Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/8e037d-98d4-441f-875b-0356917f488e/1/sXU8bQmLVhFsKMHYKhDhMDvz3wI.mft
File:                     sXU8bQmLVhFsKMHYKhDhMDvz3wI.mft (raw, json)
Hash identifier:          p1qWj5gN1DUM/2BSQCxUbpjOyC4IIi724RG5crdVXQ4=
Subject key identifier:   C1:AB:62:CA:A5:FF:E0:97:AC:7C:39:E4:EB:6F:5B:A0:F4:D8:00:E2
Authority key identifier: B1:75:3C:6D:09:8B:56:11:6C:28:C1:D8:2A:10:E1:30:3B:F3:DF:02
Certificate issuer:       /CN=b1753c6d098b56116c28c1d82a10e1303bf3df02
Certificate serial:       01900988DD56EEF703A5C4EC28111609DCE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sXU8bQmLVhFsKMHYKhDhMDvz3wI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/8e037d-98d4-441f-875b-0356917f488e/1/sXU8bQmLVhFsKMHYKhDhMDvz3wI.mft
Manifest number:          1F
Signing time:             Tue 11 Jun 2024 23:01:22 +0000
Manifest this update:     Tue 11 Jun 2024 23:01:22 +0000
Manifest next update:     Wed 12 Jun 2024 23:01:22 +0000
Files and hashes:         1: sXU8bQmLVhFsKMHYKhDhMDvz3wI.crl (hash: sAXLlaSW3R61X0DOiLNDM9r3w4uGRgbP8Ww0hmQ/hNg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:09:88:dd:56:ee:f7:03:a5:c4:ec:28:11:16:09:dc:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1753c6d098b56116c28c1d82a10e1303bf3df02
        Validity
            Not Before: Jun 11 23:01:22 2024 GMT
            Not After : Jun 12 23:01:22 2024 GMT
        Subject: CN=c1ab62caa5ffe097ac7c39e4eb6f5ba0f4d800e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:42:b6:52:ce:c7:b8:98:4f:33:cb:d8:ed:d8:
                    97:fa:63:ed:40:be:d0:08:95:8d:25:13:93:87:8c:
                    6d:3a:62:dd:ab:74:51:6d:ea:c7:9e:5f:fe:04:ce:
                    a4:d9:71:b4:6a:37:7a:9c:61:6e:97:a9:5c:bf:6d:
                    16:d0:3e:0a:a2:f5:7b:15:ff:e5:8b:6a:19:6e:26:
                    b3:8e:83:f0:1b:dc:96:3d:a4:76:c2:df:83:13:8a:
                    ef:9a:55:a6:6a:75:c6:25:13:79:a7:5d:ff:ab:72:
                    24:c1:d6:f2:bd:55:78:3e:b4:ff:4c:51:6d:8a:ba:
                    0b:f9:d8:36:08:c7:b7:a3:5c:70:a2:25:ad:2c:6d:
                    c3:bd:51:63:36:88:40:fb:f4:28:3a:f0:4d:83:4a:
                    83:e4:be:8c:c7:65:86:8c:7a:f6:b1:c1:63:62:e9:
                    b4:e8:52:75:9f:43:8e:de:2c:95:44:ee:84:45:9f:
                    68:d6:88:fb:e9:eb:07:75:c2:80:9b:18:8c:7d:70:
                    9c:02:99:3f:9a:16:76:e3:95:b9:5c:e7:c5:fb:0f:
                    68:f9:94:b4:fe:5b:86:3b:62:44:ec:ee:3a:5a:5c:
                    9e:ea:3f:aa:5b:cc:32:68:e4:43:ba:20:30:23:f5:
                    a6:8c:c0:07:66:2e:ca:ae:00:20:e7:ff:c0:5d:17:
                    4a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:AB:62:CA:A5:FF:E0:97:AC:7C:39:E4:EB:6F:5B:A0:F4:D8:00:E2
            X509v3 Authority Key Identifier:
                keyid:B1:75:3C:6D:09:8B:56:11:6C:28:C1:D8:2A:10:E1:30:3B:F3:DF:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXU8bQmLVhFsKMHYKhDhMDvz3wI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/8e037d-98d4-441f-875b-0356917f488e/1/sXU8bQmLVhFsKMHYKhDhMDvz3wI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/8e037d-98d4-441f-875b-0356917f488e/1/sXU8bQmLVhFsKMHYKhDhMDvz3wI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:34:7b:af:00:2e:b2:a9:f7:00:b6:58:70:de:38:01:af:80:
         9a:85:47:bd:f3:3f:69:5b:dd:6a:d1:87:b4:b7:28:fa:7b:9e:
         9f:61:0b:05:29:5b:e9:d9:54:ef:57:0d:11:dc:0b:98:09:3b:
         dd:41:9c:70:55:eb:63:c5:4b:6c:fc:aa:47:2e:f2:2e:95:f0:
         03:33:94:49:aa:33:69:92:53:ca:55:70:04:d3:fa:70:44:8a:
         ef:7d:b7:88:1c:93:2b:2d:10:11:ed:e2:8a:76:fe:ae:57:2b:
         37:95:05:3a:f7:9c:46:71:ef:07:c1:77:62:24:2b:8a:2f:66:
         d3:69:49:43:6a:20:fe:52:81:3b:4b:46:8c:2d:54:e8:3f:8e:
         01:32:b1:61:ad:cc:5c:ee:58:f7:17:3c:ec:9c:9b:d7:a0:83:
         d1:2b:9e:c9:a9:32:f0:94:ec:ff:2b:88:fc:9a:9b:63:16:c6:
         77:78:e7:6c:60:3d:91:2c:b9:12:6e:03:49:9e:2a:da:4d:a6:
         46:05:19:c3:76:0c:d6:5d:f1:8e:04:a0:80:67:b5:4c:bd:d0:
         5c:50:6e:4a:3b:22:51:54:b6:65:59:a0:f9:7b:cb:8f:13:76:
         fa:38:41:0d:52:f2:91:bc:92:61:fe:7b:6a:50:f3:d7:66:ad:
         ca:60:94:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAJiN1W7vcDpcTsKBEWCdzlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNzUzYzZkMDk4YjU2MTE2YzI4YzFkODJhMTBlMTMwM2Jm
M2RmMDIwHhcNMjQwNjExMjMwMTIyWhcNMjQwNjEyMjMwMTIyWjAzMTEwLwYDVQQD
EyhjMWFiNjJjYWE1ZmZlMDk3YWM3YzM5ZTRlYjZmNWJhMGY0ZDgwMGUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkK2Us7HuJhPM8vY7diX+mPtQL7Q
CJWNJROTh4xtOmLdq3RRberHnl/+BM6k2XG0ajd6nGFul6lcv20W0D4KovV7Ff/l
i2oZbiazjoPwG9yWPaR2wt+DE4rvmlWmanXGJRN5p13/q3IkwdbyvVV4PrT/TFFt
iroL+dg2CMe3o1xwoiWtLG3DvVFjNohA+/QoOvBNg0qD5L6Mx2WGjHr2scFjYum0
6FJ1n0OO3iyVRO6ERZ9o1oj76esHdcKAmxiMfXCcApk/mhZ245W5XOfF+w9o+ZS0
/luGO2JE7O46Wlye6j+qW8wyaORDuiAwI/WmjMAHZi7KrgAg5//AXRdK/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMGrYsql/+CXrHw55OtvW6D02ADiMB8GA1UdIwQY
MBaAFLF1PG0Ji1YRbCjB2CoQ4TA7898CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1hVOGJRbUxWaEZzS01IWUtoRGhNRHZ6M3dJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS84ZTAzN2QtOThkNC00NDFmLTg3NWIt
MDM1NjkxN2Y0ODhlLzEvc1hVOGJRbUxWaEZzS01IWUtoRGhNRHZ6M3dJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS84ZTAzN2QtOThkNC00NDFmLTg3NWItMDM1NjkxN2Y0ODhl
LzEvc1hVOGJRbUxWaEZzS01IWUtoRGhNRHZ6M3dJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPzR7rwAu
sqn3ALZYcN44Aa+AmoVHvfM/aVvdatGHtLco+nuen2ELBSlb6dlU71cNEdwLmAk7
3UGccFXrY8VLbPyqRy7yLpXwAzOUSaozaZJTylVwBNP6cESK7323iByTKy0QEe3i
inb+rlcrN5UFOvecRnHvB8F3YiQrii9m02lJQ2og/lKBO0tGjC1U6D+OATKxYa3M
XO5Y9xc87Jyb16CD0Sueyaky8JTs/yuI/JqbYxbGd3jnbGA9kSy5Em4DSZ4q2k2m
RgUZw3YM1l3xjgSggGe1TL3QXFBuSjsiUVS2ZVmg+XvLjxN2+jhBDVLykbySYf57
alDz12atymCUrg==
-----END CERTIFICATE-----