Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/73c301-2a54-4ec6-85d1-7e6258e0f77f/1/3GebKCY67XLzPHZYcv4ptrlAdbc.mft
File:                     3GebKCY67XLzPHZYcv4ptrlAdbc.mft (raw, json)
Hash identifier:          PaINhxQQTldLUbrq2UPry7Ku4GulcKoiUQiHsw4G0OE=
Subject key identifier:   DC:37:B6:80:DD:C6:4E:2E:54:CD:55:C3:31:76:82:0D:28:72:9C:A9
Authority key identifier: DC:67:9B:28:26:3A:ED:72:F3:3C:76:58:72:FE:29:B6:B9:40:75:B7
Certificate issuer:       /CN=dc679b28263aed72f33c765872fe29b6b94075b7
Certificate serial:       018BF52FC3949303B5802773FB31B01AD918
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3GebKCY67XLzPHZYcv4ptrlAdbc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/73c301-2a54-4ec6-85d1-7e6258e0f77f/1/3GebKCY67XLzPHZYcv4ptrlAdbc.mft
Manifest number:          0841
Signing time:             Wed 22 Nov 2023 04:00:29 +0000
Manifest this update:     Wed 22 Nov 2023 04:00:29 +0000
Manifest next update:     Thu 23 Nov 2023 04:00:29 +0000
Files and hashes:         1: 3GebKCY67XLzPHZYcv4ptrlAdbc.crl (hash: aOY/g5RCm+bODimnOJb8oZYf+6dKXg7Blojfl0PaQE4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:f5:2f:c3:94:93:03:b5:80:27:73:fb:31:b0:1a:d9:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc679b28263aed72f33c765872fe29b6b94075b7
        Validity
            Not Before: Nov 22 04:00:29 2023 GMT
            Not After : Nov 23 04:00:29 2023 GMT
        Subject: CN=dc37b680ddc64e2e54cd55c33176820d28729ca9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:33:5c:1c:a4:94:80:76:81:67:d9:f3:d6:b5:
                    04:2c:78:5e:2a:76:f7:5e:87:2d:d0:90:54:fb:9d:
                    98:bf:5e:dc:50:bb:86:be:99:d3:27:17:53:97:39:
                    fd:b4:d9:0d:fc:c4:95:ac:d2:75:ae:8e:e3:b9:6e:
                    3f:b2:26:95:15:6f:a7:14:b7:88:87:6b:7b:89:cf:
                    fb:ce:10:95:73:65:0c:17:6e:e8:6c:77:ac:7b:de:
                    75:f8:08:79:71:6d:7e:9f:15:d4:7e:d3:62:7f:fc:
                    4a:d1:c0:aa:34:51:f6:dc:4c:78:22:8c:d8:1a:c2:
                    98:de:44:7d:87:0d:89:2c:fd:82:89:0d:27:fc:f7:
                    e0:97:b1:08:27:cf:1c:f0:5f:8f:ee:e2:74:83:b9:
                    de:71:f4:71:c0:98:50:8c:28:74:8a:2b:f7:1f:0f:
                    ef:b4:fd:a2:d6:f2:fd:f0:80:cd:d9:6a:c2:46:df:
                    c5:6d:85:36:c5:52:28:3a:31:ea:f8:12:a6:a0:08:
                    ce:fb:61:39:b3:5b:da:8d:4e:cb:a5:75:49:30:63:
                    b0:e9:70:93:8a:ef:fc:b3:6e:2e:7d:4c:2e:0e:ca:
                    80:c5:4c:7e:fc:c8:76:f7:90:cf:6d:8c:8f:cd:06:
                    76:2c:01:dc:e0:4b:13:f1:0e:ba:d4:74:56:c1:d0:
                    0d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:37:B6:80:DD:C6:4E:2E:54:CD:55:C3:31:76:82:0D:28:72:9C:A9
            X509v3 Authority Key Identifier:
                keyid:DC:67:9B:28:26:3A:ED:72:F3:3C:76:58:72:FE:29:B6:B9:40:75:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GebKCY67XLzPHZYcv4ptrlAdbc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/73c301-2a54-4ec6-85d1-7e6258e0f77f/1/3GebKCY67XLzPHZYcv4ptrlAdbc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/73c301-2a54-4ec6-85d1-7e6258e0f77f/1/3GebKCY67XLzPHZYcv4ptrlAdbc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:c4:0b:50:80:47:9f:f7:95:cb:ff:19:82:64:66:0b:2f:2c:
         b1:ad:68:60:79:8b:60:42:72:af:1e:bc:40:c0:00:42:79:80:
         68:8d:74:61:bb:93:b0:69:71:5e:ef:56:fc:e1:b4:71:52:14:
         ec:bb:30:c5:51:38:33:da:55:1d:ab:e2:04:eb:0e:bb:fd:27:
         60:62:6c:e9:62:20:b6:44:0a:c3:b8:cc:6d:4f:89:a3:44:d0:
         cf:c6:3b:d1:e7:23:d5:a1:0c:08:98:5a:89:33:57:f1:7a:1b:
         22:56:57:b3:42:a7:f1:32:99:16:f1:28:cc:08:54:c7:94:18:
         64:e7:ab:1c:9a:16:31:fa:2b:d3:c2:da:1c:b0:48:1b:4b:d0:
         25:8f:ba:de:84:3b:7a:ca:e7:c4:21:51:08:06:15:a7:ff:bd:
         74:03:53:b6:13:4f:8c:48:6d:69:03:78:6e:e5:f5:7c:8b:fe:
         75:04:f6:08:5b:24:46:38:41:91:cf:43:e5:e3:a3:82:3e:11:
         74:94:d5:ac:6c:0f:6b:2f:76:c3:b1:e7:fb:3b:92:2e:95:e2:
         e2:76:8e:80:28:85:9e:44:c2:37:14:f1:64:e8:22:40:80:26:
         6f:09:b2:ae:99:1b:f9:62:b3:bf:13:22:ed:42:c0:19:e0:a7:
         c8:47:6b:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYv1L8OUkwO1gCdz+zGwGtkYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjNjc5YjI4MjYzYWVkNzJmMzNjNzY1ODcyZmUyOWI2Yjk0
MDc1YjcwHhcNMjMxMTIyMDQwMDI5WhcNMjMxMTIzMDQwMDI5WjAzMTEwLwYDVQQD
EyhkYzM3YjY4MGRkYzY0ZTJlNTRjZDU1YzMzMTc2ODIwZDI4NzI5Y2E5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzNcHKSUgHaBZ9nz1rUELHheKnb3
Xoct0JBU+52Yv17cULuGvpnTJxdTlzn9tNkN/MSVrNJ1ro7juW4/siaVFW+nFLeI
h2t7ic/7zhCVc2UMF27obHese951+Ah5cW1+nxXUftNif/xK0cCqNFH23Ex4IozY
GsKY3kR9hw2JLP2CiQ0n/Pfgl7EIJ88c8F+P7uJ0g7necfRxwJhQjCh0iiv3Hw/v
tP2i1vL98IDN2WrCRt/FbYU2xVIoOjHq+BKmoAjO+2E5s1vajU7LpXVJMGOw6XCT
iu/8s24ufUwuDsqAxUx+/Mh295DPbYyPzQZ2LAHc4EsT8Q661HRWwdAN2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNw3toDdxk4uVM1VwzF2gg0ocpypMB8GA1UdIwQY
MBaAFNxnmygmOu1y8zx2WHL+Kba5QHW3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0dlYktDWTY3WEx6UEhaWWN2NHB0cmxBZGJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC83M2MzMDEtMmE1NC00ZWM2LTg1ZDEt
N2U2MjU4ZTBmNzdmLzEvM0dlYktDWTY3WEx6UEhaWWN2NHB0cmxBZGJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC83M2MzMDEtMmE1NC00ZWM2LTg1ZDEtN2U2MjU4ZTBmNzdm
LzEvM0dlYktDWTY3WEx6UEhaWWN2NHB0cmxBZGJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATsQLUIBH
n/eVy/8ZgmRmCy8ssa1oYHmLYEJyrx68QMAAQnmAaI10YbuTsGlxXu9W/OG0cVIU
7LswxVE4M9pVHaviBOsOu/0nYGJs6WIgtkQKw7jMbU+Jo0TQz8Y70ecj1aEMCJha
iTNX8XobIlZXs0Kn8TKZFvEozAhUx5QYZOerHJoWMfor08LaHLBIG0vQJY+63oQ7
esrnxCFRCAYVp/+9dANTthNPjEhtaQN4buX1fIv+dQT2CFskRjhBkc9D5eOjgj4R
dJTVrGwPay92w7Hn+zuSLpXi4naOgCiFnkTCNxTxZOgiQIAmbwmyrpkb+WKzvxMi
7ULAGeCnyEdrbg==