Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/d22d65-b6e9-4ba6-8019-75237996c06c/1/2h4hJZezrgCcAW3OGC21RJF4ccY.mft
File:                     2h4hJZezrgCcAW3OGC21RJF4ccY.mft (raw, json)
Hash identifier:          srYWehsZ/rzxCp4nW8PpPtqU0LE3Wb4nu0Z0cDGpvVo=
Subject key identifier:   3D:F7:CF:34:67:0D:40:C0:B9:15:F4:9C:61:2E:EF:81:2F:42:2B:80
Authority key identifier: DA:1E:21:25:97:B3:AE:00:9C:01:6D:CE:18:2D:B5:44:91:78:71:C6
Certificate issuer:       /CN=da1e212597b3ae009c016dce182db544917871c6
Certificate serial:       01904F7C5E46D9B3549007C3BC05B6A56E13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2h4hJZezrgCcAW3OGC21RJF4ccY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/d22d65-b6e9-4ba6-8019-75237996c06c/1/2h4hJZezrgCcAW3OGC21RJF4ccY.mft
Manifest number:          0A71
Signing time:             Tue 25 Jun 2024 13:01:08 +0000
Manifest this update:     Tue 25 Jun 2024 13:01:08 +0000
Manifest next update:     Wed 26 Jun 2024 13:01:08 +0000
Files and hashes:         1: 2h4hJZezrgCcAW3OGC21RJF4ccY.crl (hash: ff20b2Ld/wJSSq8qIK4vHkY1jZ70SZlyO/cLH0G75PA=)
                          2: GWdOkSKrO6Bgk0E9HlJ3Pkx3UoM.roa (hash: dSeiJcD0FlmBidYA0GPHShbRg2MT63O4CTyys5CHgYo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:4f:7c:5e:46:d9:b3:54:90:07:c3:bc:05:b6:a5:6e:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da1e212597b3ae009c016dce182db544917871c6
        Validity
            Not Before: Jun 25 13:01:08 2024 GMT
            Not After : Jun 26 13:01:08 2024 GMT
        Subject: CN=3df7cf34670d40c0b915f49c612eef812f422b80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:42:ee:65:e2:d0:8a:2b:c7:2c:9b:7e:90:e6:
                    63:49:13:1d:09:99:df:d2:32:62:3b:6c:12:50:c9:
                    84:06:c4:12:71:99:f7:3f:13:5a:2a:fd:d3:23:86:
                    93:cd:bd:7c:91:96:ea:87:7d:85:c2:d9:3f:07:2e:
                    8f:88:27:81:65:e0:7f:d7:02:6e:4a:32:3b:19:eb:
                    b5:18:72:fd:4f:3e:38:65:10:fe:22:6c:3d:32:49:
                    03:5a:e0:21:f9:2c:af:5f:1f:a3:1b:5d:fa:dc:51:
                    1b:6b:79:0e:49:68:54:45:56:5d:89:0c:ab:86:4a:
                    11:5b:41:47:71:04:97:40:a0:4e:d2:e4:cb:37:45:
                    2d:57:4a:44:29:d9:38:c6:c6:7f:88:43:29:73:0f:
                    8d:41:8e:63:5c:1d:64:3e:5b:09:da:00:66:1b:85:
                    67:2e:37:0a:b7:66:42:2b:f7:8c:ad:67:06:16:57:
                    1b:80:a6:2d:61:60:6b:21:a0:5f:1c:79:7d:6f:91:
                    0d:b6:d9:3b:d5:93:f2:15:71:ce:93:b8:06:95:b3:
                    9d:61:8a:55:86:ca:f8:0d:91:69:6c:d4:7e:de:fc:
                    ec:0b:f5:9e:40:7f:86:52:bc:17:7e:51:c8:c7:d0:
                    64:83:44:d2:8e:2d:da:a8:12:c0:b1:36:ea:8e:3d:
                    96:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:F7:CF:34:67:0D:40:C0:B9:15:F4:9C:61:2E:EF:81:2F:42:2B:80
            X509v3 Authority Key Identifier:
                keyid:DA:1E:21:25:97:B3:AE:00:9C:01:6D:CE:18:2D:B5:44:91:78:71:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2h4hJZezrgCcAW3OGC21RJF4ccY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/d22d65-b6e9-4ba6-8019-75237996c06c/1/2h4hJZezrgCcAW3OGC21RJF4ccY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/d22d65-b6e9-4ba6-8019-75237996c06c/1/2h4hJZezrgCcAW3OGC21RJF4ccY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:8d:e4:84:13:5a:cb:2a:02:f1:bc:28:36:af:ee:e6:df:03:
         a0:28:3b:e2:6f:c1:d9:90:69:61:9e:15:2f:92:a7:4a:2a:48:
         6a:a5:03:8e:9b:60:c1:a9:90:59:29:22:53:0e:44:8f:a4:1f:
         41:fe:58:df:9f:27:97:c7:07:18:21:ab:f4:8f:75:22:f7:31:
         61:67:c2:72:ce:a3:23:2d:c4:8c:77:55:7f:5c:7e:42:34:da:
         22:aa:0a:8a:d5:84:71:d7:b0:0d:32:66:6b:f5:6c:47:44:02:
         d3:62:82:01:1f:a1:83:c8:04:39:06:1e:ab:51:d1:c1:4f:56:
         8a:33:3f:ea:a3:f3:a1:81:0e:e5:e8:9b:fb:be:63:0b:71:50:
         41:b4:67:4e:c4:55:4c:b9:fc:c9:d8:4a:b4:1c:0f:65:7f:8c:
         02:63:5f:a1:59:7a:54:49:7d:b3:46:f3:94:11:c1:59:f0:3d:
         c5:50:a2:e0:1a:16:27:ab:41:f5:c2:f1:1b:48:3c:3a:fe:49:
         98:43:0c:11:16:cd:95:10:fc:6e:06:12:b0:77:db:ad:5e:0c:
         4c:9f:e0:21:ec:2d:38:a6:90:63:ed:34:5f:63:f4:b0:47:7b:
         f4:ba:ce:c0:78:85:2b:8a:f6:f8:e5:f7:e3:e2:66:23:12:5c:
         d9:51:0f:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBPfF5G2bNUkAfDvAW2pW4TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhMWUyMTI1OTdiM2FlMDA5YzAxNmRjZTE4MmRiNTQ0OTE3
ODcxYzYwHhcNMjQwNjI1MTMwMTA4WhcNMjQwNjI2MTMwMTA4WjAzMTEwLwYDVQQD
EygzZGY3Y2YzNDY3MGQ0MGMwYjkxNWY0OWM2MTJlZWY4MTJmNDIyYjgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+ELuZeLQiivHLJt+kOZjSRMdCZnf
0jJiO2wSUMmEBsQScZn3PxNaKv3TI4aTzb18kZbqh32Fwtk/By6PiCeBZeB/1wJu
SjI7Geu1GHL9Tz44ZRD+Imw9MkkDWuAh+SyvXx+jG1363FEba3kOSWhURVZdiQyr
hkoRW0FHcQSXQKBO0uTLN0UtV0pEKdk4xsZ/iEMpcw+NQY5jXB1kPlsJ2gBmG4Vn
LjcKt2ZCK/eMrWcGFlcbgKYtYWBrIaBfHHl9b5ENttk71ZPyFXHOk7gGlbOdYYpV
hsr4DZFpbNR+3vzsC/WeQH+GUrwXflHIx9Bkg0TSji3aqBLAsTbqjj2WnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD33zzRnDUDAuRX0nGEu74EvQiuAMB8GA1UdIwQY
MBaAFNoeISWXs64AnAFtzhgttUSReHHGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmg0aEpaZXpyZ0NjQVczT0dDMjFSSkY0Y2NZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9kMjJkNjUtYjZlOS00YmE2LTgwMTkt
NzUyMzc5OTZjMDZjLzEvMmg0aEpaZXpyZ0NjQVczT0dDMjFSSkY0Y2NZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi9kMjJkNjUtYjZlOS00YmE2LTgwMTktNzUyMzc5OTZjMDZj
LzEvMmg0aEpaZXpyZ0NjQVczT0dDMjFSSkY0Y2NZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC43khBNa
yyoC8bwoNq/u5t8DoCg74m/B2ZBpYZ4VL5KnSipIaqUDjptgwamQWSkiUw5Ej6Qf
Qf5Y358nl8cHGCGr9I91IvcxYWfCcs6jIy3EjHdVf1x+QjTaIqoKitWEcdewDTJm
a/VsR0QC02KCAR+hg8gEOQYeq1HRwU9WijM/6qPzoYEO5eib+75jC3FQQbRnTsRV
TLn8ydhKtBwPZX+MAmNfoVl6VEl9s0bzlBHBWfA9xVCi4BoWJ6tB9cLxG0g8Ov5J
mEMMERbNlRD8bgYSsHfbrV4MTJ/gIewtOKaQY+00X2P0sEd79LrOwHiFK4r2+OX3
4+JmIxJc2VEPoQ==
-----END CERTIFICATE-----