Manifest

$ rpki-client -vvf rpki.co/repo/August/15/0CAA1BD8666A6C4BEA6632A9FEBCCC30ED92905B.mft
File:                     0CAA1BD8666A6C4BEA6632A9FEBCCC30ED92905B.mft (raw, json)
Hash identifier:          Rf+Gm4C8Mf4XikI0VB9PwEaGGS10Ei6QAOs3UqbGRh0=
Subject key identifier:   C6:F4:FA:B1:E4:B4:6B:1D:D0:DB:F9:42:77:73:B9:68:3D:BF:D6:C2
Authority key identifier: 0C:AA:1B:D8:66:6A:6C:4B:EA:66:32:A9:FE:BC:CC:30:ED:92:90:5B
Certificate issuer:       /CN=0caa1bd8666a6c4bea6632a9febccc30ed92905b
Certificate serial:       2B8E6322B5B461700864BFECBFA33D379CA3FCBE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DKob2GZqbEvqZjKp_rzMMO2SkFs.cer
Subject info access:      rsync://rpki.co/repo/August/15/0CAA1BD8666A6C4BEA6632A9FEBCCC30ED92905B.mft
Manifest number:          22
Signing time:             Sat 14 Oct 2023 12:45:29 +0000
Manifest this update:     Sat 14 Oct 2023 12:40:29 +0000
Manifest next update:     Sun 15 Oct 2023 14:51:29 +0000
Files and hashes:         1: 0CAA1BD8666A6C4BEA6632A9FEBCCC30ED92905B.crl (hash: 7dctiLUQ2eL8QH4GdmbpChwVIHmBDzRD1ug57f7J6YQ=)
                          2: 8D6938E003E519E96B0A9EEC938E98EDAC0F5E65.cer (hash: G25tLC1MDq+cFbZVt0DGQcuU+RxjjKGSGRscC5mfzeo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:8e:63:22:b5:b4:61:70:08:64:bf:ec:bf:a3:3d:37:9c:a3:fc:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0caa1bd8666a6c4bea6632a9febccc30ed92905b
        Validity
            Not Before: Oct 14 12:40:29 2023 GMT
            Not After : Oct 15 14:51:29 2023 GMT
        Subject: CN=C6F4FAB1E4B46B1DD0DBF9427773B9683DBFD6C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:5e:d4:dc:85:66:57:96:31:e2:6d:f6:84:99:
                    29:8f:6d:16:35:ae:f1:3b:d9:4b:98:d8:18:35:e3:
                    e1:65:ea:34:2d:54:5c:93:e6:7b:6d:c1:ab:20:4d:
                    ed:27:6d:04:6e:e7:59:1f:bc:5a:1b:79:57:f2:2b:
                    83:72:f7:23:81:58:ea:6c:f8:27:ae:6e:43:56:e4:
                    73:7e:e3:0a:c9:6c:51:98:b2:30:1a:0e:cd:aa:cc:
                    38:f4:fd:7d:51:69:02:e5:63:18:f6:e1:99:e2:80:
                    81:92:53:6c:07:cd:4c:ba:73:6a:ed:70:b8:58:be:
                    3b:3a:c5:f5:91:93:41:43:7d:c0:75:79:39:73:46:
                    d1:47:06:db:43:ed:64:8c:ac:64:3c:5e:cc:ac:e4:
                    8c:04:a9:5e:8d:b3:4e:21:b2:f4:c5:47:a7:1d:bd:
                    71:97:3e:bc:97:f6:17:bf:9c:92:df:63:af:9e:2c:
                    6b:d3:4e:04:22:1d:19:77:d5:74:23:c5:fd:b3:cb:
                    4d:41:91:20:c7:dc:59:df:09:76:68:eb:d2:3a:bb:
                    25:bb:b8:c1:63:34:e4:03:4a:60:54:b4:6e:d9:48:
                    fa:11:54:b8:6f:97:d7:c8:82:57:f6:90:2f:b5:7a:
                    f8:f4:cf:f6:e7:a1:c7:39:80:33:a1:c2:49:76:66:
                    51:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:F4:FA:B1:E4:B4:6B:1D:D0:DB:F9:42:77:73:B9:68:3D:BF:D6:C2
            X509v3 Authority Key Identifier:
                keyid:0C:AA:1B:D8:66:6A:6C:4B:EA:66:32:A9:FE:BC:CC:30:ED:92:90:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/15/0CAA1BD8666A6C4BEA6632A9FEBCCC30ED92905B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKob2GZqbEvqZjKp_rzMMO2SkFs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/15/0CAA1BD8666A6C4BEA6632A9FEBCCC30ED92905B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:b9:15:ad:2c:6b:fb:f6:4e:46:53:ce:43:31:09:c2:b4:5d:
         0a:8e:21:f8:b1:5f:d9:8f:d6:3a:ac:3f:21:f0:98:62:97:d5:
         0f:be:7c:48:fb:30:ca:7a:26:12:b3:c7:00:68:79:18:76:ea:
         18:3d:77:cc:8e:eb:d5:52:49:5f:de:a7:5b:b8:fd:08:69:35:
         85:c0:af:01:da:e0:24:7c:47:fc:af:a3:1f:d3:c4:bd:47:03:
         4b:69:4a:f7:df:4e:da:bd:90:d8:b4:82:61:00:5e:a4:41:55:
         3d:14:b3:ab:78:33:4d:b4:fe:aa:41:19:01:a5:2c:d0:19:e4:
         ee:12:15:2a:27:eb:aa:66:87:8d:70:54:02:98:59:e6:f9:24:
         e9:a0:b4:ac:91:ab:88:53:51:39:34:cd:2d:25:d6:94:32:58:
         5d:32:c6:aa:57:d6:f2:a1:b5:b0:27:b2:24:30:c8:97:26:7f:
         46:3b:f1:85:4f:ee:01:65:d3:52:c0:81:0e:c8:35:52:cd:53:
         e7:6b:65:d7:ca:02:89:a2:ef:b1:a6:83:84:30:5e:4d:71:e5:
         cf:46:a7:cf:df:9b:53:b1:4f:b2:a6:ce:e6:c2:81:d2:31:10:
         e5:1b:a5:9f:c9:a7:d6:05:57:69:c3:5a:aa:4f:c6:48:b8:11:
         9b:20:0f:38
-----BEGIN CERTIFICATE-----
MIIEyzCCA7OgAwIBAgIUK45jIrW0YXAIZL/sv6M9N5yj/L4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGNhYTFiZDg2NjZhNmM0YmVhNjYzMmE5ZmViY2NjMzBl
ZDkyOTA1YjAeFw0yMzEwMTQxMjQwMjlaFw0yMzEwMTUxNDUxMjlaMDMxMTAvBgNV
BAMTKEM2RjRGQUIxRTRCNDZCMUREMERCRjk0Mjc3NzNCOTY4M0RCRkQ2QzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnXtTchWZXljHibfaEmSmPbRY1
rvE72UuY2Bg14+Fl6jQtVFyT5nttwasgTe0nbQRu51kfvFobeVfyK4Ny9yOBWOps
+CeubkNW5HN+4wrJbFGYsjAaDs2qzDj0/X1RaQLlYxj24ZnigIGSU2wHzUy6c2rt
cLhYvjs6xfWRk0FDfcB1eTlzRtFHBttD7WSMrGQ8Xsys5IwEqV6Ns04hsvTFR6cd
vXGXPryX9he/nJLfY6+eLGvTTgQiHRl31XQjxf2zy01BkSDH3FnfCXZo69I6uyW7
uMFjNOQDSmBUtG7ZSPoRVLhvl9fIglf2kC+1evj0z/bnocc5gDOhwkl2ZlHNAgMB
AAGjggHVMIIB0TAdBgNVHQ4EFgQUxvT6seS0ax3Q2/lCd3O5aD2/1sIwHwYDVR0j
BBgwFoAUDKob2GZqbEvqZjKp/rzMMO2SkFswDgYDVR0PAQH/BAQDAgeAMFwGA1Ud
HwRVMFMwUaBPoE2GS3JzeW5jOi8vcnBraS5jby9yZXBvL0F1Z3VzdC8xNS8wQ0FB
MUJEODY2NkE2QzRCRUE2NjMyQTlGRUJDQ0MzMEVEOTI5MDVCLmNybDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREtvYjJHWnFiRXZxWmpLcF9yek1NTzJTa0ZzLmNlcjBn
BggrBgEFBQcBCwRbMFkwVwYIKwYBBQUHMAuGS3JzeW5jOi8vcnBraS5jby9yZXBv
L0F1Z3VzdC8xNS8wQ0FBMUJEODY2NkE2QzRCRUE2NjMyQTlGRUJDQ0MzMEVEOTI5
MDVCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/
BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkq
hkiG9w0BAQsFAAOCAQEAcLkVrSxr+/ZORlPOQzEJwrRdCo4h+LFf2Y/WOqw/IfCY
YpfVD758SPswynomErPHAGh5GHbqGD13zI7r1VJJX96nW7j9CGk1hcCvAdrgJHxH
/K+jH9PEvUcDS2lK999O2r2Q2LSCYQBepEFVPRSzq3gzTbT+qkEZAaUs0Bnk7hIV
KifrqmaHjXBUAphZ5vkk6aC0rJGriFNROTTNLSXWlDJYXTLGqlfW8qG1sCeyJDDI
lyZ/RjvxhU/uAWXTUsCBDsg1Us1T52tl18oCiaLvsaaDhDBeTXHlz0anz9+bU7FP
sqbO5sKB0jEQ5Ruln8mn1gVXacNaqk/GSLgRmyAPOA==
-----END CERTIFICATE-----