Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/cd96de-1da9-4d4b-a85a-12c971a69ff8/1/Nvrgq0m_IZZKVX9jSuAw2PNwLj8.mft
File:                     Nvrgq0m_IZZKVX9jSuAw2PNwLj8.mft (raw, json)
Hash identifier:          vCNpQSmLcKSvTSNXeq7ExOvW1sQEZtNfwqCodbUGWys=
Subject key identifier:   2E:B6:C4:12:2C:6A:E8:31:07:AA:A3:FA:0A:D2:40:B8:1A:F0:32:C2
Authority key identifier: 36:FA:E0:AB:49:BF:21:96:4A:55:7F:63:4A:E0:30:D8:F3:70:2E:3F
Certificate issuer:       /CN=36fae0ab49bf21964a557f634ae030d8f3702e3f
Certificate serial:       018E2BACABAB199533026CABBAECBEA87974
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nvrgq0m_IZZKVX9jSuAw2PNwLj8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/cd96de-1da9-4d4b-a85a-12c971a69ff8/1/Nvrgq0m_IZZKVX9jSuAw2PNwLj8.mft
Manifest number:          0EAA
Signing time:             Mon 11 Mar 2024 04:02:00 +0000
Manifest this update:     Mon 11 Mar 2024 04:02:00 +0000
Manifest next update:     Tue 12 Mar 2024 04:02:00 +0000
Files and hashes:         1: Nvrgq0m_IZZKVX9jSuAw2PNwLj8.crl (hash: X3mKTTjqRt7KJ2ovnXAxkaQO3UB+KSrWyTfPz5kSDRs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:2b:ac:ab:ab:19:95:33:02:6c:ab:ba:ec:be:a8:79:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36fae0ab49bf21964a557f634ae030d8f3702e3f
        Validity
            Not Before: Mar 11 04:02:00 2024 GMT
            Not After : Mar 12 04:02:00 2024 GMT
        Subject: CN=2eb6c4122c6ae83107aaa3fa0ad240b81af032c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:29:ea:3b:45:44:a3:b3:85:55:bc:11:8e:f4:
                    ca:ad:7d:df:a7:71:f0:30:5c:58:1a:1d:68:93:d9:
                    cf:79:8d:16:5c:e7:ab:f0:d6:5c:fc:89:8f:be:b9:
                    b4:5b:0d:74:f5:e8:e3:e7:20:04:7c:14:34:ea:68:
                    b3:f5:04:dc:dc:e2:75:bb:d6:c8:e4:5e:4c:13:74:
                    f4:85:54:ac:f6:8f:1b:80:a9:fc:d8:f6:48:f2:f9:
                    ab:65:3d:60:41:7d:0e:c4:95:8d:bd:13:0f:44:51:
                    2b:ec:eb:d4:a3:1d:1c:38:7e:e6:2f:b2:73:3b:79:
                    e1:2f:8b:f3:4f:69:2f:49:63:51:5e:11:90:03:bc:
                    fb:6c:c7:51:e7:67:dd:67:4b:6f:66:02:8e:c1:a8:
                    c3:f9:07:97:64:06:49:52:de:d7:8c:ed:66:73:6a:
                    25:ea:d9:6e:24:c5:18:a5:9c:e0:f3:50:d4:7e:dd:
                    a8:02:27:4b:b7:cd:60:0c:b6:22:eb:bc:f2:d7:96:
                    03:72:c8:c2:3c:e9:7f:cb:a7:59:fd:24:b5:88:b6:
                    a9:b2:ec:52:0c:f4:1f:c1:7c:9d:5e:bb:50:a9:96:
                    5b:6c:73:0c:e7:f5:7f:9c:e2:5f:f0:fd:64:6b:47:
                    e8:4a:57:02:7c:79:0d:2a:f8:7e:74:a1:69:79:c6:
                    3f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:B6:C4:12:2C:6A:E8:31:07:AA:A3:FA:0A:D2:40:B8:1A:F0:32:C2
            X509v3 Authority Key Identifier:
                keyid:36:FA:E0:AB:49:BF:21:96:4A:55:7F:63:4A:E0:30:D8:F3:70:2E:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nvrgq0m_IZZKVX9jSuAw2PNwLj8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/cd96de-1da9-4d4b-a85a-12c971a69ff8/1/Nvrgq0m_IZZKVX9jSuAw2PNwLj8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/cd96de-1da9-4d4b-a85a-12c971a69ff8/1/Nvrgq0m_IZZKVX9jSuAw2PNwLj8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:43:70:64:81:e9:d1:d9:0e:38:a4:d5:09:bc:47:9d:56:95:
         c7:be:1e:ce:11:f9:c9:49:a3:5a:97:e7:43:15:95:f6:e6:bb:
         ff:98:c7:41:7a:81:02:68:27:5f:4b:77:97:3e:52:22:b2:5a:
         31:eb:a9:25:af:38:ce:08:1e:6c:d5:25:b2:64:be:c2:c5:49:
         bb:2a:25:ff:1b:58:00:09:a8:ab:e6:ca:f7:06:e1:a1:d4:81:
         cd:10:8c:6f:2e:74:96:10:20:96:d0:6a:79:31:72:af:50:9c:
         4b:56:a7:6b:0a:3d:df:26:9b:f6:0e:96:ad:4c:21:ce:7c:77:
         0d:e0:3a:88:a9:09:08:a0:f9:f2:67:2a:6f:73:29:0d:cf:60:
         a3:2c:c6:4e:eb:a8:6d:1f:36:08:ea:2c:8f:81:97:e2:77:59:
         63:69:9b:db:53:af:eb:5e:5e:b7:8b:3d:c6:6d:b8:78:1c:b6:
         d7:6f:f1:0a:da:ba:e3:53:3d:dd:29:cd:c2:b4:32:41:09:ee:
         f8:f8:c9:58:41:75:08:74:b3:71:96:5e:e8:60:ca:88:84:a6:
         53:8c:bf:72:75:e0:15:11:23:69:84:cc:2a:20:0b:e3:1a:07:
         ba:52:71:97:8c:fc:87:67:37:b8:18:79:5f:a8:2e:e9:91:1a:
         7e:7e:43:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY4rrKurGZUzAmyruuy+qHl0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2ZmFlMGFiNDliZjIxOTY0YTU1N2Y2MzRhZTAzMGQ4ZjM3
MDJlM2YwHhcNMjQwMzExMDQwMjAwWhcNMjQwMzEyMDQwMjAwWjAzMTEwLwYDVQQD
EygyZWI2YzQxMjJjNmFlODMxMDdhYWEzZmEwYWQyNDBiODFhZjAzMmMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCnqO0VEo7OFVbwRjvTKrX3fp3Hw
MFxYGh1ok9nPeY0WXOer8NZc/ImPvrm0Ww109ejj5yAEfBQ06miz9QTc3OJ1u9bI
5F5ME3T0hVSs9o8bgKn82PZI8vmrZT1gQX0OxJWNvRMPRFEr7OvUox0cOH7mL7Jz
O3nhL4vzT2kvSWNRXhGQA7z7bMdR52fdZ0tvZgKOwajD+QeXZAZJUt7XjO1mc2ol
6tluJMUYpZzg81DUft2oAidLt81gDLYi67zy15YDcsjCPOl/y6dZ/SS1iLapsuxS
DPQfwXydXrtQqZZbbHMM5/V/nOJf8P1ka0foSlcCfHkNKvh+dKFpecY/5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC62xBIsaugxB6qj+grSQLga8DLCMB8GA1UdIwQY
MBaAFDb64KtJvyGWSlV/Y0rgMNjzcC4/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnZyZ3EwbV9JWlpLVlg5alN1QXcyUE53TGo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9jZDk2ZGUtMWRhOS00ZDRiLWE4NWEt
MTJjOTcxYTY5ZmY4LzEvTnZyZ3EwbV9JWlpLVlg5alN1QXcyUE53TGo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My9jZDk2ZGUtMWRhOS00ZDRiLWE4NWEtMTJjOTcxYTY5ZmY4
LzEvTnZyZ3EwbV9JWlpLVlg5alN1QXcyUE53TGo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApUNwZIHp
0dkOOKTVCbxHnVaVx74ezhH5yUmjWpfnQxWV9ua7/5jHQXqBAmgnX0t3lz5SIrJa
MeupJa84zggebNUlsmS+wsVJuyol/xtYAAmoq+bK9wbhodSBzRCMby50lhAgltBq
eTFyr1CcS1anawo93yab9g6WrUwhznx3DeA6iKkJCKD58mcqb3MpDc9goyzGTuuo
bR82COosj4GX4ndZY2mb21Ov615et4s9xm24eBy212/xCtq641M93SnNwrQyQQnu
+PjJWEF1CHSzcZZe6GDKiISmU4y/cnXgFREjaYTMKiAL4xoHulJxl4z8h2c3uBh5
X6gu6ZEafn5DnQ==
-----END CERTIFICATE-----