Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/28446d-2deb-4276-8ed3-945b33463b10/1/GUj5v55jt6KC3ubUMUuclpXw3Hk.mft
File:                     GUj5v55jt6KC3ubUMUuclpXw3Hk.mft (raw, json)
Hash identifier:          xmJo0yLy+AFpGTkISd8ca/APuv1SM5sIne0eU5TCmhs=
Subject key identifier:   6C:FC:89:07:48:1F:65:32:4E:6C:C5:82:C5:58:09:BC:7F:59:FD:9C
Authority key identifier: 19:48:F9:BF:9E:63:B7:A2:82:DE:E6:D4:31:4B:9C:96:95:F0:DC:79
Certificate issuer:       /CN=1948f9bf9e63b7a282dee6d4314b9c9695f0dc79
Certificate serial:       018B231E5B17722DF2AE4500C560292B5CA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GUj5v55jt6KC3ubUMUuclpXw3Hk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/28446d-2deb-4276-8ed3-945b33463b10/1/GUj5v55jt6KC3ubUMUuclpXw3Hk.mft
Manifest number:          0707
Signing time:             Thu 12 Oct 2023 09:01:13 +0000
Manifest this update:     Thu 12 Oct 2023 09:01:13 +0000
Manifest next update:     Fri 13 Oct 2023 09:01:13 +0000
Files and hashes:         1: GUj5v55jt6KC3ubUMUuclpXw3Hk.crl (hash: vUbxDXmXWIlKqDjL5McfjurxEge8OMZ4BCrebn9pSlE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:23:1e:5b:17:72:2d:f2:ae:45:00:c5:60:29:2b:5c:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1948f9bf9e63b7a282dee6d4314b9c9695f0dc79
        Validity
            Not Before: Oct 12 09:01:13 2023 GMT
            Not After : Oct 13 09:01:13 2023 GMT
        Subject: CN=6cfc8907481f65324e6cc582c55809bc7f59fd9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:10:62:f9:4d:59:ad:06:0a:5b:ee:8f:98:b0:
                    c4:34:c0:4e:34:f8:71:64:a8:19:25:52:8a:2b:d6:
                    53:4b:1f:12:c8:d6:fa:b3:46:73:c8:4b:b5:d1:02:
                    bf:e1:30:4d:92:69:da:93:bb:c8:23:9b:1d:a7:4d:
                    7e:4e:18:6a:87:07:45:66:0a:ef:23:bb:d6:45:93:
                    d4:ed:df:05:86:be:32:f7:af:bf:1e:f8:f4:50:13:
                    88:d5:06:3a:a3:85:0c:e8:9a:c2:17:74:02:30:9d:
                    bf:70:bd:cf:39:f1:68:80:d7:9e:24:aa:17:43:03:
                    35:55:80:e3:b5:02:20:96:81:e0:58:3c:d7:5c:bb:
                    38:13:fa:07:0f:ee:f6:1c:47:bc:16:1c:54:97:aa:
                    a7:c6:13:35:f8:9f:87:66:e2:cc:1c:e1:e3:e2:04:
                    8c:d3:2b:8a:c3:25:70:b0:a2:50:d5:16:19:f8:c7:
                    94:87:cd:ac:33:5e:14:cd:5f:0b:7a:b5:93:64:6f:
                    88:40:74:0a:e0:e2:e2:9c:2e:44:d9:e8:0c:d1:95:
                    b0:6e:de:90:89:4b:6f:72:b1:55:21:4b:43:b8:19:
                    f3:00:b3:a8:b1:2d:e3:d1:6e:c4:82:a8:86:1e:1a:
                    42:c2:b1:41:2d:1e:06:f4:83:b4:ff:1c:2c:51:56:
                    9b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:FC:89:07:48:1F:65:32:4E:6C:C5:82:C5:58:09:BC:7F:59:FD:9C
            X509v3 Authority Key Identifier:
                keyid:19:48:F9:BF:9E:63:B7:A2:82:DE:E6:D4:31:4B:9C:96:95:F0:DC:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUj5v55jt6KC3ubUMUuclpXw3Hk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/28446d-2deb-4276-8ed3-945b33463b10/1/GUj5v55jt6KC3ubUMUuclpXw3Hk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/28446d-2deb-4276-8ed3-945b33463b10/1/GUj5v55jt6KC3ubUMUuclpXw3Hk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:1e:9f:25:4f:20:43:b0:01:8f:62:ee:0d:35:25:d8:b2:aa:
         80:85:d9:35:23:63:cb:25:3d:82:a5:2d:d4:ef:07:d7:61:b1:
         47:44:e8:7c:6b:f8:c2:30:47:c1:ad:86:42:f7:90:c7:3b:36:
         a3:d4:28:81:1b:72:a5:19:4b:fb:e1:e4:bb:d7:38:8a:e9:be:
         80:dc:cc:35:2c:af:99:1b:59:03:4c:55:77:8a:25:b0:da:1d:
         2f:d3:fb:4c:88:ca:9a:55:e9:39:a0:a4:2f:4d:a7:3c:2f:f5:
         23:81:c9:f1:1b:00:be:ea:5c:c3:be:bf:d2:61:b8:d0:ec:cc:
         83:6c:5f:d7:0e:16:59:7b:b4:67:ec:13:a0:c1:8c:b5:3c:85:
         d7:b9:ce:34:e5:91:dd:51:6c:fa:30:87:6d:f0:57:51:1e:e6:
         33:0a:39:ff:59:9f:3c:5b:c1:e1:b5:6e:71:ca:f2:0a:fe:34:
         9b:98:5d:6b:97:82:ad:61:33:23:e8:c9:7d:f0:a1:b3:59:8b:
         5c:a2:79:bf:13:4e:7f:07:62:f4:73:1a:74:4b:6c:d8:d7:86:
         5a:36:5a:f4:a5:99:5a:27:b9:85:be:d2:f1:a7:48:45:2c:8f:
         1e:10:50:9b:60:0c:5b:12:e4:c5:03:f2:53:b4:9c:d5:26:15:
         37:19:6c:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYsjHlsXci3yrkUAxWApK1yhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NDhmOWJmOWU2M2I3YTI4MmRlZTZkNDMxNGI5Yzk2OTVm
MGRjNzkwHhcNMjMxMDEyMDkwMTEzWhcNMjMxMDEzMDkwMTEzWjAzMTEwLwYDVQQD
Eyg2Y2ZjODkwNzQ4MWY2NTMyNGU2Y2M1ODJjNTU4MDliYzdmNTlmZDljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxBi+U1ZrQYKW+6PmLDENMBONPhx
ZKgZJVKKK9ZTSx8SyNb6s0ZzyEu10QK/4TBNkmnak7vII5sdp01+ThhqhwdFZgrv
I7vWRZPU7d8Fhr4y96+/Hvj0UBOI1QY6o4UM6JrCF3QCMJ2/cL3POfFogNeeJKoX
QwM1VYDjtQIgloHgWDzXXLs4E/oHD+72HEe8FhxUl6qnxhM1+J+HZuLMHOHj4gSM
0yuKwyVwsKJQ1RYZ+MeUh82sM14UzV8LerWTZG+IQHQK4OLinC5E2egM0ZWwbt6Q
iUtvcrFVIUtDuBnzALOosS3j0W7EgqiGHhpCwrFBLR4G9IO0/xwsUVabPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGz8iQdIH2UyTmzFgsVYCbx/Wf2cMB8GA1UdIwQY
MBaAFBlI+b+eY7eigt7m1DFLnJaV8Nx5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1VqNXY1NWp0NktDM3ViVU1VdWNscFh3M0hrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8yODQ0NmQtMmRlYi00Mjc2LThlZDMt
OTQ1YjMzNDYzYjEwLzEvR1VqNXY1NWp0NktDM3ViVU1VdWNscFh3M0hrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS8yODQ0NmQtMmRlYi00Mjc2LThlZDMtOTQ1YjMzNDYzYjEw
LzEvR1VqNXY1NWp0NktDM3ViVU1VdWNscFh3M0hrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmx6fJU8g
Q7ABj2LuDTUl2LKqgIXZNSNjyyU9gqUt1O8H12GxR0TofGv4wjBHwa2GQveQxzs2
o9QogRtypRlL++Hku9c4ium+gNzMNSyvmRtZA0xVd4olsNodL9P7TIjKmlXpOaCk
L02nPC/1I4HJ8RsAvupcw76/0mG40OzMg2xf1w4WWXu0Z+wToMGMtTyF17nONOWR
3VFs+jCHbfBXUR7mMwo5/1mfPFvB4bVuccryCv40m5hda5eCrWEzI+jJffChs1mL
XKJ5vxNOfwdi9HMadEts2NeGWjZa9KWZWie5hb7S8adIRSyPHhBQm2AMWxLkxQPy
U7Sc1SYVNxlssA==
-----END CERTIFICATE-----