Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/3de42d-a77c-451d-8177-13c4ddd4229e/1/ZYHdKgU5KXPSiyR5_V3QmAhhnZs.mft
File:                     ZYHdKgU5KXPSiyR5_V3QmAhhnZs.mft (raw, json)
Hash identifier:          pyQ32inkL9SCllXSjEWg8kVedVpjAREOJqPkNsN1Z3g=
Subject key identifier:   4E:AA:63:EA:CD:18:98:FB:E7:A4:EE:CE:49:72:5D:80:F8:F9:64:1C
Authority key identifier: 65:81:DD:2A:05:39:29:73:D2:8B:24:79:FD:5D:D0:98:08:61:9D:9B
Certificate issuer:       /CN=6581dd2a05392973d28b2479fd5dd09808619d9b
Certificate serial:       018DF2613E31AFA685A14AAAA372A3216A08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZYHdKgU5KXPSiyR5_V3QmAhhnZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/3de42d-a77c-451d-8177-13c4ddd4229e/1/ZYHdKgU5KXPSiyR5_V3QmAhhnZs.mft
Manifest number:          0833
Signing time:             Thu 29 Feb 2024 01:01:15 +0000
Manifest this update:     Thu 29 Feb 2024 01:01:15 +0000
Manifest next update:     Fri 01 Mar 2024 01:01:15 +0000
Files and hashes:         1: 4WcSdHz8u2yl39C1qK3BGm798mM.roa (hash: GIBURtD4oDRLBMocdMC0FJ1Ln1DlAhuxDuuYPOkKwrU=)
                          2: ZYHdKgU5KXPSiyR5_V3QmAhhnZs.crl (hash: rLfMPqbQCb0E6q0CHMibDzkXx9Fc2JbDqhms7R0FYaY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:f2:61:3e:31:af:a6:85:a1:4a:aa:a3:72:a3:21:6a:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6581dd2a05392973d28b2479fd5dd09808619d9b
        Validity
            Not Before: Feb 29 01:01:15 2024 GMT
            Not After : Mar  1 01:01:15 2024 GMT
        Subject: CN=4eaa63eacd1898fbe7a4eece49725d80f8f9641c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:08:d6:18:1c:ae:b0:7d:02:d6:83:fc:78:d5:
                    13:39:79:e7:80:a1:46:79:6f:29:ce:1d:28:e6:49:
                    58:5c:5f:fd:50:f0:19:cb:8d:79:cd:11:45:73:ca:
                    e1:ce:6b:04:df:ee:84:dd:35:33:03:9a:74:c7:36:
                    b9:0f:61:05:14:64:b2:6b:d7:84:9a:95:a5:c3:70:
                    b8:a1:51:04:9b:65:2d:19:f3:11:93:e4:cf:ca:7e:
                    a2:71:b1:2e:21:0c:7f:94:1c:72:3b:01:31:8f:9f:
                    04:42:ff:be:63:bd:cc:60:37:3f:8b:da:44:5a:f5:
                    5a:40:ef:5b:db:53:21:d4:38:ca:42:0b:8b:f3:f6:
                    12:b8:d2:c0:cd:a0:d2:ce:c1:ac:3b:a3:b6:52:50:
                    db:d5:37:b2:f9:a8:65:68:b6:8b:92:90:1a:14:90:
                    82:e2:cd:06:dd:0b:f7:18:0b:62:5f:c3:54:e0:0b:
                    84:9f:c9:14:54:fa:4b:fb:ac:e6:78:d7:93:60:f7:
                    07:e0:ca:c7:f5:94:12:6d:83:a6:f4:6a:3e:9e:c6:
                    83:e9:30:3c:ec:5f:90:05:e7:ce:39:13:d2:62:77:
                    cd:d4:55:f0:18:9c:ad:53:c4:97:b3:0e:09:4d:ee:
                    88:3e:e5:0d:16:3b:47:d4:74:56:5d:84:3e:11:37:
                    a0:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:AA:63:EA:CD:18:98:FB:E7:A4:EE:CE:49:72:5D:80:F8:F9:64:1C
            X509v3 Authority Key Identifier:
                keyid:65:81:DD:2A:05:39:29:73:D2:8B:24:79:FD:5D:D0:98:08:61:9D:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZYHdKgU5KXPSiyR5_V3QmAhhnZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3de42d-a77c-451d-8177-13c4ddd4229e/1/ZYHdKgU5KXPSiyR5_V3QmAhhnZs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3de42d-a77c-451d-8177-13c4ddd4229e/1/ZYHdKgU5KXPSiyR5_V3QmAhhnZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:0d:30:04:ce:12:0b:9e:c4:94:23:be:13:99:ad:05:13:65:
         ce:f5:63:52:8e:75:fc:7d:da:8d:40:c1:25:30:df:f2:30:81:
         75:08:50:09:e0:ff:4d:40:c9:4e:ad:88:b9:3d:82:5f:03:8c:
         03:fe:40:74:c8:16:5f:e6:b1:7f:90:91:6d:54:55:ea:e4:50:
         d7:ae:ba:d5:2d:f4:dc:f0:c7:90:41:55:76:58:1c:84:bc:19:
         8d:55:ed:40:eb:b2:79:ba:13:c7:ba:45:a0:a4:5e:ba:02:cf:
         6a:3e:cf:48:41:08:27:08:34:a5:a2:94:ac:48:63:a2:1e:da:
         90:52:e4:02:1f:97:84:56:cb:e8:29:3b:c3:76:3f:b8:6a:41:
         44:ec:31:67:ea:8e:ba:cc:3a:67:a6:8f:7e:00:fb:04:27:58:
         dc:18:2b:dc:74:a0:15:38:33:df:71:47:57:56:d6:27:a5:c3:
         e1:f1:97:50:69:8e:1c:91:cb:32:a2:db:3a:19:a4:f8:0a:58:
         ea:73:6a:48:9f:33:88:20:24:ca:fb:1a:f2:ea:7c:25:07:ac:
         19:09:7b:b9:89:31:10:5e:fe:4c:4b:5b:aa:95:9d:43:18:8e:
         ec:12:15:cc:0f:cd:64:20:33:65:74:52:75:2d:02:97:01:ac:
         40:02:71:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY3yYT4xr6aFoUqqo3KjIWoIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1ODFkZDJhMDUzOTI5NzNkMjhiMjQ3OWZkNWRkMDk4MDg2
MTlkOWIwHhcNMjQwMjI5MDEwMTE1WhcNMjQwMzAxMDEwMTE1WjAzMTEwLwYDVQQD
Eyg0ZWFhNjNlYWNkMTg5OGZiZTdhNGVlY2U0OTcyNWQ4MGY4Zjk2NDFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQjWGByusH0C1oP8eNUTOXnngKFG
eW8pzh0o5klYXF/9UPAZy415zRFFc8rhzmsE3+6E3TUzA5p0xza5D2EFFGSya9eE
mpWlw3C4oVEEm2UtGfMRk+TPyn6icbEuIQx/lBxyOwExj58EQv++Y73MYDc/i9pE
WvVaQO9b21Mh1DjKQguL8/YSuNLAzaDSzsGsO6O2UlDb1Tey+ahlaLaLkpAaFJCC
4s0G3Qv3GAtiX8NU4AuEn8kUVPpL+6zmeNeTYPcH4MrH9ZQSbYOm9Go+nsaD6TA8
7F+QBefOORPSYnfN1FXwGJytU8SXsw4JTe6IPuUNFjtH1HRWXYQ+ETegRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE6qY+rNGJj756TuzklyXYD4+WQcMB8GA1UdIwQY
MBaAFGWB3SoFOSlz0oskef1d0JgIYZ2bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWllIZEtnVTVLWFBTaXlSNV9WM1FtQWhoblpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS8zZGU0MmQtYTc3Yy00NTFkLTgxNzct
MTNjNGRkZDQyMjllLzEvWllIZEtnVTVLWFBTaXlSNV9WM1FtQWhoblpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS8zZGU0MmQtYTc3Yy00NTFkLTgxNzctMTNjNGRkZDQyMjll
LzEvWllIZEtnVTVLWFBTaXlSNV9WM1FtQWhoblpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQA0wBM4S
C57ElCO+E5mtBRNlzvVjUo51/H3ajUDBJTDf8jCBdQhQCeD/TUDJTq2IuT2CXwOM
A/5AdMgWX+axf5CRbVRV6uRQ16661S303PDHkEFVdlgchLwZjVXtQOuyeboTx7pF
oKReugLPaj7PSEEIJwg0paKUrEhjoh7akFLkAh+XhFbL6Ck7w3Y/uGpBROwxZ+qO
usw6Z6aPfgD7BCdY3Bgr3HSgFTgz33FHV1bWJ6XD4fGXUGmOHJHLMqLbOhmk+ApY
6nNqSJ8ziCAkyvsa8up8JQesGQl7uYkxEF7+TEtbqpWdQxiO7BIVzA/NZCAzZXRS
dS0ClwGsQAJxjA==
-----END CERTIFICATE-----