Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/0aff22-ecf2-4617-8fea-43586778600b/1/Fxdwd73DVA6sRor-xpZBBYmX8-I.mft
File:                     Fxdwd73DVA6sRor-xpZBBYmX8-I.mft (raw, json)
Hash identifier:          3qUVQ44DzWwLiqpUiOirP89IetVgS5R8usZuDXUI6AQ=
Subject key identifier:   5C:67:7E:06:75:C2:40:FC:34:75:35:4C:18:62:84:09:D6:2B:0D:3C
Authority key identifier: 17:17:70:77:BD:C3:54:0E:AC:46:8A:FE:C6:96:41:05:89:97:F3:E2
Certificate issuer:       /CN=17177077bdc3540eac468afec69641058997f3e2
Certificate serial:       0190FD8133184E23B14771B82E87DE2F5E48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fxdwd73DVA6sRor-xpZBBYmX8-I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/0aff22-ecf2-4617-8fea-43586778600b/1/Fxdwd73DVA6sRor-xpZBBYmX8-I.mft
Manifest number:          0C
Signing time:             Mon 29 Jul 2024 08:00:21 +0000
Manifest this update:     Mon 29 Jul 2024 08:00:21 +0000
Manifest next update:     Tue 30 Jul 2024 08:00:21 +0000
Files and hashes:         1: Fxdwd73DVA6sRor-xpZBBYmX8-I.crl (hash: l8sQRwbtZQtjUTIv5yyOCVOMuitGPZLHPP5ONJBtn00=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:fd:81:33:18:4e:23:b1:47:71:b8:2e:87:de:2f:5e:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17177077bdc3540eac468afec69641058997f3e2
        Validity
            Not Before: Jul 29 08:00:21 2024 GMT
            Not After : Jul 30 08:00:21 2024 GMT
        Subject: CN=5c677e0675c240fc3475354c18628409d62b0d3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:08:7c:48:22:ea:6b:42:00:0c:2c:a8:ab:83:
                    53:f0:f8:2b:c2:6a:9f:b0:5c:93:bc:74:60:cf:f8:
                    74:aa:ea:12:0d:27:a1:7e:59:e5:e6:27:82:1e:8d:
                    c0:5b:5c:4b:03:14:12:2b:cd:c7:32:f1:09:5e:e2:
                    14:8f:d0:03:9c:5f:5d:01:17:c2:3a:e9:98:f1:38:
                    97:bc:bc:7b:d7:a8:bb:02:68:be:25:5f:ed:e9:aa:
                    f0:52:65:d1:02:f5:b4:91:10:8f:2d:06:e3:62:87:
                    65:15:aa:4b:99:96:df:0a:f9:5e:7d:1f:3d:47:d1:
                    97:9c:e4:9d:99:f0:98:de:bf:f2:ea:0c:1b:87:7e:
                    95:b5:df:23:15:79:9d:b5:2e:cd:53:b0:3e:f2:d3:
                    57:64:f3:47:14:56:28:12:c1:4c:dd:80:91:4f:f8:
                    ff:74:c5:d8:03:eb:e1:28:e0:78:39:af:31:c4:9b:
                    3a:96:04:a2:de:b8:e3:f7:b5:19:5d:7d:15:3f:99:
                    31:b7:47:88:88:45:ae:15:85:ff:76:ff:f1:3b:b7:
                    a3:34:8b:c3:1f:c2:92:35:eb:70:d2:98:8b:04:7a:
                    7b:71:57:52:19:ef:91:b0:63:bb:57:be:d1:8a:15:
                    65:8c:64:97:76:fc:4a:42:16:f8:8f:c0:30:09:50:
                    e0:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:67:7E:06:75:C2:40:FC:34:75:35:4C:18:62:84:09:D6:2B:0D:3C
            X509v3 Authority Key Identifier:
                keyid:17:17:70:77:BD:C3:54:0E:AC:46:8A:FE:C6:96:41:05:89:97:F3:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fxdwd73DVA6sRor-xpZBBYmX8-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0aff22-ecf2-4617-8fea-43586778600b/1/Fxdwd73DVA6sRor-xpZBBYmX8-I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0aff22-ecf2-4617-8fea-43586778600b/1/Fxdwd73DVA6sRor-xpZBBYmX8-I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:60:b8:fa:b7:2f:c2:d2:b9:50:d2:f4:5d:81:ca:18:55:1f:
         59:72:12:6c:ee:75:32:94:d4:d8:2a:27:ce:a1:b5:b8:04:1a:
         f4:49:33:a2:f1:a8:6f:18:b2:73:9a:ed:ad:9d:7f:2e:49:39:
         54:a3:d5:3b:21:b4:60:ad:13:a5:4c:8e:e5:61:5d:0a:1d:81:
         9c:c3:54:36:25:45:e6:e5:74:60:cc:63:88:dc:bb:a0:9e:d0:
         94:a1:a3:71:b4:27:4c:27:5d:95:7c:02:54:d8:40:bf:48:61:
         23:ac:1d:38:42:4c:59:77:3b:d6:ba:35:06:b1:ee:84:39:75:
         d9:44:a0:1c:38:73:c2:22:e3:b6:19:b2:74:a5:29:5a:ff:3c:
         74:2b:04:82:e3:ca:6f:34:66:7f:e6:5d:60:85:f8:fa:20:92:
         04:1c:30:e3:65:b6:20:bc:ce:9a:10:a3:df:3f:ff:69:c9:f9:
         b0:4e:38:27:a7:00:ab:44:f7:9e:84:a4:8d:00:5b:f9:de:7d:
         9e:93:9c:51:a9:09:c6:e8:f8:08:45:5f:18:96:b9:a9:24:6f:
         48:69:e7:93:d4:67:b1:55:7a:23:1f:ca:55:a6:1d:36:7a:ab:
         98:8b:74:9a:79:29:fc:f7:0a:1f:cd:37:5b:b8:81:39:26:6a:
         9c:9d:83:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZD9gTMYTiOxR3G4LofeL15IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3MTc3MDc3YmRjMzU0MGVhYzQ2OGFmZWM2OTY0MTA1ODk5
N2YzZTIwHhcNMjQwNzI5MDgwMDIxWhcNMjQwNzMwMDgwMDIxWjAzMTEwLwYDVQQD
Eyg1YzY3N2UwNjc1YzI0MGZjMzQ3NTM1NGMxODYyODQwOWQ2MmIwZDNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgh8SCLqa0IADCyoq4NT8Pgrwmqf
sFyTvHRgz/h0quoSDSehflnl5ieCHo3AW1xLAxQSK83HMvEJXuIUj9ADnF9dARfC
OumY8TiXvLx716i7Ami+JV/t6arwUmXRAvW0kRCPLQbjYodlFapLmZbfCvlefR89
R9GXnOSdmfCY3r/y6gwbh36Vtd8jFXmdtS7NU7A+8tNXZPNHFFYoEsFM3YCRT/j/
dMXYA+vhKOB4Oa8xxJs6lgSi3rjj97UZXX0VP5kxt0eIiEWuFYX/dv/xO7ejNIvD
H8KSNetw0piLBHp7cVdSGe+RsGO7V77RihVljGSXdvxKQhb4j8AwCVDguwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFxnfgZ1wkD8NHU1TBhihAnWKw08MB8GA1UdIwQY
MBaAFBcXcHe9w1QOrEaK/saWQQWJl/PiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnhkd2Q3M0RWQTZzUm9yLXhwWkJCWW1YOC1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8wYWZmMjItZWNmMi00NjE3LThmZWEt
NDM1ODY3Nzg2MDBiLzEvRnhkd2Q3M0RWQTZzUm9yLXhwWkJCWW1YOC1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC8wYWZmMjItZWNmMi00NjE3LThmZWEtNDM1ODY3Nzg2MDBi
LzEvRnhkd2Q3M0RWQTZzUm9yLXhwWkJCWW1YOC1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE2C4+rcv
wtK5UNL0XYHKGFUfWXISbO51MpTU2ConzqG1uAQa9EkzovGobxiyc5rtrZ1/Lkk5
VKPVOyG0YK0TpUyO5WFdCh2BnMNUNiVF5uV0YMxjiNy7oJ7QlKGjcbQnTCddlXwC
VNhAv0hhI6wdOEJMWXc71ro1BrHuhDl12USgHDhzwiLjthmydKUpWv88dCsEguPK
bzRmf+ZdYIX4+iCSBBww42W2ILzOmhCj3z//acn5sE44J6cAq0T3noSkjQBb+d59
npOcUakJxuj4CEVfGJa5qSRvSGnnk9RnsVV6Ix/KVaYdNnqrmIt0mnkp/PcKH803
W7iBOSZqnJ2D6g==
-----END CERTIFICATE-----