Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/f59c19-00ac-4227-bbc5-657df5e3a855/1/hqYBzxEBGE2CQ3J-Kfufl95isMg.mft
File:                     hqYBzxEBGE2CQ3J-Kfufl95isMg.mft (raw, json)
Hash identifier:          CUOrfwWr+3hcDKwOkYVoSAebU9FFwEik0bBHhM/EL2U=
Subject key identifier:   69:3C:07:21:94:98:75:4C:81:F2:4A:8F:59:8B:AF:90:69:E7:2A:90
Authority key identifier: 86:A6:01:CF:11:01:18:4D:82:43:72:7E:29:FB:9F:97:DE:62:B0:C8
Certificate issuer:       /CN=86a601cf1101184d8243727e29fb9f97de62b0c8
Certificate serial:       0190E3539CBAF79C150CE2A42F02992E1707
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hqYBzxEBGE2CQ3J-Kfufl95isMg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/f59c19-00ac-4227-bbc5-657df5e3a855/1/hqYBzxEBGE2CQ3J-Kfufl95isMg.mft
Manifest number:          0FF7
Signing time:             Wed 24 Jul 2024 06:00:25 +0000
Manifest this update:     Wed 24 Jul 2024 06:00:25 +0000
Manifest next update:     Thu 25 Jul 2024 06:00:25 +0000
Files and hashes:         1: hqYBzxEBGE2CQ3J-Kfufl95isMg.crl (hash: kqEfufN3nse8r/hPiSVF+BRCH4hQdvsnGxai+9OdMkQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:e3:53:9c:ba:f7:9c:15:0c:e2:a4:2f:02:99:2e:17:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86a601cf1101184d8243727e29fb9f97de62b0c8
        Validity
            Not Before: Jul 24 06:00:25 2024 GMT
            Not After : Jul 25 06:00:25 2024 GMT
        Subject: CN=693c07219498754c81f24a8f598baf9069e72a90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ff:d4:b8:f3:7b:58:26:f2:42:12:b7:be:ee:
                    3c:b0:b0:ff:45:5a:00:0b:05:ae:45:c4:28:4a:14:
                    51:aa:b5:3c:96:64:7a:81:6a:34:82:92:16:84:ca:
                    8d:03:d3:55:73:02:e3:4b:87:db:16:0d:68:72:2c:
                    ce:63:68:b8:48:14:80:75:4c:19:6b:70:83:8c:37:
                    6d:37:fb:dc:24:db:77:df:66:5a:91:51:98:44:c3:
                    51:6b:81:4c:60:d4:e6:5b:55:76:75:64:8b:bd:65:
                    47:54:78:e2:78:80:ec:2d:ac:4a:13:3f:20:08:1e:
                    5b:20:bc:cf:06:ff:b6:f7:17:bb:2c:f5:f8:f9:0e:
                    33:ea:71:69:f4:ab:66:db:c2:dc:2b:3f:4d:7b:b1:
                    03:0d:5e:d5:14:77:78:f9:80:28:0e:6a:35:6d:b5:
                    bb:69:18:e7:8d:15:9b:c1:1c:5f:e6:47:5e:5d:15:
                    b0:01:18:d3:c7:6b:31:64:4a:27:02:81:31:5e:39:
                    ff:b9:d9:12:01:60:f1:f9:bd:71:32:81:cc:0e:39:
                    87:75:0f:f1:49:4f:00:ac:01:7c:fd:b0:5c:00:86:
                    5f:08:73:48:0b:33:d2:36:d9:c9:49:e1:dd:99:99:
                    b4:8b:fd:e4:18:a6:06:7d:f1:f7:07:5e:15:17:66:
                    49:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:3C:07:21:94:98:75:4C:81:F2:4A:8F:59:8B:AF:90:69:E7:2A:90
            X509v3 Authority Key Identifier:
                keyid:86:A6:01:CF:11:01:18:4D:82:43:72:7E:29:FB:9F:97:DE:62:B0:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hqYBzxEBGE2CQ3J-Kfufl95isMg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f59c19-00ac-4227-bbc5-657df5e3a855/1/hqYBzxEBGE2CQ3J-Kfufl95isMg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f59c19-00ac-4227-bbc5-657df5e3a855/1/hqYBzxEBGE2CQ3J-Kfufl95isMg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:d9:0b:f5:92:7f:10:5b:09:98:47:36:7b:4a:ed:b7:0e:45:
         84:b7:59:e2:8a:05:e1:1e:7d:c7:88:74:39:03:3e:6b:6c:88:
         cb:95:5f:3a:e6:54:4c:9e:2f:5c:79:d7:d4:d3:c7:c9:36:f7:
         d5:59:e5:89:91:b0:68:35:d0:be:44:92:30:2d:91:26:29:e7:
         0d:39:2f:4b:ef:c5:c8:f2:e1:88:fd:d7:fb:72:cf:11:78:5d:
         d9:3f:52:7b:8f:8d:84:8a:61:25:4c:f4:e7:a3:c0:0f:a2:6f:
         a2:d9:fd:51:8c:e7:1b:21:20:1a:55:2e:c1:a6:66:ec:99:c0:
         f7:af:d8:bd:04:14:73:0c:db:6a:18:10:61:95:c7:f6:6c:c2:
         e0:64:b3:bb:62:5f:23:b0:a3:c7:55:84:8d:c6:85:e8:5b:53:
         b7:4c:88:77:77:8e:25:f7:20:f0:04:5a:ea:65:5b:58:b8:3f:
         d4:0e:40:10:82:ae:7f:73:29:52:0a:99:54:0f:a7:49:ef:d4:
         0f:95:be:b2:b7:84:11:0f:2d:56:f9:a5:21:60:df:68:99:47:
         17:b4:69:ff:4d:1f:6b:5c:dc:91:0d:5a:5e:08:fc:eb:27:a9:
         7f:08:fa:57:e7:c1:cf:d7:61:d1:14:63:69:44:bc:6d:f5:ff:
         2a:93:1d:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZDjU5y695wVDOKkLwKZLhcHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2YTYwMWNmMTEwMTE4NGQ4MjQzNzI3ZTI5ZmI5Zjk3ZGU2
MmIwYzgwHhcNMjQwNzI0MDYwMDI1WhcNMjQwNzI1MDYwMDI1WjAzMTEwLwYDVQQD
Eyg2OTNjMDcyMTk0OTg3NTRjODFmMjRhOGY1OThiYWY5MDY5ZTcyYTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt//UuPN7WCbyQhK3vu48sLD/RVoA
CwWuRcQoShRRqrU8lmR6gWo0gpIWhMqNA9NVcwLjS4fbFg1ocizOY2i4SBSAdUwZ
a3CDjDdtN/vcJNt332ZakVGYRMNRa4FMYNTmW1V2dWSLvWVHVHjieIDsLaxKEz8g
CB5bILzPBv+29xe7LPX4+Q4z6nFp9Ktm28LcKz9Ne7EDDV7VFHd4+YAoDmo1bbW7
aRjnjRWbwRxf5kdeXRWwARjTx2sxZEonAoExXjn/udkSAWDx+b1xMoHMDjmHdQ/x
SU8ArAF8/bBcAIZfCHNICzPSNtnJSeHdmZm0i/3kGKYGffH3B14VF2ZJXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGk8ByGUmHVMgfJKj1mLr5Bp5yqQMB8GA1UdIwQY
MBaAFIamAc8RARhNgkNyfin7n5feYrDIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHFZQnp4RUJHRTJDUTNKLUtmdWZsOTVpc01nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9mNTljMTktMDBhYy00MjI3LWJiYzUt
NjU3ZGY1ZTNhODU1LzEvaHFZQnp4RUJHRTJDUTNKLUtmdWZsOTVpc01nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9mNTljMTktMDBhYy00MjI3LWJiYzUtNjU3ZGY1ZTNhODU1
LzEvaHFZQnp4RUJHRTJDUTNKLUtmdWZsOTVpc01nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWNkL9ZJ/
EFsJmEc2e0rttw5FhLdZ4ooF4R59x4h0OQM+a2yIy5VfOuZUTJ4vXHnX1NPHyTb3
1VnliZGwaDXQvkSSMC2RJinnDTkvS+/FyPLhiP3X+3LPEXhd2T9Se4+NhIphJUz0
56PAD6Jvotn9UYznGyEgGlUuwaZm7JnA96/YvQQUcwzbahgQYZXH9mzC4GSzu2Jf
I7Cjx1WEjcaF6FtTt0yId3eOJfcg8ARa6mVbWLg/1A5AEIKuf3MpUgqZVA+nSe/U
D5W+sreEEQ8tVvmlIWDfaJlHF7Rp/00fa1zckQ1aXgj86yepfwj6V+fBz9dh0RRj
aUS8bfX/KpMd6Q==
-----END CERTIFICATE-----