Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/2204c0-457e-4fc0-a893-70aedde952d6/1/YF9nsPb7wbCO-pSujP_6f3etgHE.mft
File:                     YF9nsPb7wbCO-pSujP_6f3etgHE.mft (raw, json)
Hash identifier:          Ec/YCKcWiHBQrUdmETkIsNn+IBTvWI44VYCyB62xBFc=
Subject key identifier:   06:C6:92:A2:D9:DF:18:1E:51:C2:16:F5:68:D8:A7:B4:F3:F5:C7:BD
Authority key identifier: 60:5F:67:B0:F6:FB:C1:B0:8E:FA:94:AE:8C:FF:FA:7F:77:AD:80:71
Certificate issuer:       /CN=605f67b0f6fbc1b08efa94ae8cfffa7f77ad8071
Certificate serial:       01920D605F8602B4A28432708FD6F24FEA3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YF9nsPb7wbCO-pSujP_6f3etgHE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/2204c0-457e-4fc0-a893-70aedde952d6/1/YF9nsPb7wbCO-pSujP_6f3etgHE.mft
Manifest number:          AD
Signing time:             Fri 20 Sep 2024 03:01:12 +0000
Manifest this update:     Fri 20 Sep 2024 03:01:12 +0000
Manifest next update:     Sat 21 Sep 2024 03:01:12 +0000
Files and hashes:         1: YF9nsPb7wbCO-pSujP_6f3etgHE.crl (hash: YfIWk2ozjHoGDgLuvNvlFAZ1BUX6esAAUHqFV/qcTEQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:0d:60:5f:86:02:b4:a2:84:32:70:8f:d6:f2:4f:ea:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605f67b0f6fbc1b08efa94ae8cfffa7f77ad8071
        Validity
            Not Before: Sep 20 03:01:12 2024 GMT
            Not After : Sep 21 03:01:12 2024 GMT
        Subject: CN=06c692a2d9df181e51c216f568d8a7b4f3f5c7bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:63:eb:a9:e5:ab:5a:7b:51:85:d5:33:64:b5:
                    58:15:42:56:78:07:e7:02:de:f2:76:be:7a:a4:e4:
                    33:4f:fa:83:1a:1d:cb:f0:47:5e:f3:92:5a:08:a4:
                    c3:83:ed:ee:67:43:53:c1:a8:67:94:0c:ad:b4:2f:
                    ee:75:b1:af:d5:dd:ec:7b:03:d6:b7:9b:63:55:1a:
                    0b:9e:62:a7:98:fb:e9:4d:b9:94:85:4c:6e:5c:0c:
                    85:ec:54:03:a2:01:75:01:2d:1b:4f:94:47:3d:eb:
                    f4:93:96:09:a6:f8:09:c4:4a:fc:b5:d2:3e:7b:29:
                    d7:48:7d:39:30:83:ef:3b:a4:2d:0b:63:91:25:75:
                    30:67:d5:9f:3f:66:6e:72:52:72:8e:26:37:c2:c9:
                    f0:ec:15:b2:19:86:0b:dd:d1:35:6f:cf:b1:5c:57:
                    57:84:00:e6:83:93:cf:37:79:a4:fe:1f:75:ed:63:
                    e0:b7:cc:92:61:ca:6a:35:2d:df:e3:72:47:b9:e2:
                    6e:ec:f0:49:8e:d6:a2:61:ab:c1:b0:fd:07:17:09:
                    2a:88:01:f4:28:ff:61:47:f0:71:66:b9:4e:33:23:
                    f0:e3:7a:a1:4e:a0:5b:78:bf:53:61:a3:22:7e:83:
                    b4:81:44:8a:9c:5d:9d:e6:bb:03:8b:60:7e:01:d7:
                    ff:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:C6:92:A2:D9:DF:18:1E:51:C2:16:F5:68:D8:A7:B4:F3:F5:C7:BD
            X509v3 Authority Key Identifier:
                keyid:60:5F:67:B0:F6:FB:C1:B0:8E:FA:94:AE:8C:FF:FA:7F:77:AD:80:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YF9nsPb7wbCO-pSujP_6f3etgHE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/2204c0-457e-4fc0-a893-70aedde952d6/1/YF9nsPb7wbCO-pSujP_6f3etgHE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/2204c0-457e-4fc0-a893-70aedde952d6/1/YF9nsPb7wbCO-pSujP_6f3etgHE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:98:68:a3:ad:c1:11:31:b9:02:b2:14:f5:8a:9f:8d:32:cb:
         a6:8a:78:90:7f:ca:6a:67:ac:6f:74:07:69:b5:84:d0:82:33:
         cf:d3:5b:2f:69:29:46:c3:19:73:90:c9:01:80:f0:78:78:e9:
         8d:17:ff:de:b9:76:cb:44:80:f0:02:fb:62:32:48:d1:b5:1a:
         cc:97:cd:f5:a0:58:27:1b:31:fb:23:82:8d:50:21:24:89:fc:
         4b:e9:fc:59:0a:0c:95:d9:11:c3:93:5b:33:2f:1a:47:00:c9:
         4f:d1:94:32:82:44:3d:d8:94:8f:92:32:2c:43:a8:fc:10:3b:
         91:47:e5:3f:2a:5d:12:60:06:12:6b:cf:f7:11:af:09:52:d1:
         9d:ec:66:24:60:f9:38:d5:71:ab:1f:4d:31:80:02:1e:0e:98:
         48:8e:d9:28:ac:8f:ac:89:7a:64:a5:a3:b2:7c:60:bb:9e:f9:
         5e:c9:f7:42:d4:ce:79:b3:80:1c:c9:51:bb:19:4c:67:10:40:
         db:67:f4:77:7a:d6:93:3a:b0:2b:75:62:73:e8:85:4b:c7:4a:
         8b:a8:ba:95:d8:28:ff:bd:50:bb:86:95:24:99:a6:86:91:92:
         c9:09:46:05:d4:6e:bf:0b:19:fc:b4:4a:84:a8:ae:04:f5:df:
         9a:d1:ee:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZINYF+GArSihDJwj9byT+o7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNWY2N2IwZjZmYmMxYjA4ZWZhOTRhZThjZmZmYTdmNzdh
ZDgwNzEwHhcNMjQwOTIwMDMwMTEyWhcNMjQwOTIxMDMwMTEyWjAzMTEwLwYDVQQD
EygwNmM2OTJhMmQ5ZGYxODFlNTFjMjE2ZjU2OGQ4YTdiNGYzZjVjN2JkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2PrqeWrWntRhdUzZLVYFUJWeAfn
At7ydr56pOQzT/qDGh3L8Ede85JaCKTDg+3uZ0NTwahnlAyttC/udbGv1d3sewPW
t5tjVRoLnmKnmPvpTbmUhUxuXAyF7FQDogF1AS0bT5RHPev0k5YJpvgJxEr8tdI+
eynXSH05MIPvO6QtC2ORJXUwZ9WfP2ZuclJyjiY3wsnw7BWyGYYL3dE1b8+xXFdX
hADmg5PPN3mk/h917WPgt8ySYcpqNS3f43JHueJu7PBJjtaiYavBsP0HFwkqiAH0
KP9hR/BxZrlOMyPw43qhTqBbeL9TYaMifoO0gUSKnF2d5rsDi2B+Adf/nQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAbGkqLZ3xgeUcIW9WjYp7Tz9ce9MB8GA1UdIwQY
MBaAFGBfZ7D2+8GwjvqUroz/+n93rYBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUY5bnNQYjd3YkNPLXBTdWpQXzZmM2V0Z0hFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny8yMjA0YzAtNDU3ZS00ZmMwLWE4OTMt
NzBhZWRkZTk1MmQ2LzEvWUY5bnNQYjd3YkNPLXBTdWpQXzZmM2V0Z0hFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny8yMjA0YzAtNDU3ZS00ZmMwLWE4OTMtNzBhZWRkZTk1MmQ2
LzEvWUY5bnNQYjd3YkNPLXBTdWpQXzZmM2V0Z0hFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj5hoo63B
ETG5ArIU9YqfjTLLpop4kH/Kamesb3QHabWE0IIzz9NbL2kpRsMZc5DJAYDweHjp
jRf/3rl2y0SA8AL7YjJI0bUazJfN9aBYJxsx+yOCjVAhJIn8S+n8WQoMldkRw5Nb
My8aRwDJT9GUMoJEPdiUj5IyLEOo/BA7kUflPypdEmAGEmvP9xGvCVLRnexmJGD5
ONVxqx9NMYACHg6YSI7ZKKyPrIl6ZKWjsnxgu575Xsn3QtTOebOAHMlRuxlMZxBA
22f0d3rWkzqwK3Vic+iFS8dKi6i6ldgo/71Qu4aVJJmmhpGSyQlGBdRuvwsZ/LRK
hKiuBPXfmtHuwg==
-----END CERTIFICATE-----