Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/3b1ce5-b58f-4622-a565-190692b700f8/1/QPJXpXvCPp2wmX23Jy-pQJHhfQk.mft
File:                     QPJXpXvCPp2wmX23Jy-pQJHhfQk.mft (raw, json)
Hash identifier:          MIroVSTv6fiTKyQEicIMpXJoUSJY4POon8tVEEZ9PoY=
Subject key identifier:   B0:0D:14:35:23:53:1A:FC:F6:B3:30:84:38:16:F8:79:A1:ED:51:DC
Authority key identifier: 40:F2:57:A5:7B:C2:3E:9D:B0:99:7D:B7:27:2F:A9:40:91:E1:7D:09
Certificate issuer:       /CN=40f257a57bc23e9db0997db7272fa94091e17d09
Certificate serial:       018A830BAD12B42BDA322904BDEF83AB0EF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QPJXpXvCPp2wmX23Jy-pQJHhfQk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/3b1ce5-b58f-4622-a565-190692b700f8/1/QPJXpXvCPp2wmX23Jy-pQJHhfQk.mft
Manifest number:          087F
Signing time:             Mon 11 Sep 2023 07:01:35 +0000
Manifest this update:     Mon 11 Sep 2023 07:01:35 +0000
Manifest next update:     Tue 12 Sep 2023 07:01:35 +0000
Files and hashes:         1: QPJXpXvCPp2wmX23Jy-pQJHhfQk.crl (hash: ygEZmAaoUBok25xzH0Kzi5ekHBMFwV81Xz1uBauKcAk=)
                          2: dCMv5YhU2Vdvu9wkhhLCX49pii8.roa (hash: vy4VSl7+UCGm92/58Qh/id0WcWlv8mLzm3grCohDQ/A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:83:0b:ad:12:b4:2b:da:32:29:04:bd:ef:83:ab:0e:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f257a57bc23e9db0997db7272fa94091e17d09
        Validity
            Not Before: Sep 11 07:01:35 2023 GMT
            Not After : Sep 12 07:01:35 2023 GMT
        Subject: CN=b00d143523531afcf6b330843816f879a1ed51dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:e8:f9:9b:ed:72:fc:e7:af:ae:70:d7:11:a4:
                    46:d6:d2:f4:46:9c:c9:58:b5:d2:ce:67:f3:4e:04:
                    3b:d6:75:9b:9f:68:37:b4:e3:7d:33:72:e9:ac:24:
                    fe:36:fc:d4:f8:1a:54:ec:ff:ed:68:44:4a:a9:ee:
                    e9:50:30:d1:27:0d:f7:50:46:fe:12:49:b8:68:80:
                    63:2f:25:63:b0:17:bd:8c:c6:72:1d:93:a7:4a:54:
                    9e:65:74:49:1c:25:e0:ec:7b:60:c2:03:ce:c5:6d:
                    ff:da:70:ce:80:08:fd:74:55:54:61:45:11:b8:e9:
                    38:c3:3a:a5:16:2b:65:2e:4e:31:bb:cc:00:5e:2b:
                    b6:9d:e8:d8:d6:9a:ee:1b:e7:d3:25:2e:ae:71:84:
                    95:0f:ef:f9:4d:ae:78:60:cf:bf:cd:b2:7c:d8:ae:
                    80:a0:c4:8f:58:05:a0:bb:50:77:71:fc:e2:a1:1c:
                    2a:1a:18:3d:8c:85:a5:56:51:cf:2f:b8:a3:bb:65:
                    c9:70:38:d0:9e:6d:69:b1:ba:b1:ca:32:00:28:8a:
                    21:14:ef:e0:af:e7:d1:71:e5:f3:69:bd:1f:5b:be:
                    6a:2b:e7:18:f6:14:33:21:44:01:46:7d:03:fc:ae:
                    00:31:0b:17:6c:e8:ac:e1:77:de:ec:4e:82:84:80:
                    bd:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:0D:14:35:23:53:1A:FC:F6:B3:30:84:38:16:F8:79:A1:ED:51:DC
            X509v3 Authority Key Identifier:
                keyid:40:F2:57:A5:7B:C2:3E:9D:B0:99:7D:B7:27:2F:A9:40:91:E1:7D:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QPJXpXvCPp2wmX23Jy-pQJHhfQk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/3b1ce5-b58f-4622-a565-190692b700f8/1/QPJXpXvCPp2wmX23Jy-pQJHhfQk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/3b1ce5-b58f-4622-a565-190692b700f8/1/QPJXpXvCPp2wmX23Jy-pQJHhfQk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:5c:20:12:d8:7c:75:41:d7:d0:a5:c3:d5:f1:6d:90:99:df:
         72:38:e4:77:5d:bc:f2:26:6a:c9:36:6c:aa:7a:85:45:56:54:
         44:92:1b:71:96:e0:45:64:39:f6:22:e4:fe:1d:e7:6c:17:4b:
         82:4a:61:65:0f:16:21:39:4a:47:a5:9c:1d:dd:76:19:ad:8a:
         b4:4b:f9:88:3c:bb:3b:9e:9e:4a:6a:99:45:d3:2c:da:e8:7a:
         0c:55:01:96:b6:86:de:e8:8d:f5:49:5c:a9:14:08:cc:0f:14:
         05:1d:15:2a:8f:62:2f:35:df:3a:12:c8:c8:61:d3:fc:2d:35:
         cc:15:e0:0c:6e:09:d6:f4:43:4e:87:ec:6a:81:3a:4c:8d:2e:
         18:87:13:9c:00:3f:3c:fb:94:b7:04:1c:2c:54:85:a4:f7:14:
         db:8d:1b:57:76:5c:b3:76:d4:50:a7:05:4a:9d:5f:66:7e:e1:
         4c:44:ec:44:a4:ad:6e:f5:07:2e:1c:81:85:6a:13:e4:9e:d6:
         11:62:2c:90:7f:a3:52:0e:4b:5d:0a:53:71:d3:ad:5d:60:5e:
         e6:cc:a0:ad:47:96:83:52:f5:d9:c0:79:45:3a:6e:f9:36:39:
         52:48:ce:dd:33:fc:d5:62:11:9a:29:f2:a0:a0:f0:90:26:e2:
         f9:fb:c4:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYqDC60StCvaMikEve+Dqw7yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwZjI1N2E1N2JjMjNlOWRiMDk5N2RiNzI3MmZhOTQwOTFl
MTdkMDkwHhcNMjMwOTExMDcwMTM1WhcNMjMwOTEyMDcwMTM1WjAzMTEwLwYDVQQD
EyhiMDBkMTQzNTIzNTMxYWZjZjZiMzMwODQzODE2Zjg3OWExZWQ1MWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+j5m+1y/OevrnDXEaRG1tL0RpzJ
WLXSzmfzTgQ71nWbn2g3tON9M3LprCT+NvzU+BpU7P/taERKqe7pUDDRJw33UEb+
Ekm4aIBjLyVjsBe9jMZyHZOnSlSeZXRJHCXg7HtgwgPOxW3/2nDOgAj9dFVUYUUR
uOk4wzqlFitlLk4xu8wAXiu2nejY1pruG+fTJS6ucYSVD+/5Ta54YM+/zbJ82K6A
oMSPWAWgu1B3cfzioRwqGhg9jIWlVlHPL7iju2XJcDjQnm1psbqxyjIAKIohFO/g
r+fRceXzab0fW75qK+cY9hQzIUQBRn0D/K4AMQsXbOis4Xfe7E6ChIC98wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLANFDUjUxr89rMwhDgW+Hmh7VHcMB8GA1UdIwQY
MBaAFEDyV6V7wj6dsJl9tycvqUCR4X0JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVBKWHBYdkNQcDJ3bVgyM0p5LXBRSkhoZlFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8zYjFjZTUtYjU4Zi00NjIyLWE1NjUt
MTkwNjkyYjcwMGY4LzEvUVBKWHBYdkNQcDJ3bVgyM0p5LXBRSkhoZlFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi8zYjFjZTUtYjU4Zi00NjIyLWE1NjUtMTkwNjkyYjcwMGY4
LzEvUVBKWHBYdkNQcDJ3bVgyM0p5LXBRSkhoZlFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc1wgEth8
dUHX0KXD1fFtkJnfcjjkd1288iZqyTZsqnqFRVZURJIbcZbgRWQ59iLk/h3nbBdL
gkphZQ8WITlKR6WcHd12Ga2KtEv5iDy7O56eSmqZRdMs2uh6DFUBlraG3uiN9Ulc
qRQIzA8UBR0VKo9iLzXfOhLIyGHT/C01zBXgDG4J1vRDTofsaoE6TI0uGIcTnAA/
PPuUtwQcLFSFpPcU240bV3Zcs3bUUKcFSp1fZn7hTETsRKStbvUHLhyBhWoT5J7W
EWIskH+jUg5LXQpTcdOtXWBe5sygrUeWg1L12cB5RTpu+TY5UkjO3TP81WIRminy
oKDwkCbi+fvEuQ==
-----END CERTIFICATE-----