Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/83233c-898e-491d-958c-4fea624413e4/1/ABOK9m601Vf6Szk5xsvZYakSNWA.mft
File:                     ABOK9m601Vf6Szk5xsvZYakSNWA.mft (raw, json)
Hash identifier:          Zusg6KOFmSSzkX7q17Cy5dp58BWi/Xa4CpYTW6tTYLE=
Subject key identifier:   44:48:AA:C0:9D:47:33:51:97:FC:6C:91:CD:63:DF:4F:C9:68:66:46
Authority key identifier: 00:13:8A:F6:6E:B4:D5:57:FA:4B:39:39:C6:CB:D9:61:A9:12:35:60
Certificate issuer:       /CN=00138af66eb4d557fa4b3939c6cbd961a9123560
Certificate serial:       01857BBD70494F42D7C0BB8713429BF06BA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ABOK9m601Vf6Szk5xsvZYakSNWA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/83233c-898e-491d-958c-4fea624413e4/1/ABOK9m601Vf6Szk5xsvZYakSNWA.mft
Manifest number:          096F
Signing time:             Wed 04 Jan 2023 07:44:50 +0000
Manifest this update:     Wed 04 Jan 2023 07:44:50 +0000
Manifest next update:     Thu 05 Jan 2023 07:44:50 +0000
Files and hashes:         1: 1-kryNSufB054njPCm3YMXjfm2cI.roa (hash: dl/RJEwstnrSjEl4tS+3xjatU32TG+c3IywxiIQTdP0=)
                          2: 4xuhI6tQaq4n8KzsQktWvKZDyGw.roa (hash: vPJNmwI0mqNIeixrl4pKeutBgbY8gTg2CP+HpZZCorU=)
                          3: ABOK9m601Vf6Szk5xsvZYakSNWA.crl (hash: nDrOpsR6JRlAhRxHlHNQ66rmCvdbPyIS9FZsg9I3Sj4=)
                          4: JH9i0FNYTwc_5dOEN5zLP12aS6k.roa (hash: sfYvy8N5etac//8d1YwCGLzshix3Ncon6NiFsW7zm+M=)
                          5: PrvBPXsqkfzc7l3gns1VnNtrqtQ.roa (hash: d5CO3SQh/qx9xxp64s0vIhy+qWXbLMZeFjoTnvwQyww=)
                          6: SCAAOOxDCj50L07dQNrSPhLfOHw.roa (hash: 07+BrIM9T1KWgEOW3d2a8IyshsEzsYhSv0upo2t8wKQ=)
                          7: cl7_fXm2Uc5Ss_3k2OWyGg06yS4.roa (hash: FwmtyPrpEyI9SG5OxcsKhVdAQs/AipmPmWnz6NTb1lI=)
                          8: ptTcqqKIVXgHrnpstlwIeTpcoVc.roa (hash: g4WU1lgkzpCQ7NECvK6HtSQT1xIw607YGdi/8RGMaNQ=)
                          9: yhpNCha1OXMLz6xWPCW3fJfxdR4.roa (hash: ztX6fjEibz4l4wIKlJDIV4tQwVzVzIO0i+JcrlfM7wo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:7b:bd:70:49:4f:42:d7:c0:bb:87:13:42:9b:f0:6b:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00138af66eb4d557fa4b3939c6cbd961a9123560
        Validity
            Not Before: Jan  4 07:44:50 2023 GMT
            Not After : Jan  5 07:44:50 2023 GMT
        Subject: CN=4448aac09d47335197fc6c91cd63df4fc9686646
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:6f:62:d7:1f:f5:75:35:1d:bd:91:14:40:29:
                    c1:23:d0:8f:05:f5:cd:5b:cb:a8:ee:c7:cf:be:85:
                    af:14:99:4f:73:9e:8e:fb:cd:29:a4:8c:72:21:03:
                    03:15:bc:2f:f7:d2:c7:3a:18:9b:37:37:e0:06:07:
                    5c:d6:36:0a:de:ae:69:56:9f:7b:5f:c5:09:06:e2:
                    f7:2a:40:f4:f1:5f:a9:81:90:57:c9:42:62:da:ca:
                    81:8a:e2:0a:a8:90:db:3a:bf:71:f1:91:e3:d1:ca:
                    4d:b3:fc:b8:29:54:ce:4d:08:c9:cc:b3:a7:23:85:
                    da:d4:b9:49:ab:f9:a0:0e:3e:79:f2:96:38:9a:43:
                    eb:6b:2a:f9:08:e8:f3:a5:94:2f:73:c2:7b:b5:d2:
                    33:00:bb:ea:a9:9d:d5:ad:40:e8:70:78:f9:4f:52:
                    52:78:6c:60:07:32:1c:53:f5:40:b1:31:ee:2f:e0:
                    4c:4b:69:18:6f:8d:12:bf:da:ec:bf:58:72:55:46:
                    73:ba:cd:ba:b4:cf:ea:04:1f:15:86:99:6b:0d:6d:
                    1c:86:eb:b8:ee:59:08:51:45:22:30:4d:bb:43:8b:
                    09:4d:67:b7:8a:c2:a1:f9:2d:cc:86:47:12:32:b3:
                    86:38:da:7b:d0:b2:f4:5b:b5:b4:94:1f:f5:d3:39:
                    c7:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:48:AA:C0:9D:47:33:51:97:FC:6C:91:CD:63:DF:4F:C9:68:66:46
            X509v3 Authority Key Identifier:
                keyid:00:13:8A:F6:6E:B4:D5:57:FA:4B:39:39:C6:CB:D9:61:A9:12:35:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ABOK9m601Vf6Szk5xsvZYakSNWA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/83233c-898e-491d-958c-4fea624413e4/1/ABOK9m601Vf6Szk5xsvZYakSNWA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/83233c-898e-491d-958c-4fea624413e4/1/ABOK9m601Vf6Szk5xsvZYakSNWA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:bc:b7:8f:75:47:f1:85:13:89:88:c5:6a:cf:0d:31:3e:e8:
         5b:75:c7:e6:73:77:09:d3:5e:5a:b7:e7:c7:56:8a:54:99:c0:
         61:06:ba:49:45:65:07:04:33:5f:94:b8:f7:8b:7a:2e:59:d2:
         e8:a3:e2:b5:60:ad:9f:55:fc:d3:fb:76:7a:c7:9a:a7:52:a1:
         f7:fa:a1:a7:1a:85:ff:83:37:a0:c5:9e:ee:e8:04:b1:73:44:
         82:39:19:73:cf:00:33:43:4c:e1:d0:37:27:5e:64:63:ad:72:
         a2:ac:1d:8c:cb:c0:03:2a:5e:8b:59:54:62:a0:30:87:ed:e3:
         ee:1c:d8:b3:c5:64:47:b7:bf:8b:a7:aa:d1:16:4b:fa:30:a8:
         e1:54:b5:2b:cf:26:18:a0:61:8f:e9:3a:75:bc:88:55:d3:ca:
         e1:3f:ab:d3:97:bf:e5:98:81:06:17:1c:81:d5:5d:ad:f0:d5:
         a6:39:48:ae:35:b0:79:4d:79:c5:fa:4d:6f:1e:63:2e:14:cb:
         c8:4f:f1:b7:30:91:80:58:65:5e:46:2e:d4:c2:36:52:12:37:
         0f:eb:64:73:29:1d:1a:e0:a7:74:7e:59:de:38:b6:2d:e5:02:
         09:12:be:31:c1:dc:f9:a1:7c:70:4e:d3:9d:fc:34:3b:71:ec:
         f9:10:db:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYV7vXBJT0LXwLuHE0Kb8GuhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwMTM4YWY2NmViNGQ1NTdmYTRiMzkzOWM2Y2JkOTYxYTkx
MjM1NjAwHhcNMjMwMTA0MDc0NDUwWhcNMjMwMTA1MDc0NDUwWjAzMTEwLwYDVQQD
Eyg0NDQ4YWFjMDlkNDczMzUxOTdmYzZjOTFjZDYzZGY0ZmM5Njg2NjQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlW9i1x/1dTUdvZEUQCnBI9CPBfXN
W8uo7sfPvoWvFJlPc56O+80ppIxyIQMDFbwv99LHOhibNzfgBgdc1jYK3q5pVp97
X8UJBuL3KkD08V+pgZBXyUJi2sqBiuIKqJDbOr9x8ZHj0cpNs/y4KVTOTQjJzLOn
I4Xa1LlJq/mgDj558pY4mkPrayr5COjzpZQvc8J7tdIzALvqqZ3VrUDocHj5T1JS
eGxgBzIcU/VAsTHuL+BMS2kYb40Sv9rsv1hyVUZzus26tM/qBB8VhplrDW0chuu4
7lkIUUUiME27Q4sJTWe3isKh+S3MhkcSMrOGONp70LL0W7W0lB/10znHwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFERIqsCdRzNRl/xskc1j30/JaGZGMB8GA1UdIwQY
MBaAFAATivZutNVX+ks5OcbL2WGpEjVgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUJPSzltNjAxVmY2U3prNXhzdlpZYWtTTldBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS84MzIzM2MtODk4ZS00OTFkLTk1OGMt
NGZlYTYyNDQxM2U0LzEvQUJPSzltNjAxVmY2U3prNXhzdlpZYWtTTldBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS84MzIzM2MtODk4ZS00OTFkLTk1OGMtNGZlYTYyNDQxM2U0
LzEvQUJPSzltNjAxVmY2U3prNXhzdlpZYWtTTldBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB7y3j3VH
8YUTiYjFas8NMT7oW3XH5nN3CdNeWrfnx1aKVJnAYQa6SUVlBwQzX5S494t6LlnS
6KPitWCtn1X80/t2eseap1Kh9/qhpxqF/4M3oMWe7ugEsXNEgjkZc88AM0NM4dA3
J15kY61yoqwdjMvAAypei1lUYqAwh+3j7hzYs8VkR7e/i6eq0RZL+jCo4VS1K88m
GKBhj+k6dbyIVdPK4T+r05e/5ZiBBhccgdVdrfDVpjlIrjWweU15xfpNbx5jLhTL
yE/xtzCRgFhlXkYu1MI2UhI3D+tkcykdGuCndH5Z3ji2LeUCCRK+McHc+aF8cE7T
nfw0O3Hs+RDbeA==
-----END CERTIFICATE-----