Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/5d7efb-0c30-431b-a1b5-7e6b47bd5ead/1/CNM1g7JXIZUvaRDOokthWtdn5UE.mft
File:                     CNM1g7JXIZUvaRDOokthWtdn5UE.mft (raw, json)
Hash identifier:          scpbJCfTa64EtcstMQRou+zGzEDhJrAquNe+yI41YIc=
Subject key identifier:   D8:22:D1:2C:A3:BB:5D:EF:65:D4:A2:BC:FA:92:88:A9:48:C8:17:70
Authority key identifier: 08:D3:35:83:B2:57:21:95:2F:69:10:CE:A2:4B:61:5A:D7:67:E5:41
Certificate issuer:       /CN=08d33583b25721952f6910cea24b615ad767e541
Certificate serial:       018D53CEE4C5405D14B6A8278F1C3D61FDFC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CNM1g7JXIZUvaRDOokthWtdn5UE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/5d7efb-0c30-431b-a1b5-7e6b47bd5ead/1/CNM1g7JXIZUvaRDOokthWtdn5UE.mft
Manifest number:          0E1B
Signing time:             Mon 29 Jan 2024 06:01:24 +0000
Manifest this update:     Mon 29 Jan 2024 06:01:24 +0000
Manifest next update:     Tue 30 Jan 2024 06:01:24 +0000
Files and hashes:         1: CNM1g7JXIZUvaRDOokthWtdn5UE.crl (hash: ktQQE4/B0C282UC9RbO5mCV22JHku02znn0ThCUeqAE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:53:ce:e4:c5:40:5d:14:b6:a8:27:8f:1c:3d:61:fd:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08d33583b25721952f6910cea24b615ad767e541
        Validity
            Not Before: Jan 29 06:01:24 2024 GMT
            Not After : Jan 30 06:01:24 2024 GMT
        Subject: CN=d822d12ca3bb5def65d4a2bcfa9288a948c81770
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c7:b6:ab:98:fe:2d:24:ce:00:a5:db:00:d3:
                    ed:cf:8a:b8:28:15:50:69:b4:3c:c4:9e:0d:6b:0e:
                    73:e3:20:e8:bf:5e:dc:45:b1:53:34:5d:f5:fb:ba:
                    9f:d4:d8:c8:ea:14:21:50:bb:b4:a0:2c:20:11:b4:
                    41:8f:a3:9b:dd:a1:60:71:18:d0:06:a1:ec:2c:7a:
                    98:71:b6:43:93:b0:74:3c:04:91:a6:e0:36:ec:fd:
                    49:c6:41:1c:de:d6:47:01:96:ce:c8:5a:b4:c4:02:
                    be:c4:44:6a:78:6c:12:15:49:d5:4d:08:0e:5e:a2:
                    d2:7b:73:90:25:c3:3f:1c:c0:22:5a:49:4f:ac:4e:
                    52:c3:f0:33:40:ea:12:f2:0d:6e:4e:ce:b5:71:8a:
                    44:0b:b2:94:d9:6a:68:2a:33:06:70:cf:b2:f4:e8:
                    5c:95:ea:f5:43:4d:e7:9b:54:ba:f7:cb:b1:b7:8b:
                    b6:de:44:67:f5:9b:6d:7d:5c:dd:22:42:d7:9c:69:
                    09:14:f5:8b:11:02:36:b9:87:6f:c8:bf:27:62:a7:
                    e7:1b:5c:70:73:43:b8:ce:c1:b9:da:1a:1d:9b:b6:
                    63:27:16:6b:58:46:4f:25:ea:d1:aa:0a:96:09:f7:
                    30:02:52:3e:50:a7:56:42:c4:46:55:48:bc:31:32:
                    d2:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:22:D1:2C:A3:BB:5D:EF:65:D4:A2:BC:FA:92:88:A9:48:C8:17:70
            X509v3 Authority Key Identifier:
                keyid:08:D3:35:83:B2:57:21:95:2F:69:10:CE:A2:4B:61:5A:D7:67:E5:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNM1g7JXIZUvaRDOokthWtdn5UE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5d7efb-0c30-431b-a1b5-7e6b47bd5ead/1/CNM1g7JXIZUvaRDOokthWtdn5UE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5d7efb-0c30-431b-a1b5-7e6b47bd5ead/1/CNM1g7JXIZUvaRDOokthWtdn5UE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:b1:6e:cd:f2:2c:ba:05:81:78:a2:46:e4:87:de:62:0e:1c:
         68:a4:10:17:0c:ea:15:a5:be:34:21:00:2e:c5:e7:9e:3b:14:
         88:e0:2b:74:2f:78:f4:39:0d:6b:a1:c9:23:29:5a:fc:00:9c:
         59:03:34:7f:b8:7d:ae:96:82:79:85:51:37:55:84:61:df:9a:
         02:2c:fb:e9:89:73:3c:97:38:aa:1b:18:2d:49:01:24:24:02:
         45:5c:4b:57:1d:54:86:77:e4:d4:e5:48:7f:64:5c:06:60:d8:
         ad:5a:d2:3e:7a:86:fa:d1:60:35:ad:b1:83:58:f4:42:5c:04:
         c0:26:8b:0a:af:51:1e:c3:a4:fe:1a:8e:62:4e:ad:fc:9f:35:
         e2:d3:87:70:74:28:a8:cb:ab:9b:df:6d:8f:66:62:07:68:4f:
         bc:09:ba:2d:30:31:bb:e4:be:b2:44:3e:8d:c3:83:fb:6d:4c:
         8c:49:f3:bf:e3:1d:8d:b3:5f:69:a4:d1:fb:2d:36:75:b9:19:
         8f:1d:ea:a1:fd:48:14:aa:82:fb:18:7c:4c:b6:b9:f0:52:34:
         a6:98:80:18:a4:91:29:3a:d9:45:5e:56:38:27:df:7d:7d:6a:
         94:5b:56:51:07:3e:3c:c8:2c:d4:a7:39:e2:bc:e3:53:bd:ad:
         d8:a8:c2:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY1TzuTFQF0Utqgnjxw9Yf38MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ZDMzNTgzYjI1NzIxOTUyZjY5MTBjZWEyNGI2MTVhZDc2
N2U1NDEwHhcNMjQwMTI5MDYwMTI0WhcNMjQwMTMwMDYwMTI0WjAzMTEwLwYDVQQD
EyhkODIyZDEyY2EzYmI1ZGVmNjVkNGEyYmNmYTkyODhhOTQ4YzgxNzcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjce2q5j+LSTOAKXbANPtz4q4KBVQ
abQ8xJ4Naw5z4yDov17cRbFTNF31+7qf1NjI6hQhULu0oCwgEbRBj6Ob3aFgcRjQ
BqHsLHqYcbZDk7B0PASRpuA27P1JxkEc3tZHAZbOyFq0xAK+xERqeGwSFUnVTQgO
XqLSe3OQJcM/HMAiWklPrE5Sw/AzQOoS8g1uTs61cYpEC7KU2WpoKjMGcM+y9Ohc
ler1Q03nm1S698uxt4u23kRn9ZttfVzdIkLXnGkJFPWLEQI2uYdvyL8nYqfnG1xw
c0O4zsG52hodm7ZjJxZrWEZPJerRqgqWCfcwAlI+UKdWQsRGVUi8MTLSewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNgi0Syju13vZdSivPqSiKlIyBdwMB8GA1UdIwQY
MBaAFAjTNYOyVyGVL2kQzqJLYVrXZ+VBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ05NMWc3SlhJWlV2YVJET29rdGhXdGRuNVVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy81ZDdlZmItMGMzMC00MzFiLWExYjUt
N2U2YjQ3YmQ1ZWFkLzEvQ05NMWc3SlhJWlV2YVJET29rdGhXdGRuNVVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy81ZDdlZmItMGMzMC00MzFiLWExYjUtN2U2YjQ3YmQ1ZWFk
LzEvQ05NMWc3SlhJWlV2YVJET29rdGhXdGRuNVVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAbFuzfIs
ugWBeKJG5IfeYg4caKQQFwzqFaW+NCEALsXnnjsUiOArdC949DkNa6HJIyla/ACc
WQM0f7h9rpaCeYVRN1WEYd+aAiz76YlzPJc4qhsYLUkBJCQCRVxLVx1Uhnfk1OVI
f2RcBmDYrVrSPnqG+tFgNa2xg1j0QlwEwCaLCq9RHsOk/hqOYk6t/J814tOHcHQo
qMurm99tj2ZiB2hPvAm6LTAxu+S+skQ+jcOD+21MjEnzv+MdjbNfaaTR+y02dbkZ
jx3qof1IFKqC+xh8TLa58FI0ppiAGKSRKTrZRV5WOCfffX1qlFtWUQc+PMgs1Kc5
4rzjU72t2KjCZg==
-----END CERTIFICATE-----