Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/274c33-497a-4362-9eae-7c2516c65f8f/1/czgLXgyJRbo4TSnNen82JLxcurc.mft
File:                     czgLXgyJRbo4TSnNen82JLxcurc.mft (raw, json)
Hash identifier:          qldGMF6T8o03qHBdqUOc+Z1Cu03EkhqW9kr8hPLrr/o=
Subject key identifier:   46:2E:BC:A2:3C:C6:36:8B:29:AB:19:7B:A3:2D:9C:61:7F:9F:13:A2
Authority key identifier: 73:38:0B:5E:0C:89:45:BA:38:4D:29:CD:7A:7F:36:24:BC:5C:BA:B7
Certificate issuer:       /CN=73380b5e0c8945ba384d29cd7a7f3624bc5cbab7
Certificate serial:       018A3F237BAE5C7982E3728AC61E98CF181C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/czgLXgyJRbo4TSnNen82JLxcurc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/274c33-497a-4362-9eae-7c2516c65f8f/1/czgLXgyJRbo4TSnNen82JLxcurc.mft
Manifest number:          080E
Signing time:             Tue 29 Aug 2023 02:33:24 +0000
Manifest this update:     Tue 29 Aug 2023 02:33:24 +0000
Manifest next update:     Wed 30 Aug 2023 02:33:24 +0000
Files and hashes:         1: OfW717pQi6Mj224hknosijM3Djk.roa (hash: IZwnXBc6MjV11bAQUZYgRtWW9eHwIrONfEx7E1FNNvw=)
                          2: czgLXgyJRbo4TSnNen82JLxcurc.crl (hash: m/ozHYDT7Aio7/dGG3iAnDwDfVdMoTfUDI5Lie2+i3g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:3f:23:7b:ae:5c:79:82:e3:72:8a:c6:1e:98:cf:18:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73380b5e0c8945ba384d29cd7a7f3624bc5cbab7
        Validity
            Not Before: Aug 29 02:33:24 2023 GMT
            Not After : Aug 30 02:33:24 2023 GMT
        Subject: CN=462ebca23cc6368b29ab197ba32d9c617f9f13a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:29:68:0f:b8:16:fd:cc:a9:f4:2c:64:d1:af:
                    ad:0f:d3:c4:a0:1e:77:30:b3:ec:bc:e0:11:56:15:
                    60:6e:85:79:35:56:8f:fc:9c:17:b7:59:7c:2a:21:
                    85:ac:26:8d:93:b6:9c:dd:9b:5f:12:b6:1a:2a:fa:
                    be:0a:f1:e1:39:bd:e1:01:72:f9:83:d1:41:3a:e2:
                    51:00:f7:17:eb:c3:33:70:b6:50:3b:b9:12:10:37:
                    db:b0:bf:f4:5c:35:64:19:50:91:3e:e3:ab:57:07:
                    96:c2:8c:58:f3:e2:1e:f5:71:83:a6:8a:13:e0:99:
                    21:73:96:7f:04:a8:1f:ee:39:81:77:11:a7:ae:3c:
                    12:5a:a7:07:5c:f2:4a:e5:16:0b:d3:f8:fc:73:fb:
                    b6:9a:a0:40:d4:3e:14:c0:d8:82:9d:5c:3f:e6:54:
                    6f:83:d3:55:f8:11:42:a5:ba:ac:b4:81:61:cb:e9:
                    65:fe:6f:3d:4b:e1:e3:86:7b:ac:3e:83:f1:7f:e0:
                    6e:d7:fb:78:0a:f8:1e:9a:4b:4d:ee:0b:26:9f:a9:
                    32:ce:9c:bf:62:09:10:57:8a:5f:e4:07:08:72:35:
                    e9:a5:d4:fe:f8:10:eb:4f:38:52:d1:b7:ba:93:1c:
                    23:92:ae:e8:89:8f:73:83:02:53:26:79:36:71:2e:
                    1d:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:2E:BC:A2:3C:C6:36:8B:29:AB:19:7B:A3:2D:9C:61:7F:9F:13:A2
            X509v3 Authority Key Identifier:
                keyid:73:38:0B:5E:0C:89:45:BA:38:4D:29:CD:7A:7F:36:24:BC:5C:BA:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/czgLXgyJRbo4TSnNen82JLxcurc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/274c33-497a-4362-9eae-7c2516c65f8f/1/czgLXgyJRbo4TSnNen82JLxcurc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/274c33-497a-4362-9eae-7c2516c65f8f/1/czgLXgyJRbo4TSnNen82JLxcurc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:eb:70:83:40:c1:11:26:81:2e:35:8a:33:71:68:78:7b:d9:
         3e:ee:0f:de:d2:ec:ea:7d:72:41:80:24:cf:8c:a0:86:6b:bc:
         39:a7:b7:7c:6c:88:22:40:d4:cc:b7:75:74:5e:d4:0f:44:b4:
         3c:e3:82:88:c2:3c:fb:fc:e9:f5:39:73:86:c1:37:a5:5e:77:
         46:26:71:cf:63:b7:f5:3f:3e:d5:88:7d:c3:42:ab:61:d3:18:
         b3:a7:51:7a:96:a0:2f:d9:ad:d6:75:68:bd:24:7a:43:be:56:
         b4:db:8b:65:d3:33:6c:63:70:68:ec:e2:a1:85:58:24:3e:6d:
         06:53:d0:5b:ad:a5:14:21:f9:14:1c:fd:96:aa:25:f7:e5:9c:
         84:b7:fe:4f:64:03:25:84:80:b0:d3:8b:a7:54:29:ef:e9:d5:
         14:be:78:dd:a9:86:0b:3b:66:39:99:8b:b2:45:5e:47:4d:73:
         cf:c4:54:f6:90:ce:d6:70:de:c4:9f:c7:22:c4:91:18:83:2f:
         67:c2:93:06:2a:46:69:cb:58:36:4a:c3:b1:bc:6d:bb:8b:ae:
         e2:b3:88:a8:74:9c:2c:df:bf:9e:a3:19:59:ed:e8:27:66:0c:
         c2:58:cd:f6:22:22:d7:ff:37:09:5c:b4:52:86:ac:9f:76:dc:
         e5:c7:6f:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYo/I3uuXHmC43KKxh6YzxgcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczMzgwYjVlMGM4OTQ1YmEzODRkMjljZDdhN2YzNjI0YmM1
Y2JhYjcwHhcNMjMwODI5MDIzMzI0WhcNMjMwODMwMDIzMzI0WjAzMTEwLwYDVQQD
Eyg0NjJlYmNhMjNjYzYzNjhiMjlhYjE5N2JhMzJkOWM2MTdmOWYxM2EyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiloD7gW/cyp9Cxk0a+tD9PEoB53
MLPsvOARVhVgboV5NVaP/JwXt1l8KiGFrCaNk7ac3ZtfErYaKvq+CvHhOb3hAXL5
g9FBOuJRAPcX68MzcLZQO7kSEDfbsL/0XDVkGVCRPuOrVweWwoxY8+Ie9XGDpooT
4Jkhc5Z/BKgf7jmBdxGnrjwSWqcHXPJK5RYL0/j8c/u2mqBA1D4UwNiCnVw/5lRv
g9NV+BFCpbqstIFhy+ll/m89S+HjhnusPoPxf+Bu1/t4CvgemktN7gsmn6kyzpy/
YgkQV4pf5AcIcjXppdT++BDrTzhS0be6kxwjkq7oiY9zgwJTJnk2cS4dowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEYuvKI8xjaLKasZe6MtnGF/nxOiMB8GA1UdIwQY
MBaAFHM4C14MiUW6OE0pzXp/NiS8XLq3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3pnTFhneUpSYm80VFNuTmVuODJKTHhjdXJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8yNzRjMzMtNDk3YS00MzYyLTllYWUt
N2MyNTE2YzY1ZjhmLzEvY3pnTFhneUpSYm80VFNuTmVuODJKTHhjdXJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi8yNzRjMzMtNDk3YS00MzYyLTllYWUtN2MyNTE2YzY1Zjhm
LzEvY3pnTFhneUpSYm80VFNuTmVuODJKTHhjdXJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATutwg0DB
ESaBLjWKM3FoeHvZPu4P3tLs6n1yQYAkz4yghmu8Oae3fGyIIkDUzLd1dF7UD0S0
POOCiMI8+/zp9TlzhsE3pV53RiZxz2O39T8+1Yh9w0KrYdMYs6dRepagL9mt1nVo
vSR6Q75WtNuLZdMzbGNwaOzioYVYJD5tBlPQW62lFCH5FBz9lqol9+WchLf+T2QD
JYSAsNOLp1Qp7+nVFL543amGCztmOZmLskVeR01zz8RU9pDO1nDexJ/HIsSRGIMv
Z8KTBipGactYNkrDsbxtu4uu4rOIqHScLN+/nqMZWe3oJ2YMwljN9iIi1/83CVy0
Uoasn3bc5cdvJA==
-----END CERTIFICATE-----