Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/3gHEQ4Mc-TC3R4cI12o89E2JoWI.mft
File:                     3gHEQ4Mc-TC3R4cI12o89E2JoWI.mft (raw, json)
Hash identifier:          PLzI1WIhzG8hOkWOl+AtbSSc4zkirmNr6DJTJtTMJlM=
Subject key identifier:   27:43:09:53:0D:7D:2D:89:7D:A9:ED:63:5B:7C:31:41:9E:98:67:0F
Authority key identifier: DE:01:C4:43:83:1C:F9:30:B7:47:87:08:D7:6A:3C:F4:4D:89:A1:62
Certificate issuer:       /CN=de01c443831cf930b7478708d76a3cf44d89a162
Certificate serial:       01931AB9347048870CDB99ADABBCF2971D56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3gHEQ4Mc-TC3R4cI12o89E2JoWI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/3gHEQ4Mc-TC3R4cI12o89E2JoWI.mft
Manifest number:          104A
Signing time:             Mon 11 Nov 2024 10:16:05 +0000
Manifest this update:     Mon 11 Nov 2024 10:16:05 +0000
Manifest next update:     Tue 12 Nov 2024 10:16:05 +0000
Files and hashes:         1: 3gHEQ4Mc-TC3R4cI12o89E2JoWI.crl (hash: 7dEwN2niEhYwZPZ0EPoUNXTmbXEM5mpqj4IxuwTKYyc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:1a:b9:34:70:48:87:0c:db:99:ad:ab:bc:f2:97:1d:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de01c443831cf930b7478708d76a3cf44d89a162
        Validity
            Not Before: Nov 11 10:16:05 2024 GMT
            Not After : Nov 12 10:16:05 2024 GMT
        Subject: CN=274309530d7d2d897da9ed635b7c31419e98670f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a0:f6:d4:90:65:0c:d2:38:ce:f6:4c:26:d6:
                    16:60:8e:54:5c:4d:b4:c9:b5:58:82:a3:e8:1c:ee:
                    2f:e7:c5:11:5e:fa:ed:d8:fa:64:67:8c:44:1e:5c:
                    c6:48:5e:b2:35:35:47:6e:1c:7b:ad:b9:53:e6:80:
                    3f:30:49:97:6b:fa:27:70:2e:ee:46:4a:2a:21:ae:
                    8a:11:9c:7a:e1:98:54:99:e4:eb:fe:9f:a3:ab:2e:
                    23:39:b3:3f:55:04:f8:f8:59:bc:d5:97:d7:64:7d:
                    bd:a2:c5:dc:b9:1b:07:e6:e7:ac:b8:c5:57:3f:ff:
                    5c:7b:5f:cc:d3:1c:cd:39:29:70:67:9c:0d:6e:5a:
                    fb:86:a5:51:47:7a:41:ad:29:84:62:7c:46:11:4a:
                    96:09:a9:c6:e0:41:68:8a:51:29:72:17:54:b7:ed:
                    61:f2:61:10:63:6f:58:03:dd:24:18:3c:a4:57:35:
                    79:53:58:8f:86:bf:fb:0f:88:7f:af:4a:e2:02:14:
                    02:8b:11:da:1b:88:5d:99:07:7e:2d:65:d8:d6:c6:
                    8d:10:a2:26:0c:03:3a:ee:f3:ee:63:65:eb:7d:87:
                    dd:fc:41:23:88:84:d1:b2:4f:b8:4e:8e:29:f8:6b:
                    23:0f:52:08:53:a3:a2:7c:82:a6:1b:10:4f:d1:3c:
                    25:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:43:09:53:0D:7D:2D:89:7D:A9:ED:63:5B:7C:31:41:9E:98:67:0F
            X509v3 Authority Key Identifier:
                keyid:DE:01:C4:43:83:1C:F9:30:B7:47:87:08:D7:6A:3C:F4:4D:89:A1:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3gHEQ4Mc-TC3R4cI12o89E2JoWI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/3gHEQ4Mc-TC3R4cI12o89E2JoWI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/3gHEQ4Mc-TC3R4cI12o89E2JoWI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:8c:64:b4:a5:9d:54:24:58:e3:20:9b:76:87:64:c2:a3:1c:
         c7:66:10:d9:58:9c:70:1f:8c:ee:d1:e7:f7:36:41:1a:50:ba:
         6f:0e:17:96:e0:43:47:54:80:ae:8f:e7:2a:23:1e:13:ad:8e:
         00:67:a0:6c:81:e2:cb:f9:10:81:d5:92:18:4f:a6:3e:bd:a1:
         04:3e:e2:e9:4f:13:1e:30:6c:c4:39:b8:0c:03:3b:49:a1:ec:
         30:3b:e6:dc:6e:ce:46:02:62:a9:d2:de:7d:90:7a:b1:94:8e:
         e9:6b:96:ff:79:a9:e6:d2:61:6e:7c:f3:2a:04:7d:f0:d8:1c:
         d2:b0:46:ac:f4:dd:85:02:0a:1b:f9:39:5a:34:29:4f:e9:54:
         e1:80:b7:86:fe:5f:8f:bd:aa:12:30:c2:b8:05:e9:52:83:76:
         9b:53:20:51:39:68:39:98:42:b3:8f:94:02:29:34:02:ab:e6:
         16:62:86:91:13:95:41:b4:7f:c8:35:53:10:5a:f9:c3:b3:64:
         c2:5a:b7:50:c9:f9:d8:77:fd:86:4f:e9:61:d1:81:e7:d0:aa:
         1b:6b:98:47:cc:13:13:6c:ed:41:ba:01:06:a8:96:ee:9b:b3:
         9e:bc:ad:af:ac:93:5f:bb:b4:c6:96:23:18:b5:c3:14:bc:6e:
         de:4a:f4:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZMauTRwSIcM25mtq7zylx1WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlMDFjNDQzODMxY2Y5MzBiNzQ3ODcwOGQ3NmEzY2Y0NGQ4
OWExNjIwHhcNMjQxMTExMTAxNjA1WhcNMjQxMTEyMTAxNjA1WjAzMTEwLwYDVQQD
EygyNzQzMDk1MzBkN2QyZDg5N2RhOWVkNjM1YjdjMzE0MTllOTg2NzBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6D21JBlDNI4zvZMJtYWYI5UXE20
ybVYgqPoHO4v58URXvrt2PpkZ4xEHlzGSF6yNTVHbhx7rblT5oA/MEmXa/oncC7u
RkoqIa6KEZx64ZhUmeTr/p+jqy4jObM/VQT4+Fm81ZfXZH29osXcuRsH5uesuMVX
P/9ce1/M0xzNOSlwZ5wNblr7hqVRR3pBrSmEYnxGEUqWCanG4EFoilEpchdUt+1h
8mEQY29YA90kGDykVzV5U1iPhr/7D4h/r0riAhQCixHaG4hdmQd+LWXY1saNEKIm
DAM67vPuY2XrfYfd/EEjiITRsk+4To4p+GsjD1IIU6OifIKmGxBP0TwlYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCdDCVMNfS2JfantY1t8MUGemGcPMB8GA1UdIwQY
MBaAFN4BxEODHPkwt0eHCNdqPPRNiaFiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2dIRVE0TWMtVEMzUjRjSTEybzg5RTJKb1dJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy8xY2I4Y2EtNTk5My00ZDE3LWE2MWUt
ZWU3MzI4YWRjYzdjLzEvM2dIRVE0TWMtVEMzUjRjSTEybzg5RTJKb1dJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy8xY2I4Y2EtNTk5My00ZDE3LWE2MWUtZWU3MzI4YWRjYzdj
LzEvM2dIRVE0TWMtVEMzUjRjSTEybzg5RTJKb1dJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ4xktKWd
VCRY4yCbdodkwqMcx2YQ2ViccB+M7tHn9zZBGlC6bw4XluBDR1SAro/nKiMeE62O
AGegbIHiy/kQgdWSGE+mPr2hBD7i6U8THjBsxDm4DAM7SaHsMDvm3G7ORgJiqdLe
fZB6sZSO6WuW/3mp5tJhbnzzKgR98Ngc0rBGrPTdhQIKG/k5WjQpT+lU4YC3hv5f
j72qEjDCuAXpUoN2m1MgUTloOZhCs4+UAik0AqvmFmKGkROVQbR/yDVTEFr5w7Nk
wlq3UMn52Hf9hk/pYdGB59CqG2uYR8wTE2ztQboBBqiW7puznrytr6yTX7u0xpYj
GLXDFLxu3kr0hg==
-----END CERTIFICATE-----