Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/b5449a-9fc7-4992-a5fc-44643970c8dd/1/ScY52GRhcBFyyc6oGUeRBCTXGs4.mft
File:                     ScY52GRhcBFyyc6oGUeRBCTXGs4.mft (raw, json)
Hash identifier:          Y+Ojx14OXMfQ/+pRj8rZJKbU2uD2NLxi3Di7fyx/he0=
Subject key identifier:   18:F9:4E:52:E8:95:08:E7:77:9E:9F:9C:10:F6:84:EA:43:E6:BC:96
Authority key identifier: 49:C6:39:D8:64:61:70:11:72:C9:CE:A8:19:47:91:04:24:D7:1A:CE
Certificate issuer:       /CN=49c639d86461701172c9cea81947910424d71ace
Certificate serial:       018AB6C1D99D37C4FACEB3A55DAE3227128C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ScY52GRhcBFyyc6oGUeRBCTXGs4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/b5449a-9fc7-4992-a5fc-44643970c8dd/1/ScY52GRhcBFyyc6oGUeRBCTXGs4.mft
Manifest number:          08CD
Signing time:             Thu 21 Sep 2023 08:01:11 +0000
Manifest this update:     Thu 21 Sep 2023 08:01:11 +0000
Manifest next update:     Fri 22 Sep 2023 08:01:11 +0000
Files and hashes:         1: ScY52GRhcBFyyc6oGUeRBCTXGs4.crl (hash: 0NyZ/zyzX9yqKYB+b1/xwIweV/fP8iT7xc5qMCHg99Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:b6:c1:d9:9d:37:c4:fa:ce:b3:a5:5d:ae:32:27:12:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49c639d86461701172c9cea81947910424d71ace
        Validity
            Not Before: Sep 21 08:01:11 2023 GMT
            Not After : Sep 22 08:01:11 2023 GMT
        Subject: CN=18f94e52e89508e7779e9f9c10f684ea43e6bc96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:49:c5:43:4c:39:98:e5:22:26:0d:42:84:a5:
                    72:26:1d:60:03:99:0d:59:0d:e1:fc:5a:01:11:1c:
                    f4:ab:6f:96:50:46:39:98:9c:e2:35:d8:48:38:3e:
                    7f:52:ee:bf:0a:5f:c4:76:a6:31:20:70:42:16:57:
                    74:88:cc:07:a2:13:d0:5a:7b:2e:5b:51:cb:11:f4:
                    17:85:83:a7:ab:8f:cb:36:80:0c:d4:88:0e:f1:e3:
                    1e:8e:39:05:35:28:a1:10:7a:ab:bc:65:ff:d8:d2:
                    16:3f:9e:bd:59:df:b6:6e:05:10:e5:5a:04:d3:ad:
                    f5:f2:2e:58:73:23:51:dd:7a:b8:32:74:6d:6f:e5:
                    1e:dd:7c:42:42:6f:ff:c9:f2:b0:84:aa:99:5e:da:
                    bb:e7:77:cf:ee:f9:0b:af:5d:d3:83:58:de:6a:b5:
                    bc:ab:a1:aa:80:c2:84:55:fd:f1:a5:a2:cc:cc:9b:
                    d6:66:54:da:f0:9f:85:1e:b5:42:00:ff:75:a0:c4:
                    d6:eb:f9:5e:89:5d:8d:55:de:46:b6:16:cb:76:f7:
                    d1:78:21:80:77:1b:2e:86:11:08:18:5d:9f:5c:98:
                    45:e2:ca:e6:17:7e:54:69:6c:e3:04:c9:bb:bd:40:
                    7d:ea:2a:e7:24:6b:e6:a7:93:d6:24:73:3f:89:2c:
                    fd:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:F9:4E:52:E8:95:08:E7:77:9E:9F:9C:10:F6:84:EA:43:E6:BC:96
            X509v3 Authority Key Identifier:
                keyid:49:C6:39:D8:64:61:70:11:72:C9:CE:A8:19:47:91:04:24:D7:1A:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ScY52GRhcBFyyc6oGUeRBCTXGs4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/b5449a-9fc7-4992-a5fc-44643970c8dd/1/ScY52GRhcBFyyc6oGUeRBCTXGs4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/b5449a-9fc7-4992-a5fc-44643970c8dd/1/ScY52GRhcBFyyc6oGUeRBCTXGs4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:76:f9:81:6c:33:f7:13:2c:92:e5:5c:df:95:a5:bd:5d:63:
         c6:62:57:c3:55:a8:1d:27:19:05:32:be:55:52:eb:da:02:e8:
         6b:e1:93:ee:39:f7:18:60:7a:18:62:52:dd:d4:43:dd:4a:42:
         80:87:5d:05:f4:07:c8:c6:0a:45:d5:07:c3:a4:66:7d:56:e8:
         19:e9:89:31:d8:d3:c6:ed:a2:87:60:db:63:00:8a:71:7d:00:
         22:69:30:73:27:f8:a5:a7:53:9a:03:ee:90:07:06:00:e5:56:
         38:82:75:5a:54:8d:d9:93:14:5e:df:69:b9:f8:4f:42:5a:6b:
         b5:fe:47:72:98:71:31:2d:b0:a2:f3:08:b1:3c:bc:f2:b3:09:
         b7:9c:b5:42:8b:96:78:a6:9e:24:4f:02:13:ff:6c:2a:64:d1:
         93:e3:b0:f7:38:e3:f5:1e:06:09:75:53:f1:cc:f1:85:8c:a2:
         f0:46:09:ed:59:d7:54:4e:01:97:32:b1:2b:ca:cd:91:5e:9f:
         57:73:84:c6:37:ed:47:62:51:8d:cd:a1:f8:d5:81:11:0a:dc:
         ec:ea:38:d4:ec:00:f4:b7:52:11:93:be:a3:dc:dd:40:e5:be:
         60:03:dc:fe:92:24:e2:57:46:8f:b0:01:9e:33:d7:52:7f:55:
         ad:5c:18:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYq2wdmdN8T6zrOlXa4yJxKMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5YzYzOWQ4NjQ2MTcwMTE3MmM5Y2VhODE5NDc5MTA0MjRk
NzFhY2UwHhcNMjMwOTIxMDgwMTExWhcNMjMwOTIyMDgwMTExWjAzMTEwLwYDVQQD
EygxOGY5NGU1MmU4OTUwOGU3Nzc5ZTlmOWMxMGY2ODRlYTQzZTZiYzk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEnFQ0w5mOUiJg1ChKVyJh1gA5kN
WQ3h/FoBERz0q2+WUEY5mJziNdhIOD5/Uu6/Cl/EdqYxIHBCFld0iMwHohPQWnsu
W1HLEfQXhYOnq4/LNoAM1IgO8eMejjkFNSihEHqrvGX/2NIWP569Wd+2bgUQ5VoE
06318i5YcyNR3Xq4MnRtb+Ue3XxCQm//yfKwhKqZXtq753fP7vkLr13Tg1jearW8
q6GqgMKEVf3xpaLMzJvWZlTa8J+FHrVCAP91oMTW6/leiV2NVd5GthbLdvfReCGA
dxsuhhEIGF2fXJhF4srmF35UaWzjBMm7vUB96irnJGvmp5PWJHM/iSz9LQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBj5TlLolQjnd56fnBD2hOpD5ryWMB8GA1UdIwQY
MBaAFEnGOdhkYXARcsnOqBlHkQQk1xrOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2NZNTJHUmhjQkZ5eWM2b0dVZVJCQ1RYR3M0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9iNTQ0OWEtOWZjNy00OTkyLWE1ZmMt
NDQ2NDM5NzBjOGRkLzEvU2NZNTJHUmhjQkZ5eWM2b0dVZVJCQ1RYR3M0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9iNTQ0OWEtOWZjNy00OTkyLWE1ZmMtNDQ2NDM5NzBjOGRk
LzEvU2NZNTJHUmhjQkZ5eWM2b0dVZVJCQ1RYR3M0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQHb5gWwz
9xMskuVc35WlvV1jxmJXw1WoHScZBTK+VVLr2gLoa+GT7jn3GGB6GGJS3dRD3UpC
gIddBfQHyMYKRdUHw6RmfVboGemJMdjTxu2ih2DbYwCKcX0AImkwcyf4padTmgPu
kAcGAOVWOIJ1WlSN2ZMUXt9pufhPQlprtf5HcphxMS2wovMIsTy88rMJt5y1QouW
eKaeJE8CE/9sKmTRk+Ow9zjj9R4GCXVT8czxhYyi8EYJ7VnXVE4BlzKxK8rNkV6f
V3OExjftR2JRjc2h+NWBEQrc7Oo41OwA9LdSEZO+o9zdQOW+YAPc/pIk4ldGj7AB
njPXUn9VrVwY6Q==
-----END CERTIFICATE-----