Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/1c3b20-c966-4840-8be2-2e10a1e7198e/1/kSQtl2m3WTScgBjJCHNuVN_8DLU.mft
File:                     kSQtl2m3WTScgBjJCHNuVN_8DLU.mft (raw, json)
Hash identifier:          4LSiVTlTbnorZQcbgBQjzJ8mBm3EJ5UEXcF6fvHFCMI=
Subject key identifier:   D9:D8:CC:D4:2A:2A:DD:E2:7A:A6:73:E3:45:19:BB:C8:AB:8F:92:DA
Authority key identifier: 91:24:2D:97:69:B7:59:34:9C:80:18:C9:08:73:6E:54:DF:FC:0C:B5
Certificate issuer:       /CN=91242d9769b759349c8018c908736e54dffc0cb5
Certificate serial:       0189D484964E86E722DBBBF3EB6E7155BADA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kSQtl2m3WTScgBjJCHNuVN_8DLU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/1c3b20-c966-4840-8be2-2e10a1e7198e/1/kSQtl2m3WTScgBjJCHNuVN_8DLU.mft
Manifest number:          0854
Signing time:             Tue 08 Aug 2023 09:40:06 +0000
Manifest this update:     Tue 08 Aug 2023 09:40:06 +0000
Manifest next update:     Wed 09 Aug 2023 09:40:06 +0000
Files and hashes:         1: 0-SITXurrvKcxDpO6dO_XrAIfP8.roa (hash: +zqoCflNYn4wEmoLJUGKEliu1gA8EIuMdK6taXERgxk=)
                          2: kSQtl2m3WTScgBjJCHNuVN_8DLU.crl (hash: g4+wMbEUDe3EQETGipscB4JiyuBVgdtR1Z15JFSYYc8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:d4:84:96:4e:86:e7:22:db:bb:f3:eb:6e:71:55:ba:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91242d9769b759349c8018c908736e54dffc0cb5
        Validity
            Not Before: Aug  8 09:40:06 2023 GMT
            Not After : Aug  9 09:40:06 2023 GMT
        Subject: CN=d9d8ccd42a2adde27aa673e34519bbc8ab8f92da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b1:d7:7b:56:19:bc:b5:a1:39:46:3e:14:09:
                    7e:6d:4a:be:5d:8d:9b:15:06:34:ea:a3:ab:e3:77:
                    95:a2:95:8d:d1:e9:b6:d0:25:4e:fc:13:0d:de:08:
                    0c:9b:c5:97:95:d8:a7:90:e0:ce:e0:63:80:87:93:
                    89:7d:d1:06:1c:b8:46:9d:92:64:f7:e3:d0:30:88:
                    eb:4f:d2:05:58:e2:dd:33:7c:57:b6:23:ce:17:c0:
                    ab:58:20:3b:d9:4e:1d:3e:75:e9:5b:74:2e:99:1b:
                    98:05:39:0c:c9:45:a9:5b:b1:5e:c9:ed:44:1b:ea:
                    4d:a1:28:83:e7:97:da:44:81:9f:25:95:02:cc:ae:
                    30:24:b2:10:c3:0e:d9:e7:b1:78:ef:25:2d:5a:75:
                    d4:2a:59:d6:7e:14:60:67:17:0e:37:6b:35:6b:43:
                    a5:df:85:0d:cf:b4:2e:7b:69:e1:e9:db:56:fb:67:
                    24:dd:f3:92:d9:df:d7:d7:09:a4:79:a2:57:39:cc:
                    1d:86:6b:fe:04:95:90:ca:9b:a3:d6:66:b7:9c:e2:
                    62:8c:6f:d8:4e:b0:7b:0d:97:4f:f7:20:f5:38:6e:
                    d6:94:5b:eb:6b:06:d3:a7:50:cc:fc:0d:c3:b5:92:
                    67:c7:69:19:53:6d:c8:74:c6:1f:2a:9a:85:f2:f0:
                    e7:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:D8:CC:D4:2A:2A:DD:E2:7A:A6:73:E3:45:19:BB:C8:AB:8F:92:DA
            X509v3 Authority Key Identifier:
                keyid:91:24:2D:97:69:B7:59:34:9C:80:18:C9:08:73:6E:54:DF:FC:0C:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kSQtl2m3WTScgBjJCHNuVN_8DLU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/1c3b20-c966-4840-8be2-2e10a1e7198e/1/kSQtl2m3WTScgBjJCHNuVN_8DLU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/1c3b20-c966-4840-8be2-2e10a1e7198e/1/kSQtl2m3WTScgBjJCHNuVN_8DLU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:aa:b2:48:b2:62:36:15:78:64:29:48:af:c6:8a:41:f4:ef:
         b4:5f:c6:5a:b4:3c:cb:7c:2f:47:58:4c:98:90:57:27:e7:72:
         f0:8d:ed:55:9f:0e:80:0a:58:28:a2:39:c1:fd:f6:90:26:1e:
         15:e1:4d:21:52:2e:04:76:3c:63:d4:a8:fb:92:34:e3:db:e1:
         0e:84:06:34:8e:92:69:51:a5:5d:f5:ae:a4:44:70:a6:fd:ea:
         a9:00:e1:e6:ca:7d:e3:0d:ff:08:cb:ae:43:72:34:69:95:dd:
         95:82:cc:a4:af:aa:4f:5a:c2:f9:c3:c3:11:dc:16:c5:c4:da:
         18:42:87:e2:27:19:f2:8e:18:cd:0d:2b:dd:d7:13:ed:b2:53:
         40:4c:a9:2b:6e:fe:21:5f:f2:8e:1e:b1:8b:e5:dc:3e:dc:e8:
         88:5e:ab:22:26:de:13:b1:f4:d4:a5:3f:04:33:b1:52:e7:57:
         f9:56:c0:1a:03:28:df:c1:39:22:5d:1d:3d:bb:f1:a1:b0:b0:
         d6:22:d8:e6:7f:58:f7:3e:28:4d:07:49:90:bc:a2:8f:3c:f9:
         4b:4a:31:13:98:8c:af:9c:c0:5b:dc:dc:c5:56:a7:84:9c:b2:
         df:ff:e1:8e:7b:d1:f4:cd:14:66:fb:d0:4e:ca:d2:a6:a3:c5:
         03:5f:6e:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYnUhJZOhuci27vz625xVbraMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxMjQyZDk3NjliNzU5MzQ5YzgwMThjOTA4NzM2ZTU0ZGZm
YzBjYjUwHhcNMjMwODA4MDk0MDA2WhcNMjMwODA5MDk0MDA2WjAzMTEwLwYDVQQD
EyhkOWQ4Y2NkNDJhMmFkZGUyN2FhNjczZTM0NTE5YmJjOGFiOGY5MmRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbHXe1YZvLWhOUY+FAl+bUq+XY2b
FQY06qOr43eVopWN0em20CVO/BMN3ggMm8WXldinkODO4GOAh5OJfdEGHLhGnZJk
9+PQMIjrT9IFWOLdM3xXtiPOF8CrWCA72U4dPnXpW3QumRuYBTkMyUWpW7Feye1E
G+pNoSiD55faRIGfJZUCzK4wJLIQww7Z57F47yUtWnXUKlnWfhRgZxcON2s1a0Ol
34UNz7Que2nh6dtW+2ck3fOS2d/X1wmkeaJXOcwdhmv+BJWQypuj1ma3nOJijG/Y
TrB7DZdP9yD1OG7WlFvrawbTp1DM/A3DtZJnx2kZU23IdMYfKpqF8vDnYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNnYzNQqKt3ieqZz40UZu8irj5LaMB8GA1UdIwQY
MBaAFJEkLZdpt1k0nIAYyQhzblTf/Ay1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1NRdGwybTNXVFNjZ0JqSkNITnVWTl84RExVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8xYzNiMjAtYzk2Ni00ODQwLThiZTIt
MmUxMGExZTcxOThlLzEva1NRdGwybTNXVFNjZ0JqSkNITnVWTl84RExVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS8xYzNiMjAtYzk2Ni00ODQwLThiZTItMmUxMGExZTcxOThl
LzEva1NRdGwybTNXVFNjZ0JqSkNITnVWTl84RExVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHKqySLJi
NhV4ZClIr8aKQfTvtF/GWrQ8y3wvR1hMmJBXJ+dy8I3tVZ8OgApYKKI5wf32kCYe
FeFNIVIuBHY8Y9So+5I049vhDoQGNI6SaVGlXfWupERwpv3qqQDh5sp94w3/CMuu
Q3I0aZXdlYLMpK+qT1rC+cPDEdwWxcTaGEKH4icZ8o4YzQ0r3dcT7bJTQEypK27+
IV/yjh6xi+XcPtzoiF6rIibeE7H01KU/BDOxUudX+VbAGgMo38E5Il0dPbvxobCw
1iLY5n9Y9z4oTQdJkLyijzz5S0oxE5iMr5zAW9zcxVanhJyy3//hjnvR9M0UZvvQ
TsrSpqPFA19uyA==
-----END CERTIFICATE-----
Generated at Tue Aug 8 12:00:43 2023 by rpki-client on console-fra.rpki-client.org