Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/96c0dc-f748-49c7-ae5d-0b961d4d2a56/1/1--9qAg19dMLiNfKwi79XLDW98JE.mft
File:                     1--9qAg19dMLiNfKwi79XLDW98JE.mft (raw, json)
Hash identifier:          0XtoFyTghPn6aLPqnN8/TCxBYDXiaRbPMST5UQ9iNKY=
Subject key identifier:   04:9C:D0:9A:3F:45:D6:BE:AE:72:D6:56:53:16:C6:4D:B2:89:CB:68
Authority key identifier: FB:EF:6A:02:0D:7D:74:C2:E2:35:F2:B0:8B:BF:57:2C:35:BD:F0:91
Certificate issuer:       /CN=fbef6a020d7d74c2e235f2b08bbf572c35bdf091
Certificate serial:       018C0F5D5F287767929A5288177A308119FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1--9qAg19dMLiNfKwi79XLDW98JE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/96c0dc-f748-49c7-ae5d-0b961d4d2a56/1/1--9qAg19dMLiNfKwi79XLDW98JE.mft
Manifest number:          0D88
Signing time:             Mon 27 Nov 2023 06:00:26 +0000
Manifest this update:     Mon 27 Nov 2023 06:00:26 +0000
Manifest next update:     Tue 28 Nov 2023 06:00:26 +0000
Files and hashes:         1: 1--9qAg19dMLiNfKwi79XLDW98JE.crl (hash: IVZf/6cjjX61PP3xHXaE8fdxuSaLqymNq5czf0fA1Rw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:0f:5d:5f:28:77:67:92:9a:52:88:17:7a:30:81:19:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbef6a020d7d74c2e235f2b08bbf572c35bdf091
        Validity
            Not Before: Nov 27 06:00:26 2023 GMT
            Not After : Nov 28 06:00:26 2023 GMT
        Subject: CN=049cd09a3f45d6beae72d6565316c64db289cb68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:87:1b:38:f4:fe:4a:4b:6d:e1:3d:4a:a0:e1:
                    d4:02:c1:36:a1:99:b2:4a:ce:3a:a9:f0:48:7c:f5:
                    ae:fb:69:76:26:d5:08:ba:46:2b:7e:54:eb:13:08:
                    32:4a:31:f7:31:cf:ff:2c:d7:2d:14:63:6c:f6:b8:
                    f0:5c:72:36:e9:7d:42:7d:a9:51:1e:fc:e6:33:65:
                    b2:04:5b:b3:4d:75:92:27:63:c8:8b:74:16:b9:2d:
                    0a:03:39:e8:09:de:1b:a6:43:65:0a:00:fa:e0:e8:
                    1e:30:3a:6a:23:0f:92:c7:d4:b0:f9:d2:9e:29:81:
                    56:ae:dc:5f:fb:6e:90:b9:95:2b:f1:3c:85:7a:6a:
                    ad:e5:37:1e:1f:2d:05:8b:20:cf:25:da:ae:9f:5e:
                    8c:b3:90:19:1d:a4:04:33:a2:f7:3f:23:d1:62:bd:
                    a1:b3:1f:89:b5:a5:82:b7:38:eb:a9:1a:16:4f:bc:
                    41:fa:96:c6:27:76:d1:9a:ee:db:6a:6c:3b:2d:56:
                    92:b4:1f:85:a9:ef:54:20:99:f9:04:32:c6:21:c6:
                    99:d6:6d:8e:d3:8a:85:a6:d3:21:f3:67:e9:5a:06:
                    22:96:83:2f:03:0b:51:b2:28:16:9c:fc:ad:6f:44:
                    d7:e5:07:7d:d3:71:9e:dc:ad:e4:78:05:00:4d:da:
                    91:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:9C:D0:9A:3F:45:D6:BE:AE:72:D6:56:53:16:C6:4D:B2:89:CB:68
            X509v3 Authority Key Identifier:
                keyid:FB:EF:6A:02:0D:7D:74:C2:E2:35:F2:B0:8B:BF:57:2C:35:BD:F0:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1--9qAg19dMLiNfKwi79XLDW98JE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/96c0dc-f748-49c7-ae5d-0b961d4d2a56/1/1--9qAg19dMLiNfKwi79XLDW98JE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/96c0dc-f748-49c7-ae5d-0b961d4d2a56/1/1--9qAg19dMLiNfKwi79XLDW98JE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:55:91:17:ea:6e:e5:ee:41:d4:f6:3d:2e:27:f7:91:51:cb:
         d3:ce:5a:27:2b:07:6d:a4:0c:9f:c1:e4:61:21:a4:60:87:85:
         98:c2:25:59:27:04:e8:76:76:88:4b:6a:87:f1:4b:c1:46:cd:
         f8:c9:26:17:13:99:59:3b:e4:e0:31:fc:25:74:80:89:20:3e:
         bb:37:e1:50:57:f3:e4:58:89:dd:72:39:45:ad:84:2c:0f:8a:
         98:f7:50:7c:b4:d8:f6:40:d6:fb:66:93:ef:f8:1b:6d:37:b4:
         34:74:aa:47:9e:94:57:57:59:60:35:0c:f7:67:56:94:ff:d3:
         80:58:8f:d7:84:4c:88:c6:0a:82:51:ef:8d:50:81:13:07:a7:
         cb:7e:25:50:13:6a:c7:46:db:f0:84:44:b7:e4:c2:52:6f:95:
         d8:cb:84:ae:fb:98:70:8f:95:8c:3e:fb:9a:ed:32:c8:47:f9:
         e3:a6:5c:9f:cf:38:31:1b:29:1b:c1:a4:2c:42:89:f2:cb:ca:
         3a:3d:2f:ab:c3:11:b9:9a:cb:72:94:3b:25:07:09:ee:08:fd:
         0a:d8:d6:f1:6c:00:1c:dd:c7:01:a0:89:4f:17:b8:18:eb:e2:
         66:27:8a:0e:d7:25:0a:0c:37:1f:5b:ca:d9:22:cb:5c:a8:bd:
         76:c5:7c:4e
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAYwPXV8od2eSmlKIF3owgRn+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiZWY2YTAyMGQ3ZDc0YzJlMjM1ZjJiMDhiYmY1NzJjMzVi
ZGYwOTEwHhcNMjMxMTI3MDYwMDI2WhcNMjMxMTI4MDYwMDI2WjAzMTEwLwYDVQQD
EygwNDljZDA5YTNmNDVkNmJlYWU3MmQ2NTY1MzE2YzY0ZGIyODljYjY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4cbOPT+Sktt4T1KoOHUAsE2oZmy
Ss46qfBIfPWu+2l2JtUIukYrflTrEwgySjH3Mc//LNctFGNs9rjwXHI26X1CfalR
HvzmM2WyBFuzTXWSJ2PIi3QWuS0KAznoCd4bpkNlCgD64OgeMDpqIw+Sx9Sw+dKe
KYFWrtxf+26QuZUr8TyFemqt5TceHy0FiyDPJdqun16Ms5AZHaQEM6L3PyPRYr2h
sx+JtaWCtzjrqRoWT7xB+pbGJ3bRmu7bamw7LVaStB+Fqe9UIJn5BDLGIcaZ1m2O
04qFptMh82fpWgYiloMvAwtRsigWnPytb0TX5Qd903Ge3K3keAUATdqRIQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFASc0Jo/Rda+rnLWVlMWxk2yictoMB8GA1UdIwQY
MBaAFPvvagINfXTC4jXysIu/Vyw1vfCRMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS0tOXFBZzE5ZE1MaU5mS3dpNzlYTERXOThKRS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIvOTZjMGRjLWY3NDgtNDljNy1hZTVk
LTBiOTYxZDRkMmE1Ni8xLzEtLTlxQWcxOWRNTGlOZkt3aTc5WExEVzk4SkUubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2ViLzk2YzBkYy1mNzQ4LTQ5YzctYWU1ZC0wYjk2MWQ0ZDJh
NTYvMS8xLS05cUFnMTlkTUxpTmZLd2k3OVhMRFc5OEpFLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAlWR
F+pu5e5B1PY9Lif3kVHL085aJysHbaQMn8HkYSGkYIeFmMIlWScE6HZ2iEtqh/FL
wUbN+MkmFxOZWTvk4DH8JXSAiSA+uzfhUFfz5FiJ3XI5Ra2ELA+KmPdQfLTY9kDW
+2aT7/gbbTe0NHSqR56UV1dZYDUM92dWlP/TgFiP14RMiMYKglHvjVCBEweny34l
UBNqx0bb8IREt+TCUm+V2MuErvuYcI+VjD77mu0yyEf546Zcn884MRspG8GkLEKJ
8svKOj0vq8MRuZrLcpQ7JQcJ7gj9CtjW8WwAHN3HAaCJTxe4GOviZieKDtclCgw3
H1vK2SLLXKi9dsV8Tg==
-----END CERTIFICATE-----