Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/52b76e-da6f-4183-a003-c0a1ec603333/1/GanrkATG9gPvKpUGzVHqpu6Lzns.mft
File:                     GanrkATG9gPvKpUGzVHqpu6Lzns.mft (raw, json)
Hash identifier:          IO7o0L5ki282f2ZKBT9OnsUNpNQS8N7rJ8lkoUoBcXE=
Subject key identifier:   A3:EC:FC:FB:67:B2:39:2A:C2:C9:C3:B9:0D:F5:3D:3D:F7:D2:F4:B3
Authority key identifier: 19:A9:EB:90:04:C6:F6:03:EF:2A:95:06:CD:51:EA:A6:EE:8B:CE:7B
Certificate issuer:       /CN=19a9eb9004c6f603ef2a9506cd51eaa6ee8bce7b
Certificate serial:       018DE43969416D7049B8E151A318837C99CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GanrkATG9gPvKpUGzVHqpu6Lzns.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/52b76e-da6f-4183-a003-c0a1ec603333/1/GanrkATG9gPvKpUGzVHqpu6Lzns.mft
Manifest number:          109E
Signing time:             Mon 26 Feb 2024 07:03:04 +0000
Manifest this update:     Mon 26 Feb 2024 07:03:04 +0000
Manifest next update:     Tue 27 Feb 2024 07:03:04 +0000
Files and hashes:         1: GanrkATG9gPvKpUGzVHqpu6Lzns.crl (hash: BYooysEDLYHdB5L9DlOOHmVOZBFDH5C0UsETil/iV9g=)
                          2: jQg8ncjArN66GicbcqAaRtVO760.roa (hash: 33+2VyjntLdLSBuRCEfRL+OQfIbBVC1pQAfykhLf9uU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:e4:39:69:41:6d:70:49:b8:e1:51:a3:18:83:7c:99:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19a9eb9004c6f603ef2a9506cd51eaa6ee8bce7b
        Validity
            Not Before: Feb 26 07:03:04 2024 GMT
            Not After : Feb 27 07:03:04 2024 GMT
        Subject: CN=a3ecfcfb67b2392ac2c9c3b90df53d3df7d2f4b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:8e:f7:52:ab:f8:f0:4a:5d:fe:af:b6:c6:39:
                    a6:42:79:2d:1b:8d:b4:99:73:78:df:bf:f2:50:d2:
                    55:ef:1a:eb:9c:04:db:33:9b:0f:c2:e1:8e:f4:42:
                    87:db:37:88:bc:9f:de:dc:bf:ce:76:5f:0d:6a:61:
                    ca:53:6b:e8:f5:03:57:21:37:72:43:3a:25:77:72:
                    b6:1b:df:25:50:59:47:8d:c0:13:ec:dc:8e:f6:83:
                    85:11:05:89:ff:8d:28:8c:61:94:98:99:c4:14:8b:
                    69:28:66:b8:cd:2a:04:f8:bd:63:4a:64:c7:a1:f8:
                    61:64:03:bf:a5:82:b5:e8:f9:d4:92:e4:20:7f:e7:
                    51:fc:75:c7:33:23:47:43:b6:de:48:ed:86:23:d4:
                    c5:6c:e3:cb:2c:d2:d4:58:6d:b3:51:5e:ad:ef:67:
                    cf:4e:9c:c5:a6:7d:77:e7:f7:be:06:7c:fe:c9:78:
                    68:c7:d7:be:bf:77:d6:a2:87:12:1d:59:95:db:cf:
                    80:ee:60:c2:7d:9d:22:4b:2f:7a:97:bb:69:7a:bb:
                    26:76:41:4e:b4:82:63:5f:d2:b0:98:13:99:29:ae:
                    e5:de:e3:4b:32:84:04:ad:a1:2b:dd:ef:e4:3e:a6:
                    ca:9a:4a:e1:30:06:84:16:3a:8e:00:d2:ce:21:e7:
                    b8:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:EC:FC:FB:67:B2:39:2A:C2:C9:C3:B9:0D:F5:3D:3D:F7:D2:F4:B3
            X509v3 Authority Key Identifier:
                keyid:19:A9:EB:90:04:C6:F6:03:EF:2A:95:06:CD:51:EA:A6:EE:8B:CE:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GanrkATG9gPvKpUGzVHqpu6Lzns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/52b76e-da6f-4183-a003-c0a1ec603333/1/GanrkATG9gPvKpUGzVHqpu6Lzns.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/52b76e-da6f-4183-a003-c0a1ec603333/1/GanrkATG9gPvKpUGzVHqpu6Lzns.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:fb:ad:3c:34:3e:5d:15:a6:ec:64:1e:2a:51:f6:6f:d1:b0:
         5d:bf:11:99:3b:da:ca:56:6b:29:82:eb:7f:6f:c3:c4:f4:29:
         91:a2:4e:56:87:cc:5e:4e:f3:1b:b4:7b:81:88:0a:28:1a:a5:
         57:4c:cb:ff:54:6e:5f:2f:9e:fa:ba:a2:fe:88:12:70:75:17:
         44:62:22:dd:25:ca:5a:14:d1:ba:eb:43:c0:a9:4f:2c:d6:f9:
         f2:f1:07:27:3b:61:7e:92:30:77:98:f4:98:99:58:7f:f5:6e:
         81:7f:4e:f2:ca:72:9d:46:39:cd:e7:7c:85:c7:ed:ca:9b:bb:
         71:18:ba:09:a1:f4:65:ff:2e:8a:af:fe:40:a0:fd:d6:7e:eb:
         55:60:1d:1b:b2:41:c9:35:b8:1e:66:ef:11:f1:30:71:7c:25:
         54:cc:e5:0e:01:79:7f:01:8a:41:ad:b5:6f:f9:fa:0e:f6:d8:
         c6:bc:aa:b0:73:e5:c3:52:3e:3e:74:20:19:af:e5:a5:66:5a:
         a9:2a:68:db:84:ec:35:3c:45:11:1e:66:20:91:96:94:a7:0f:
         55:8b:e8:3f:db:b6:22:e2:c6:0b:c2:b7:a8:34:d3:48:d7:55:
         f5:25:a4:f7:31:b5:eb:e4:26:be:e8:fc:b7:dc:88:2c:cd:26:
         89:0f:8a:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY3kOWlBbXBJuOFRoxiDfJnPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5YTllYjkwMDRjNmY2MDNlZjJhOTUwNmNkNTFlYWE2ZWU4
YmNlN2IwHhcNMjQwMjI2MDcwMzA0WhcNMjQwMjI3MDcwMzA0WjAzMTEwLwYDVQQD
EyhhM2VjZmNmYjY3YjIzOTJhYzJjOWMzYjkwZGY1M2QzZGY3ZDJmNGIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiI73Uqv48Epd/q+2xjmmQnktG420
mXN437/yUNJV7xrrnATbM5sPwuGO9EKH2zeIvJ/e3L/Odl8NamHKU2vo9QNXITdy
Qzold3K2G98lUFlHjcAT7NyO9oOFEQWJ/40ojGGUmJnEFItpKGa4zSoE+L1jSmTH
ofhhZAO/pYK16PnUkuQgf+dR/HXHMyNHQ7beSO2GI9TFbOPLLNLUWG2zUV6t72fP
TpzFpn135/e+Bnz+yXhox9e+v3fWoocSHVmV28+A7mDCfZ0iSy96l7tpersmdkFO
tIJjX9KwmBOZKa7l3uNLMoQEraEr3e/kPqbKmkrhMAaEFjqOANLOIee4BQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKPs/PtnsjkqwsnDuQ31PT330vSzMB8GA1UdIwQY
MBaAFBmp65AExvYD7yqVBs1R6qbui857MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2FucmtBVEc5Z1B2S3BVR3pWSHFwdTZMem5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy81MmI3NmUtZGE2Zi00MTgzLWEwMDMt
YzBhMWVjNjAzMzMzLzEvR2FucmtBVEc5Z1B2S3BVR3pWSHFwdTZMem5zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy81MmI3NmUtZGE2Zi00MTgzLWEwMDMtYzBhMWVjNjAzMzMz
LzEvR2FucmtBVEc5Z1B2S3BVR3pWSHFwdTZMem5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfPutPDQ+
XRWm7GQeKlH2b9GwXb8RmTvaylZrKYLrf2/DxPQpkaJOVofMXk7zG7R7gYgKKBql
V0zL/1RuXy+e+rqi/ogScHUXRGIi3SXKWhTRuutDwKlPLNb58vEHJzthfpIwd5j0
mJlYf/VugX9O8spynUY5zed8hcftypu7cRi6CaH0Zf8uiq/+QKD91n7rVWAdG7JB
yTW4HmbvEfEwcXwlVMzlDgF5fwGKQa21b/n6DvbYxryqsHPlw1I+PnQgGa/lpWZa
qSpo24TsNTxFER5mIJGWlKcPVYvoP9u2IuLGC8K3qDTTSNdV9SWk9zG16+Qmvuj8
t9yILM0miQ+KWw==
-----END CERTIFICATE-----