Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/4d1cf3-67f4-4b83-ad76-c750208662fd/1/o9f4SGGyZu4vjThjBM7OGRwoLn0.mft
File:                     o9f4SGGyZu4vjThjBM7OGRwoLn0.mft (raw, json)
Hash identifier:          N98B6O7TsymJ+XM4ZpXVVWA3N1T7IKaDOF6wVvXG1Ss=
Subject key identifier:   40:70:4E:35:21:21:B7:89:88:04:B6:D6:00:C1:D0:56:D2:34:5D:20
Authority key identifier: A3:D7:F8:48:61:B2:66:EE:2F:8D:38:63:04:CE:CE:19:1C:28:2E:7D
Certificate issuer:       /CN=a3d7f84861b266ee2f8d386304cece191c282e7d
Certificate serial:       01927A621531B8EC83B61059E576637E6ED7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o9f4SGGyZu4vjThjBM7OGRwoLn0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/4d1cf3-67f4-4b83-ad76-c750208662fd/1/o9f4SGGyZu4vjThjBM7OGRwoLn0.mft
Manifest number:          0AF1
Signing time:             Fri 11 Oct 2024 07:01:41 +0000
Manifest this update:     Fri 11 Oct 2024 07:01:41 +0000
Manifest next update:     Sat 12 Oct 2024 07:01:41 +0000
Files and hashes:         1: ANtHuFElhCqI6dS6q4jsqu9Ndh8.roa (hash: Ix8uDi/Bx09qUJ+feBCpO96TBg1eom3g8W1JRxVdHMY=)
                          2: o9f4SGGyZu4vjThjBM7OGRwoLn0.crl (hash: yTuo1lJvntA0QCcNdbwz71kKEkaTwST6vUO3J19rd9U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:7a:62:15:31:b8:ec:83:b6:10:59:e5:76:63:7e:6e:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3d7f84861b266ee2f8d386304cece191c282e7d
        Validity
            Not Before: Oct 11 07:01:41 2024 GMT
            Not After : Oct 12 07:01:41 2024 GMT
        Subject: CN=40704e352121b7898804b6d600c1d056d2345d20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:27:d6:0b:01:b5:db:77:7f:8f:5f:1f:8f:67:
                    f6:e9:8b:31:57:8f:c9:e1:81:b7:20:f9:32:6f:a8:
                    74:22:97:c7:c8:17:fe:c5:07:a0:85:e6:71:c0:17:
                    51:e0:18:f2:42:6f:47:d3:bb:04:42:85:a5:38:0b:
                    75:12:8a:71:9d:2e:2e:a0:15:56:c5:56:0b:0f:2b:
                    a4:87:89:7d:f1:96:28:b3:3f:80:78:30:b7:dc:39:
                    99:53:58:5e:60:ff:ba:dd:94:6b:2b:5a:ff:00:68:
                    0d:08:01:e1:27:25:bf:49:2a:ab:2f:38:2a:27:3b:
                    33:5c:a0:b5:74:bb:a5:9e:64:2c:b2:9c:9e:80:27:
                    56:c3:fd:ff:83:08:79:cd:9f:eb:7e:8b:4e:c3:5e:
                    30:27:15:dd:ac:77:cc:90:cf:c0:8b:de:b4:b9:ea:
                    db:16:c4:44:cd:74:f3:ff:3a:8a:7c:d4:35:8a:96:
                    cb:c1:e7:32:07:80:a0:b8:4c:f5:5b:45:86:26:c5:
                    6b:ff:65:4a:11:8a:68:e8:c5:a1:61:6a:1c:01:95:
                    84:89:73:f1:c2:fb:4d:2e:2f:03:75:1f:c3:ab:cc:
                    76:2f:3c:bc:ff:1f:d7:c6:76:6c:77:d5:4d:82:66:
                    bc:e0:ac:f2:62:b4:ab:a5:76:aa:27:33:0e:f0:e8:
                    c3:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:70:4E:35:21:21:B7:89:88:04:B6:D6:00:C1:D0:56:D2:34:5D:20
            X509v3 Authority Key Identifier:
                keyid:A3:D7:F8:48:61:B2:66:EE:2F:8D:38:63:04:CE:CE:19:1C:28:2E:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o9f4SGGyZu4vjThjBM7OGRwoLn0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4d1cf3-67f4-4b83-ad76-c750208662fd/1/o9f4SGGyZu4vjThjBM7OGRwoLn0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4d1cf3-67f4-4b83-ad76-c750208662fd/1/o9f4SGGyZu4vjThjBM7OGRwoLn0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:b5:41:bb:ae:7e:3b:2b:77:47:02:08:ed:d9:b4:49:a8:35:
         e3:bc:c2:0d:f4:2e:57:f5:61:8e:0a:57:6d:5e:17:e9:ba:b3:
         6d:0f:30:73:c8:02:c4:f8:91:da:35:12:5f:e3:e7:41:92:f2:
         a7:95:bf:05:47:60:55:92:9c:06:17:b9:2b:0d:d3:60:58:91:
         dc:b6:ea:92:c6:a0:b5:fb:3e:10:d2:0c:d1:be:88:69:67:a6:
         a5:6e:68:49:dc:42:30:95:48:81:fe:f3:48:5a:2b:f4:b1:2e:
         16:db:b0:6c:90:23:94:41:bd:ad:4a:66:36:6c:b6:50:c1:11:
         19:0f:7e:e0:a8:d9:3d:f1:0a:b4:66:41:0d:c5:53:35:8e:91:
         e6:d1:6f:a8:6d:b8:74:0a:4c:32:ff:7c:84:23:7c:0a:79:49:
         1e:e7:29:75:35:4f:e4:6f:41:f3:53:85:2b:3d:e7:73:5f:1f:
         06:73:34:65:95:57:ce:75:55:03:94:ec:e3:f0:12:9f:3d:56:
         0e:73:d6:69:cd:f7:ad:18:88:10:f5:87:6e:d2:23:19:95:5c:
         d8:bb:58:dc:bb:36:f9:17:ac:3a:36:51:88:34:0c:ba:81:18:
         89:0d:2d:f6:4e:00:d5:ec:07:0f:8c:eb:a8:ea:60:44:66:98:
         80:44:38:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZJ6YhUxuOyDthBZ5XZjfm7XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzZDdmODQ4NjFiMjY2ZWUyZjhkMzg2MzA0Y2VjZTE5MWMy
ODJlN2QwHhcNMjQxMDExMDcwMTQxWhcNMjQxMDEyMDcwMTQxWjAzMTEwLwYDVQQD
Eyg0MDcwNGUzNTIxMjFiNzg5ODgwNGI2ZDYwMGMxZDA1NmQyMzQ1ZDIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmifWCwG123d/j18fj2f26YsxV4/J
4YG3IPkyb6h0IpfHyBf+xQegheZxwBdR4BjyQm9H07sEQoWlOAt1EopxnS4uoBVW
xVYLDyukh4l98ZYosz+AeDC33DmZU1heYP+63ZRrK1r/AGgNCAHhJyW/SSqrLzgq
JzszXKC1dLulnmQsspyegCdWw/3/gwh5zZ/rfotOw14wJxXdrHfMkM/Ai960uerb
FsREzXTz/zqKfNQ1ipbLwecyB4CguEz1W0WGJsVr/2VKEYpo6MWhYWocAZWEiXPx
wvtNLi8DdR/Dq8x2Lzy8/x/XxnZsd9VNgma84KzyYrSrpXaqJzMO8OjDAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEBwTjUhIbeJiAS21gDB0FbSNF0gMB8GA1UdIwQY
MBaAFKPX+EhhsmbuL404YwTOzhkcKC59MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzlmNFNHR3ladTR2alRoakJNN09HUndvTG4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy80ZDFjZjMtNjdmNC00YjgzLWFkNzYt
Yzc1MDIwODY2MmZkLzEvbzlmNFNHR3ladTR2alRoakJNN09HUndvTG4wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy80ZDFjZjMtNjdmNC00YjgzLWFkNzYtYzc1MDIwODY2MmZk
LzEvbzlmNFNHR3ladTR2alRoakJNN09HUndvTG4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD7VBu65+
Oyt3RwII7dm0Sag147zCDfQuV/VhjgpXbV4X6bqzbQ8wc8gCxPiR2jUSX+PnQZLy
p5W/BUdgVZKcBhe5Kw3TYFiR3Lbqksagtfs+ENIM0b6IaWempW5oSdxCMJVIgf7z
SFor9LEuFtuwbJAjlEG9rUpmNmy2UMERGQ9+4KjZPfEKtGZBDcVTNY6R5tFvqG24
dApMMv98hCN8CnlJHucpdTVP5G9B81OFKz3nc18fBnM0ZZVXznVVA5Ts4/ASnz1W
DnPWac33rRiIEPWHbtIjGZVc2LtY3Ls2+ResOjZRiDQMuoEYiQ0t9k4A1ewHD4zr
qOpgRGaYgEQ4vg==
-----END CERTIFICATE-----