Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/ca5e44-080e-4140-89a1-bfed0092f86a/1/mf6pcXwoDsh5M1Jz8CLmsFN0VcI.mft
File:                     mf6pcXwoDsh5M1Jz8CLmsFN0VcI.mft (raw, json)
Hash identifier:          iLcDKH6KUyrV0Zj/T8uXinZcOaz5TtvzO1+chDpGAcM=
Subject key identifier:   54:63:66:FF:F1:7F:01:D8:BD:86:43:C9:36:86:61:27:86:2F:70:6F
Authority key identifier: 99:FE:A9:71:7C:28:0E:C8:79:33:52:73:F0:22:E6:B0:53:74:55:C2
Certificate issuer:       /CN=99fea9717c280ec879335273f022e6b0537455c2
Certificate serial:       018F28A8471AD240505B2A57DA2D6504F500
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mf6pcXwoDsh5M1Jz8CLmsFN0VcI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/ca5e44-080e-4140-89a1-bfed0092f86a/1/mf6pcXwoDsh5M1Jz8CLmsFN0VcI.mft
Manifest number:          08B4
Signing time:             Mon 29 Apr 2024 07:01:07 +0000
Manifest this update:     Mon 29 Apr 2024 07:01:07 +0000
Manifest next update:     Tue 30 Apr 2024 07:01:07 +0000
Files and hashes:         1: 22Z3OoQxu-JnD2GI6nNxrQivc7U.roa (hash: M6ZzE4dRFCOlL9FEtII06ZThOG5APbOupjnlCNFzkpA=)
                          2: _DVBe-OdPran1Y-siZ1Uq3PXSWo.roa (hash: cgxpi4K8znpv+DSk38q2vqUXFfJemIYTrNkOQOH8pUs=)
                          3: mf6pcXwoDsh5M1Jz8CLmsFN0VcI.crl (hash: If6AyQ6PtKvszaNa3InA266jhgOTOZb90hlaRF1I0cg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:28:a8:47:1a:d2:40:50:5b:2a:57:da:2d:65:04:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99fea9717c280ec879335273f022e6b0537455c2
        Validity
            Not Before: Apr 29 07:01:07 2024 GMT
            Not After : Apr 30 07:01:07 2024 GMT
        Subject: CN=546366fff17f01d8bd8643c936866127862f706f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ce:a9:a6:e8:93:bd:0b:21:5a:0d:da:e5:67:
                    9b:2f:81:27:d3:24:1f:d4:a9:d5:0c:b8:d0:35:5b:
                    af:82:a5:f0:af:21:f9:78:0a:dc:4d:35:35:83:79:
                    6f:03:e6:c5:a6:ce:59:bf:bf:35:ed:45:85:4e:f8:
                    2e:4e:c9:80:c2:47:b5:e9:51:1c:3f:e1:50:76:54:
                    02:10:da:15:63:4b:6f:d1:86:b0:82:b3:69:c3:cd:
                    ba:74:f9:ba:cb:20:db:a4:1b:e3:a2:76:cc:24:0c:
                    7f:29:81:8a:6e:70:95:44:9b:4b:c5:cf:6a:fb:35:
                    03:ba:a7:85:c4:9a:7b:5b:4d:3b:0f:73:e4:0a:6a:
                    7b:06:cb:19:de:69:0d:98:99:b5:6c:f3:d3:72:7e:
                    24:3f:90:4f:0a:a8:12:53:db:8d:ce:f2:9f:c3:9e:
                    27:88:0a:1e:83:2b:6c:30:e1:3d:a2:82:ec:aa:0e:
                    81:c3:b2:55:f4:47:79:18:89:69:eb:1d:a9:a4:1b:
                    8b:16:a3:eb:74:d1:0c:cf:3b:4b:f3:a3:21:7a:ae:
                    95:7a:73:e5:4a:2c:5b:68:af:c0:8d:fb:cd:09:b3:
                    11:a7:88:17:d1:14:c2:54:c7:1b:f9:cf:00:0f:08:
                    a0:83:bd:10:4b:3a:c3:63:20:03:f7:44:80:0f:e4:
                    76:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:63:66:FF:F1:7F:01:D8:BD:86:43:C9:36:86:61:27:86:2F:70:6F
            X509v3 Authority Key Identifier:
                keyid:99:FE:A9:71:7C:28:0E:C8:79:33:52:73:F0:22:E6:B0:53:74:55:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mf6pcXwoDsh5M1Jz8CLmsFN0VcI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/ca5e44-080e-4140-89a1-bfed0092f86a/1/mf6pcXwoDsh5M1Jz8CLmsFN0VcI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/ca5e44-080e-4140-89a1-bfed0092f86a/1/mf6pcXwoDsh5M1Jz8CLmsFN0VcI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:68:cb:2a:bf:94:11:fd:12:ad:1d:3e:17:f7:18:9e:ed:44:
         e4:13:a5:4f:99:3f:a6:b7:f9:b0:df:79:4b:ce:1d:b4:d2:8e:
         ae:9e:69:4a:ec:9c:24:06:45:0c:80:88:86:47:69:b6:df:f8:
         d8:49:2a:ca:a4:d7:d7:bb:17:41:75:63:d1:91:49:44:84:9b:
         95:db:63:ef:e8:81:d9:ef:ac:59:be:7f:f2:44:e1:ca:d3:da:
         c1:4c:0b:15:37:bd:f1:05:a2:fc:bb:64:90:b0:e0:9d:48:bf:
         ff:7c:b5:4a:53:67:e4:fb:ce:be:bd:91:7e:0c:b8:e9:ef:17:
         8c:c7:46:46:40:0f:06:84:db:53:03:1b:df:dd:e6:00:9e:b3:
         2c:a5:fa:44:47:b7:02:61:a8:23:e7:43:e5:ad:e9:0e:5f:4e:
         86:e9:58:22:32:60:b0:6e:5d:28:4c:9b:f5:61:3f:32:99:63:
         02:d6:c7:37:5c:f3:17:8b:b3:08:e0:aa:88:59:21:f8:79:92:
         ce:da:9a:2d:26:4b:c8:d4:15:8f:2b:45:27:dc:09:87:8e:e1:
         21:dc:10:3b:ca:0b:de:a5:95:8e:ca:09:d8:27:85:4c:1c:6d:
         8b:2d:55:10:47:1d:aa:da:b4:f5:8e:df:05:88:c8:86:5b:94:
         b7:09:12:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY8oqEca0kBQWypX2i1lBPUAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5ZmVhOTcxN2MyODBlYzg3OTMzNTI3M2YwMjJlNmIwNTM3
NDU1YzIwHhcNMjQwNDI5MDcwMTA3WhcNMjQwNDMwMDcwMTA3WjAzMTEwLwYDVQQD
Eyg1NDYzNjZmZmYxN2YwMWQ4YmQ4NjQzYzkzNjg2NjEyNzg2MmY3MDZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj86ppuiTvQshWg3a5WebL4En0yQf
1KnVDLjQNVuvgqXwryH5eArcTTU1g3lvA+bFps5Zv7817UWFTvguTsmAwke16VEc
P+FQdlQCENoVY0tv0YawgrNpw826dPm6yyDbpBvjonbMJAx/KYGKbnCVRJtLxc9q
+zUDuqeFxJp7W007D3PkCmp7BssZ3mkNmJm1bPPTcn4kP5BPCqgSU9uNzvKfw54n
iAoegytsMOE9ooLsqg6Bw7JV9Ed5GIlp6x2ppBuLFqPrdNEMzztL86Mheq6VenPl
SixbaK/AjfvNCbMRp4gX0RTCVMcb+c8ADwigg70QSzrDYyAD90SAD+R2JQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFRjZv/xfwHYvYZDyTaGYSeGL3BvMB8GA1UdIwQY
MBaAFJn+qXF8KA7IeTNSc/Ai5rBTdFXCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWY2cGNYd29Ec2g1TTFKejhDTG1zRk4wVmNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9jYTVlNDQtMDgwZS00MTQwLTg5YTEt
YmZlZDAwOTJmODZhLzEvbWY2cGNYd29Ec2g1TTFKejhDTG1zRk4wVmNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9jYTVlNDQtMDgwZS00MTQwLTg5YTEtYmZlZDAwOTJmODZh
LzEvbWY2cGNYd29Ec2g1TTFKejhDTG1zRk4wVmNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACGjLKr+U
Ef0SrR0+F/cYnu1E5BOlT5k/prf5sN95S84dtNKOrp5pSuycJAZFDICIhkdptt/4
2EkqyqTX17sXQXVj0ZFJRISbldtj7+iB2e+sWb5/8kThytPawUwLFTe98QWi/Ltk
kLDgnUi//3y1SlNn5PvOvr2Rfgy46e8XjMdGRkAPBoTbUwMb393mAJ6zLKX6REe3
AmGoI+dD5a3pDl9OhulYIjJgsG5dKEyb9WE/MpljAtbHN1zzF4uzCOCqiFkh+HmS
ztqaLSZLyNQVjytFJ9wJh47hIdwQO8oL3qWVjsoJ2CeFTBxtiy1VEEcdqtq09Y7f
BYjIhluUtwkS/A==
-----END CERTIFICATE-----