Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/693672-81b1-48a7-a374-146dc46cd241/1/FEcNM4hy7x8eX-T85uP2gyZ6Ifc.mft
File:                     FEcNM4hy7x8eX-T85uP2gyZ6Ifc.mft (raw, json)
Hash identifier:          kx7LuqkDFRpIrueZyn5I8V7V0vL5Ts7gb5wUgiciPak=
Subject key identifier:   77:ED:04:54:9C:B1:15:35:FE:EC:AD:83:DE:66:4C:DF:4B:84:8F:7F
Authority key identifier: 14:47:0D:33:88:72:EF:1F:1E:5F:E4:FC:E6:E3:F6:83:26:7A:21:F7
Certificate issuer:       /CN=14470d338872ef1f1e5fe4fce6e3f683267a21f7
Certificate serial:       019159FDAE486EC4B5F53BF06BE22895B480
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FEcNM4hy7x8eX-T85uP2gyZ6Ifc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/693672-81b1-48a7-a374-146dc46cd241/1/FEcNM4hy7x8eX-T85uP2gyZ6Ifc.mft
Manifest number:          056E
Signing time:             Fri 16 Aug 2024 07:01:23 +0000
Manifest this update:     Fri 16 Aug 2024 07:01:23 +0000
Manifest next update:     Sat 17 Aug 2024 07:01:23 +0000
Files and hashes:         1: FEcNM4hy7x8eX-T85uP2gyZ6Ifc.crl (hash: mZpnC1m6FRi4cFJWZegqUNFTNDE3jfEhn4OBpn4sWBs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:59:fd:ae:48:6e:c4:b5:f5:3b:f0:6b:e2:28:95:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14470d338872ef1f1e5fe4fce6e3f683267a21f7
        Validity
            Not Before: Aug 16 07:01:23 2024 GMT
            Not After : Aug 17 07:01:23 2024 GMT
        Subject: CN=77ed04549cb11535feecad83de664cdf4b848f7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b4:ef:1d:8f:54:8a:87:ef:6d:62:d8:54:8a:
                    c1:ad:1d:6a:c4:11:a9:fb:30:42:72:07:3f:3e:a4:
                    d7:ee:15:20:6f:39:e2:f4:eb:ae:96:04:3f:0f:e9:
                    09:83:22:39:a9:91:d9:e6:0b:25:df:91:3b:1e:93:
                    58:84:ea:a7:06:68:83:cf:40:0b:0b:da:97:97:86:
                    37:8f:89:40:b3:78:eb:27:85:ec:5c:77:e0:cd:92:
                    b1:dc:ba:1f:e1:ed:5f:df:29:05:8f:9a:c7:8f:7a:
                    f0:6d:a4:ed:d5:a9:c5:01:d7:2a:1c:e9:98:ea:2f:
                    bf:1c:6e:1e:b3:15:57:43:6e:d6:30:eb:b3:fb:46:
                    58:ab:86:d3:89:a8:51:7f:d1:84:a0:e6:37:2f:ff:
                    ef:5d:ed:99:e6:6f:77:67:f6:bc:0f:41:ce:76:79:
                    96:40:25:a0:38:f0:74:2c:79:6b:25:db:e6:50:c7:
                    64:bb:6b:3c:dc:9d:54:4e:aa:dc:50:7c:b7:7a:ea:
                    66:18:c6:31:eb:c1:88:ad:7b:10:be:cb:73:31:05:
                    37:47:c2:00:c6:5f:1c:2f:01:ee:9b:ab:e6:2f:b1:
                    6c:0f:1a:32:8c:72:0b:7f:81:53:63:9b:09:8b:2f:
                    b0:9e:f8:fc:37:91:f7:18:69:ee:fb:70:65:34:36:
                    91:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:ED:04:54:9C:B1:15:35:FE:EC:AD:83:DE:66:4C:DF:4B:84:8F:7F
            X509v3 Authority Key Identifier:
                keyid:14:47:0D:33:88:72:EF:1F:1E:5F:E4:FC:E6:E3:F6:83:26:7A:21:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FEcNM4hy7x8eX-T85uP2gyZ6Ifc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/693672-81b1-48a7-a374-146dc46cd241/1/FEcNM4hy7x8eX-T85uP2gyZ6Ifc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/693672-81b1-48a7-a374-146dc46cd241/1/FEcNM4hy7x8eX-T85uP2gyZ6Ifc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:08:7a:76:07:b0:e6:b2:bc:59:a8:65:a9:9b:03:73:3f:76:
         66:ff:6b:f5:a7:72:7b:90:80:7d:39:02:9b:8f:f2:5d:d3:ed:
         7e:39:8b:af:ca:48:55:59:10:b1:2e:d4:6a:51:70:28:ee:61:
         83:a2:19:41:e8:dd:30:2c:85:bd:86:6b:05:15:d5:12:b1:99:
         53:84:7d:51:4a:77:ff:ae:f0:60:15:94:38:15:e6:f1:54:0f:
         93:7a:78:33:4a:c9:71:a1:7a:89:55:36:4d:4a:e9:c3:bf:df:
         d2:cb:68:97:7b:92:70:86:dd:0e:c7:0c:f3:09:0a:48:2d:0a:
         0d:29:8e:44:b6:1c:47:61:bd:3e:95:a2:e5:28:11:08:7b:bc:
         71:28:dc:75:04:f6:bc:1d:da:95:f6:1d:af:51:5d:a7:7c:d0:
         3e:50:23:dd:ea:72:20:00:83:29:40:84:d0:4d:72:4d:cd:52:
         5a:ce:c1:f2:3e:6e:52:cd:0a:8f:d7:91:40:d0:e6:d0:9f:32:
         fb:0a:d8:66:85:80:04:67:ce:37:5b:40:34:f6:c8:e0:e0:52:
         de:5f:44:73:d1:01:b8:23:3d:04:0a:48:36:c0:06:d7:82:17:
         ee:74:ff:ee:3d:4c:ef:09:0b:c3:e9:ba:f1:85:55:9a:8d:ef:
         ff:cd:0c:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZFZ/a5IbsS19Tvwa+IolbSAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0NDcwZDMzODg3MmVmMWYxZTVmZTRmY2U2ZTNmNjgzMjY3
YTIxZjcwHhcNMjQwODE2MDcwMTIzWhcNMjQwODE3MDcwMTIzWjAzMTEwLwYDVQQD
Eyg3N2VkMDQ1NDljYjExNTM1ZmVlY2FkODNkZTY2NGNkZjRiODQ4ZjdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrTvHY9UiofvbWLYVIrBrR1qxBGp
+zBCcgc/PqTX7hUgbzni9OuulgQ/D+kJgyI5qZHZ5gsl35E7HpNYhOqnBmiDz0AL
C9qXl4Y3j4lAs3jrJ4XsXHfgzZKx3Lof4e1f3ykFj5rHj3rwbaTt1anFAdcqHOmY
6i+/HG4esxVXQ27WMOuz+0ZYq4bTiahRf9GEoOY3L//vXe2Z5m93Z/a8D0HOdnmW
QCWgOPB0LHlrJdvmUMdku2s83J1UTqrcUHy3eupmGMYx68GIrXsQvstzMQU3R8IA
xl8cLwHum6vmL7FsDxoyjHILf4FTY5sJiy+wnvj8N5H3GGnu+3BlNDaRUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHftBFScsRU1/uytg95mTN9LhI9/MB8GA1UdIwQY
MBaAFBRHDTOIcu8fHl/k/Obj9oMmeiH3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkVjTk00aHk3eDhlWC1UODV1UDJneVo2SWZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi82OTM2NzItODFiMS00OGE3LWEzNzQt
MTQ2ZGM0NmNkMjQxLzEvRkVjTk00aHk3eDhlWC1UODV1UDJneVo2SWZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi82OTM2NzItODFiMS00OGE3LWEzNzQtMTQ2ZGM0NmNkMjQx
LzEvRkVjTk00aHk3eDhlWC1UODV1UDJneVo2SWZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOQh6dgew
5rK8WahlqZsDcz92Zv9r9adye5CAfTkCm4/yXdPtfjmLr8pIVVkQsS7UalFwKO5h
g6IZQejdMCyFvYZrBRXVErGZU4R9UUp3/67wYBWUOBXm8VQPk3p4M0rJcaF6iVU2
TUrpw7/f0stol3uScIbdDscM8wkKSC0KDSmORLYcR2G9PpWi5SgRCHu8cSjcdQT2
vB3alfYdr1Fdp3zQPlAj3epyIACDKUCE0E1yTc1SWs7B8j5uUs0Kj9eRQNDm0J8y
+wrYZoWABGfON1tANPbI4OBS3l9Ec9EBuCM9BApINsAG14IX7nT/7j1M7wkLw+m6
8YVVmo3v/80MhQ==
-----END CERTIFICATE-----