Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/7a109c-b418-41f1-b119-7dec6ba79218/1/0kxlbNkq7wWWnVr2CWvg35isw3A.mft
File:                     0kxlbNkq7wWWnVr2CWvg35isw3A.mft (raw, json)
Hash identifier:          4i/HQLyeES5w8l1MMgSjT9pfvlpJQYc9QsRS6kfOUX0=
Subject key identifier:   6D:1E:8A:14:F2:EA:0B:1E:17:BC:D3:98:DE:82:BC:F9:21:84:6B:61
Authority key identifier: D2:4C:65:6C:D9:2A:EF:05:96:9D:5A:F6:09:6B:E0:DF:98:AC:C3:70
Certificate issuer:       /CN=d24c656cd92aef05969d5af6096be0df98acc370
Certificate serial:       018A9247E16481176C54D7871F11C426BDBE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0kxlbNkq7wWWnVr2CWvg35isw3A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/7a109c-b418-41f1-b119-7dec6ba79218/1/0kxlbNkq7wWWnVr2CWvg35isw3A.mft
Manifest number:          0861
Signing time:             Thu 14 Sep 2023 06:01:38 +0000
Manifest this update:     Thu 14 Sep 2023 06:01:38 +0000
Manifest next update:     Fri 15 Sep 2023 06:01:38 +0000
Files and hashes:         1: 0kxlbNkq7wWWnVr2CWvg35isw3A.crl (hash: FfyY0eeRlOsdV4x1OYvkHLClsy9ohpsGYTlII5WrdBo=)
                          2: oZNkoVA1m8pJHem5C8P9z2wuyys.roa (hash: 90KgKy8c9BoROCAd2+hUSmFlj1SDIIT1SAaG+kI3NRE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:92:47:e1:64:81:17:6c:54:d7:87:1f:11:c4:26:bd:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d24c656cd92aef05969d5af6096be0df98acc370
        Validity
            Not Before: Sep 14 06:01:38 2023 GMT
            Not After : Sep 15 06:01:38 2023 GMT
        Subject: CN=6d1e8a14f2ea0b1e17bcd398de82bcf921846b61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e9:48:20:52:8c:ce:0a:6b:a5:df:cd:14:08:
                    2d:3e:be:db:d8:3b:33:ca:b8:08:a6:17:06:43:c2:
                    0f:7f:57:13:27:89:0a:dd:01:0b:8b:8c:d5:b3:d8:
                    08:5e:a5:3c:96:d9:4d:16:06:c8:37:d4:fa:a7:0d:
                    8f:2a:7f:13:da:e9:05:fe:55:9b:31:30:17:a3:7d:
                    24:55:27:d5:e6:4b:35:db:59:59:9b:ca:96:de:6b:
                    ab:56:52:12:68:e6:5b:42:bf:33:1d:6c:3d:66:cd:
                    7d:a7:3d:17:09:26:88:fa:23:f9:7e:f5:55:b1:c9:
                    26:c1:64:26:2c:4b:c9:cf:e3:ea:29:66:15:86:08:
                    f1:56:89:34:c8:d7:aa:86:8e:eb:bf:67:1e:1c:40:
                    f4:a9:b6:7c:45:2a:4e:d6:53:cc:87:91:66:ab:a5:
                    e1:79:9f:b3:11:a3:f2:d5:9f:26:ea:75:a7:06:7a:
                    9d:6a:51:97:ec:50:ab:48:78:f9:ed:6e:86:a8:77:
                    b8:22:47:d3:cf:78:c4:f3:4a:3f:71:dd:64:cb:82:
                    02:a3:10:3d:ca:96:7b:3e:56:71:93:bc:4d:43:a7:
                    c9:8c:ac:e6:bf:c3:ee:ca:95:ca:65:2d:f2:ef:d5:
                    f6:a5:e2:2c:55:9f:0b:4d:21:07:11:8a:f9:2a:db:
                    45:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:1E:8A:14:F2:EA:0B:1E:17:BC:D3:98:DE:82:BC:F9:21:84:6B:61
            X509v3 Authority Key Identifier:
                keyid:D2:4C:65:6C:D9:2A:EF:05:96:9D:5A:F6:09:6B:E0:DF:98:AC:C3:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0kxlbNkq7wWWnVr2CWvg35isw3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/7a109c-b418-41f1-b119-7dec6ba79218/1/0kxlbNkq7wWWnVr2CWvg35isw3A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/7a109c-b418-41f1-b119-7dec6ba79218/1/0kxlbNkq7wWWnVr2CWvg35isw3A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:76:88:25:45:52:26:65:19:c7:40:6b:53:af:4a:de:5d:96:
         79:00:f3:2a:c0:72:1c:62:1a:1d:ef:4a:1d:09:f3:5d:2e:84:
         e4:f2:b9:c0:8e:45:02:a4:ea:f6:d5:d6:1f:b2:c8:fc:0d:42:
         22:7c:75:8a:60:bf:2d:dd:d8:96:8f:21:41:c4:33:76:95:48:
         1f:d8:ac:7e:11:49:45:a2:f7:20:00:99:ab:f5:a6:fa:45:c1:
         3f:c4:1d:26:c7:8e:75:16:76:c5:1e:54:4f:a3:7e:24:4d:46:
         e2:19:1a:4e:0e:72:e8:02:8f:20:8c:e5:d9:9b:02:b4:de:78:
         a6:be:c3:39:14:d7:b3:61:25:a9:73:e2:bd:4c:4a:9d:af:5a:
         46:6d:04:50:47:47:33:86:ed:9c:10:6e:c9:99:e6:94:b5:c8:
         56:cd:8e:2e:42:7f:28:9d:c1:e8:f5:d0:83:8d:32:ed:80:85:
         92:81:7e:a5:53:8d:3b:cf:7a:fb:91:78:11:c0:f0:d0:f7:88:
         aa:40:41:1e:7c:5a:ee:68:28:91:17:9e:6f:d7:04:70:09:3c:
         60:6d:20:9e:8d:c8:d5:53:6f:f7:e7:86:d1:73:32:27:f0:9b:
         92:b1:cf:33:6c:4d:55:bc:f3:30:7b:6e:80:05:a2:39:00:39:
         41:6c:c8:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYqSR+FkgRdsVNeHHxHEJr2+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyNGM2NTZjZDkyYWVmMDU5NjlkNWFmNjA5NmJlMGRmOThh
Y2MzNzAwHhcNMjMwOTE0MDYwMTM4WhcNMjMwOTE1MDYwMTM4WjAzMTEwLwYDVQQD
Eyg2ZDFlOGExNGYyZWEwYjFlMTdiY2QzOThkZTgyYmNmOTIxODQ2YjYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAselIIFKMzgprpd/NFAgtPr7b2Dsz
yrgIphcGQ8IPf1cTJ4kK3QELi4zVs9gIXqU8ltlNFgbIN9T6pw2PKn8T2ukF/lWb
MTAXo30kVSfV5ks121lZm8qW3murVlISaOZbQr8zHWw9Zs19pz0XCSaI+iP5fvVV
sckmwWQmLEvJz+PqKWYVhgjxVok0yNeqho7rv2ceHED0qbZ8RSpO1lPMh5Fmq6Xh
eZ+zEaPy1Z8m6nWnBnqdalGX7FCrSHj57W6GqHe4IkfTz3jE80o/cd1ky4ICoxA9
ypZ7PlZxk7xNQ6fJjKzmv8PuypXKZS3y79X2peIsVZ8LTSEHEYr5KttFewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG0eihTy6gseF7zTmN6CvPkhhGthMB8GA1UdIwQY
MBaAFNJMZWzZKu8Flp1a9glr4N+YrMNwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGt4bGJOa3E3d1dXblZyMkNXdmczNWlzdzNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC83YTEwOWMtYjQxOC00MWYxLWIxMTkt
N2RlYzZiYTc5MjE4LzEvMGt4bGJOa3E3d1dXblZyMkNXdmczNWlzdzNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC83YTEwOWMtYjQxOC00MWYxLWIxMTktN2RlYzZiYTc5MjE4
LzEvMGt4bGJOa3E3d1dXblZyMkNXdmczNWlzdzNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKnaIJUVS
JmUZx0BrU69K3l2WeQDzKsByHGIaHe9KHQnzXS6E5PK5wI5FAqTq9tXWH7LI/A1C
Inx1imC/Ld3Ylo8hQcQzdpVIH9isfhFJRaL3IACZq/Wm+kXBP8QdJseOdRZ2xR5U
T6N+JE1G4hkaTg5y6AKPIIzl2ZsCtN54pr7DORTXs2ElqXPivUxKna9aRm0EUEdH
M4btnBBuyZnmlLXIVs2OLkJ/KJ3B6PXQg40y7YCFkoF+pVONO896+5F4EcDw0PeI
qkBBHnxa7mgokReeb9cEcAk8YG0gno3I1VNv9+eG0XMyJ/CbkrHPM2xNVbzzMHtu
gAWiOQA5QWzIag==
-----END CERTIFICATE-----