Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/fe5817-a482-42dd-a7f6-8c99481ec6c4/1/aqRfjPRj3JK7JDE1m4tuX_2PcZw.mft
File:                     aqRfjPRj3JK7JDE1m4tuX_2PcZw.mft (raw, json)
Hash identifier:          DT7F3fage4rqEHhoCD9JGE2Q/pcdNvP+PLzbxYPZbOc=
Subject key identifier:   5C:B6:D5:55:4F:CD:AE:A7:82:42:8A:66:7D:2A:06:74:EF:E4:60:48
Authority key identifier: 6A:A4:5F:8C:F4:63:DC:92:BB:24:31:35:9B:8B:6E:5F:FD:8F:71:9C
Certificate issuer:       /CN=6aa45f8cf463dc92bb2431359b8b6e5ffd8f719c
Certificate serial:       018F3D418CCEEDF3141C6750122F848ABB51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aqRfjPRj3JK7JDE1m4tuX_2PcZw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/fe5817-a482-42dd-a7f6-8c99481ec6c4/1/aqRfjPRj3JK7JDE1m4tuX_2PcZw.mft
Manifest number:          1150
Signing time:             Fri 03 May 2024 07:00:57 +0000
Manifest this update:     Fri 03 May 2024 07:00:57 +0000
Manifest next update:     Sat 04 May 2024 07:00:57 +0000
Files and hashes:         1: KaA0_QxakYxe5q2jo3ejuflmCgk.roa (hash: MmAaZ2WhWdgtjjeUAf1EZkkwsVziClVr1yBJKNprnqQ=)
                          2: Qz2NS9LqV9Qb6SI34VWRcthZGv4.roa (hash: jOEiD+f4mWoNBLuKRFmGsoXFSgexiczq7v2/KX/bYOw=)
                          3: aqRfjPRj3JK7JDE1m4tuX_2PcZw.crl (hash: pj9ygQIiATYO9mrLKs+H9XrrJnJSHRpiMmlrXIMhXi8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3d:41:8c:ce:ed:f3:14:1c:67:50:12:2f:84:8a:bb:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6aa45f8cf463dc92bb2431359b8b6e5ffd8f719c
        Validity
            Not Before: May  3 07:00:57 2024 GMT
            Not After : May  4 07:00:57 2024 GMT
        Subject: CN=5cb6d5554fcdaea782428a667d2a0674efe46048
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a1:0a:98:53:85:7b:d0:bc:d9:75:f5:41:c4:
                    99:8b:52:69:68:97:6f:47:34:03:80:61:26:6b:fa:
                    a1:26:31:0f:96:ef:c0:a8:de:d6:94:ea:b4:d1:6b:
                    3f:b4:93:cd:98:52:9c:12:8c:76:f6:61:ba:cf:e7:
                    a6:77:9b:63:da:5f:fa:a7:b1:71:01:13:a9:2e:a8:
                    8e:4b:12:c8:e9:ca:fa:7e:f0:04:35:d1:ec:75:21:
                    fb:33:de:f0:2e:c5:27:02:17:86:e5:af:e2:5d:1b:
                    c8:c4:3c:b0:94:b5:80:8c:c4:79:52:7f:fa:aa:fc:
                    bb:e6:cc:94:42:a1:79:fa:ad:2b:5b:1e:13:d0:44:
                    d2:a2:d6:e3:a2:8e:f4:02:07:9c:26:1d:8d:b1:2d:
                    7f:4c:30:3c:0e:63:dd:0d:95:32:97:c3:75:01:e6:
                    ca:ab:1c:1e:6b:fe:9f:fb:a6:ce:6c:e9:61:3b:0c:
                    77:5d:97:2e:27:5e:66:b1:38:45:c6:47:ec:86:e3:
                    55:28:26:65:4e:9b:94:ca:95:e0:05:13:2f:32:75:
                    37:9a:00:0e:d9:69:7a:ad:82:f7:da:20:aa:fb:f5:
                    cc:c2:1a:e0:be:2d:a1:43:bd:ce:2e:97:a2:7c:4f:
                    ae:ff:9d:76:16:2b:f4:f1:ff:aa:d8:8d:7a:34:80:
                    e3:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:B6:D5:55:4F:CD:AE:A7:82:42:8A:66:7D:2A:06:74:EF:E4:60:48
            X509v3 Authority Key Identifier:
                keyid:6A:A4:5F:8C:F4:63:DC:92:BB:24:31:35:9B:8B:6E:5F:FD:8F:71:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aqRfjPRj3JK7JDE1m4tuX_2PcZw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/fe5817-a482-42dd-a7f6-8c99481ec6c4/1/aqRfjPRj3JK7JDE1m4tuX_2PcZw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/fe5817-a482-42dd-a7f6-8c99481ec6c4/1/aqRfjPRj3JK7JDE1m4tuX_2PcZw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:6f:fb:0a:04:9d:80:8d:c3:0d:28:67:3b:24:56:bd:64:1d:
         11:c0:1a:b2:81:36:53:5b:3c:09:4d:5a:11:f7:8a:40:b3:96:
         cf:7f:f8:4e:eb:0d:b9:21:9d:c2:79:9d:37:e5:b8:c0:b9:62:
         04:0c:74:b3:ef:1a:e4:41:c6:04:d5:87:3e:ac:18:88:ac:6e:
         09:9b:9b:a4:67:a9:06:a0:ec:69:c9:bc:9e:9b:c3:25:01:f3:
         02:26:b1:10:94:23:d9:b3:87:50:b3:ba:9b:36:3b:50:db:f3:
         c6:9b:41:e1:11:52:79:1f:8d:e2:9c:9b:6f:84:b2:7c:aa:3a:
         68:50:52:f2:5a:1a:f0:cf:67:27:43:90:d4:bf:36:cb:dc:d9:
         18:0d:26:10:c3:98:0e:ec:3a:3c:8b:76:c4:01:88:79:57:4d:
         58:78:9d:d1:58:a2:6c:a3:a6:5f:d8:1d:48:6b:93:e3:14:3b:
         14:bc:f3:f4:23:e0:33:d5:8e:43:18:0d:c9:67:e3:3c:06:9b:
         41:f3:2c:fb:ae:a3:fe:16:b6:3d:37:93:7d:ce:9a:f2:4a:ad:
         96:6b:55:9b:76:e8:40:fc:ab:54:71:2a:57:a5:b1:fb:54:40:
         88:cc:9f:c1:11:5e:c9:13:53:1e:28:e5:95:07:28:b6:42:1a:
         03:36:ff:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY89QYzO7fMUHGdQEi+EirtRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhYTQ1ZjhjZjQ2M2RjOTJiYjI0MzEzNTliOGI2ZTVmZmQ4
ZjcxOWMwHhcNMjQwNTAzMDcwMDU3WhcNMjQwNTA0MDcwMDU3WjAzMTEwLwYDVQQD
Eyg1Y2I2ZDU1NTRmY2RhZWE3ODI0MjhhNjY3ZDJhMDY3NGVmZTQ2MDQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzKEKmFOFe9C82XX1QcSZi1JpaJdv
RzQDgGEma/qhJjEPlu/AqN7WlOq00Ws/tJPNmFKcEox29mG6z+emd5tj2l/6p7Fx
AROpLqiOSxLI6cr6fvAENdHsdSH7M97wLsUnAheG5a/iXRvIxDywlLWAjMR5Un/6
qvy75syUQqF5+q0rWx4T0ETSotbjoo70AgecJh2NsS1/TDA8DmPdDZUyl8N1AebK
qxwea/6f+6bObOlhOwx3XZcuJ15msThFxkfshuNVKCZlTpuUypXgBRMvMnU3mgAO
2Wl6rYL32iCq+/XMwhrgvi2hQ73OLpeifE+u/512Fiv08f+q2I16NIDj/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFy21VVPza6ngkKKZn0qBnTv5GBIMB8GA1UdIwQY
MBaAFGqkX4z0Y9ySuyQxNZuLbl/9j3GcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXFSZmpQUmozSks3SkRFMW00dHVYXzJQY1p3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9mZTU4MTctYTQ4Mi00MmRkLWE3ZjYt
OGM5OTQ4MWVjNmM0LzEvYXFSZmpQUmozSks3SkRFMW00dHVYXzJQY1p3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9mZTU4MTctYTQ4Mi00MmRkLWE3ZjYtOGM5OTQ4MWVjNmM0
LzEvYXFSZmpQUmozSks3SkRFMW00dHVYXzJQY1p3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM2/7CgSd
gI3DDShnOyRWvWQdEcAasoE2U1s8CU1aEfeKQLOWz3/4TusNuSGdwnmdN+W4wLli
BAx0s+8a5EHGBNWHPqwYiKxuCZubpGepBqDsacm8npvDJQHzAiaxEJQj2bOHULO6
mzY7UNvzxptB4RFSeR+N4pybb4SyfKo6aFBS8loa8M9nJ0OQ1L82y9zZGA0mEMOY
Duw6PIt2xAGIeVdNWHid0ViibKOmX9gdSGuT4xQ7FLzz9CPgM9WOQxgNyWfjPAab
QfMs+66j/ha2PTeTfc6a8kqtlmtVm3boQPyrVHEqV6Wx+1RAiMyfwRFeyRNTHijl
lQcotkIaAzb/CA==
-----END CERTIFICATE-----