Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/feeef5-c96f-4652-94e0-ed38f649e39f/1/28jy_5j2EP6Dgw0YkY9MkDcnJBE.mft
File:                     28jy_5j2EP6Dgw0YkY9MkDcnJBE.mft (raw, json)
Hash identifier:          q4kiiQ59G+SJgare6aupT5IcYddD1fAROt6loKyvViQ=
Subject key identifier:   D7:BF:69:5A:65:52:7F:96:A8:4B:39:2D:A6:D1:56:DC:15:1A:0E:21
Authority key identifier: DB:C8:F2:FF:98:F6:10:FE:83:83:0D:18:91:8F:4C:90:37:27:24:11
Certificate issuer:       /CN=dbc8f2ff98f610fe83830d18918f4c9037272411
Certificate serial:       019221C2AA3160D39D209E77F85F92B9E7C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/28jy_5j2EP6Dgw0YkY9MkDcnJBE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/feeef5-c96f-4652-94e0-ed38f649e39f/1/28jy_5j2EP6Dgw0YkY9MkDcnJBE.mft
Manifest number:          066D
Signing time:             Tue 24 Sep 2024 02:00:58 +0000
Manifest this update:     Tue 24 Sep 2024 02:00:58 +0000
Manifest next update:     Wed 25 Sep 2024 02:00:58 +0000
Files and hashes:         1: 28jy_5j2EP6Dgw0YkY9MkDcnJBE.crl (hash: o5XEKs6Q9Fp/DkiDbzBe+n/BRxggCRODSpbCTaXdjo8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:21:c2:aa:31:60:d3:9d:20:9e:77:f8:5f:92:b9:e7:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbc8f2ff98f610fe83830d18918f4c9037272411
        Validity
            Not Before: Sep 24 02:00:58 2024 GMT
            Not After : Sep 25 02:00:58 2024 GMT
        Subject: CN=d7bf695a65527f96a84b392da6d156dc151a0e21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:54:9e:b1:fa:95:73:96:38:85:e6:5b:d2:3c:
                    df:b5:a1:a0:c6:40:52:1b:78:ce:2d:db:ab:62:2f:
                    f3:8e:8a:c3:ab:0c:92:55:5e:8a:0a:aa:b9:de:e8:
                    ae:9c:23:ab:3b:59:f9:21:19:cd:14:cb:c0:85:97:
                    87:ad:f7:09:eb:8c:f9:df:6b:44:06:84:c4:06:1c:
                    27:20:c8:bc:f3:b7:97:f1:d6:82:d7:3d:5d:4b:2e:
                    4f:f8:40:4c:de:07:81:5b:8e:4f:99:fe:5b:3a:cf:
                    9c:c9:f7:e2:34:71:9d:0a:ed:0c:e0:5f:63:1e:61:
                    74:13:ac:80:04:3d:17:b3:2d:e4:fe:3a:46:ed:e1:
                    d0:4a:19:2d:31:d3:3a:77:c2:cb:16:13:7b:e7:63:
                    66:d6:9b:19:2f:ea:13:84:16:67:94:81:3d:2c:58:
                    f7:a5:f7:fe:51:bf:2a:50:47:8d:53:bb:bd:21:7a:
                    d7:52:5a:c7:f1:0d:e9:78:06:40:ed:c7:2e:b0:a1:
                    86:ec:ad:68:3e:00:cc:50:75:fa:ed:a0:b8:c6:3c:
                    49:af:6e:e1:b6:d5:f3:33:94:99:8f:be:2b:c9:3d:
                    c2:2e:e2:25:73:1d:99:b8:c4:76:da:36:92:2e:c0:
                    9c:6a:06:e8:23:18:46:0f:d5:a7:e7:45:08:67:29:
                    3a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:BF:69:5A:65:52:7F:96:A8:4B:39:2D:A6:D1:56:DC:15:1A:0E:21
            X509v3 Authority Key Identifier:
                keyid:DB:C8:F2:FF:98:F6:10:FE:83:83:0D:18:91:8F:4C:90:37:27:24:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28jy_5j2EP6Dgw0YkY9MkDcnJBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/feeef5-c96f-4652-94e0-ed38f649e39f/1/28jy_5j2EP6Dgw0YkY9MkDcnJBE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/feeef5-c96f-4652-94e0-ed38f649e39f/1/28jy_5j2EP6Dgw0YkY9MkDcnJBE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:7c:7e:3c:b1:18:bd:ba:96:2d:2e:32:e2:8e:c9:3b:14:63:
         93:28:7b:14:22:71:a9:93:42:43:99:bb:48:d8:66:83:2b:2c:
         84:a6:e0:2f:90:de:71:a7:f5:3e:61:50:3f:76:30:24:ae:7b:
         6a:14:e6:53:a3:c2:4a:78:0e:5c:ec:17:2b:c8:37:a4:55:1a:
         af:3c:4f:80:56:e0:94:46:dd:69:19:ba:4f:15:d9:53:13:62:
         70:1c:67:0e:5d:e4:68:df:9d:98:9f:6b:8b:d7:fc:e8:d5:ce:
         ec:00:a1:41:11:16:30:6c:19:27:0d:33:99:9a:d3:40:8b:af:
         12:d2:e0:e2:fb:53:43:b0:20:ea:b4:fa:d6:ab:70:f9:2f:3a:
         8a:a0:ca:d1:d3:09:f8:66:4f:66:24:44:72:34:d6:c8:d7:aa:
         50:c5:b3:f3:1c:0c:40:58:7e:b3:36:20:22:42:0f:a5:c9:a7:
         b1:bd:54:dc:c0:69:f2:ad:d4:39:2d:15:15:be:df:7d:7e:25:
         4f:cd:cf:ff:19:b1:2c:9d:bb:3a:c2:e8:60:5a:f7:34:3f:38:
         1a:01:e8:40:bb:8d:01:d3:ea:e9:6e:9a:2a:92:63:de:57:45:
         00:bf:2e:33:73:44:22:1e:2d:1d:5a:66:12:ee:76:87:0e:de:
         9f:53:f6:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZIhwqoxYNOdIJ53+F+SuefFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiYzhmMmZmOThmNjEwZmU4MzgzMGQxODkxOGY0YzkwMzcy
NzI0MTEwHhcNMjQwOTI0MDIwMDU4WhcNMjQwOTI1MDIwMDU4WjAzMTEwLwYDVQQD
EyhkN2JmNjk1YTY1NTI3Zjk2YTg0YjM5MmRhNmQxNTZkYzE1MWEwZTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1lSesfqVc5Y4heZb0jzftaGgxkBS
G3jOLdurYi/zjorDqwySVV6KCqq53uiunCOrO1n5IRnNFMvAhZeHrfcJ64z532tE
BoTEBhwnIMi887eX8daC1z1dSy5P+EBM3geBW45Pmf5bOs+cyffiNHGdCu0M4F9j
HmF0E6yABD0Xsy3k/jpG7eHQShktMdM6d8LLFhN752Nm1psZL+oThBZnlIE9LFj3
pff+Ub8qUEeNU7u9IXrXUlrH8Q3peAZA7ccusKGG7K1oPgDMUHX67aC4xjxJr27h
ttXzM5SZj74ryT3CLuIlcx2ZuMR22jaSLsCcagboIxhGD9Wn50UIZyk6gwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNe/aVplUn+WqEs5LabRVtwVGg4hMB8GA1UdIwQY
MBaAFNvI8v+Y9hD+g4MNGJGPTJA3JyQRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjhqeV81ajJFUDZEZ3cwWWtZOU1rRGNuSkJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9mZWVlZjUtYzk2Zi00NjUyLTk0ZTAt
ZWQzOGY2NDllMzlmLzEvMjhqeV81ajJFUDZEZ3cwWWtZOU1rRGNuSkJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS9mZWVlZjUtYzk2Zi00NjUyLTk0ZTAtZWQzOGY2NDllMzlm
LzEvMjhqeV81ajJFUDZEZ3cwWWtZOU1rRGNuSkJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgHx+PLEY
vbqWLS4y4o7JOxRjkyh7FCJxqZNCQ5m7SNhmgysshKbgL5Decaf1PmFQP3YwJK57
ahTmU6PCSngOXOwXK8g3pFUarzxPgFbglEbdaRm6TxXZUxNicBxnDl3kaN+dmJ9r
i9f86NXO7AChQREWMGwZJw0zmZrTQIuvEtLg4vtTQ7Ag6rT61qtw+S86iqDK0dMJ
+GZPZiREcjTWyNeqUMWz8xwMQFh+szYgIkIPpcmnsb1U3MBp8q3UOS0VFb7ffX4l
T83P/xmxLJ27OsLoYFr3ND84GgHoQLuNAdPq6W6aKpJj3ldFAL8uM3NEIh4tHVpm
Eu52hw7en1P2TQ==
-----END CERTIFICATE-----