Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e55fad-22ee-4aad-9bc6-1452c0181eb3/1/l1FRIi3FYwdvkxpBSX64fGrP380.mft
File:                     l1FRIi3FYwdvkxpBSX64fGrP380.mft (raw, json)
Hash identifier:          DdVNcx0tzAjkOAEsrLqUeB7gncw4rDGrpo0JQV87ajk=
Subject key identifier:   96:9B:E2:A0:99:C4:76:E2:43:B2:39:09:E7:2E:1F:F2:D4:57:D0:83
Authority key identifier: 97:51:51:22:2D:C5:63:07:6F:93:1A:41:49:7E:B8:7C:6A:CF:DF:CD
Certificate issuer:       /CN=975151222dc563076f931a41497eb87c6acfdfcd
Certificate serial:       0188FCBF171EA169CBEAD6CE16E8980710B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l1FRIi3FYwdvkxpBSX64fGrP380.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/e55fad-22ee-4aad-9bc6-1452c0181eb3/1/l1FRIi3FYwdvkxpBSX64fGrP380.mft
Manifest number:          0A24
Signing time:             Tue 27 Jun 2023 12:06:01 +0000
Manifest this update:     Tue 27 Jun 2023 12:06:01 +0000
Manifest next update:     Wed 28 Jun 2023 12:06:01 +0000
Files and hashes:         1: f98kTT7YDkAckt8KtMa70JHPd2Q.roa (hash: mawmrXsSr5LydWBFnLOlXkhYA2lB8XnRYvOSz3RkmTs=)
                          2: kU3pQ5fymt_VjrIhP3O1Q5Q92C4.roa (hash: ayvWFeprvjrZHYLmvLHzz97fOWf1Gs5WPr1kVUFWWOE=)
                          3: l1FRIi3FYwdvkxpBSX64fGrP380.crl (hash: Ms0RwYy7+pdHmBdRYaz1Ie3qE2kuta6rwEWeEh9p2WU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:fc:bf:17:1e:a1:69:cb:ea:d6:ce:16:e8:98:07:10:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=975151222dc563076f931a41497eb87c6acfdfcd
        Validity
            Not Before: Jun 27 12:06:01 2023 GMT
            Not After : Jun 28 12:06:01 2023 GMT
        Subject: CN=969be2a099c476e243b23909e72e1ff2d457d083
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:48:dd:a7:58:91:4d:36:e5:c4:f5:90:23:6d:
                    86:3b:4a:ac:05:58:f6:6c:56:0a:97:69:fd:09:69:
                    fb:cd:f2:44:d5:13:5d:3f:a8:55:c9:9f:fa:02:a4:
                    91:37:1f:d6:d5:31:25:7c:2b:8b:57:40:c1:da:9b:
                    b9:8d:37:4a:7e:89:1d:73:87:4b:85:91:9c:5e:68:
                    68:fb:26:7c:19:da:f5:6e:64:ca:09:3b:35:a3:a6:
                    06:e6:d1:20:4e:79:3b:cd:fa:64:b0:8e:47:f9:6c:
                    2d:5e:8d:51:98:b1:b1:2c:41:9b:7c:d5:83:32:8e:
                    0c:46:09:89:55:b4:d9:c4:07:43:8a:2b:b6:3f:a5:
                    12:80:6b:60:50:a1:34:54:a5:fd:4b:84:e2:e0:a7:
                    11:f7:2d:97:1b:62:31:65:38:1f:05:07:ef:ef:98:
                    1d:91:8e:6b:2d:2d:0b:74:3f:13:8a:af:e0:9e:44:
                    65:bf:4e:88:8c:ef:c6:c1:2e:03:09:e7:0b:a4:b6:
                    ab:1e:00:7f:2e:b9:bb:af:f1:52:d6:a8:e5:fd:fe:
                    d0:a2:0b:99:17:51:82:f3:91:d5:2f:3a:28:25:d0:
                    ea:2c:b6:97:05:61:6d:ff:ac:9e:41:ea:2f:95:04:
                    ee:2e:0e:8a:b9:0f:08:17:84:d1:7c:41:ff:18:ba:
                    58:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:9B:E2:A0:99:C4:76:E2:43:B2:39:09:E7:2E:1F:F2:D4:57:D0:83
            X509v3 Authority Key Identifier:
                keyid:97:51:51:22:2D:C5:63:07:6F:93:1A:41:49:7E:B8:7C:6A:CF:DF:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1FRIi3FYwdvkxpBSX64fGrP380.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e55fad-22ee-4aad-9bc6-1452c0181eb3/1/l1FRIi3FYwdvkxpBSX64fGrP380.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e55fad-22ee-4aad-9bc6-1452c0181eb3/1/l1FRIi3FYwdvkxpBSX64fGrP380.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:c1:b0:7d:f7:df:52:0f:63:ce:8b:9c:37:1c:cd:02:6a:42:
         04:16:b3:94:53:f6:35:6b:5f:5d:2a:89:5f:ac:24:ce:a5:c1:
         22:c3:a1:3c:44:b4:91:cd:a3:c9:97:00:12:01:e1:1d:b4:0d:
         f8:a3:3f:81:94:7d:49:94:e4:e9:c2:9f:4e:1e:b8:7c:11:d2:
         2f:25:31:5d:6a:b4:ca:9f:3f:1d:c5:5d:f6:d5:2c:5c:97:d4:
         08:ed:de:89:50:63:30:05:dc:d5:55:34:17:fe:eb:0f:76:54:
         69:4f:4b:0a:33:25:b8:d2:be:58:8a:97:98:cc:17:f3:b3:96:
         fa:63:f5:06:0c:20:0b:8b:4f:0b:e6:c0:65:df:23:3d:25:bf:
         58:8f:61:bf:0b:49:36:ea:ac:6d:c2:09:3f:f8:ad:5f:68:91:
         59:33:ab:cf:89:05:98:04:f8:24:70:c0:c1:5e:ba:ea:a2:b7:
         33:d8:d5:50:e9:b2:e2:c8:ef:a0:b0:de:40:63:0f:c0:0f:bf:
         ec:dd:1a:c0:9e:bd:e2:89:f0:3b:73:2a:67:ba:80:02:55:25:
         3d:d0:57:d7:6a:99:e7:a8:f8:2f:9f:05:de:f2:73:dd:cd:2a:
         a5:69:5b:ae:69:b3:59:61:e1:a5:c2:53:88:c5:c2:4a:cf:2e:
         ef:29:68:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYj8vxceoWnL6tbOFuiYBxC2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3NTE1MTIyMmRjNTYzMDc2ZjkzMWE0MTQ5N2ViODdjNmFj
ZmRmY2QwHhcNMjMwNjI3MTIwNjAxWhcNMjMwNjI4MTIwNjAxWjAzMTEwLwYDVQQD
Eyg5NjliZTJhMDk5YzQ3NmUyNDNiMjM5MDllNzJlMWZmMmQ0NTdkMDgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskjdp1iRTTblxPWQI22GO0qsBVj2
bFYKl2n9CWn7zfJE1RNdP6hVyZ/6AqSRNx/W1TElfCuLV0DB2pu5jTdKfokdc4dL
hZGcXmho+yZ8Gdr1bmTKCTs1o6YG5tEgTnk7zfpksI5H+WwtXo1RmLGxLEGbfNWD
Mo4MRgmJVbTZxAdDiiu2P6USgGtgUKE0VKX9S4Ti4KcR9y2XG2IxZTgfBQfv75gd
kY5rLS0LdD8Tiq/gnkRlv06IjO/GwS4DCecLpLarHgB/Lrm7r/FS1qjl/f7QoguZ
F1GC85HVLzooJdDqLLaXBWFt/6yeQeovlQTuLg6KuQ8IF4TRfEH/GLpY4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJab4qCZxHbiQ7I5CecuH/LUV9CDMB8GA1UdIwQY
MBaAFJdRUSItxWMHb5MaQUl+uHxqz9/NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDFGUklpM0ZZd2R2a3hwQlNYNjRmR3JQMzgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNTVmYWQtMjJlZS00YWFkLTliYzYt
MTQ1MmMwMTgxZWIzLzEvbDFGUklpM0ZZd2R2a3hwQlNYNjRmR3JQMzgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9lNTVmYWQtMjJlZS00YWFkLTliYzYtMTQ1MmMwMTgxZWIz
LzEvbDFGUklpM0ZZd2R2a3hwQlNYNjRmR3JQMzgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAocGwffff
Ug9jzoucNxzNAmpCBBazlFP2NWtfXSqJX6wkzqXBIsOhPES0kc2jyZcAEgHhHbQN
+KM/gZR9SZTk6cKfTh64fBHSLyUxXWq0yp8/HcVd9tUsXJfUCO3eiVBjMAXc1VU0
F/7rD3ZUaU9LCjMluNK+WIqXmMwX87OW+mP1BgwgC4tPC+bAZd8jPSW/WI9hvwtJ
NuqsbcIJP/itX2iRWTOrz4kFmAT4JHDAwV666qK3M9jVUOmy4sjvoLDeQGMPwA+/
7N0awJ694onwO3MqZ7qAAlUlPdBX12qZ56j4L58F3vJz3c0qpWlbrmmzWWHhpcJT
iMXCSs8u7yloOg==
-----END CERTIFICATE-----