Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/bf4679-7490-4446-b320-9ff6a387fcf6/1/07M70BSCBxZI1pdzfq-RYSsn_Cc.mft
File:                     07M70BSCBxZI1pdzfq-RYSsn_Cc.mft (raw, json)
Hash identifier:          jikxo6yf4bgB+aPYqxKJ9qoGwopJ2l90kTAC4l3t/rY=
Subject key identifier:   61:3B:A7:FD:27:E1:B1:EC:F3:F6:0F:18:78:D6:02:33:09:59:42:68
Authority key identifier: D3:B3:3B:D0:14:82:07:16:48:D6:97:73:7E:AF:91:61:2B:27:FC:27
Certificate issuer:       /CN=d3b33bd01482071648d697737eaf91612b27fc27
Certificate serial:       019095A6E2DA8085BA4CA10F4EE03C11FF73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/07M70BSCBxZI1pdzfq-RYSsn_Cc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/bf4679-7490-4446-b320-9ff6a387fcf6/1/07M70BSCBxZI1pdzfq-RYSsn_Cc.mft
Manifest number:          0E11
Signing time:             Tue 09 Jul 2024 04:01:00 +0000
Manifest this update:     Tue 09 Jul 2024 04:01:00 +0000
Manifest next update:     Wed 10 Jul 2024 04:01:00 +0000
Files and hashes:         1: 07M70BSCBxZI1pdzfq-RYSsn_Cc.crl (hash: w6UTQa/6mDLHy9xBndxLY2B4jr5F+WD6DpJsM8d00XE=)
                          2: rynwX8F3OYbBiTnRaLjW95wiSe0.roa (hash: lW95E1KKMrKrfWC+kiUheDVBWR8i2USJ+y0V9w5pw6k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:95:a6:e2:da:80:85:ba:4c:a1:0f:4e:e0:3c:11:ff:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3b33bd01482071648d697737eaf91612b27fc27
        Validity
            Not Before: Jul  9 04:01:00 2024 GMT
            Not After : Jul 10 04:01:00 2024 GMT
        Subject: CN=613ba7fd27e1b1ecf3f60f1878d6023309594268
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5d:47:4b:6b:d7:3a:c8:3f:18:77:3a:80:a6:
                    bf:76:ed:fe:f8:52:d6:e8:7b:f2:7d:35:b5:78:29:
                    8e:b4:65:a0:40:d7:21:cc:a6:75:86:41:43:19:aa:
                    9d:fb:6e:b8:fb:58:dd:16:c7:43:fb:09:b8:43:25:
                    ca:8a:8f:7a:57:09:10:34:ed:63:1a:7f:31:58:20:
                    46:cb:03:1c:d4:fd:e3:c2:dd:33:4e:ba:56:a5:ac:
                    0e:7e:c8:19:d6:2a:0a:6d:9f:5f:e6:27:d8:a3:78:
                    06:11:88:dd:99:68:db:80:41:c3:67:6b:fe:76:75:
                    49:6e:1b:72:16:d3:b5:17:7a:97:58:36:f6:fa:41:
                    70:e4:2d:05:d7:72:a9:83:e9:2b:6b:67:ee:97:c8:
                    26:03:2d:c0:4a:f2:5d:e6:23:ab:db:cb:7e:3b:ac:
                    3d:85:c5:6a:d1:9c:a6:f9:39:99:27:28:ac:b4:6c:
                    53:6c:6e:28:3e:22:0d:ab:4f:f6:96:32:aa:59:92:
                    2e:68:dc:c2:27:8c:1a:c0:5d:03:e7:f5:c2:50:2f:
                    67:17:06:49:0a:50:ae:b2:9f:89:24:50:bc:4c:80:
                    f3:11:7d:0b:e7:f8:0c:cf:5f:d1:13:76:b5:6e:62:
                    27:6b:6b:57:7e:8b:32:b3:e3:6f:63:ac:4c:7c:da:
                    33:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:3B:A7:FD:27:E1:B1:EC:F3:F6:0F:18:78:D6:02:33:09:59:42:68
            X509v3 Authority Key Identifier:
                keyid:D3:B3:3B:D0:14:82:07:16:48:D6:97:73:7E:AF:91:61:2B:27:FC:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07M70BSCBxZI1pdzfq-RYSsn_Cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/bf4679-7490-4446-b320-9ff6a387fcf6/1/07M70BSCBxZI1pdzfq-RYSsn_Cc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/bf4679-7490-4446-b320-9ff6a387fcf6/1/07M70BSCBxZI1pdzfq-RYSsn_Cc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:7b:36:cc:3e:41:f3:e1:4c:81:27:cf:f6:f2:ca:13:9d:4a:
         05:90:98:66:d2:92:45:f9:fe:3c:76:17:81:8a:81:e7:2c:3a:
         75:f0:9c:24:23:0e:c1:73:b0:bb:16:fa:b9:f9:bc:41:dc:24:
         35:4d:5a:44:92:e8:1c:0a:15:0c:89:89:fe:26:a1:e1:30:28:
         dd:09:8c:99:6a:d6:6d:6d:d2:7a:90:f6:dc:7a:9f:63:b4:27:
         52:42:b4:e1:94:f2:fe:dc:8c:eb:31:3c:fe:8f:ac:69:a4:54:
         18:e1:84:d7:7a:ba:c3:84:7e:3a:65:1d:73:74:06:94:12:8d:
         46:4a:88:6c:0e:b3:7e:00:e6:02:c7:f3:95:3a:04:e6:7d:f4:
         f4:94:9c:8e:50:3d:9d:0a:1b:4b:cf:ba:39:f5:97:10:38:ce:
         32:94:82:c0:d7:bb:15:88:69:11:c3:7f:ef:cd:5d:59:37:a8:
         ad:ab:34:2a:e4:e4:25:16:6e:aa:89:51:94:cd:6b:88:1e:47:
         3b:f2:03:8e:d6:c3:bd:e1:c1:12:c1:f4:7a:b3:00:cb:53:f6:
         5d:85:d3:53:40:0d:d9:c3:a3:0f:ba:9f:f9:f4:75:31:f1:2a:
         8e:78:16:12:84:06:ba:fa:7d:66:1b:9b:0e:bc:80:56:ac:33:
         3d:c1:aa:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZCVpuLagIW6TKEPTuA8Ef9zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjMzYmQwMTQ4MjA3MTY0OGQ2OTc3MzdlYWY5MTYxMmIy
N2ZjMjcwHhcNMjQwNzA5MDQwMTAwWhcNMjQwNzEwMDQwMTAwWjAzMTEwLwYDVQQD
Eyg2MTNiYTdmZDI3ZTFiMWVjZjNmNjBmMTg3OGQ2MDIzMzA5NTk0MjY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArl1HS2vXOsg/GHc6gKa/du3++FLW
6HvyfTW1eCmOtGWgQNchzKZ1hkFDGaqd+264+1jdFsdD+wm4QyXKio96VwkQNO1j
Gn8xWCBGywMc1P3jwt0zTrpWpawOfsgZ1ioKbZ9f5ifYo3gGEYjdmWjbgEHDZ2v+
dnVJbhtyFtO1F3qXWDb2+kFw5C0F13Kpg+kra2ful8gmAy3ASvJd5iOr28t+O6w9
hcVq0Zym+TmZJyistGxTbG4oPiINq0/2ljKqWZIuaNzCJ4wawF0D5/XCUC9nFwZJ
ClCusp+JJFC8TIDzEX0L5/gMz1/RE3a1bmIna2tXfosys+NvY6xMfNoz1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGE7p/0n4bHs8/YPGHjWAjMJWUJoMB8GA1UdIwQY
MBaAFNOzO9AUggcWSNaXc36vkWErJ/wnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdNNzBCU0NCeFpJMXBkemZxLVJZU3NuX0NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9iZjQ2NzktNzQ5MC00NDQ2LWIzMjAt
OWZmNmEzODdmY2Y2LzEvMDdNNzBCU0NCeFpJMXBkemZxLVJZU3NuX0NjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy9iZjQ2NzktNzQ5MC00NDQ2LWIzMjAtOWZmNmEzODdmY2Y2
LzEvMDdNNzBCU0NCeFpJMXBkemZxLVJZU3NuX0NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZns2zD5B
8+FMgSfP9vLKE51KBZCYZtKSRfn+PHYXgYqB5yw6dfCcJCMOwXOwuxb6ufm8Qdwk
NU1aRJLoHAoVDImJ/iah4TAo3QmMmWrWbW3SepD23HqfY7QnUkK04ZTy/tyM6zE8
/o+saaRUGOGE13q6w4R+OmUdc3QGlBKNRkqIbA6zfgDmAsfzlToE5n309JScjlA9
nQobS8+6OfWXEDjOMpSCwNe7FYhpEcN/781dWTeoras0KuTkJRZuqolRlM1riB5H
O/IDjtbDveHBEsH0erMAy1P2XYXTU0AN2cOjD7qf+fR1MfEqjngWEoQGuvp9Zhub
DryAVqwzPcGqeQ==
-----END CERTIFICATE-----