Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/0b7251-beb8-4e36-8e37-34091351a710/1/smUUKFRJ3zXg45w4_7Kli57tTrk.mft
File:                     smUUKFRJ3zXg45w4_7Kli57tTrk.mft (raw, json)
Hash identifier:          l3BYaMtpZGRPLLfOI08dQvVrDuDOQy+vsm3dkg/jDYw=
Subject key identifier:   EC:38:2F:BA:31:56:86:6A:71:0E:03:A2:63:9E:38:CD:AB:0B:1D:70
Authority key identifier: B2:65:14:28:54:49:DF:35:E0:E3:9C:38:FF:B2:A5:8B:9E:ED:4E:B9
Certificate issuer:       /CN=b26514285449df35e0e39c38ffb2a58b9eed4eb9
Certificate serial:       018D8CAB6F2DFB455BC0F91C07A8D4927323
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/smUUKFRJ3zXg45w4_7Kli57tTrk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/0b7251-beb8-4e36-8e37-34091351a710/1/smUUKFRJ3zXg45w4_7Kli57tTrk.mft
Manifest number:          0861
Signing time:             Fri 09 Feb 2024 07:01:01 +0000
Manifest this update:     Fri 09 Feb 2024 07:01:01 +0000
Manifest next update:     Sat 10 Feb 2024 07:01:01 +0000
Files and hashes:         1: 6sDijtpijI1RC9QZz7XAU99kK9E.roa (hash: gTOORc3UiQJDxLgWI4DcGRjbwie4NIdjZKtamDjmqFA=)
                          2: smUUKFRJ3zXg45w4_7Kli57tTrk.crl (hash: 5YieFKoVqExITM+EiSkDceayfIQzlJTPhhv+4sIltRc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:8c:ab:6f:2d:fb:45:5b:c0:f9:1c:07:a8:d4:92:73:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b26514285449df35e0e39c38ffb2a58b9eed4eb9
        Validity
            Not Before: Feb  9 07:01:01 2024 GMT
            Not After : Feb 10 07:01:01 2024 GMT
        Subject: CN=ec382fba3156866a710e03a2639e38cdab0b1d70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:e3:bb:6c:2f:9b:87:a5:26:66:d2:3b:8c:8a:
                    5c:54:42:74:71:7e:83:ba:ae:5e:30:60:5a:0a:58:
                    95:d7:10:7f:18:46:7f:fd:02:f6:06:6a:4e:66:e6:
                    be:56:21:63:a8:03:74:f0:49:b0:f5:5a:dc:0e:1c:
                    ed:0c:f6:f9:6a:3d:bf:8b:a5:11:13:0e:e7:e6:32:
                    59:e8:30:77:5e:f9:d1:68:7e:cb:8d:05:25:0d:c6:
                    e2:dd:91:a4:27:5b:cb:d6:c7:3e:e6:8c:4f:65:74:
                    c0:20:44:6d:52:e1:21:50:22:cf:4e:b6:fe:e0:a8:
                    e4:ab:7c:0e:3e:90:a4:b5:50:b6:35:f8:46:47:2d:
                    f8:57:f7:1e:4c:8e:f7:2a:5f:f2:e5:83:f1:ff:b1:
                    b0:2e:54:dc:19:8f:66:fd:82:e8:d8:5a:10:6c:8e:
                    65:f2:ca:d6:f0:b0:3d:48:20:ab:63:bc:92:59:b6:
                    85:9a:b7:75:92:4d:40:c9:16:39:8f:2e:38:8a:f3:
                    d2:72:52:c6:dd:eb:c7:f6:31:4a:ad:4a:14:9a:a5:
                    36:6a:1b:64:b3:8a:8c:e5:41:47:df:58:7b:76:7b:
                    72:06:ec:ef:2d:7f:97:41:71:13:bb:66:aa:33:3d:
                    07:db:9e:16:ba:c5:88:d7:1b:e9:ea:4e:d7:5d:eb:
                    24:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:38:2F:BA:31:56:86:6A:71:0E:03:A2:63:9E:38:CD:AB:0B:1D:70
            X509v3 Authority Key Identifier:
                keyid:B2:65:14:28:54:49:DF:35:E0:E3:9C:38:FF:B2:A5:8B:9E:ED:4E:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/smUUKFRJ3zXg45w4_7Kli57tTrk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/0b7251-beb8-4e36-8e37-34091351a710/1/smUUKFRJ3zXg45w4_7Kli57tTrk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/0b7251-beb8-4e36-8e37-34091351a710/1/smUUKFRJ3zXg45w4_7Kli57tTrk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:e4:ce:e8:cd:0e:e9:35:15:bc:55:7e:1b:cc:fb:af:a9:82:
         3a:0a:cf:91:00:31:a9:1a:3c:50:cb:b5:d1:ef:08:b1:73:1b:
         4a:7b:24:e8:45:82:13:59:13:97:33:9a:7c:4e:60:fa:11:d3:
         30:32:04:9f:54:88:01:88:7d:71:da:92:eb:50:ab:93:19:ee:
         28:c6:6d:23:f9:c1:6e:2a:2f:5f:dc:25:ef:34:3f:55:17:2d:
         f7:bf:80:54:96:62:91:83:d0:2c:fa:65:0b:06:3c:f2:99:65:
         ad:02:24:59:5e:b8:4c:f5:2f:31:8f:0e:79:92:7e:d1:3e:c7:
         0d:5f:94:06:dc:be:ce:bb:63:ce:9e:db:d5:2f:71:95:88:13:
         75:cd:7f:61:a2:2c:c4:79:a4:28:30:e0:61:65:2e:c6:32:2a:
         d5:46:34:5a:d6:b0:e9:3f:5b:76:aa:3a:b2:0f:27:9d:27:83:
         db:33:de:2f:9e:a6:3b:1c:e6:9a:92:68:05:63:90:6e:f9:67:
         f0:2f:cc:bf:97:f8:68:60:0d:47:64:96:4c:c5:b3:a2:4e:7f:
         b9:03:e4:6a:a0:e7:e5:03:ba:eb:be:20:69:0b:86:b7:46:d4:
         75:fd:ab:7b:6d:78:b3:d7:31:fc:3b:2f:02:fd:2c:49:3d:39:
         58:43:73:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY2Mq28t+0VbwPkcB6jUknMjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyNjUxNDI4NTQ0OWRmMzVlMGUzOWMzOGZmYjJhNThiOWVl
ZDRlYjkwHhcNMjQwMjA5MDcwMTAxWhcNMjQwMjEwMDcwMTAxWjAzMTEwLwYDVQQD
EyhlYzM4MmZiYTMxNTY4NjZhNzEwZTAzYTI2MzllMzhjZGFiMGIxZDcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkeO7bC+bh6UmZtI7jIpcVEJ0cX6D
uq5eMGBaCliV1xB/GEZ//QL2BmpOZua+ViFjqAN08Emw9VrcDhztDPb5aj2/i6UR
Ew7n5jJZ6DB3XvnRaH7LjQUlDcbi3ZGkJ1vL1sc+5oxPZXTAIERtUuEhUCLPTrb+
4Kjkq3wOPpCktVC2NfhGRy34V/ceTI73Kl/y5YPx/7GwLlTcGY9m/YLo2FoQbI5l
8srW8LA9SCCrY7ySWbaFmrd1kk1AyRY5jy44ivPSclLG3evH9jFKrUoUmqU2ahtk
s4qM5UFH31h7dntyBuzvLX+XQXETu2aqMz0H254WusWI1xvp6k7XXeskOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOw4L7oxVoZqcQ4DomOeOM2rCx1wMB8GA1UdIwQY
MBaAFLJlFChUSd814OOcOP+ypYue7U65MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc21VVUtGUkozelhnNDV3NF83S2xpNTd0VHJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni8wYjcyNTEtYmViOC00ZTM2LThlMzct
MzQwOTEzNTFhNzEwLzEvc21VVUtGUkozelhnNDV3NF83S2xpNTd0VHJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni8wYjcyNTEtYmViOC00ZTM2LThlMzctMzQwOTEzNTFhNzEw
LzEvc21VVUtGUkozelhnNDV3NF83S2xpNTd0VHJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAheTO6M0O
6TUVvFV+G8z7r6mCOgrPkQAxqRo8UMu10e8IsXMbSnsk6EWCE1kTlzOafE5g+hHT
MDIEn1SIAYh9cdqS61CrkxnuKMZtI/nBbiovX9wl7zQ/VRct97+AVJZikYPQLPpl
CwY88pllrQIkWV64TPUvMY8OeZJ+0T7HDV+UBty+zrtjzp7b1S9xlYgTdc1/YaIs
xHmkKDDgYWUuxjIq1UY0Wtaw6T9bdqo6sg8nnSeD2zPeL56mOxzmmpJoBWOQbvln
8C/Mv5f4aGANR2SWTMWzok5/uQPkaqDn5QO6674gaQuGt0bUdf2re214s9cx/Dsv
Av0sST05WENzOQ==
-----END CERTIFICATE-----