Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/525549-eeef-4df5-91d6-54ca30833dca/1/5WSF6gAT8DrBSguDWZLgqzrONu8.mft
File:                     5WSF6gAT8DrBSguDWZLgqzrONu8.mft (raw, json)
Hash identifier:          7GaBLWRkz8VqGysLnJfdfGIyb0lNmJESfNcZ+/lIjCc=
Subject key identifier:   BF:CC:52:CC:B8:2D:A0:B4:26:90:5D:A1:FF:6B:56:62:41:C5:B0:D4
Authority key identifier: E5:64:85:EA:00:13:F0:3A:C1:4A:0B:83:59:92:E0:AB:3A:CE:36:EF
Certificate issuer:       /CN=e56485ea0013f03ac14a0b835992e0ab3ace36ef
Certificate serial:       018BD6B83CC259BB9327A5E955B65453756F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5WSF6gAT8DrBSguDWZLgqzrONu8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/525549-eeef-4df5-91d6-54ca30833dca/1/5WSF6gAT8DrBSguDWZLgqzrONu8.mft
Manifest number:          0854
Signing time:             Thu 16 Nov 2023 06:01:20 +0000
Manifest this update:     Thu 16 Nov 2023 06:01:20 +0000
Manifest next update:     Fri 17 Nov 2023 06:01:20 +0000
Files and hashes:         1: 5WSF6gAT8DrBSguDWZLgqzrONu8.crl (hash: icM9RJeTUdm0Q0Dao7fQIB96nOxv5ssy31Ht0BQNevY=)
                          2: hMCeu3BjB4jGnul-muOmsJUZ0kw.roa (hash: KmPbJfBazXMQWjk4Gktu2KXbtd7Tuesqtl9cFc2CSJg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:d6:b8:3c:c2:59:bb:93:27:a5:e9:55:b6:54:53:75:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e56485ea0013f03ac14a0b835992e0ab3ace36ef
        Validity
            Not Before: Nov 16 06:01:20 2023 GMT
            Not After : Nov 17 06:01:20 2023 GMT
        Subject: CN=bfcc52ccb82da0b426905da1ff6b566241c5b0d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:7d:e0:94:04:75:f9:9d:43:2a:62:37:25:45:
                    cc:68:68:51:a6:b6:63:51:08:df:5a:b3:56:66:02:
                    12:30:3b:3d:1f:a0:1f:ed:62:0c:06:ec:b9:e2:9a:
                    de:e2:fe:0b:1b:8a:43:f6:02:02:41:d1:16:8b:a6:
                    9a:d2:8b:ee:4b:64:c7:e3:a4:0d:da:45:81:34:a0:
                    cb:6a:28:6b:13:12:48:d9:2c:df:ee:3e:7a:7d:a9:
                    38:0f:8e:35:3b:d1:4c:5f:70:70:2f:06:93:32:2f:
                    a9:1a:71:bf:f4:a2:57:9f:2e:db:83:51:48:2d:e0:
                    f0:02:1d:34:60:25:d0:0a:be:0f:44:10:27:85:29:
                    0d:00:4d:68:99:8e:eb:44:c9:35:52:7d:30:08:8a:
                    3c:5d:70:b8:b8:32:74:fc:a3:25:fb:3b:c1:6f:4b:
                    e7:73:e2:75:17:56:7c:07:8f:fb:85:f7:59:39:3f:
                    91:f1:41:e4:be:3e:7d:cb:79:ea:a7:64:c9:5a:d2:
                    3c:a4:d6:95:62:b1:16:40:93:46:b3:c7:f5:8e:f9:
                    33:5c:8f:23:16:0d:92:29:94:07:34:9d:16:4c:d3:
                    e3:eb:1f:03:cf:99:3b:ba:ed:b9:7d:a5:c3:d5:54:
                    3a:db:61:aa:a6:58:62:45:f0:0b:99:96:57:15:48:
                    7a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:CC:52:CC:B8:2D:A0:B4:26:90:5D:A1:FF:6B:56:62:41:C5:B0:D4
            X509v3 Authority Key Identifier:
                keyid:E5:64:85:EA:00:13:F0:3A:C1:4A:0B:83:59:92:E0:AB:3A:CE:36:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5WSF6gAT8DrBSguDWZLgqzrONu8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/525549-eeef-4df5-91d6-54ca30833dca/1/5WSF6gAT8DrBSguDWZLgqzrONu8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/525549-eeef-4df5-91d6-54ca30833dca/1/5WSF6gAT8DrBSguDWZLgqzrONu8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:56:61:1a:31:5d:c2:7e:24:52:78:4b:69:43:4f:d1:b1:42:
         af:ad:7d:79:75:f1:e8:f1:ed:3a:7a:32:ab:07:b1:cd:d9:9d:
         ef:17:4f:75:6a:eb:e4:87:1d:e3:ad:45:65:b4:41:62:b3:6b:
         f4:47:01:74:db:ac:b2:02:00:4b:bd:7f:8d:38:5d:c2:f7:87:
         69:5e:13:f3:f8:35:5a:33:ea:77:22:db:02:07:ef:ba:f4:52:
         87:78:94:2a:82:c4:37:ff:22:52:dc:8e:c5:12:d2:f6:20:b3:
         73:fb:0e:cf:30:b0:78:ba:47:63:d9:7d:18:97:cf:60:5c:db:
         df:08:d3:67:b2:d1:e3:d9:90:08:8a:d2:31:25:53:a7:f5:d8:
         fa:50:a2:16:58:06:82:e6:15:92:43:53:97:a1:ff:c1:dd:ad:
         89:97:87:fe:37:f0:fc:53:ba:81:3c:e4:ab:12:ca:fa:80:85:
         1a:9c:ce:46:bd:c4:4e:13:e0:97:aa:cb:47:41:99:aa:c7:1a:
         ad:27:b7:39:a9:7a:86:42:63:d3:d5:a8:83:ff:07:73:e0:26:
         f7:0a:5e:03:c3:7c:49:14:e9:c7:ef:f0:85:37:09:dd:12:e8:
         bb:a6:b4:a7:8c:d9:09:0a:0f:de:03:b4:a5:02:bc:7b:13:f9:
         6b:8e:15:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYvWuDzCWbuTJ6XpVbZUU3VvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1NjQ4NWVhMDAxM2YwM2FjMTRhMGI4MzU5OTJlMGFiM2Fj
ZTM2ZWYwHhcNMjMxMTE2MDYwMTIwWhcNMjMxMTE3MDYwMTIwWjAzMTEwLwYDVQQD
EyhiZmNjNTJjY2I4MmRhMGI0MjY5MDVkYTFmZjZiNTY2MjQxYzViMGQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz33glAR1+Z1DKmI3JUXMaGhRprZj
UQjfWrNWZgISMDs9H6Af7WIMBuy54pre4v4LG4pD9gICQdEWi6aa0ovuS2TH46QN
2kWBNKDLaihrExJI2Szf7j56fak4D441O9FMX3BwLwaTMi+pGnG/9KJXny7bg1FI
LeDwAh00YCXQCr4PRBAnhSkNAE1omY7rRMk1Un0wCIo8XXC4uDJ0/KMl+zvBb0vn
c+J1F1Z8B4/7hfdZOT+R8UHkvj59y3nqp2TJWtI8pNaVYrEWQJNGs8f1jvkzXI8j
Fg2SKZQHNJ0WTNPj6x8Dz5k7uu25faXD1VQ622GqplhiRfALmZZXFUh6tQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL/MUsy4LaC0JpBdof9rVmJBxbDUMB8GA1UdIwQY
MBaAFOVkheoAE/A6wUoLg1mS4Ks6zjbvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVdTRjZnQVQ4RHJCU2d1RFdaTGdxenJPTnU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi81MjU1NDktZWVlZi00ZGY1LTkxZDYt
NTRjYTMwODMzZGNhLzEvNVdTRjZnQVQ4RHJCU2d1RFdaTGdxenJPTnU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi81MjU1NDktZWVlZi00ZGY1LTkxZDYtNTRjYTMwODMzZGNh
LzEvNVdTRjZnQVQ4RHJCU2d1RFdaTGdxenJPTnU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPFZhGjFd
wn4kUnhLaUNP0bFCr619eXXx6PHtOnoyqwexzdmd7xdPdWrr5Icd461FZbRBYrNr
9EcBdNussgIAS71/jThdwveHaV4T8/g1WjPqdyLbAgfvuvRSh3iUKoLEN/8iUtyO
xRLS9iCzc/sOzzCweLpHY9l9GJfPYFzb3wjTZ7LR49mQCIrSMSVTp/XY+lCiFlgG
guYVkkNTl6H/wd2tiZeH/jfw/FO6gTzkqxLK+oCFGpzORr3EThPgl6rLR0GZqsca
rSe3Oal6hkJj09Wog/8Hc+Am9wpeA8N8SRTpx+/whTcJ3RLou6a0p4zZCQoP3gO0
pQK8exP5a44VCg==
-----END CERTIFICATE-----