Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/3dca4c-29b2-43e9-88ec-98b9d07db797/1/2jZAXW31_UxxyY4aRbHxbzS0MUw.mft
File:                     2jZAXW31_UxxyY4aRbHxbzS0MUw.mft (raw, json)
Hash identifier:          HQsJtty+eyB1LXNj4JfyvwEFIO9HCrRt/rjlzSMIMtg=
Subject key identifier:   2C:3C:68:29:8F:51:A4:FE:20:08:D7:C1:77:D2:CD:A1:C8:46:EF:02
Authority key identifier: DA:36:40:5D:6D:F5:FD:4C:71:C9:8E:1A:45:B1:F1:6F:34:B4:31:4C
Certificate issuer:       /CN=da36405d6df5fd4c71c98e1a45b1f16f34b4314c
Certificate serial:       018DE814BC08BDAA38350342BF5028FA1354
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2jZAXW31_UxxyY4aRbHxbzS0MUw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/3dca4c-29b2-43e9-88ec-98b9d07db797/1/2jZAXW31_UxxyY4aRbHxbzS0MUw.mft
Manifest number:          0870
Signing time:             Tue 27 Feb 2024 01:01:29 +0000
Manifest this update:     Tue 27 Feb 2024 01:01:29 +0000
Manifest next update:     Wed 28 Feb 2024 01:01:29 +0000
Files and hashes:         1: 2jZAXW31_UxxyY4aRbHxbzS0MUw.crl (hash: KtiJnePnYaPxHqNoS2bJ/sAWDjniez/EsjQ/vAeXtLg=)
                          2: UEzugTd3RCQj0HfH1fbWTFQBJMo.roa (hash: 7vG+kUSbQBr6SJ2F151lU6KHSnypguPkQnLqT7HE9DM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:e8:14:bc:08:bd:aa:38:35:03:42:bf:50:28:fa:13:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da36405d6df5fd4c71c98e1a45b1f16f34b4314c
        Validity
            Not Before: Feb 27 01:01:29 2024 GMT
            Not After : Feb 28 01:01:29 2024 GMT
        Subject: CN=2c3c68298f51a4fe2008d7c177d2cda1c846ef02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f3:16:8e:45:b3:f8:a4:98:ec:54:2a:89:33:
                    be:03:f2:85:60:4a:39:bd:03:67:cf:46:97:55:9c:
                    62:75:4d:b8:f0:7c:1e:a5:76:a5:d5:a3:1d:ed:cb:
                    ec:ba:31:55:a2:d3:64:0b:bd:cc:50:36:6e:9a:e5:
                    5b:cf:7c:22:a8:2b:5c:a8:47:9e:91:7b:ab:60:12:
                    30:8c:6e:a7:d4:01:be:86:d3:73:e8:61:2f:71:a8:
                    e4:4a:d7:73:55:b6:3b:57:c3:9e:b5:cc:27:7a:a7:
                    3c:b9:08:ac:31:d2:b5:f3:7d:07:d3:a7:86:0a:a2:
                    07:58:2e:3b:dc:f3:bb:4a:5c:b0:f3:8a:b5:2f:82:
                    73:bc:b0:93:5b:a1:4c:8c:07:16:e6:07:99:b0:4d:
                    6f:03:88:bd:14:ce:c2:17:b8:dc:2f:46:06:03:bb:
                    90:22:c1:f7:c9:72:e7:ca:b6:52:b0:86:d7:3a:2d:
                    e8:80:cf:ea:78:4f:63:9f:f9:21:69:12:ce:d4:99:
                    67:c7:6a:a4:27:cf:83:6b:85:31:e2:cc:3b:50:8f:
                    5c:68:8b:d4:ab:90:9b:bd:1e:a5:af:88:b6:b5:3a:
                    3c:a1:4a:cb:1e:8e:37:f7:ad:63:c2:7d:94:1f:92:
                    01:77:7b:c2:6b:4a:39:74:3c:d3:d9:10:56:a7:a6:
                    d9:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:3C:68:29:8F:51:A4:FE:20:08:D7:C1:77:D2:CD:A1:C8:46:EF:02
            X509v3 Authority Key Identifier:
                keyid:DA:36:40:5D:6D:F5:FD:4C:71:C9:8E:1A:45:B1:F1:6F:34:B4:31:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2jZAXW31_UxxyY4aRbHxbzS0MUw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/3dca4c-29b2-43e9-88ec-98b9d07db797/1/2jZAXW31_UxxyY4aRbHxbzS0MUw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/3dca4c-29b2-43e9-88ec-98b9d07db797/1/2jZAXW31_UxxyY4aRbHxbzS0MUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:f2:f6:a8:4a:a9:54:71:47:5a:26:b3:1f:33:6e:a5:cc:6e:
         aa:84:e0:db:c4:49:22:2a:3e:29:8b:17:5a:de:35:ac:6d:80:
         4d:bf:68:c0:96:af:5d:33:ae:d3:f6:eb:ed:19:c0:a9:20:2d:
         e9:28:6e:ac:e9:53:81:8b:55:a1:55:da:48:e5:6c:90:98:29:
         69:b0:5e:50:d9:bd:55:1e:43:61:07:d1:43:4a:00:f8:a4:a0:
         32:76:64:27:15:6f:39:09:51:d6:2c:be:26:f2:40:31:df:c8:
         25:48:a9:d7:a1:59:e6:93:d6:9b:45:eb:fc:38:83:ea:ac:c7:
         17:92:a3:7d:a2:4c:9a:c5:62:ae:91:55:0b:d8:e9:17:f1:00:
         f2:bd:9a:94:a7:57:52:10:a0:a8:e2:a7:2d:c0:53:ec:56:55:
         12:7b:49:42:d2:50:c1:ae:56:e9:b4:5c:ac:cd:88:f9:ca:11:
         3a:26:52:9a:9b:55:49:31:31:df:05:92:e0:14:a2:cb:d5:36:
         bb:89:0a:2d:02:ef:bb:f0:02:cd:13:9b:75:6d:5c:50:4a:02:
         e6:19:ca:80:7b:1e:b7:cb:f2:4c:42:3e:a0:30:b6:3d:c7:73:
         68:36:d6:cf:20:5e:0f:ba:9f:b6:ae:bf:7a:1d:fc:44:da:c1:
         e0:9a:dc:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY3oFLwIvao4NQNCv1Ao+hNUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhMzY0MDVkNmRmNWZkNGM3MWM5OGUxYTQ1YjFmMTZmMzRi
NDMxNGMwHhcNMjQwMjI3MDEwMTI5WhcNMjQwMjI4MDEwMTI5WjAzMTEwLwYDVQQD
EygyYzNjNjgyOThmNTFhNGZlMjAwOGQ3YzE3N2QyY2RhMWM4NDZlZjAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/MWjkWz+KSY7FQqiTO+A/KFYEo5
vQNnz0aXVZxidU248HwepXal1aMd7cvsujFVotNkC73MUDZumuVbz3wiqCtcqEee
kXurYBIwjG6n1AG+htNz6GEvcajkStdzVbY7V8Oetcwneqc8uQisMdK1830H06eG
CqIHWC473PO7Slyw84q1L4JzvLCTW6FMjAcW5geZsE1vA4i9FM7CF7jcL0YGA7uQ
IsH3yXLnyrZSsIbXOi3ogM/qeE9jn/khaRLO1Jlnx2qkJ8+Da4Ux4sw7UI9caIvU
q5CbvR6lr4i2tTo8oUrLHo43961jwn2UH5IBd3vCa0o5dDzT2RBWp6bZ0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCw8aCmPUaT+IAjXwXfSzaHIRu8CMB8GA1UdIwQY
MBaAFNo2QF1t9f1MccmOGkWx8W80tDFMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmpaQVhXMzFfVXh4eVk0YVJiSHhielMwTVV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS8zZGNhNGMtMjliMi00M2U5LTg4ZWMt
OThiOWQwN2RiNzk3LzEvMmpaQVhXMzFfVXh4eVk0YVJiSHhielMwTVV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS8zZGNhNGMtMjliMi00M2U5LTg4ZWMtOThiOWQwN2RiNzk3
LzEvMmpaQVhXMzFfVXh4eVk0YVJiSHhielMwTVV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU/L2qEqp
VHFHWiazHzNupcxuqoTg28RJIio+KYsXWt41rG2ATb9owJavXTOu0/br7RnAqSAt
6ShurOlTgYtVoVXaSOVskJgpabBeUNm9VR5DYQfRQ0oA+KSgMnZkJxVvOQlR1iy+
JvJAMd/IJUip16FZ5pPWm0Xr/DiD6qzHF5KjfaJMmsVirpFVC9jpF/EA8r2alKdX
UhCgqOKnLcBT7FZVEntJQtJQwa5W6bRcrM2I+coROiZSmptVSTEx3wWS4BSiy9U2
u4kKLQLvu/ACzRObdW1cUEoC5hnKgHset8vyTEI+oDC2PcdzaDbWzyBeD7qftq6/
eh38RNrB4Jrcjg==
-----END CERTIFICATE-----