Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/98fcd2-d4f6-409b-9ea3-b741e4308a7d/1/XgtnXfGZ0qUFa663c9vgF6YUxKs.mft
File:                     XgtnXfGZ0qUFa663c9vgF6YUxKs.mft (raw, json)
Hash identifier:          3ArlT8aLJyYkfvZLM0Cvz7G+r/H2Y2x/4nTTkI76leI=
Subject key identifier:   20:5B:C7:33:A3:38:AC:DB:CB:4D:78:74:EA:64:51:52:10:33:E0:31
Authority key identifier: 5E:0B:67:5D:F1:99:D2:A5:05:6B:AE:B7:73:DB:E0:17:A6:14:C4:AB
Certificate issuer:       /CN=5e0b675df199d2a5056baeb773dbe017a614c4ab
Certificate serial:       018E31E4EE44451BCA83F21C5369968FE196
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XgtnXfGZ0qUFa663c9vgF6YUxKs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/98fcd2-d4f6-409b-9ea3-b741e4308a7d/1/XgtnXfGZ0qUFa663c9vgF6YUxKs.mft
Manifest number:          10C9
Signing time:             Tue 12 Mar 2024 09:01:10 +0000
Manifest this update:     Tue 12 Mar 2024 09:01:10 +0000
Manifest next update:     Wed 13 Mar 2024 09:01:10 +0000
Files and hashes:         1: XgtnXfGZ0qUFa663c9vgF6YUxKs.crl (hash: LIrB67RQgbjt0mRkvVQin3+yg1CyCvB6gRRDJdjwJKM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:31:e4:ee:44:45:1b:ca:83:f2:1c:53:69:96:8f:e1:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e0b675df199d2a5056baeb773dbe017a614c4ab
        Validity
            Not Before: Mar 12 09:01:10 2024 GMT
            Not After : Mar 13 09:01:10 2024 GMT
        Subject: CN=205bc733a338acdbcb4d7874ea6451521033e031
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:1a:86:ff:ee:0c:69:a9:04:d7:4f:4d:7e:bc:
                    79:85:fd:ef:fa:b5:c7:a9:ff:6b:d6:b7:e6:fc:ee:
                    98:dd:a2:d3:8d:8a:e4:92:e6:1e:73:f0:0b:b4:48:
                    b5:4a:ac:ed:03:b0:70:21:26:12:94:9f:51:3a:e3:
                    16:d7:e4:67:52:f2:0f:fd:1d:fe:7d:8f:ae:32:9b:
                    bc:b4:25:36:e8:17:2f:5f:42:e9:b2:6c:f0:8e:f1:
                    6e:bc:80:f4:c7:7e:c6:82:ca:74:2f:32:48:83:e2:
                    ea:e7:12:78:d0:7b:55:61:1b:ac:58:90:fb:46:da:
                    68:db:46:8c:f3:f8:0e:96:aa:58:08:3b:7d:83:56:
                    a1:0d:1e:48:a8:6a:82:82:94:85:c1:b0:7e:29:58:
                    ff:61:56:ce:40:6e:8c:0c:06:ec:46:c3:20:93:c6:
                    3f:74:6f:20:fc:0a:dd:b3:6e:73:dc:90:b7:1a:c0:
                    49:d6:56:75:36:c9:23:5b:ff:e5:46:e9:13:50:d7:
                    65:bd:e6:b2:c4:de:a7:fe:79:35:e8:5a:d2:55:07:
                    56:04:37:7d:e9:b7:d9:b6:2a:0d:b8:f3:64:48:e6:
                    ad:04:99:3f:67:57:0e:c8:28:51:01:2f:cb:9f:b0:
                    b4:b1:c0:0f:e8:19:69:04:b1:42:1b:71:90:6c:08:
                    a1:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:5B:C7:33:A3:38:AC:DB:CB:4D:78:74:EA:64:51:52:10:33:E0:31
            X509v3 Authority Key Identifier:
                keyid:5E:0B:67:5D:F1:99:D2:A5:05:6B:AE:B7:73:DB:E0:17:A6:14:C4:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XgtnXfGZ0qUFa663c9vgF6YUxKs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/98fcd2-d4f6-409b-9ea3-b741e4308a7d/1/XgtnXfGZ0qUFa663c9vgF6YUxKs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/98fcd2-d4f6-409b-9ea3-b741e4308a7d/1/XgtnXfGZ0qUFa663c9vgF6YUxKs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:88:99:04:3a:27:0c:75:09:72:52:aa:6d:4c:8c:20:44:27:
         fa:9b:39:04:26:d2:16:4d:36:6a:47:7f:ba:74:87:fa:84:cf:
         0e:52:18:1a:20:fa:12:64:9c:c6:5c:e2:26:51:aa:0d:c2:c1:
         85:1d:5e:63:77:4d:3e:64:e4:9c:68:e5:c0:bb:bf:00:7f:85:
         bc:13:d0:de:17:0d:5e:eb:4e:11:5e:cf:c3:b4:42:49:3c:15:
         79:41:de:ca:7b:36:95:bf:f7:ea:26:3d:8b:a5:54:ac:9c:71:
         d7:8e:ce:80:ec:78:61:31:18:48:a6:07:01:72:9d:2c:8d:6f:
         da:ac:1c:de:61:dc:3e:c1:72:87:d5:71:f1:34:e5:00:4b:62:
         c5:fa:91:7d:40:be:f8:a0:56:49:3f:8a:f3:3f:06:dc:dc:44:
         a9:fe:81:4b:46:0a:cd:cf:bf:80:11:35:62:b6:af:98:9b:79:
         ed:46:b3:b5:5e:8c:99:99:1f:a2:3f:cc:0d:af:94:e9:5f:a7:
         19:fa:66:11:35:22:7f:da:59:ae:a7:e6:ae:39:54:4e:40:0f:
         d7:69:bb:61:3a:14:93:eb:ef:54:aa:b9:3d:cc:a6:9f:13:2f:
         92:1f:77:fc:df:bc:23:88:b1:cf:8b:f0:df:c2:91:81:58:74:
         fd:55:2c:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY4x5O5ERRvKg/IcU2mWj+GWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlMGI2NzVkZjE5OWQyYTUwNTZiYWViNzczZGJlMDE3YTYx
NGM0YWIwHhcNMjQwMzEyMDkwMTEwWhcNMjQwMzEzMDkwMTEwWjAzMTEwLwYDVQQD
EygyMDViYzczM2EzMzhhY2RiY2I0ZDc4NzRlYTY0NTE1MjEwMzNlMDMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBqG/+4MaakE109Nfrx5hf3v+rXH
qf9r1rfm/O6Y3aLTjYrkkuYec/ALtEi1SqztA7BwISYSlJ9ROuMW1+RnUvIP/R3+
fY+uMpu8tCU26BcvX0LpsmzwjvFuvID0x37Ggsp0LzJIg+Lq5xJ40HtVYRusWJD7
Rtpo20aM8/gOlqpYCDt9g1ahDR5IqGqCgpSFwbB+KVj/YVbOQG6MDAbsRsMgk8Y/
dG8g/Ards25z3JC3GsBJ1lZ1NskjW//lRukTUNdlveayxN6n/nk16FrSVQdWBDd9
6bfZtioNuPNkSOatBJk/Z1cOyChRAS/Ln7C0scAP6BlpBLFCG3GQbAihvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCBbxzOjOKzby014dOpkUVIQM+AxMB8GA1UdIwQY
MBaAFF4LZ13xmdKlBWuut3Pb4BemFMSrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGd0blhmR1owcVVGYTY2M2M5dmdGNllVeEtzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My85OGZjZDItZDRmNi00MDliLTllYTMt
Yjc0MWU0MzA4YTdkLzEvWGd0blhmR1owcVVGYTY2M2M5dmdGNllVeEtzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My85OGZjZDItZDRmNi00MDliLTllYTMtYjc0MWU0MzA4YTdk
LzEvWGd0blhmR1owcVVGYTY2M2M5dmdGNllVeEtzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsYiZBDon
DHUJclKqbUyMIEQn+ps5BCbSFk02akd/unSH+oTPDlIYGiD6EmScxlziJlGqDcLB
hR1eY3dNPmTknGjlwLu/AH+FvBPQ3hcNXutOEV7Pw7RCSTwVeUHeyns2lb/36iY9
i6VUrJxx147OgOx4YTEYSKYHAXKdLI1v2qwc3mHcPsFyh9Vx8TTlAEtixfqRfUC+
+KBWST+K8z8G3NxEqf6BS0YKzc+/gBE1YravmJt57UaztV6MmZkfoj/MDa+U6V+n
GfpmETUif9pZrqfmrjlUTkAP12m7YToUk+vvVKq5PcymnxMvkh93/N+8I4ixz4vw
38KRgVh0/VUsyw==
-----END CERTIFICATE-----