YbzTs4CMB8GA1UdIwQY
MBaAFDlbw6Nas9yJ9pQDe2cYhy4LSCo+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1Z2RG8xcXozSW4ybEFON1p4aUhMZ3RJS2o0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jYjY5YjEtZmI4NS00NmNjLTkwNDUt
ZWYwMTc4YzRkN2Q1LzEvT1Z2RG8xcXozSW4ybEFON1p4aUhMZ3RJS2o0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9jYjY5YjEtZmI4NS00NmNjLTkwNDUtZWYwMTc4YzRkN2Q1
LzEvT1Z2RG8xcXozSW4ybEFON1p4aUhMZ3RJS2o0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKF9MtafT
EryTw90hnHlN/XxHTQvxewg8QGOMgw7sT86sVwyOi6mJPxqGDxlfV1w3swTRvn0+
QdVBYdo1LaAfcAo0wFcbPTOJfxXexfoM7kQ9Bqvr+vH9fJZajlGAJK9WGU9XeoeT
kbxGyBxVAB4w0RitSpn6QIRKKx4ObI53Iu2mnCUDgRVEdxhKih/fsrwY8+lTGDBq
yLR74YIL2DCYUIzxP5hBg2u4SGMkt+ybHDQBAQvHyroiCNVssAVpojIHvOo8zEbv
coq4KfbOziYiFY7+wJHqUcycjiiBXaA26kff7X98sumOoTOSR6szZhYUpmCZqzow
QGiZDmnfFNO8yQ==
-----END CERTIFICATE-----