Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d15599-d7b5-4391-b2c5-ea49312aa1cf/1/9tC8HzUfhdElTdlHh8mNBOD3Fms.mft
File:                     9tC8HzUfhdElTdlHh8mNBOD3Fms.mft (raw, json)
Hash identifier:          tLCrIb+71U+N+G3V/IDm0mak2YLwX4DXpQSwkcH4Ehw=
Subject key identifier:   1E:30:AB:12:72:AE:F9:D4:3F:C4:95:F2:9F:F3:63:A3:5D:DB:ED:72
Authority key identifier: F6:D0:BC:1F:35:1F:85:D1:25:4D:D9:47:87:C9:8D:04:E0:F7:16:6B
Certificate issuer:       /CN=f6d0bc1f351f85d1254dd94787c98d04e0f7166b
Certificate serial:       018AF86E3BC7CB3D6FFD5BB493C5819F16CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9tC8HzUfhdElTdlHh8mNBOD3Fms.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/d15599-d7b5-4391-b2c5-ea49312aa1cf/1/9tC8HzUfhdElTdlHh8mNBOD3Fms.mft
Manifest number:          0871
Signing time:             Wed 04 Oct 2023 02:04:48 +0000
Manifest this update:     Wed 04 Oct 2023 02:04:48 +0000
Manifest next update:     Thu 05 Oct 2023 02:04:48 +0000
Files and hashes:         1: 9tC8HzUfhdElTdlHh8mNBOD3Fms.crl (hash: 8kRLUFZiupBzKk0MUyIE+M0glMF9vU6QE+sHvcPRxCI=)
                          2: qjlfovxB5ec6MVDAoaXuJrOWkrI.roa (hash: B0HUAwW00meafHfv9rVJxp+mw0ZP6qBmcymATEOk4zY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:f8:6e:3b:c7:cb:3d:6f:fd:5b:b4:93:c5:81:9f:16:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6d0bc1f351f85d1254dd94787c98d04e0f7166b
        Validity
            Not Before: Oct  4 02:04:48 2023 GMT
            Not After : Oct  5 02:04:48 2023 GMT
        Subject: CN=1e30ab1272aef9d43fc495f29ff363a35ddbed72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:a6:b8:6f:65:8a:41:df:4a:65:11:68:6f:b0:
                    35:f0:61:e7:0e:ee:ab:6c:f1:6c:5e:61:81:b4:96:
                    7f:62:28:1c:8a:28:31:9b:99:14:d2:9e:ff:e3:c3:
                    12:54:42:dc:9f:03:0e:eb:04:b9:b4:4a:aa:75:18:
                    b1:3e:cf:3e:b6:ae:33:d9:d7:60:b2:6d:e7:be:54:
                    71:e0:c4:12:72:31:3b:7b:74:10:eb:dd:8c:94:70:
                    53:2a:8a:04:cf:53:18:aa:e4:ab:28:8c:c1:55:4b:
                    5f:5e:52:11:b6:34:5e:fe:7d:95:3a:58:2a:82:37:
                    24:9c:6f:9d:13:41:1f:d1:58:2c:56:73:5d:95:5a:
                    6c:b2:3e:fc:54:0f:63:0d:3e:3d:31:b0:fd:3d:6e:
                    42:a3:04:a9:72:f8:23:de:df:fd:56:79:25:8a:ed:
                    fd:a4:6f:12:de:0c:af:91:1e:2a:3a:4f:b3:68:fd:
                    0c:43:bd:61:c2:46:7a:71:50:d3:19:71:66:8b:19:
                    e4:11:e5:22:78:f1:dc:4c:6f:6d:20:d5:8d:48:b4:
                    77:a8:8f:1d:f4:59:12:24:26:1e:7c:49:fc:00:d4:
                    85:ef:9f:91:c5:73:7a:88:19:ed:21:47:63:a1:5e:
                    b5:f2:0b:50:47:42:7f:ca:61:41:d2:6d:c7:dd:61:
                    1a:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:30:AB:12:72:AE:F9:D4:3F:C4:95:F2:9F:F3:63:A3:5D:DB:ED:72
            X509v3 Authority Key Identifier:
                keyid:F6:D0:BC:1F:35:1F:85:D1:25:4D:D9:47:87:C9:8D:04:E0:F7:16:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9tC8HzUfhdElTdlHh8mNBOD3Fms.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d15599-d7b5-4391-b2c5-ea49312aa1cf/1/9tC8HzUfhdElTdlHh8mNBOD3Fms.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d15599-d7b5-4391-b2c5-ea49312aa1cf/1/9tC8HzUfhdElTdlHh8mNBOD3Fms.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:89:a2:da:53:c8:54:a5:74:a4:09:78:3c:46:d1:9f:7e:10:
         db:f3:51:b1:21:00:70:da:bf:66:1e:57:f8:28:a7:eb:f7:78:
         97:18:44:5e:e5:46:21:b5:49:b6:bd:0d:b7:0f:7b:a9:d2:ad:
         e7:aa:28:54:bd:67:6c:dd:83:7e:5b:e9:31:ff:2b:40:a5:5a:
         4d:b3:d2:5b:93:60:d6:82:07:ed:b4:f1:3c:7e:30:c0:52:d3:
         5a:3b:16:08:05:5f:a4:99:22:69:ff:f3:88:e4:55:62:4d:bc:
         90:d8:2a:b0:0e:f5:4f:fa:06:58:b1:41:b4:97:46:d9:b6:d9:
         3d:3a:d8:5f:82:38:f6:06:fa:bc:9a:2b:ca:5d:1b:fe:5e:2d:
         a0:d9:bb:f9:f4:a1:9c:eb:98:55:9d:cf:79:7b:90:60:a2:34:
         ea:13:c3:a5:4e:be:71:11:2c:45:03:d8:98:05:22:35:c0:5a:
         be:48:99:d6:53:fb:5c:92:8c:cd:e8:c0:30:cb:7b:ef:9c:77:
         3e:78:24:32:b9:03:8e:1e:96:8c:09:38:19:fa:73:88:b9:52:
         8d:8a:7c:6c:30:94:d7:01:da:e3:2c:fb:09:37:85:23:ab:d4:
         73:96:13:63:73:e2:ff:8a:aa:c0:59:00:14:8f:8c:5f:16:e0:
         1b:59:af:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYr4bjvHyz1v/Vu0k8WBnxbMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2ZDBiYzFmMzUxZjg1ZDEyNTRkZDk0Nzg3Yzk4ZDA0ZTBm
NzE2NmIwHhcNMjMxMDA0MDIwNDQ4WhcNMjMxMDA1MDIwNDQ4WjAzMTEwLwYDVQQD
EygxZTMwYWIxMjcyYWVmOWQ0M2ZjNDk1ZjI5ZmYzNjNhMzVkZGJlZDcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg6a4b2WKQd9KZRFob7A18GHnDu6r
bPFsXmGBtJZ/Yigciigxm5kU0p7/48MSVELcnwMO6wS5tEqqdRixPs8+tq4z2ddg
sm3nvlRx4MQScjE7e3QQ692MlHBTKooEz1MYquSrKIzBVUtfXlIRtjRe/n2VOlgq
gjcknG+dE0Ef0VgsVnNdlVpssj78VA9jDT49MbD9PW5CowSpcvgj3t/9Vnkliu39
pG8S3gyvkR4qOk+zaP0MQ71hwkZ6cVDTGXFmixnkEeUiePHcTG9tINWNSLR3qI8d
9FkSJCYefEn8ANSF75+RxXN6iBntIUdjoV618gtQR0J/ymFB0m3H3WEakQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB4wqxJyrvnUP8SV8p/zY6Nd2+1yMB8GA1UdIwQY
MBaAFPbQvB81H4XRJU3ZR4fJjQTg9xZrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXRDOEh6VWZoZEVsVGRsSGg4bU5CT0QzRm1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMTU1OTktZDdiNS00MzkxLWIyYzUt
ZWE0OTMxMmFhMWNmLzEvOXRDOEh6VWZoZEVsVGRsSGg4bU5CT0QzRm1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9kMTU1OTktZDdiNS00MzkxLWIyYzUtZWE0OTMxMmFhMWNm
LzEvOXRDOEh6VWZoZEVsVGRsSGg4bU5CT0QzRm1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo4mi2lPI
VKV0pAl4PEbRn34Q2/NRsSEAcNq/Zh5X+Cin6/d4lxhEXuVGIbVJtr0Ntw97qdKt
56ooVL1nbN2DflvpMf8rQKVaTbPSW5Ng1oIH7bTxPH4wwFLTWjsWCAVfpJkiaf/z
iORVYk28kNgqsA71T/oGWLFBtJdG2bbZPTrYX4I49gb6vJoryl0b/l4toNm7+fSh
nOuYVZ3PeXuQYKI06hPDpU6+cREsRQPYmAUiNcBavkiZ1lP7XJKMzejAMMt775x3
PngkMrkDjh6WjAk4GfpziLlSjYp8bDCU1wHa4yz7CTeFI6vUc5YTY3Pi/4qqwFkA
FI+MXxbgG1mvSg==
-----END CERTIFICATE-----