Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/2ed4d1-0705-43e5-a60a-be100907f106/1/HrNSjWHyzwK6qytA0MwzJVtABvQ.mft
File:                     HrNSjWHyzwK6qytA0MwzJVtABvQ.mft (raw, json)
Hash identifier:          TB0OQvS0Co+Ks5pFkLXGkYbnNSxZkEssoGkzIez4LPU=
Subject key identifier:   D6:7D:AC:FE:EC:4D:7D:79:2F:95:D1:0D:A3:79:2A:B5:73:41:A1:1F
Authority key identifier: 1E:B3:52:8D:61:F2:CF:02:BA:AB:2B:40:D0:CC:33:25:5B:40:06:F4
Certificate issuer:       /CN=1eb3528d61f2cf02baab2b40d0cc33255b4006f4
Certificate serial:       018A21A4C9B011C25191EC38E93A8124FE6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HrNSjWHyzwK6qytA0MwzJVtABvQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/2ed4d1-0705-43e5-a60a-be100907f106/1/HrNSjWHyzwK6qytA0MwzJVtABvQ.mft
Manifest number:          0402
Signing time:             Wed 23 Aug 2023 09:06:02 +0000
Manifest this update:     Wed 23 Aug 2023 09:06:02 +0000
Manifest next update:     Thu 24 Aug 2023 09:06:02 +0000
Files and hashes:         1: HrNSjWHyzwK6qytA0MwzJVtABvQ.crl (hash: MGz8hzIHQ/Ac7zKiUl3pJBEDKmXtwGgOqLmL3DovODc=)
                          2: hdBY8LLPCMcLlFz90vBHJHoCocA.roa (hash: /kJAJQyb22o7qtK075tksjCjYi0TJ1uZDffkd0+X3Vk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:21:a4:c9:b0:11:c2:51:91:ec:38:e9:3a:81:24:fe:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1eb3528d61f2cf02baab2b40d0cc33255b4006f4
        Validity
            Not Before: Aug 23 09:06:02 2023 GMT
            Not After : Aug 24 09:06:02 2023 GMT
        Subject: CN=d67dacfeec4d7d792f95d10da3792ab57341a11f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:eb:6b:e5:73:3e:b2:72:1b:89:73:27:5b:f1:
                    10:83:e2:49:67:02:d0:4a:e2:fd:15:cc:c5:f2:00:
                    f5:56:a5:ed:da:54:98:25:5f:26:db:92:60:4d:fa:
                    67:16:3f:10:06:96:d9:3a:a3:08:c3:6f:b4:85:1c:
                    6e:96:37:6a:11:33:94:c6:cc:c3:d8:7e:7e:5d:0f:
                    4d:1a:4d:0f:5d:4f:bd:d0:ba:4b:85:35:75:94:a6:
                    e9:fd:af:86:33:8b:92:b0:ed:c2:23:df:98:26:bf:
                    a8:4d:c2:31:e0:55:e7:b0:16:70:31:2c:11:6c:b8:
                    58:12:87:22:cc:b3:0e:a0:e4:f1:e8:e3:a5:4f:cc:
                    60:70:32:b6:0a:ba:2f:e4:4e:26:83:ba:bc:73:71:
                    2d:1a:5a:f2:29:66:c3:9b:fd:da:48:e3:a1:13:55:
                    2e:f0:6b:1b:76:88:01:96:72:d5:37:69:96:69:82:
                    89:12:67:c0:4d:fa:ef:45:e1:85:da:19:ff:ea:dc:
                    24:84:60:5f:a1:3e:18:75:4e:7d:89:ab:d3:64:78:
                    15:60:38:db:78:b7:82:65:31:4b:84:fe:19:c7:88:
                    a7:67:81:fd:b4:1f:4e:de:d9:54:b9:6a:37:c9:c8:
                    5a:5e:4b:7d:d3:f6:20:c9:3e:d2:61:2e:f1:5d:15:
                    11:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:7D:AC:FE:EC:4D:7D:79:2F:95:D1:0D:A3:79:2A:B5:73:41:A1:1F
            X509v3 Authority Key Identifier:
                keyid:1E:B3:52:8D:61:F2:CF:02:BA:AB:2B:40:D0:CC:33:25:5B:40:06:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HrNSjWHyzwK6qytA0MwzJVtABvQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2ed4d1-0705-43e5-a60a-be100907f106/1/HrNSjWHyzwK6qytA0MwzJVtABvQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2ed4d1-0705-43e5-a60a-be100907f106/1/HrNSjWHyzwK6qytA0MwzJVtABvQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:ba:c0:93:60:a3:23:b1:30:6e:bc:22:4b:af:b0:d4:02:01:
         cb:41:29:60:dc:f2:48:13:d5:a8:34:12:98:a2:14:9f:00:b7:
         15:f5:2a:26:5d:79:eb:63:eb:e2:10:1d:64:f6:5f:7c:7b:c6:
         1d:ea:2c:b1:dd:df:66:c8:24:89:88:a4:40:c5:bf:7d:5a:cc:
         60:9a:78:66:67:3b:58:30:81:f3:d4:24:0d:ec:c4:eb:d2:da:
         4f:13:bb:4d:2a:96:f0:04:be:b7:dc:1a:dc:7a:bc:66:90:06:
         90:b4:ff:c2:37:dc:cb:28:80:50:4f:3c:89:cb:87:8b:de:68:
         76:42:b8:c0:bc:79:83:6b:3b:61:57:85:0c:d2:45:e7:eb:48:
         f7:ce:68:ea:30:58:88:4e:9c:52:d7:bb:f6:e0:24:13:ab:73:
         98:fa:96:e0:a8:21:20:bb:57:e8:67:9a:d8:a2:6f:27:a5:f2:
         07:a2:22:42:53:ed:dd:7a:f8:93:3f:a0:e4:bb:d7:18:74:c5:
         4c:6c:10:34:83:b6:95:ea:8a:59:84:b7:d4:2f:4c:aa:79:c0:
         f7:42:c5:cf:03:71:2e:fb:35:73:a9:84:ba:a5:58:3a:25:bd:
         8e:ab:63:5c:8b:8c:36:18:bf:52:b7:62:7c:bf:c6:60:96:f7:
         c1:bd:b9:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYohpMmwEcJRkew46TqBJP5sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlYjM1MjhkNjFmMmNmMDJiYWFiMmI0MGQwY2MzMzI1NWI0
MDA2ZjQwHhcNMjMwODIzMDkwNjAyWhcNMjMwODI0MDkwNjAyWjAzMTEwLwYDVQQD
EyhkNjdkYWNmZWVjNGQ3ZDc5MmY5NWQxMGRhMzc5MmFiNTczNDFhMTFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjutr5XM+snIbiXMnW/EQg+JJZwLQ
SuL9FczF8gD1VqXt2lSYJV8m25JgTfpnFj8QBpbZOqMIw2+0hRxuljdqETOUxszD
2H5+XQ9NGk0PXU+90LpLhTV1lKbp/a+GM4uSsO3CI9+YJr+oTcIx4FXnsBZwMSwR
bLhYEocizLMOoOTx6OOlT8xgcDK2Crov5E4mg7q8c3EtGlryKWbDm/3aSOOhE1Uu
8GsbdogBlnLVN2mWaYKJEmfATfrvReGF2hn/6twkhGBfoT4YdU59iavTZHgVYDjb
eLeCZTFLhP4Zx4inZ4H9tB9O3tlUuWo3ychaXkt90/YgyT7SYS7xXRURNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNZ9rP7sTX15L5XRDaN5KrVzQaEfMB8GA1UdIwQY
MBaAFB6zUo1h8s8CuqsrQNDMMyVbQAb0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHJOU2pXSHl6d0s2cXl0QTBNd3pKVnRBQnZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8yZWQ0ZDEtMDcwNS00M2U1LWE2MGEt
YmUxMDA5MDdmMTA2LzEvSHJOU2pXSHl6d0s2cXl0QTBNd3pKVnRBQnZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC8yZWQ0ZDEtMDcwNS00M2U1LWE2MGEtYmUxMDA5MDdmMTA2
LzEvSHJOU2pXSHl6d0s2cXl0QTBNd3pKVnRBQnZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAurrAk2Cj
I7EwbrwiS6+w1AIBy0EpYNzySBPVqDQSmKIUnwC3FfUqJl1562Pr4hAdZPZffHvG
Heossd3fZsgkiYikQMW/fVrMYJp4Zmc7WDCB89QkDezE69LaTxO7TSqW8AS+t9wa
3Hq8ZpAGkLT/wjfcyyiAUE88icuHi95odkK4wLx5g2s7YVeFDNJF5+tI985o6jBY
iE6cUte79uAkE6tzmPqW4KghILtX6Gea2KJvJ6XyB6IiQlPt3Xr4kz+g5LvXGHTF
TGwQNIO2leqKWYS31C9MqnnA90LFzwNxLvs1c6mEuqVYOiW9jqtjXIuMNhi/Urdi
fL/GYJb3wb259w==
-----END CERTIFICATE-----