Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/24d444-8377-49af-b3dc-d3ee790f48a4/1/96ok_exHriQrxPl9tNpYio67xfc.mft
File:                     96ok_exHriQrxPl9tNpYio67xfc.mft (raw, json)
Hash identifier:          tc2eqpj+cQV9zhqYPuRWN/vcVjzJjjgQ06IC3RwtNpM=
Subject key identifier:   92:87:DD:86:E5:25:95:34:46:AF:D5:B1:85:B1:B7:09:4F:55:15:04
Authority key identifier: F7:AA:24:FD:EC:47:AE:24:2B:C4:F9:7D:B4:DA:58:8A:8E:BB:C5:F7
Certificate issuer:       /CN=f7aa24fdec47ae242bc4f97db4da588a8ebbc5f7
Certificate serial:       01894DBDF723F1D118DCA125711777EC97F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/96ok_exHriQrxPl9tNpYio67xfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/24d444-8377-49af-b3dc-d3ee790f48a4/1/96ok_exHriQrxPl9tNpYio67xfc.mft
Manifest number:          091B
Signing time:             Thu 13 Jul 2023 05:34:02 +0000
Manifest this update:     Thu 13 Jul 2023 05:34:02 +0000
Manifest next update:     Fri 14 Jul 2023 05:34:02 +0000
Files and hashes:         1: 96ok_exHriQrxPl9tNpYio67xfc.crl (hash: 90FvIh97AbIdpooG6hDWJQ/e6mmg9UpJ3rf1eEnsf8g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:4d:bd:f7:23:f1:d1:18:dc:a1:25:71:17:77:ec:97:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7aa24fdec47ae242bc4f97db4da588a8ebbc5f7
        Validity
            Not Before: Jul 13 05:34:02 2023 GMT
            Not After : Jul 14 05:34:02 2023 GMT
        Subject: CN=9287dd86e525953446afd5b185b1b7094f551504
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:27:08:1b:38:98:b6:5c:0a:02:ca:df:db:63:
                    6a:78:c0:35:39:90:3c:2c:d3:6e:51:71:d9:3a:06:
                    5f:ab:33:08:ca:00:96:7e:36:8d:ed:f7:13:24:58:
                    62:95:e0:9f:b7:d7:58:fd:08:67:9b:45:c6:02:68:
                    5c:03:90:c2:12:14:da:50:ae:4c:36:d6:98:62:b4:
                    d5:2d:6c:58:9a:55:96:ec:90:45:7e:4c:24:44:4c:
                    6c:a5:2c:fa:0e:d1:84:a8:2d:53:7e:76:3a:fa:1b:
                    93:b2:d6:13:ff:b0:87:93:ff:05:d8:05:0a:e0:8b:
                    77:a3:95:ef:f8:b7:52:af:68:27:fa:f1:e9:61:dd:
                    a5:cb:a5:97:d9:6b:61:7e:c3:32:71:c7:74:49:c1:
                    4b:49:84:55:f3:b8:98:f3:68:27:c3:a1:36:df:ba:
                    d0:8e:08:47:8e:84:20:7a:48:8c:ca:5a:e2:db:51:
                    38:8b:cf:8e:d4:e3:ba:1e:2a:d2:2e:04:8d:d8:1a:
                    2a:68:3b:4b:db:89:fb:6f:ab:1b:70:ef:ac:81:15:
                    b5:aa:de:aa:dd:6a:fb:cd:5f:dd:d3:79:49:62:70:
                    d6:9b:f2:c4:30:73:fa:23:7e:ad:30:93:eb:f3:c0:
                    f9:06:21:13:13:96:4d:5e:1b:c9:35:8b:5a:98:8f:
                    7d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:87:DD:86:E5:25:95:34:46:AF:D5:B1:85:B1:B7:09:4F:55:15:04
            X509v3 Authority Key Identifier:
                keyid:F7:AA:24:FD:EC:47:AE:24:2B:C4:F9:7D:B4:DA:58:8A:8E:BB:C5:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/96ok_exHriQrxPl9tNpYio67xfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/24d444-8377-49af-b3dc-d3ee790f48a4/1/96ok_exHriQrxPl9tNpYio67xfc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/24d444-8377-49af-b3dc-d3ee790f48a4/1/96ok_exHriQrxPl9tNpYio67xfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:c1:c1:27:f1:fc:89:02:06:9c:9c:5c:3e:55:51:25:79:9b:
         e3:62:83:e2:ee:61:35:75:c7:27:a7:be:fc:72:ec:1a:3b:ad:
         c8:23:32:19:c1:97:94:dd:fb:5b:4c:f3:92:a7:13:f5:45:b3:
         b2:5a:d4:fa:1e:5f:96:63:69:7b:e7:8d:69:e6:f8:41:60:b4:
         a2:9b:3c:bd:f5:ed:67:79:f7:36:d8:48:8e:0d:0e:c9:4a:4b:
         bd:c5:12:c0:ca:2a:a5:c2:02:8f:a6:f4:43:b7:e0:e9:87:20:
         4a:f2:72:dd:ab:8e:82:6d:49:82:ee:66:16:c1:b5:de:02:da:
         d8:8a:5e:af:64:89:b5:72:b2:72:93:17:1a:a2:0f:00:88:70:
         e5:c4:7e:5c:c9:13:9d:b5:8b:af:45:67:f8:04:9e:24:b5:43:
         7a:19:df:5f:37:74:cc:e5:1c:60:d2:10:aa:32:20:1f:03:36:
         ae:60:44:d1:f8:65:91:9f:61:c7:5a:67:f0:8c:4b:29:12:43:
         d6:80:a3:16:b0:ec:91:1e:d9:ba:01:77:89:e4:41:9c:da:4d:
         0a:40:40:78:67:5c:28:0e:8c:40:e6:22:9b:55:2f:60:48:4e:
         fe:19:9a:7b:1c:d9:f7:78:d3:96:0f:93:5d:81:d5:cb:84:db:
         79:9b:b5:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYlNvfcj8dEY3KElcRd37JfzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3YWEyNGZkZWM0N2FlMjQyYmM0Zjk3ZGI0ZGE1ODhhOGVi
YmM1ZjcwHhcNMjMwNzEzMDUzNDAyWhcNMjMwNzE0MDUzNDAyWjAzMTEwLwYDVQQD
Eyg5Mjg3ZGQ4NmU1MjU5NTM0NDZhZmQ1YjE4NWIxYjcwOTRmNTUxNTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgycIGziYtlwKAsrf22NqeMA1OZA8
LNNuUXHZOgZfqzMIygCWfjaN7fcTJFhileCft9dY/Qhnm0XGAmhcA5DCEhTaUK5M
NtaYYrTVLWxYmlWW7JBFfkwkRExspSz6DtGEqC1TfnY6+huTstYT/7CHk/8F2AUK
4It3o5Xv+LdSr2gn+vHpYd2ly6WX2WthfsMyccd0ScFLSYRV87iY82gnw6E237rQ
jghHjoQgekiMylri21E4i8+O1OO6HirSLgSN2BoqaDtL24n7b6sbcO+sgRW1qt6q
3Wr7zV/d03lJYnDWm/LEMHP6I36tMJPr88D5BiETE5ZNXhvJNYtamI99sQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJKH3YblJZU0Rq/VsYWxtwlPVRUEMB8GA1UdIwQY
MBaAFPeqJP3sR64kK8T5fbTaWIqOu8X3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTZva19leEhyaVFyeFBsOXROcFlpbzY3eGZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8yNGQ0NDQtODM3Ny00OWFmLWIzZGMt
ZDNlZTc5MGY0OGE0LzEvOTZva19leEhyaVFyeFBsOXROcFlpbzY3eGZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni8yNGQ0NDQtODM3Ny00OWFmLWIzZGMtZDNlZTc5MGY0OGE0
LzEvOTZva19leEhyaVFyeFBsOXROcFlpbzY3eGZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANsHBJ/H8
iQIGnJxcPlVRJXmb42KD4u5hNXXHJ6e+/HLsGjutyCMyGcGXlN37W0zzkqcT9UWz
slrU+h5flmNpe+eNaeb4QWC0ops8vfXtZ3n3NthIjg0OyUpLvcUSwMoqpcICj6b0
Q7fg6YcgSvJy3auOgm1Jgu5mFsG13gLa2Iper2SJtXKycpMXGqIPAIhw5cR+XMkT
nbWLr0Vn+ASeJLVDehnfXzd0zOUcYNIQqjIgHwM2rmBE0fhlkZ9hx1pn8IxLKRJD
1oCjFrDskR7ZugF3ieRBnNpNCkBAeGdcKA6MQOYim1UvYEhO/hmaexzZ93jTlg+T
XYHVy4TbeZu1jg==
-----END CERTIFICATE-----