Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/5affea-4211-4e0d-a797-a9af1a25ef20/1/9C_c9TnePMRQDpsuO55CnYvMVPQ.mft
File:                     9C_c9TnePMRQDpsuO55CnYvMVPQ.mft (raw, json)
Hash identifier:          Mjq6EgEPSiukZZEXr/Xg1qOVSDqvTzZCMeEavemjX8Y=
Subject key identifier:   3A:EC:00:12:7C:ED:1B:8F:06:D4:B6:1A:50:98:B9:DF:DD:A0:5B:31
Authority key identifier: F4:2F:DC:F5:39:DE:3C:C4:50:0E:9B:2E:3B:9E:42:9D:8B:CC:54:F4
Certificate issuer:       /CN=f42fdcf539de3cc4500e9b2e3b9e429d8bcc54f4
Certificate serial:       018E5FD0E53A3D188C0D32715C2B722E16E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9C_c9TnePMRQDpsuO55CnYvMVPQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/5affea-4211-4e0d-a797-a9af1a25ef20/1/9C_c9TnePMRQDpsuO55CnYvMVPQ.mft
Manifest number:          0A45
Signing time:             Thu 21 Mar 2024 07:01:49 +0000
Manifest this update:     Thu 21 Mar 2024 07:01:49 +0000
Manifest next update:     Fri 22 Mar 2024 07:01:49 +0000
Files and hashes:         1: 9C_c9TnePMRQDpsuO55CnYvMVPQ.crl (hash: lacONc6Nbbl8GdNEQlmHnwwuXxX7L1WqZRUKpnPfcog=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:5f:d0:e5:3a:3d:18:8c:0d:32:71:5c:2b:72:2e:16:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f42fdcf539de3cc4500e9b2e3b9e429d8bcc54f4
        Validity
            Not Before: Mar 21 07:01:49 2024 GMT
            Not After : Mar 22 07:01:49 2024 GMT
        Subject: CN=3aec00127ced1b8f06d4b61a5098b9dfdda05b31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:38:b9:be:a3:e0:ec:23:87:97:48:d7:f6:1d:
                    33:e9:b3:a0:85:62:81:31:7f:34:01:fa:ec:d8:58:
                    59:96:6b:07:e7:14:75:31:46:ad:fe:5e:e7:64:0a:
                    6e:5d:aa:79:77:fb:1d:d1:8e:2d:c5:0c:86:a9:8e:
                    09:6d:a4:67:d0:11:0c:b7:e4:30:90:28:17:6f:94:
                    71:af:82:fe:85:57:87:8a:50:ae:b9:9e:04:2e:9a:
                    8d:02:c1:6f:e9:fb:cb:dc:3d:9a:63:4a:7a:65:ab:
                    14:4c:a5:f4:50:18:b0:ab:06:9b:71:f1:5d:b1:2b:
                    59:92:71:fb:79:e4:0d:db:6b:37:7a:fd:00:e8:71:
                    4d:bc:42:81:e7:ec:81:28:ea:45:6b:89:85:1c:8e:
                    38:ac:f9:54:48:33:20:40:3a:47:05:64:5d:b4:c9:
                    46:47:22:9d:4f:a9:78:34:fa:49:1b:7a:2b:6d:4f:
                    65:2f:3e:c1:79:1a:1a:27:ef:a6:42:bd:b4:41:3e:
                    bb:06:64:2f:08:ca:5a:2e:e2:a7:20:85:4d:96:2b:
                    ee:33:dd:eb:c1:66:3f:ee:7b:f7:5e:1b:3b:8c:46:
                    6c:b8:3a:70:cf:1e:be:17:05:f2:4f:ff:4c:82:06:
                    47:23:03:3d:50:06:77:76:c0:27:9b:b3:54:b1:aa:
                    fd:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:EC:00:12:7C:ED:1B:8F:06:D4:B6:1A:50:98:B9:DF:DD:A0:5B:31
            X509v3 Authority Key Identifier:
                keyid:F4:2F:DC:F5:39:DE:3C:C4:50:0E:9B:2E:3B:9E:42:9D:8B:CC:54:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9C_c9TnePMRQDpsuO55CnYvMVPQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/5affea-4211-4e0d-a797-a9af1a25ef20/1/9C_c9TnePMRQDpsuO55CnYvMVPQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/5affea-4211-4e0d-a797-a9af1a25ef20/1/9C_c9TnePMRQDpsuO55CnYvMVPQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:3c:77:3c:bf:f4:c8:8f:f9:d1:a8:eb:2b:28:28:e2:ec:f7:
         f3:65:85:03:83:cb:f9:12:33:00:a1:8a:81:6e:47:a1:d2:88:
         67:18:7b:ce:77:5b:cd:d6:4d:94:3b:55:fa:2b:68:0c:b2:db:
         00:4d:5a:48:5c:09:b1:c1:23:e5:5d:10:74:c1:e6:59:d4:66:
         0f:1f:50:92:b2:f9:69:41:ca:78:d8:7a:8f:9a:66:aa:9b:af:
         03:30:bd:3e:97:cb:23:f9:5c:f8:c6:d7:a5:59:48:b1:49:78:
         27:db:33:b4:29:68:c8:3c:a2:2e:b8:f5:39:71:e4:19:3e:bf:
         e0:f3:07:f4:d0:a6:0b:cd:1d:99:d8:ea:2d:f3:3d:3f:17:84:
         67:4f:f0:29:e8:0b:38:a7:fe:6c:b0:54:0d:d7:20:80:be:25:
         7d:9f:09:d5:cd:20:be:06:bd:80:75:91:c0:7d:49:0e:f9:40:
         e5:16:fd:b5:02:83:46:8f:19:cd:bf:f9:96:9e:34:b9:ac:45:
         d7:da:a8:c3:7f:e8:29:8e:a4:c4:0b:6c:4c:46:57:72:5f:aa:
         86:b7:aa:e7:0e:f9:24:db:2c:10:f7:d8:49:84:1d:b2:c0:40:
         14:cc:75:83:80:bf:27:27:83:11:90:3e:a7:1b:1f:33:71:13:
         66:46:63:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY5f0OU6PRiMDTJxXCtyLhbjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0MmZkY2Y1MzlkZTNjYzQ1MDBlOWIyZTNiOWU0MjlkOGJj
YzU0ZjQwHhcNMjQwMzIxMDcwMTQ5WhcNMjQwMzIyMDcwMTQ5WjAzMTEwLwYDVQQD
EygzYWVjMDAxMjdjZWQxYjhmMDZkNGI2MWE1MDk4YjlkZmRkYTA1YjMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDi5vqPg7COHl0jX9h0z6bOghWKB
MX80Afrs2FhZlmsH5xR1MUat/l7nZApuXap5d/sd0Y4txQyGqY4JbaRn0BEMt+Qw
kCgXb5Rxr4L+hVeHilCuuZ4ELpqNAsFv6fvL3D2aY0p6ZasUTKX0UBiwqwabcfFd
sStZknH7eeQN22s3ev0A6HFNvEKB5+yBKOpFa4mFHI44rPlUSDMgQDpHBWRdtMlG
RyKdT6l4NPpJG3orbU9lLz7BeRoaJ++mQr20QT67BmQvCMpaLuKnIIVNlivuM93r
wWY/7nv3Xhs7jEZsuDpwzx6+FwXyT/9MggZHIwM9UAZ3dsAnm7NUsar9ywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDrsABJ87RuPBtS2GlCYud/doFsxMB8GA1UdIwQY
MBaAFPQv3PU53jzEUA6bLjueQp2LzFT0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUNfYzlUbmVQTVJRRHBzdU81NUNuWXZNVlBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi81YWZmZWEtNDIxMS00ZTBkLWE3OTct
YTlhZjFhMjVlZjIwLzEvOUNfYzlUbmVQTVJRRHBzdU81NUNuWXZNVlBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi81YWZmZWEtNDIxMS00ZTBkLWE3OTctYTlhZjFhMjVlZjIw
LzEvOUNfYzlUbmVQTVJRRHBzdU81NUNuWXZNVlBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbjx3PL/0
yI/50ajrKygo4uz382WFA4PL+RIzAKGKgW5HodKIZxh7zndbzdZNlDtV+itoDLLb
AE1aSFwJscEj5V0QdMHmWdRmDx9QkrL5aUHKeNh6j5pmqpuvAzC9PpfLI/lc+MbX
pVlIsUl4J9sztCloyDyiLrj1OXHkGT6/4PMH9NCmC80dmdjqLfM9PxeEZ0/wKegL
OKf+bLBUDdcggL4lfZ8J1c0gvga9gHWRwH1JDvlA5Rb9tQKDRo8Zzb/5lp40uaxF
19qow3/oKY6kxAtsTEZXcl+qhreq5w75JNssEPfYSYQdssBAFMx1g4C/JyeDEZA+
pxsfM3ETZkZjLA==
-----END CERTIFICATE-----