Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/9f379d-51dc-42a8-b2cc-1d1fe2784e24/1/Hi7K7IpIZQRllMb38hCVIAFvDrc.mft
File:                     Hi7K7IpIZQRllMb38hCVIAFvDrc.mft (raw, json)
Hash identifier:          Dh3umHswq4F1K01EJSegoZ9krJegsMfPlQjqfNHHnvY=
Subject key identifier:   3F:6E:EC:D5:94:E3:3B:90:2A:F8:8D:A9:AA:F6:31:8A:7D:B5:E4:3E
Authority key identifier: 1E:2E:CA:EC:8A:48:65:04:65:94:C6:F7:F2:10:95:20:01:6F:0E:B7
Certificate issuer:       /CN=1e2ecaec8a4865046594c6f7f2109520016f0eb7
Certificate serial:       018F614E5E415765D0203A068678A0178FFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hi7K7IpIZQRllMb38hCVIAFvDrc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/9f379d-51dc-42a8-b2cc-1d1fe2784e24/1/Hi7K7IpIZQRllMb38hCVIAFvDrc.mft
Manifest number:          0E24
Signing time:             Fri 10 May 2024 07:01:16 +0000
Manifest this update:     Fri 10 May 2024 07:01:16 +0000
Manifest next update:     Sat 11 May 2024 07:01:16 +0000
Files and hashes:         1: Hi7K7IpIZQRllMb38hCVIAFvDrc.crl (hash: 7EElo+bSUnQKCo9YedS0Ncd972qq289uj/95SI3xEww=)
                          2: s5-1Q3rbtKT0HkcMSMlLGMlZ5-Q.roa (hash: Ofz8Uw5Px5XOSlB+a+MV+JRMGn3OTsBp4svcWGsJJ/k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:61:4e:5e:41:57:65:d0:20:3a:06:86:78:a0:17:8f:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e2ecaec8a4865046594c6f7f2109520016f0eb7
        Validity
            Not Before: May 10 07:01:16 2024 GMT
            Not After : May 11 07:01:16 2024 GMT
        Subject: CN=3f6eecd594e33b902af88da9aaf6318a7db5e43e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d3:9e:58:f1:90:bd:0f:2b:09:70:8d:f6:ca:
                    dd:76:b5:8e:8a:6c:a4:0f:62:92:1f:e6:c3:d3:21:
                    85:8f:48:64:fa:92:d8:87:52:86:82:30:4d:73:19:
                    c8:77:99:b1:6e:00:27:4a:2c:19:af:c6:b2:eb:af:
                    cb:f5:25:5c:73:c2:b4:79:2a:48:98:fe:89:93:cf:
                    30:19:7b:9e:c7:ba:48:26:85:63:5a:59:61:03:b4:
                    d3:95:d6:8b:c6:a7:12:e5:d2:2f:9a:6e:d8:82:11:
                    8e:52:70:cd:c8:62:6b:96:25:49:57:6d:1e:c4:e3:
                    df:cf:32:89:83:6e:48:ad:67:20:a0:2f:69:f9:cf:
                    ab:f9:99:c9:05:44:5e:ba:24:94:8c:57:2e:70:e2:
                    cb:ff:da:f0:60:1a:15:02:c2:49:6f:44:30:8e:1d:
                    1a:af:8b:ee:fb:2e:98:6a:00:dd:3c:44:5a:88:48:
                    09:97:5f:fc:ea:51:8c:2d:70:63:60:63:c2:5e:41:
                    a7:a7:55:4f:0b:fd:d9:fe:7b:5a:50:41:67:90:fd:
                    85:79:b0:f0:a9:f1:7c:50:4f:03:37:25:ce:cf:c1:
                    1a:ef:20:93:17:f8:4f:16:99:5d:92:bd:7d:f2:fa:
                    f3:ec:44:d3:0f:de:30:6d:e8:20:53:6c:13:d8:fe:
                    30:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:6E:EC:D5:94:E3:3B:90:2A:F8:8D:A9:AA:F6:31:8A:7D:B5:E4:3E
            X509v3 Authority Key Identifier:
                keyid:1E:2E:CA:EC:8A:48:65:04:65:94:C6:F7:F2:10:95:20:01:6F:0E:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hi7K7IpIZQRllMb38hCVIAFvDrc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9f379d-51dc-42a8-b2cc-1d1fe2784e24/1/Hi7K7IpIZQRllMb38hCVIAFvDrc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9f379d-51dc-42a8-b2cc-1d1fe2784e24/1/Hi7K7IpIZQRllMb38hCVIAFvDrc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:be:49:ad:b2:8e:70:db:a8:c6:d7:9c:ec:61:21:a4:c6:40:
         3c:c0:34:cc:fb:93:96:5e:3c:a9:cd:67:49:55:6b:a1:51:a4:
         73:19:3f:f8:33:f1:81:0b:5d:3a:09:96:dc:91:84:e4:b5:8f:
         4e:6a:2a:06:57:93:99:50:79:b4:3e:c1:d0:68:d1:41:33:bf:
         16:c9:4e:be:55:30:ab:02:f9:5a:59:cd:1c:50:7e:87:5c:cd:
         fb:04:01:76:72:be:7c:d6:db:cf:7c:50:32:c3:ee:2f:60:c4:
         7d:da:ec:dc:c1:d2:d5:77:18:8e:4b:80:b9:38:27:76:fd:4d:
         b4:43:c9:fc:a3:4d:76:93:3d:d0:c0:8e:4c:56:47:69:49:24:
         9e:56:e8:2d:00:5a:55:33:52:57:26:a3:05:18:20:50:fb:6e:
         c1:6f:ea:b8:fb:fc:04:1a:70:de:e9:1c:e8:54:57:ae:3e:b9:
         12:bc:e7:8d:2e:d2:08:51:c5:71:7a:76:c3:e7:6c:aa:16:43:
         0f:e5:06:4f:92:fe:6b:c2:af:4c:e5:9c:97:60:57:f8:60:15:
         50:53:30:53:ad:c5:b3:5b:5b:f3:45:11:3d:15:a7:a4:39:9b:
         45:75:3d:d9:69:ca:41:89:4e:4a:ac:03:fe:93:0f:c6:fd:fc:
         53:86:9c:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9hTl5BV2XQIDoGhnigF4//MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlMmVjYWVjOGE0ODY1MDQ2NTk0YzZmN2YyMTA5NTIwMDE2
ZjBlYjcwHhcNMjQwNTEwMDcwMTE2WhcNMjQwNTExMDcwMTE2WjAzMTEwLwYDVQQD
EygzZjZlZWNkNTk0ZTMzYjkwMmFmODhkYTlhYWY2MzE4YTdkYjVlNDNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNOeWPGQvQ8rCXCN9srddrWOimyk
D2KSH+bD0yGFj0hk+pLYh1KGgjBNcxnId5mxbgAnSiwZr8ay66/L9SVcc8K0eSpI
mP6Jk88wGXuex7pIJoVjWllhA7TTldaLxqcS5dIvmm7YghGOUnDNyGJrliVJV20e
xOPfzzKJg25IrWcgoC9p+c+r+ZnJBUReuiSUjFcucOLL/9rwYBoVAsJJb0Qwjh0a
r4vu+y6YagDdPERaiEgJl1/86lGMLXBjYGPCXkGnp1VPC/3Z/ntaUEFnkP2FebDw
qfF8UE8DNyXOz8Ea7yCTF/hPFpldkr198vrz7ETTD94wbeggU2wT2P4wIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD9u7NWU4zuQKviNqar2MYp9teQ+MB8GA1UdIwQY
MBaAFB4uyuyKSGUEZZTG9/IQlSABbw63MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGk3SzdJcElaUVJsbE1iMzhoQ1ZJQUZ2RHJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy85ZjM3OWQtNTFkYy00MmE4LWIyY2Mt
MWQxZmUyNzg0ZTI0LzEvSGk3SzdJcElaUVJsbE1iMzhoQ1ZJQUZ2RHJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy85ZjM3OWQtNTFkYy00MmE4LWIyY2MtMWQxZmUyNzg0ZTI0
LzEvSGk3SzdJcElaUVJsbE1iMzhoQ1ZJQUZ2RHJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABL5JrbKO
cNuoxtec7GEhpMZAPMA0zPuTll48qc1nSVVroVGkcxk/+DPxgQtdOgmW3JGE5LWP
TmoqBleTmVB5tD7B0GjRQTO/FslOvlUwqwL5WlnNHFB+h1zN+wQBdnK+fNbbz3xQ
MsPuL2DEfdrs3MHS1XcYjkuAuTgndv1NtEPJ/KNNdpM90MCOTFZHaUkknlboLQBa
VTNSVyajBRggUPtuwW/quPv8BBpw3ukc6FRXrj65ErznjS7SCFHFcXp2w+dsqhZD
D+UGT5L+a8KvTOWcl2BX+GAVUFMwU63Fs1tb80URPRWnpDmbRXU92WnKQYlOSqwD
/pMPxv38U4ac9A==
-----END CERTIFICATE-----