Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/yHtZTl5nE6W4ClSBpc5x5lLYRXM.mft
File:                     yHtZTl5nE6W4ClSBpc5x5lLYRXM.mft (raw, json)
Hash identifier:          pX07mVJTIuK2sE4h24k81jdpifnzCL3FRyivyg7lgd0=
Subject key identifier:   92:FF:07:88:B7:6F:E2:34:59:02:1A:F9:BF:E4:79:78:E3:C8:67:3D
Authority key identifier: C8:7B:59:4E:5E:67:13:A5:B8:0A:54:81:A5:CE:71:E6:52:D8:45:73
Certificate issuer:       /CN=c87b594e5e6713a5b80a5481a5ce71e652d84573
Certificate serial:       018C8B65115BC4D33B7CE62B80B63AF66BFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yHtZTl5nE6W4ClSBpc5x5lLYRXM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/yHtZTl5nE6W4ClSBpc5x5lLYRXM.mft
Manifest number:          0A1F
Signing time:             Thu 21 Dec 2023 08:01:45 +0000
Manifest this update:     Thu 21 Dec 2023 08:01:45 +0000
Manifest next update:     Fri 22 Dec 2023 08:01:45 +0000
Files and hashes:         1: 3FgiopgPL0f2Cx7MFSVaIcmYSPE.roa (hash: k4Cwu46+nwDZIwIOnhUxDsxGGc0pG6Rujrjd2Vt1Cx4=)
                          2: 7YjR_Ry6h5UdJTyHXPG_kj105OY.roa (hash: /jtIZVQYD5UcPUiwG2L7MXB34Rx42Tkjc5ETQbnl6eI=)
                          3: 8J_ZiF7BcVezf_ReP2p4zm1OCiM.roa (hash: /K+MCIN6rUECUw7OpADfXogVjZeovyNxPsv4mFTQ6oc=)
                          4: 8x68Jjo0SiyVq0jCdbfYXeciTs8.roa (hash: 07mfdIBQYC2vMPuxVEBUrGsDbzulM1Nsn/QpNPM+aK4=)
                          5: DLkzNfgRNyB2xNseBETRzeiZn1Q.roa (hash: UWP7uWmUKMAqCDBB4Aen6oPcCKLkApw+j+tNS49ms6U=)
                          6: Gn5EA4dV_Clu3PUuGbHmSuZj4Ak.roa (hash: CW3TjXMjbIn8egxsqmw1mcGgiSZP+4IDxgjg3jDWQlE=)
                          7: HIgmqretjoEZGlz1koI1n9Lt24g.roa (hash: HqeqJ/qRnn32HB7tbPtSr11IdTJdJ19SoqSRKzcQNs0=)
                          8: LD1qbG5HvMvvmyxT0GpyFMfAXWM.roa (hash: NVpfAk5OymbZI4zqxwxLP2mnlte9WKLvS8RRy8HFcOw=)
                          9: PmsQYePn-SpC0IUjMzJhHGoehc0.roa (hash: 4xtaCSjzBSGteEExQcKD7yWfbtrlp0r3ZATs8Frf3o0=)
                          10: TeLE851uQ8diDabdHfW3DVI2Pjs.roa (hash: XVK1nY/sKA/+/j9kPVzUDpiwIoVP67oXsjO8QRexd5U=)
                          11: oJdale0lT1d6QAZyEEjTKrFoQ1E.roa (hash: MluNdalx2pyNBzxqAsnH1qRxsZrfrN1SNJQZY8iuvZo=)
                          12: oZiU5Hr581gGdtw-qBYbDNFQjiY.roa (hash: U8C2L0YzQAaYa9D/pagIj/V+5gkBcEr4JhtWnA3UXHY=)
                          13: rXkquTKb2OqoXutklE6lpDOGcoA.roa (hash: Jd9Pte+30dRdyYUN2ixVSzbCLQgv3I5qsV1yCO4p5eQ=)
                          14: yHtZTl5nE6W4ClSBpc5x5lLYRXM.crl (hash: zxP/LsU4dIb2ie6Cwk+4ehv73uS1OstUlG3HCqnUtPk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:8b:65:11:5b:c4:d3:3b:7c:e6:2b:80:b6:3a:f6:6b:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c87b594e5e6713a5b80a5481a5ce71e652d84573
        Validity
            Not Before: Dec 21 08:01:45 2023 GMT
            Not After : Dec 22 08:01:45 2023 GMT
        Subject: CN=92ff0788b76fe23459021af9bfe47978e3c8673d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:22:8a:9a:6a:62:6d:b6:da:99:f0:04:81:19:
                    51:8b:1c:4f:a0:ab:e7:b3:eb:09:54:a5:dc:74:b2:
                    62:ee:ce:18:5c:e5:6c:c9:f7:9a:fd:83:64:8a:5e:
                    7f:e1:5f:7b:b5:ed:6f:f2:39:b4:92:65:c3:0d:d2:
                    4f:b3:a8:1d:2b:a7:70:90:8c:4a:eb:0e:c2:a4:f9:
                    54:4e:92:9c:7e:c7:0c:ab:57:9f:4b:e9:7a:6f:36:
                    e8:df:64:74:92:1f:cb:af:22:2a:7e:2b:66:41:d5:
                    b3:04:87:87:93:09:25:f2:ff:14:ae:81:31:cb:e7:
                    ca:ad:23:91:62:f6:8f:f3:2d:08:84:7f:a4:5a:05:
                    59:2c:c4:94:f0:8d:3f:f6:ab:e6:8c:a0:d0:6a:f7:
                    2f:55:80:06:6c:77:d8:cf:57:e8:da:90:8e:d9:6b:
                    8a:8b:f5:c9:80:05:ee:2b:3b:69:27:f8:96:8e:0a:
                    b6:e0:54:3e:e6:e5:d2:98:bd:31:e7:21:80:3a:94:
                    23:cb:1e:09:6f:bc:43:9e:d4:50:3f:9d:d4:75:af:
                    95:ed:86:58:86:d8:1a:d8:5c:44:6b:b9:fa:60:d1:
                    fc:70:26:39:b3:88:a0:c9:d4:0d:9c:e8:68:e5:79:
                    76:b8:4b:9a:8c:5a:23:e0:f5:ef:90:16:4d:a8:62:
                    4e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:FF:07:88:B7:6F:E2:34:59:02:1A:F9:BF:E4:79:78:E3:C8:67:3D
            X509v3 Authority Key Identifier:
                keyid:C8:7B:59:4E:5E:67:13:A5:B8:0A:54:81:A5:CE:71:E6:52:D8:45:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHtZTl5nE6W4ClSBpc5x5lLYRXM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/yHtZTl5nE6W4ClSBpc5x5lLYRXM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/yHtZTl5nE6W4ClSBpc5x5lLYRXM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:f4:3f:4e:43:8c:49:8e:cd:6d:38:ef:fc:e2:2b:f0:1e:0f:
         38:3b:e4:2d:30:3e:ba:96:66:d7:4e:a6:37:7d:37:03:0a:5c:
         67:0f:18:29:81:b0:96:d1:7c:0b:bc:31:5a:35:8b:36:a6:95:
         96:ad:a2:b2:78:04:5a:87:26:fb:22:70:6e:35:42:cb:4a:20:
         2f:c0:50:e4:a5:08:6c:00:ce:cd:5b:bd:12:21:37:95:54:3e:
         f0:71:21:5c:9d:61:6b:dc:d4:85:c4:cf:8b:30:01:6e:49:6f:
         52:4e:e0:51:88:5a:af:39:68:c8:50:05:f3:2d:5c:00:48:c4:
         16:e2:8c:00:b0:3b:d5:e9:53:5e:f0:55:ab:75:46:a8:85:91:
         ac:1d:3d:63:95:78:67:68:24:ff:c3:fb:da:da:4f:f1:d6:b7:
         8f:a1:3f:f0:a3:2a:df:54:de:2f:59:e5:ba:62:44:f8:2c:5f:
         08:06:cf:15:54:a7:32:bb:54:51:c9:fa:70:20:e6:89:cc:c3:
         29:06:cf:ee:ce:78:d0:01:53:8c:c9:ae:be:ea:95:f2:12:4d:
         5f:93:ee:30:e8:d3:28:df:10:1b:96:84:e1:5f:db:fd:1a:5d:
         eb:8a:9a:a8:2e:7a:e4:70:60:29:20:0d:96:b1:27:f6:b4:c4:
         72:e9:df:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYyLZRFbxNM7fOYrgLY69mv+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4N2I1OTRlNWU2NzEzYTViODBhNTQ4MWE1Y2U3MWU2NTJk
ODQ1NzMwHhcNMjMxMjIxMDgwMTQ1WhcNMjMxMjIyMDgwMTQ1WjAzMTEwLwYDVQQD
Eyg5MmZmMDc4OGI3NmZlMjM0NTkwMjFhZjliZmU0Nzk3OGUzYzg2NzNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjiKKmmpibbbamfAEgRlRixxPoKvn
s+sJVKXcdLJi7s4YXOVsyfea/YNkil5/4V97te1v8jm0kmXDDdJPs6gdK6dwkIxK
6w7CpPlUTpKcfscMq1efS+l6bzbo32R0kh/LryIqfitmQdWzBIeHkwkl8v8UroEx
y+fKrSORYvaP8y0IhH+kWgVZLMSU8I0/9qvmjKDQavcvVYAGbHfYz1fo2pCO2WuK
i/XJgAXuKztpJ/iWjgq24FQ+5uXSmL0x5yGAOpQjyx4Jb7xDntRQP53Uda+V7YZY
htga2FxEa7n6YNH8cCY5s4igydQNnOho5Xl2uEuajFoj4PXvkBZNqGJOSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJL/B4i3b+I0WQIa+b/keXjjyGc9MB8GA1UdIwQY
MBaAFMh7WU5eZxOluApUgaXOceZS2EVzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUh0WlRsNW5FNlc0Q2xTQnBjNXg1bExZUlhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi84MjRmNzgtZGVlMi00N2JjLWFmMmYt
MzhjYjZlNDE2ZjNhLzEveUh0WlRsNW5FNlc0Q2xTQnBjNXg1bExZUlhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi84MjRmNzgtZGVlMi00N2JjLWFmMmYtMzhjYjZlNDE2ZjNh
LzEveUh0WlRsNW5FNlc0Q2xTQnBjNXg1bExZUlhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQPQ/TkOM
SY7NbTjv/OIr8B4PODvkLTA+upZm106mN303AwpcZw8YKYGwltF8C7wxWjWLNqaV
lq2isngEWocm+yJwbjVCy0ogL8BQ5KUIbADOzVu9EiE3lVQ+8HEhXJ1ha9zUhcTP
izABbklvUk7gUYharzloyFAF8y1cAEjEFuKMALA71elTXvBVq3VGqIWRrB09Y5V4
Z2gk/8P72tpP8da3j6E/8KMq31TeL1nlumJE+CxfCAbPFVSnMrtUUcn6cCDmiczD
KQbP7s540AFTjMmuvuqV8hJNX5PuMOjTKN8QG5aE4V/b/Rpd64qaqC565HBgKSAN
lrEn9rTEcunfBg==
-----END CERTIFICATE-----
Generated at Thu Dec 21 12:40:57 2023 by rpki-client on console-fra.rpki-client.org