Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/fb632d-5486-49da-88db-359a770233dc/1/E54uNh2EHdTwu3IGNNwEZBcZf4w.mft
File:                     E54uNh2EHdTwu3IGNNwEZBcZf4w.mft (raw, json)
Hash identifier:          OmTDzTxp9Oz57gcAks3T3Cw3Qgo3JtSNJIbQeaDU8ck=
Subject key identifier:   70:25:D4:2B:EA:81:98:45:1F:63:F1:F9:B9:EF:2B:5C:D4:8A:4A:93
Authority key identifier: 13:9E:2E:36:1D:84:1D:D4:F0:BB:72:06:34:DC:04:64:17:19:7F:8C
Certificate issuer:       /CN=139e2e361d841dd4f0bb720634dc046417197f8c
Certificate serial:       0191D6AF2B95DBF962E2DC9A62CDFD04C2EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E54uNh2EHdTwu3IGNNwEZBcZf4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/fb632d-5486-49da-88db-359a770233dc/1/E54uNh2EHdTwu3IGNNwEZBcZf4w.mft
Manifest number:          FA
Signing time:             Mon 09 Sep 2024 12:08:09 +0000
Manifest this update:     Mon 09 Sep 2024 12:08:09 +0000
Manifest next update:     Tue 10 Sep 2024 12:08:09 +0000
Files and hashes:         1: E54uNh2EHdTwu3IGNNwEZBcZf4w.crl (hash: BQ56e/q0qH/cgPnMooW8Om2JVY5GrcjKoazFPxqLIbA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:d6:af:2b:95:db:f9:62:e2:dc:9a:62:cd:fd:04:c2:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=139e2e361d841dd4f0bb720634dc046417197f8c
        Validity
            Not Before: Sep  9 12:08:09 2024 GMT
            Not After : Sep 10 12:08:09 2024 GMT
        Subject: CN=7025d42bea8198451f63f1f9b9ef2b5cd48a4a93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:80:11:2a:80:11:e9:1a:7c:c4:49:0d:5a:6f:
                    86:0f:b3:58:9a:7b:0e:9e:97:0a:fd:03:36:45:69:
                    f5:fc:cd:78:14:7c:8c:70:d7:72:ea:a1:dc:c7:f9:
                    97:ba:bf:65:ee:58:b9:07:3f:8f:63:69:b3:9b:45:
                    aa:3b:f7:c6:58:a1:6d:10:69:a0:c5:97:5c:79:cd:
                    05:61:45:20:92:e8:54:01:2a:61:75:53:a9:cf:52:
                    47:62:c9:13:cc:fc:5d:a9:6d:28:f2:8a:3a:58:c5:
                    4b:ef:f5:d1:9b:0e:14:66:ad:23:94:56:84:b9:29:
                    59:bc:2c:5e:c3:73:74:7f:ad:7d:83:af:fe:73:39:
                    e3:37:d2:34:b3:57:0d:3b:f2:8b:73:6e:2c:ed:0b:
                    a2:21:ff:1f:ad:78:51:10:ba:40:9c:87:b6:a2:94:
                    0a:46:5d:bb:32:44:75:7c:f3:a3:b5:d0:2e:53:90:
                    97:1a:74:b5:0a:15:0d:d1:00:3e:3d:22:77:44:5e:
                    a0:82:1b:8d:af:5a:e0:05:4c:0f:cc:d0:39:31:b7:
                    29:1b:ac:8f:33:49:06:12:50:d3:e0:52:30:2c:6e:
                    34:e1:38:79:59:70:1a:56:75:15:90:9c:ac:65:54:
                    58:54:b6:c5:4a:f1:7d:fc:bd:4c:61:a8:8e:a0:bd:
                    69:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:25:D4:2B:EA:81:98:45:1F:63:F1:F9:B9:EF:2B:5C:D4:8A:4A:93
            X509v3 Authority Key Identifier:
                keyid:13:9E:2E:36:1D:84:1D:D4:F0:BB:72:06:34:DC:04:64:17:19:7F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E54uNh2EHdTwu3IGNNwEZBcZf4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fb632d-5486-49da-88db-359a770233dc/1/E54uNh2EHdTwu3IGNNwEZBcZf4w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fb632d-5486-49da-88db-359a770233dc/1/E54uNh2EHdTwu3IGNNwEZBcZf4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:05:c5:9e:45:5d:f7:36:b6:45:05:00:dd:e3:a6:2e:5d:e5:
         92:ea:01:c7:f4:98:8e:60:ad:24:30:68:5a:8b:31:15:bb:d6:
         68:ff:89:ec:e1:dd:90:f7:6b:67:02:41:6b:aa:33:ba:72:78:
         e2:3f:2c:19:fd:8f:82:51:bb:ce:3b:41:d1:72:e4:3c:08:b8:
         e0:1d:e3:e5:b1:e1:33:5a:12:c3:f2:f9:86:51:04:f0:f1:15:
         79:5d:9a:86:f9:ca:b5:1d:70:9f:ba:f5:31:fe:db:41:fd:b5:
         69:e0:e3:c2:6c:ae:a5:94:0e:8b:0b:c3:75:48:b6:7e:50:f9:
         6c:47:b8:82:e0:dd:0f:a3:93:7e:39:b8:3f:3e:6b:64:0c:ac:
         8e:31:8a:a6:a9:ad:87:b7:bd:97:a3:ba:71:76:88:34:74:4a:
         de:1a:bd:69:48:61:16:f3:8c:86:73:02:81:bf:23:04:95:21:
         6e:f2:df:dc:84:90:b7:8f:24:4d:06:d5:17:25:f5:a1:4c:18:
         84:27:0e:0c:6e:e3:3a:e8:cf:37:8c:f1:ec:10:6d:1f:8c:26:
         8b:42:bf:fa:e1:be:30:ff:41:17:2c:c5:aa:c2:64:9d:e3:66:
         07:d9:d1:8d:35:a3:16:2b:06:5d:a2:a7:88:c2:11:c8:c9:ea:
         f9:bd:82:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZHWryuV2/li4tyaYs39BMLuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzOWUyZTM2MWQ4NDFkZDRmMGJiNzIwNjM0ZGMwNDY0MTcx
OTdmOGMwHhcNMjQwOTA5MTIwODA5WhcNMjQwOTEwMTIwODA5WjAzMTEwLwYDVQQD
Eyg3MDI1ZDQyYmVhODE5ODQ1MWY2M2YxZjliOWVmMmI1Y2Q0OGE0YTkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4ARKoAR6Rp8xEkNWm+GD7NYmnsO
npcK/QM2RWn1/M14FHyMcNdy6qHcx/mXur9l7li5Bz+PY2mzm0WqO/fGWKFtEGmg
xZdcec0FYUUgkuhUASphdVOpz1JHYskTzPxdqW0o8oo6WMVL7/XRmw4UZq0jlFaE
uSlZvCxew3N0f619g6/+cznjN9I0s1cNO/KLc24s7QuiIf8frXhRELpAnIe2opQK
Rl27MkR1fPOjtdAuU5CXGnS1ChUN0QA+PSJ3RF6gghuNr1rgBUwPzNA5MbcpG6yP
M0kGElDT4FIwLG404Th5WXAaVnUVkJysZVRYVLbFSvF9/L1MYaiOoL1pbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHAl1CvqgZhFH2Px+bnvK1zUikqTMB8GA1UdIwQY
MBaAFBOeLjYdhB3U8LtyBjTcBGQXGX+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTU0dU5oMkVIZFR3dTNJR05Od0VaQmNaZjR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9mYjYzMmQtNTQ4Ni00OWRhLTg4ZGIt
MzU5YTc3MDIzM2RjLzEvRTU0dU5oMkVIZFR3dTNJR05Od0VaQmNaZjR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9mYjYzMmQtNTQ4Ni00OWRhLTg4ZGItMzU5YTc3MDIzM2Rj
LzEvRTU0dU5oMkVIZFR3dTNJR05Od0VaQmNaZjR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyAXFnkVd
9za2RQUA3eOmLl3lkuoBx/SYjmCtJDBoWosxFbvWaP+J7OHdkPdrZwJBa6ozunJ4
4j8sGf2PglG7zjtB0XLkPAi44B3j5bHhM1oSw/L5hlEE8PEVeV2ahvnKtR1wn7r1
Mf7bQf21aeDjwmyupZQOiwvDdUi2flD5bEe4guDdD6OTfjm4Pz5rZAysjjGKpqmt
h7e9l6O6cXaINHRK3hq9aUhhFvOMhnMCgb8jBJUhbvLf3ISQt48kTQbVFyX1oUwY
hCcODG7jOujPN4zx7BBtH4wmi0K/+uG+MP9BFyzFqsJkneNmB9nRjTWjFisGXaKn
iMIRyMnq+b2Cdw==
-----END CERTIFICATE-----