Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/1a529e-0050-4637-9820-55eb114866c0/1/AJQhllmVrx1l6OmpiiHcJoHZifE.mft
File:                     AJQhllmVrx1l6OmpiiHcJoHZifE.mft (raw, json)
Hash identifier:          qFmQ+kmlq3aWRE+9jqhslwTs0Lqlr7mR7d2fb1fGTx4=
Subject key identifier:   90:22:10:10:BE:8E:D4:54:CD:8E:D8:2C:E4:6B:8C:61:69:0B:50:2C
Authority key identifier: 00:94:21:96:59:95:AF:1D:65:E8:E9:A9:8A:21:DC:26:81:D9:89:F1
Certificate issuer:       /CN=009421965995af1d65e8e9a98a21dc2681d989f1
Certificate serial:       018BEAAC3CC5BBD835679178EEFC8F6420CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AJQhllmVrx1l6OmpiiHcJoHZifE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/1a529e-0050-4637-9820-55eb114866c0/1/AJQhllmVrx1l6OmpiiHcJoHZifE.mft
Manifest number:          0866
Signing time:             Mon 20 Nov 2023 03:00:38 +0000
Manifest this update:     Mon 20 Nov 2023 03:00:38 +0000
Manifest next update:     Tue 21 Nov 2023 03:00:38 +0000
Files and hashes:         1: AJQhllmVrx1l6OmpiiHcJoHZifE.crl (hash: Bf+FdB9bYZ6cB4JORcyVUZ9fEinBHOKJHsBJ4uF9lXA=)
                          2: I0x7D6lERbVDC9CZa4y1z7rfK14.roa (hash: N1Ai5hM2WqJ5BxOJbalUFe67S5vu1PXstLON6rKT8OE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:ea:ac:3c:c5:bb:d8:35:67:91:78:ee:fc:8f:64:20:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=009421965995af1d65e8e9a98a21dc2681d989f1
        Validity
            Not Before: Nov 20 03:00:38 2023 GMT
            Not After : Nov 21 03:00:38 2023 GMT
        Subject: CN=90221010be8ed454cd8ed82ce46b8c61690b502c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:45:68:97:08:c3:d4:63:c0:d7:be:6a:96:8c:
                    45:34:8b:57:3a:94:04:0f:b2:28:67:15:df:b5:eb:
                    e2:06:43:4e:1b:bd:5a:89:4c:b0:4e:85:36:d9:ee:
                    f8:31:e8:c5:a0:6a:d1:24:44:bf:c3:10:b7:2c:90:
                    d6:24:70:c1:0a:0d:b3:6b:08:00:a1:e0:35:c1:13:
                    02:1b:dd:a1:bc:97:61:3e:28:98:cb:2d:6b:60:3d:
                    85:02:b2:09:2c:a5:2f:13:b2:2d:71:34:c9:41:99:
                    5a:38:b8:f2:18:1f:61:2a:f1:0e:dd:95:fa:79:a1:
                    e3:b7:1c:ce:14:f1:8b:02:00:67:42:88:38:88:9c:
                    83:89:ee:91:ff:fd:9c:e3:83:54:a1:de:c2:55:70:
                    0e:7a:c1:e9:3e:7a:e8:1a:7c:97:93:90:b8:30:f8:
                    0c:71:5f:ef:4e:70:8e:17:62:80:19:2b:d7:00:ba:
                    de:ab:34:b9:b8:b2:9d:6c:e9:e1:1c:78:22:a2:19:
                    f6:0b:81:f7:da:20:1b:55:be:d9:d3:d0:89:fc:bd:
                    53:6d:52:38:69:97:58:81:bb:01:7b:1e:9d:af:b7:
                    bb:d3:46:b5:15:6c:46:e5:0f:67:53:3b:39:20:17:
                    8c:dd:a2:7c:23:23:74:3b:dd:20:af:a8:ba:ba:3c:
                    63:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:22:10:10:BE:8E:D4:54:CD:8E:D8:2C:E4:6B:8C:61:69:0B:50:2C
            X509v3 Authority Key Identifier:
                keyid:00:94:21:96:59:95:AF:1D:65:E8:E9:A9:8A:21:DC:26:81:D9:89:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJQhllmVrx1l6OmpiiHcJoHZifE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/1a529e-0050-4637-9820-55eb114866c0/1/AJQhllmVrx1l6OmpiiHcJoHZifE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/1a529e-0050-4637-9820-55eb114866c0/1/AJQhllmVrx1l6OmpiiHcJoHZifE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e3:2c:77:f7:1e:f8:39:e8:90:4b:d8:08:9f:df:f8:74:08:a2:
         60:e8:14:bb:33:d6:4c:9a:89:fb:61:4e:76:c3:a4:6d:59:36:
         66:66:86:5c:84:33:58:3e:75:58:23:f6:e9:4d:c8:aa:67:8f:
         04:2b:4d:70:b7:f6:51:be:e9:d6:b9:2b:0f:26:73:dd:dc:b0:
         b2:e5:fd:c4:15:7c:5a:0a:bf:1e:18:ee:5f:fe:99:95:b3:85:
         30:f4:c2:95:13:89:89:cd:a5:6e:ca:85:20:6b:5b:2e:e6:fc:
         88:2a:79:9e:67:65:91:e1:f5:26:f8:75:ff:e1:52:e8:dd:15:
         d1:45:6f:6c:39:45:cd:ee:2b:8e:b5:9e:95:88:46:3b:26:c5:
         ae:8a:e3:b8:f2:40:9a:97:aa:23:99:9e:cd:76:9f:c4:27:db:
         40:52:95:cd:ac:d1:7c:8b:5d:0d:95:f2:a0:44:f8:38:32:40:
         4e:6a:5d:5f:08:e3:ae:a4:e5:db:be:87:de:27:80:44:b4:88:
         22:84:50:b5:8e:54:53:b8:79:af:7a:21:76:8e:d7:01:a1:ac:
         2a:e0:8c:e7:48:2d:d9:8e:67:96:ec:b7:be:70:46:de:4a:23:
         9d:99:f6:83:a0:0f:91:45:6e:0f:97:6c:e4:32:f4:20:6e:2e:
         63:b8:28:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYvqrDzFu9g1Z5F47vyPZCDNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwOTQyMTk2NTk5NWFmMWQ2NWU4ZTlhOThhMjFkYzI2ODFk
OTg5ZjEwHhcNMjMxMTIwMDMwMDM4WhcNMjMxMTIxMDMwMDM4WjAzMTEwLwYDVQQD
Eyg5MDIyMTAxMGJlOGVkNDU0Y2Q4ZWQ4MmNlNDZiOGM2MTY5MGI1MDJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUVolwjD1GPA175qloxFNItXOpQE
D7IoZxXfteviBkNOG71aiUywToU22e74MejFoGrRJES/wxC3LJDWJHDBCg2zawgA
oeA1wRMCG92hvJdhPiiYyy1rYD2FArIJLKUvE7ItcTTJQZlaOLjyGB9hKvEO3ZX6
eaHjtxzOFPGLAgBnQog4iJyDie6R//2c44NUod7CVXAOesHpPnroGnyXk5C4MPgM
cV/vTnCOF2KAGSvXALreqzS5uLKdbOnhHHgiohn2C4H32iAbVb7Z09CJ/L1TbVI4
aZdYgbsBex6dr7e700a1FWxG5Q9nUzs5IBeM3aJ8IyN0O90gr6i6ujxjwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJAiEBC+jtRUzY7YLORrjGFpC1AsMB8GA1UdIwQY
MBaAFACUIZZZla8dZejpqYoh3CaB2YnxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUpRaGxsbVZyeDFsNk9tcGlpSGNKb0haaWZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8xYTUyOWUtMDA1MC00NjM3LTk4MjAt
NTVlYjExNDg2NmMwLzEvQUpRaGxsbVZyeDFsNk9tcGlpSGNKb0haaWZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS8xYTUyOWUtMDA1MC00NjM3LTk4MjAtNTVlYjExNDg2NmMw
LzEvQUpRaGxsbVZyeDFsNk9tcGlpSGNKb0haaWZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4yx39x74
OeiQS9gIn9/4dAiiYOgUuzPWTJqJ+2FOdsOkbVk2ZmaGXIQzWD51WCP26U3IqmeP
BCtNcLf2Ub7p1rkrDyZz3dywsuX9xBV8Wgq/HhjuX/6ZlbOFMPTClROJic2lbsqF
IGtbLub8iCp5nmdlkeH1Jvh1/+FS6N0V0UVvbDlFze4rjrWelYhGOybFrorjuPJA
mpeqI5mezXafxCfbQFKVzazRfItdDZXyoET4ODJATmpdXwjjrqTl276H3ieARLSI
IoRQtY5UU7h5r3ohdo7XAaGsKuCM50gt2Y5nluy3vnBG3kojnZn2g6APkUVuD5ds
5DL0IG4uY7goJQ==
-----END CERTIFICATE-----