Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/c792e9-db95-4fc7-897a-9a69775fc5d7/1/OcRJQj3D0WymMkQ8hOz9LFiabqM.mft
File:                     OcRJQj3D0WymMkQ8hOz9LFiabqM.mft (raw, json)
Hash identifier:          cAkwFs5z6NCta2cQLwZ+xe5VrHCwNp2HoHUqq9YRMRU=
Subject key identifier:   9B:EC:8F:54:D6:83:A1:66:E2:9C:89:3F:00:92:E4:66:30:EB:11:AA
Authority key identifier: 39:C4:49:42:3D:C3:D1:6C:A6:32:44:3C:84:EC:FD:2C:58:9A:6E:A3
Certificate issuer:       /CN=39c449423dc3d16ca632443c84ecfd2c589a6ea3
Certificate serial:       0192DBCC702D8FE0D1D4C62FC45874A561F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OcRJQj3D0WymMkQ8hOz9LFiabqM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/c792e9-db95-4fc7-897a-9a69775fc5d7/1/OcRJQj3D0WymMkQ8hOz9LFiabqM.mft
Manifest number:          012B
Signing time:             Wed 30 Oct 2024 05:01:01 +0000
Manifest this update:     Wed 30 Oct 2024 05:01:01 +0000
Manifest next update:     Thu 31 Oct 2024 05:01:01 +0000
Files and hashes:         1: OcRJQj3D0WymMkQ8hOz9LFiabqM.crl (hash: rDLY1kJBCvmBJxfnBq2XaPyh/r1fvMUoYamqLgH7uLU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:db:cc:70:2d:8f:e0:d1:d4:c6:2f:c4:58:74:a5:61:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39c449423dc3d16ca632443c84ecfd2c589a6ea3
        Validity
            Not Before: Oct 30 05:01:01 2024 GMT
            Not After : Oct 31 05:01:01 2024 GMT
        Subject: CN=9bec8f54d683a166e29c893f0092e46630eb11aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:9e:bb:4d:48:f7:e6:0e:9b:c4:15:fb:c6:03:
                    f8:0c:1a:11:f2:54:00:da:81:aa:e0:32:20:98:c4:
                    34:bc:a6:4b:1e:9b:0b:37:57:c6:37:67:19:1b:f8:
                    ed:ad:f5:a4:19:e7:ad:95:a7:e4:15:39:af:49:9d:
                    ee:10:64:72:46:3f:00:4b:b4:fc:86:a2:f7:cd:5d:
                    c6:a0:fe:41:c0:33:d3:de:fa:00:b7:35:9a:20:1a:
                    d2:a9:3e:4d:86:2d:fc:35:72:a8:79:bb:b0:c5:ef:
                    f7:ea:37:b6:64:d8:55:e4:e6:86:0a:29:97:6f:f0:
                    20:ba:13:e0:78:a4:11:9a:11:ba:b8:46:05:ef:c3:
                    ee:f8:7e:46:06:17:0c:81:71:d6:09:80:4c:33:fe:
                    4e:78:52:78:b5:db:b4:8c:9a:a3:e6:f0:38:e8:bf:
                    00:bf:87:00:02:75:91:c4:2f:cb:7e:4e:98:03:d2:
                    5e:11:28:07:75:cb:f4:4a:1d:a2:a8:f8:36:10:2c:
                    f8:c9:13:d4:24:c2:3a:76:79:5d:5a:88:ee:17:e2:
                    ab:4d:ed:21:c4:be:8c:84:c5:06:ef:d7:3f:db:02:
                    da:e4:1a:bd:a3:33:d2:80:75:63:6e:ee:96:8b:93:
                    77:5f:a2:97:cb:02:c4:a5:cc:87:30:61:e1:fb:31:
                    0d:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:EC:8F:54:D6:83:A1:66:E2:9C:89:3F:00:92:E4:66:30:EB:11:AA
            X509v3 Authority Key Identifier:
                keyid:39:C4:49:42:3D:C3:D1:6C:A6:32:44:3C:84:EC:FD:2C:58:9A:6E:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OcRJQj3D0WymMkQ8hOz9LFiabqM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c792e9-db95-4fc7-897a-9a69775fc5d7/1/OcRJQj3D0WymMkQ8hOz9LFiabqM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c792e9-db95-4fc7-897a-9a69775fc5d7/1/OcRJQj3D0WymMkQ8hOz9LFiabqM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:4d:b2:c9:96:37:43:c3:3e:80:97:11:35:d1:c5:e7:b3:fa:
         6c:17:f7:27:ea:ae:da:7c:b9:6e:7b:59:91:7b:9b:c8:50:6f:
         47:6d:f3:e9:59:1f:4a:8f:45:54:11:71:6e:f9:c6:ad:f3:78:
         ff:5c:19:e7:2d:b6:15:f6:6d:8f:d3:87:ba:b9:eb:89:5e:ad:
         1c:74:4d:f5:45:75:d4:03:d6:12:ab:bc:11:ac:6e:1a:85:78:
         d3:8f:fe:0a:13:84:61:e3:0b:2e:c1:6a:22:71:25:f8:d6:78:
         bc:ee:c2:f8:74:f2:44:dd:2a:03:fa:d3:7e:74:ed:1b:8a:db:
         1c:10:e5:e7:30:da:65:c2:db:d4:ed:2a:fc:dc:f1:91:37:3f:
         12:96:3f:f9:53:1a:70:56:7e:df:71:f9:b3:e0:70:8c:12:30:
         c2:01:66:7a:07:76:29:ee:e4:f1:d4:c8:66:df:c2:70:a5:9d:
         57:09:a1:f9:58:00:bd:c8:a4:d2:da:ca:9f:f4:66:6a:bb:2e:
         3b:c0:2c:a1:0e:56:e9:97:58:20:05:99:3b:a8:e7:b6:07:0a:
         4e:9f:f5:2c:9e:a0:4d:bc:b9:0b:8a:0d:6a:17:1f:5c:f1:1c:
         1c:97:51:04:a5:32:d3:63:12:bc:53:79:a1:87:c0:92:fe:75:
         d6:12:ae:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZLbzHAtj+DR1MYvxFh0pWH2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5YzQ0OTQyM2RjM2QxNmNhNjMyNDQzYzg0ZWNmZDJjNTg5
YTZlYTMwHhcNMjQxMDMwMDUwMTAxWhcNMjQxMDMxMDUwMTAxWjAzMTEwLwYDVQQD
Eyg5YmVjOGY1NGQ2ODNhMTY2ZTI5Yzg5M2YwMDkyZTQ2NjMwZWIxMWFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZ67TUj35g6bxBX7xgP4DBoR8lQA
2oGq4DIgmMQ0vKZLHpsLN1fGN2cZG/jtrfWkGeetlafkFTmvSZ3uEGRyRj8AS7T8
hqL3zV3GoP5BwDPT3voAtzWaIBrSqT5Nhi38NXKoebuwxe/36je2ZNhV5OaGCimX
b/AguhPgeKQRmhG6uEYF78Pu+H5GBhcMgXHWCYBMM/5OeFJ4tdu0jJqj5vA46L8A
v4cAAnWRxC/Lfk6YA9JeESgHdcv0Sh2iqPg2ECz4yRPUJMI6dnldWojuF+KrTe0h
xL6MhMUG79c/2wLa5Bq9ozPSgHVjbu6Wi5N3X6KXywLEpcyHMGHh+zENJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJvsj1TWg6Fm4pyJPwCS5GYw6xGqMB8GA1UdIwQY
MBaAFDnESUI9w9FspjJEPITs/SxYmm6jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2NSSlFqM0QwV3ltTWtROGhPejlMRmlhYnFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9jNzkyZTktZGI5NS00ZmM3LTg5N2Et
OWE2OTc3NWZjNWQ3LzEvT2NSSlFqM0QwV3ltTWtROGhPejlMRmlhYnFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9jNzkyZTktZGI5NS00ZmM3LTg5N2EtOWE2OTc3NWZjNWQ3
LzEvT2NSSlFqM0QwV3ltTWtROGhPejlMRmlhYnFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsE2yyZY3
Q8M+gJcRNdHF57P6bBf3J+qu2ny5bntZkXubyFBvR23z6VkfSo9FVBFxbvnGrfN4
/1wZ5y22FfZtj9OHurnriV6tHHRN9UV11APWEqu8EaxuGoV404/+ChOEYeMLLsFq
InEl+NZ4vO7C+HTyRN0qA/rTfnTtG4rbHBDl5zDaZcLb1O0q/NzxkTc/EpY/+VMa
cFZ+33H5s+BwjBIwwgFmegd2Ke7k8dTIZt/CcKWdVwmh+VgAvcik0trKn/Rmarsu
O8AsoQ5W6ZdYIAWZO6jntgcKTp/1LJ6gTby5C4oNahcfXPEcHJdRBKUy02MSvFN5
oYfAkv511hKuEA==
-----END CERTIFICATE-----