Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/38b542-4677-4a7e-b212-c8acce156f0d/1/YMmqi3HlSL11ZbpmP6MvfRrsQas.mft
File:                     YMmqi3HlSL11ZbpmP6MvfRrsQas.mft (raw, json)
Hash identifier:          V/IuMWYkReLP0gxrAE+0g/mk3pr0uihz+X0zWxU/hZ8=
Subject key identifier:   62:6B:D2:B5:AF:11:D6:39:8C:CB:B2:51:26:C8:5A:A7:25:31:90:D5
Authority key identifier: 60:C9:AA:8B:71:E5:48:BD:75:65:BA:66:3F:A3:2F:7D:1A:EC:41:AB
Certificate issuer:       /CN=60c9aa8b71e548bd7565ba663fa32f7d1aec41ab
Certificate serial:       018C8FAF34F5DD6F7FE9FA260C7A06670B26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YMmqi3HlSL11ZbpmP6MvfRrsQas.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/38b542-4677-4a7e-b212-c8acce156f0d/1/YMmqi3HlSL11ZbpmP6MvfRrsQas.mft
Manifest number:          0C82
Signing time:             Fri 22 Dec 2023 04:01:13 +0000
Manifest this update:     Fri 22 Dec 2023 04:01:13 +0000
Manifest next update:     Sat 23 Dec 2023 04:01:13 +0000
Files and hashes:         1: 0EOIGENi06JFBy3X09tkyoJOb_g.roa (hash: pRkLS1cKjP30wPtRwuldyO92lwr+LAz4kMyTGwkQbwA=)
                          2: 6EYLY7c3mQktjWHgNpqATMnVqQQ.roa (hash: q/cL2zeBEPH7wMyn8ofQPF8XAVty+uOgQGKsxGnfl/A=)
                          3: CR7gNXaUhaHZrsMx7EnhdB3CwTM.roa (hash: fseT+wSsNiOt3/gTPU8MQ+lj07Zx5EoIZLUdKSDfcsc=)
                          4: Hn_1rK96FEov3-WACPeKxfKTBHA.roa (hash: nl3fKt/sF05rG/76b6erUwhVs64irALy4NvmFDE77NA=)
                          5: If8gXr9EYe0iYVKxx6njX0k3nDE.roa (hash: cg9B6PoatkzkhSitsPYDPbJi5T8yUPg0HUplTE/ccMA=)
                          6: J1GNS6-m3K4iuuppsKDgOocxesg.roa (hash: n0LIsAKg0ZwN4tYsnjZEFYznH0qTqyKw1sN9acJrXCU=)
                          7: SYcHBuuDaE7wuk1k9dQMwc1htN0.roa (hash: JqWufOmRFZXEzcMjYAIxfjA7lyftS7ZxsP9l8EwROaY=)
                          8: Swwj6ryYXrmarJepsF679a-wcHU.roa (hash: 9MDY2pAfCKEDkyHG9Gikt+gDhr2nX87p6ZrKY3OJ7qY=)
                          9: TcctGu4-qCJPYa9A6iFzJXvSzuA.roa (hash: Z5VQ20/mONsqrMmxe5LYxGtCoGM7Ut8zflIDC/OxDtA=)
                          10: VStxx4noK-s3sbpfmxi-jC3q5gE.roa (hash: /CJeoasOFGTTSY4CmeAVdFanIqMx5LPiD5CNB3WP+Bc=)
                          11: Y66BHrsa3HtD97xlQRxi7b9e4PQ.roa (hash: wc+bQcCv62zgBIhPqqtnUWUY5hTGztwF06NI7LN6Mtk=)
                          12: YMmqi3HlSL11ZbpmP6MvfRrsQas.crl (hash: 7ptl4bikkaLMRU9q47Le2JyMNHQPj/i8z49k4zAIA3s=)
                          13: b9gv9iCbOomTtUCQCnufWWFVSJs.roa (hash: nGTUhHV44N981rqD4jp55zB+TGGixaywH6kuW1Ql3Pg=)
                          14: cYMMQkBZP6eQgxDnnL6viVw12ws.roa (hash: SFlMCGuq8sdUtko2jjl/FrIB2MTLieKpu3rv1zDjkzw=)
                          15: dRptC1RTbXBDtg9jn7vyE1q3BEE.roa (hash: KePBI8csBYowV2OddmZbzx8EvcDACWfywtynrDVU9LM=)
                          16: g4dC3Uz495X7eWLOiZ5-Szfd0is.roa (hash: MSYPO7otprJ5DVpN44OLhKuGM1LDGC7ahacFh0CM1zw=)
                          17: gDgQwH5IIsaejsX9Rc-uwwKPKfo.roa (hash: dZT3oSjd26AVZXTd+NFY1WfmtpYVfF6/RB9Ekx5ORZ4=)
                          18: i152ISnDYUwJ39X0x6p0qwLTK44.roa (hash: zgd82AinZJu6Mg/+FdLotJBwJehP8Mgp94WoLM5pY+s=)
                          19: lldEWyWy9wvBchxZt_VwXAJUAUg.roa (hash: Q9OU00Wv/7bYfcbmkCpovqsPtApGAK5YQaFR/F2Lp8U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:8f:af:34:f5:dd:6f:7f:e9:fa:26:0c:7a:06:67:0b:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60c9aa8b71e548bd7565ba663fa32f7d1aec41ab
        Validity
            Not Before: Dec 22 04:01:13 2023 GMT
            Not After : Dec 23 04:01:13 2023 GMT
        Subject: CN=626bd2b5af11d6398ccbb25126c85aa7253190d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:6d:34:71:99:95:b3:8a:bf:4c:da:65:46:a2:
                    ce:a1:49:6d:ac:41:cd:0a:fb:72:8e:56:aa:a5:69:
                    5c:19:50:82:bc:f4:70:0c:62:72:06:4e:18:f3:b5:
                    e2:8d:a1:cf:8e:86:f2:c2:4b:c4:6a:f5:8b:c5:cf:
                    f5:46:95:ce:b1:53:19:24:5a:e7:93:ce:2d:d9:0a:
                    57:5f:63:c3:7f:9b:28:b2:53:e8:51:db:5f:e4:9f:
                    aa:db:7e:a9:cf:2f:33:6d:1a:3f:0c:56:bb:4b:2c:
                    c4:75:be:a9:dc:79:56:ba:59:9e:8d:6d:05:98:dd:
                    86:fd:7c:dd:e5:68:b8:1c:77:4f:96:28:a2:3f:4e:
                    7c:01:49:63:c7:33:3f:a2:62:76:22:2b:c9:e4:4a:
                    98:78:24:fa:62:7c:81:bd:fe:29:c9:a8:e2:cb:12:
                    c6:01:5f:d3:fa:3e:32:01:72:48:76:b2:05:a5:21:
                    11:2a:98:49:66:42:e3:bf:01:33:cf:11:76:79:b2:
                    82:71:45:cc:e6:2e:6e:bc:d5:68:8c:8f:6c:e2:ec:
                    51:93:ad:38:a5:cf:fd:0b:d6:99:34:94:7a:4b:d4:
                    8f:06:88:5e:54:1f:0e:41:91:ed:4c:ff:47:15:8a:
                    70:62:2e:cc:32:74:e4:c4:13:eb:ab:44:35:0b:39:
                    20:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:6B:D2:B5:AF:11:D6:39:8C:CB:B2:51:26:C8:5A:A7:25:31:90:D5
            X509v3 Authority Key Identifier:
                keyid:60:C9:AA:8B:71:E5:48:BD:75:65:BA:66:3F:A3:2F:7D:1A:EC:41:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMmqi3HlSL11ZbpmP6MvfRrsQas.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/38b542-4677-4a7e-b212-c8acce156f0d/1/YMmqi3HlSL11ZbpmP6MvfRrsQas.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/38b542-4677-4a7e-b212-c8acce156f0d/1/YMmqi3HlSL11ZbpmP6MvfRrsQas.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:e2:7e:4c:98:97:bb:a9:e4:ea:2f:84:59:86:28:8a:83:ed:
         6e:4a:61:fe:81:a9:34:12:f4:28:cb:af:04:d2:71:ed:5e:2d:
         49:5e:ab:f9:08:0d:70:5b:dd:94:5f:11:fb:57:d5:da:69:a9:
         d4:a2:5b:7b:cf:ab:f7:ca:04:a4:3c:09:b5:75:c1:73:e0:ac:
         ef:37:b4:50:c2:0f:11:7f:63:48:ec:30:3a:ca:58:10:ef:14:
         d3:f2:0d:9e:3e:fb:b7:2f:85:01:3b:06:ff:ac:b0:c6:3d:75:
         a7:26:ec:59:85:bc:3f:91:b1:95:6c:ff:18:76:0c:70:89:d3:
         30:d7:4b:f6:3c:50:6d:67:92:07:94:a6:62:38:9d:08:0c:f2:
         c7:a9:41:14:31:13:2d:cc:e0:12:1f:82:bd:a6:2d:cb:29:e2:
         f5:37:19:05:62:2b:56:4d:a7:f4:d4:df:1d:de:44:0e:bc:e4:
         01:1d:0c:07:a2:5b:a5:04:a8:60:ad:d5:d9:4a:da:94:ed:7a:
         7b:82:64:96:67:81:85:31:64:68:15:4b:cd:1f:8c:20:5b:17:
         cf:7c:00:4c:b1:42:b0:4f:2f:38:ba:71:4c:23:b6:f0:99:94:
         a3:28:ea:24:8b:ef:1d:d0:3b:13:09:51:94:9e:e7:cc:9d:35:
         3d:2d:9f:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYyPrzT13W9/6fomDHoGZwsmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwYzlhYThiNzFlNTQ4YmQ3NTY1YmE2NjNmYTMyZjdkMWFl
YzQxYWIwHhcNMjMxMjIyMDQwMTEzWhcNMjMxMjIzMDQwMTEzWjAzMTEwLwYDVQQD
Eyg2MjZiZDJiNWFmMTFkNjM5OGNjYmIyNTEyNmM4NWFhNzI1MzE5MGQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz200cZmVs4q/TNplRqLOoUltrEHN
CvtyjlaqpWlcGVCCvPRwDGJyBk4Y87XijaHPjobywkvEavWLxc/1RpXOsVMZJFrn
k84t2QpXX2PDf5soslPoUdtf5J+q236pzy8zbRo/DFa7SyzEdb6p3HlWulmejW0F
mN2G/Xzd5Wi4HHdPliiiP058AUljxzM/omJ2IivJ5EqYeCT6YnyBvf4pyajiyxLG
AV/T+j4yAXJIdrIFpSERKphJZkLjvwEzzxF2ebKCcUXM5i5uvNVojI9s4uxRk604
pc/9C9aZNJR6S9SPBoheVB8OQZHtTP9HFYpwYi7MMnTkxBPrq0Q1CzkgGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGJr0rWvEdY5jMuyUSbIWqclMZDVMB8GA1UdIwQY
MBaAFGDJqotx5Ui9dWW6Zj+jL30a7EGrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWU1tcWkzSGxTTDExWmJwbVA2TXZmUnJzUWFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS8zOGI1NDItNDY3Ny00YTdlLWIyMTIt
YzhhY2NlMTU2ZjBkLzEvWU1tcWkzSGxTTDExWmJwbVA2TXZmUnJzUWFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS8zOGI1NDItNDY3Ny00YTdlLWIyMTItYzhhY2NlMTU2ZjBk
LzEvWU1tcWkzSGxTTDExWmJwbVA2TXZmUnJzUWFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIeJ+TJiX
u6nk6i+EWYYoioPtbkph/oGpNBL0KMuvBNJx7V4tSV6r+QgNcFvdlF8R+1fV2mmp
1KJbe8+r98oEpDwJtXXBc+Cs7ze0UMIPEX9jSOwwOspYEO8U0/INnj77ty+FATsG
/6ywxj11pybsWYW8P5GxlWz/GHYMcInTMNdL9jxQbWeSB5SmYjidCAzyx6lBFDET
LczgEh+CvaYtyyni9TcZBWIrVk2n9NTfHd5EDrzkAR0MB6JbpQSoYK3V2UralO16
e4JklmeBhTFkaBVLzR+MIFsXz3wATLFCsE8vOLpxTCO28JmUoyjqJIvvHdA7EwlR
lJ7nzJ01PS2fxA==
-----END CERTIFICATE-----