Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/669d13-3753-43cc-ad46-e02b70afd335/1/2XQKAvvhI2Imw2azPCnzbatw3lw.mft
File:                     2XQKAvvhI2Imw2azPCnzbatw3lw.mft (raw, json)
Hash identifier:          zZ0AMnA9oJ3nxPdZ15OCyIS4hqumO/1K6U5XbCzlaVA=
Subject key identifier:   4F:76:D4:DA:FD:1A:05:6D:C1:B6:B1:44:FB:7A:73:33:36:5A:38:5D
Authority key identifier: D9:74:0A:02:FB:E1:23:62:26:C3:66:B3:3C:29:F3:6D:AB:70:DE:5C
Certificate issuer:       /CN=d9740a02fbe1236226c366b33c29f36dab70de5c
Certificate serial:       018DA66C1744C6C6C40A806E95D14F9F2DE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2XQKAvvhI2Imw2azPCnzbatw3lw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/669d13-3753-43cc-ad46-e02b70afd335/1/2XQKAvvhI2Imw2azPCnzbatw3lw.mft
Manifest number:          082D
Signing time:             Wed 14 Feb 2024 07:01:58 +0000
Manifest this update:     Wed 14 Feb 2024 07:01:58 +0000
Manifest next update:     Thu 15 Feb 2024 07:01:58 +0000
Files and hashes:         1: 2XQKAvvhI2Imw2azPCnzbatw3lw.crl (hash: 0BXUGui4EoDYQZdW0b+BQBLYvqKMVoHLdEbcwXXz29Y=)
                          2: 9jp5_XfTiEwwNHNk2oxw-oayz6g.roa (hash: 3r63RXuBq2+H+3uAIUcsKa19QDg8Wvj+gzAnmLVuRWY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:a6:6c:17:44:c6:c6:c4:0a:80:6e:95:d1:4f:9f:2d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9740a02fbe1236226c366b33c29f36dab70de5c
        Validity
            Not Before: Feb 14 07:01:58 2024 GMT
            Not After : Feb 15 07:01:58 2024 GMT
        Subject: CN=4f76d4dafd1a056dc1b6b144fb7a7333365a385d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e6:09:c6:91:a3:7a:7b:bb:56:f6:75:7b:43:
                    6e:13:1c:e8:b0:65:0b:93:51:0b:c6:08:bb:0a:55:
                    51:38:85:d5:00:92:8a:a1:a4:fe:f2:02:f4:0d:df:
                    6e:bc:92:6d:a4:ac:19:b7:76:f6:db:b4:92:e0:de:
                    90:fe:ea:4e:46:b0:06:f9:bd:a7:04:28:99:51:02:
                    ce:10:9f:87:12:97:8a:e7:fb:76:d5:e0:0f:d5:af:
                    96:5f:6f:01:eb:79:e3:3c:04:26:05:8a:5f:c4:cc:
                    b8:c8:7f:6b:89:e5:b9:50:53:e1:f6:11:c3:6f:97:
                    f9:34:35:2b:24:75:9d:2a:1a:fb:5c:ef:6b:16:3c:
                    90:35:32:29:fc:27:98:f0:07:aa:a2:10:1f:ce:b8:
                    0e:90:1b:4f:65:da:12:e9:81:5b:59:f8:2d:ba:f0:
                    34:de:c3:d4:bf:c2:63:c5:a3:ea:ea:93:ae:d4:e0:
                    64:3d:0e:02:52:a2:c4:f1:4f:77:3d:97:61:81:83:
                    1f:af:34:32:a2:0a:9f:fc:e0:6b:a0:d6:c8:99:bc:
                    01:f8:f3:87:f6:a6:23:f9:20:45:35:3f:af:a1:4e:
                    53:6d:27:7f:a5:46:3a:c0:c5:70:d8:97:81:10:58:
                    97:98:bb:2b:07:01:78:5a:87:96:5e:56:26:48:53:
                    da:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:76:D4:DA:FD:1A:05:6D:C1:B6:B1:44:FB:7A:73:33:36:5A:38:5D
            X509v3 Authority Key Identifier:
                keyid:D9:74:0A:02:FB:E1:23:62:26:C3:66:B3:3C:29:F3:6D:AB:70:DE:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2XQKAvvhI2Imw2azPCnzbatw3lw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/669d13-3753-43cc-ad46-e02b70afd335/1/2XQKAvvhI2Imw2azPCnzbatw3lw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/669d13-3753-43cc-ad46-e02b70afd335/1/2XQKAvvhI2Imw2azPCnzbatw3lw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:9d:1c:fb:c4:c4:26:1d:4f:ba:d3:79:69:b0:2f:08:d0:6b:
         bc:b4:09:fc:b8:51:fb:1a:39:0e:a5:99:f1:4f:bd:fb:65:c0:
         2e:9b:5c:71:da:f9:7d:34:09:0b:d6:5f:0a:ce:4e:b9:00:66:
         5c:fe:d1:1e:1c:ed:88:30:fb:38:1b:58:66:4a:49:b2:28:e5:
         23:be:27:41:7c:68:8b:6a:17:17:f6:2f:f7:a8:ee:9e:92:5b:
         d7:df:4e:d1:dc:d2:b5:40:d0:94:56:52:63:6b:1d:9c:ea:86:
         69:fe:bf:9c:11:17:83:dd:56:11:4c:0c:be:2c:ea:c1:9b:be:
         15:4d:83:47:df:e1:54:87:fb:d8:1c:dc:e6:07:bf:3f:d1:75:
         db:5d:43:a7:62:04:31:d9:58:52:16:d4:26:92:24:82:7e:91:
         e9:a7:e7:f7:e3:fe:38:06:ca:c9:c7:06:f4:a2:07:1f:cd:5f:
         a1:b8:7d:39:08:af:4f:f9:bd:7d:87:d9:c2:b7:45:d3:f5:7b:
         cd:29:2e:7e:bb:b2:2b:2f:88:48:6e:25:ac:ea:9c:38:16:00:
         cc:dc:82:a4:bc:1c:97:87:9e:8c:78:ff:fc:29:3a:fb:43:93:
         1e:38:9c:4d:02:b1:28:0d:17:4d:a7:0e:99:49:1a:84:c6:c9:
         6c:99:16:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY2mbBdExsbECoBuldFPny3gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5NzQwYTAyZmJlMTIzNjIyNmMzNjZiMzNjMjlmMzZkYWI3
MGRlNWMwHhcNMjQwMjE0MDcwMTU4WhcNMjQwMjE1MDcwMTU4WjAzMTEwLwYDVQQD
Eyg0Zjc2ZDRkYWZkMWEwNTZkYzFiNmIxNDRmYjdhNzMzMzM2NWEzODVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOYJxpGjenu7VvZ1e0NuExzosGUL
k1ELxgi7ClVROIXVAJKKoaT+8gL0Dd9uvJJtpKwZt3b227SS4N6Q/upORrAG+b2n
BCiZUQLOEJ+HEpeK5/t21eAP1a+WX28B63njPAQmBYpfxMy4yH9rieW5UFPh9hHD
b5f5NDUrJHWdKhr7XO9rFjyQNTIp/CeY8AeqohAfzrgOkBtPZdoS6YFbWfgtuvA0
3sPUv8JjxaPq6pOu1OBkPQ4CUqLE8U93PZdhgYMfrzQyogqf/OBroNbImbwB+POH
9qYj+SBFNT+voU5TbSd/pUY6wMVw2JeBEFiXmLsrBwF4WoeWXlYmSFPaIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE921Nr9GgVtwbaxRPt6czM2WjhdMB8GA1UdIwQY
MBaAFNl0CgL74SNiJsNmszwp822rcN5cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlhRS0F2dmhJMkltdzJhelBDbnpiYXR3M2x3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi82NjlkMTMtMzc1My00M2NjLWFkNDYt
ZTAyYjcwYWZkMzM1LzEvMlhRS0F2dmhJMkltdzJhelBDbnpiYXR3M2x3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi82NjlkMTMtMzc1My00M2NjLWFkNDYtZTAyYjcwYWZkMzM1
LzEvMlhRS0F2dmhJMkltdzJhelBDbnpiYXR3M2x3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF50c+8TE
Jh1PutN5abAvCNBrvLQJ/LhR+xo5DqWZ8U+9+2XALptccdr5fTQJC9ZfCs5OuQBm
XP7RHhztiDD7OBtYZkpJsijlI74nQXxoi2oXF/Yv96junpJb199O0dzStUDQlFZS
Y2sdnOqGaf6/nBEXg91WEUwMvizqwZu+FU2DR9/hVIf72Bzc5ge/P9F1211Dp2IE
MdlYUhbUJpIkgn6R6afn9+P+OAbKyccG9KIHH81fobh9OQivT/m9fYfZwrdF0/V7
zSkufruyKy+ISG4lrOqcOBYAzNyCpLwcl4eejHj//Ck6+0OTHjicTQKxKA0XTacO
mUkahMbJbJkW+Q==
-----END CERTIFICATE-----