Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/ba0476-6fcd-4fe7-aa78-7d19d1fa3bf1/1/_u0jBFmowlEqRL1vMU3NIxDBdJU.mft
File:                     _u0jBFmowlEqRL1vMU3NIxDBdJU.mft (raw, json)
Hash identifier:          nZGU3qWP3FInqI4tRWVGe+JgeDvg3uKWFH4h7+7lv8o=
Subject key identifier:   D1:8F:C2:81:90:F7:73:7F:F4:78:C4:FF:1C:FF:71:73:67:03:25:4A
Authority key identifier: FE:ED:23:04:59:A8:C2:51:2A:44:BD:6F:31:4D:CD:23:10:C1:74:95
Certificate issuer:       /CN=feed230459a8c2512a44bd6f314dcd2310c17495
Certificate serial:       018BD6EF80B3A872B9145AD426A418476241
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_u0jBFmowlEqRL1vMU3NIxDBdJU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/ba0476-6fcd-4fe7-aa78-7d19d1fa3bf1/1/_u0jBFmowlEqRL1vMU3NIxDBdJU.mft
Manifest number:          0431
Signing time:             Thu 16 Nov 2023 07:01:42 +0000
Manifest this update:     Thu 16 Nov 2023 07:01:42 +0000
Manifest next update:     Fri 17 Nov 2023 07:01:42 +0000
Files and hashes:         1: _u0jBFmowlEqRL1vMU3NIxDBdJU.crl (hash: EBSTohB9oNGg73QeEXOSu/+cXqjetpU56xWHGEOreEE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:d6:ef:80:b3:a8:72:b9:14:5a:d4:26:a4:18:47:62:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=feed230459a8c2512a44bd6f314dcd2310c17495
        Validity
            Not Before: Nov 16 07:01:42 2023 GMT
            Not After : Nov 17 07:01:42 2023 GMT
        Subject: CN=d18fc28190f7737ff478c4ff1cff71736703254a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:c7:ae:a6:2a:fd:81:df:6b:e7:2f:8b:e6:17:
                    d3:25:a0:e1:be:d6:b2:e5:04:19:ac:8c:16:95:9d:
                    ea:91:0c:e9:b2:4e:3b:b4:93:bc:52:df:53:50:32:
                    52:ae:54:7f:64:df:05:5b:85:22:3a:4f:14:8a:b4:
                    ff:d3:93:17:ea:2e:5a:10:47:c1:6e:8c:f1:16:9a:
                    3a:e3:c1:71:5a:a9:fe:62:d4:3a:89:c0:7f:56:6d:
                    86:75:17:f8:ef:48:c3:47:a3:9f:6d:bb:11:36:c1:
                    87:8f:4b:21:33:5f:96:24:fd:75:7a:71:b6:63:84:
                    f9:a6:2e:09:89:87:4b:7c:30:ca:a5:48:42:29:89:
                    b7:9f:ff:9b:13:2c:1f:57:1c:8c:69:4f:00:48:66:
                    16:a4:96:da:f5:d5:9c:05:12:c9:58:8b:d1:5b:60:
                    58:93:b2:14:78:03:a1:bd:9f:d8:58:47:74:0f:95:
                    37:c3:5c:a4:3f:2c:12:b1:76:01:d0:41:7d:b0:3a:
                    36:c0:73:98:a8:87:b8:bf:1c:8c:3e:05:87:0d:2a:
                    12:4f:84:a5:50:a7:1b:73:fd:ef:4f:eb:9f:6c:dc:
                    38:a3:51:4b:c7:46:9d:f2:4a:c7:5f:36:f6:7a:28:
                    72:0b:a1:9e:c6:50:cd:db:82:8d:19:a8:b8:c4:35:
                    a4:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:8F:C2:81:90:F7:73:7F:F4:78:C4:FF:1C:FF:71:73:67:03:25:4A
            X509v3 Authority Key Identifier:
                keyid:FE:ED:23:04:59:A8:C2:51:2A:44:BD:6F:31:4D:CD:23:10:C1:74:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_u0jBFmowlEqRL1vMU3NIxDBdJU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ba0476-6fcd-4fe7-aa78-7d19d1fa3bf1/1/_u0jBFmowlEqRL1vMU3NIxDBdJU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ba0476-6fcd-4fe7-aa78-7d19d1fa3bf1/1/_u0jBFmowlEqRL1vMU3NIxDBdJU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:c1:1c:ab:02:de:b2:f3:8f:ef:c0:ff:28:d3:91:07:68:97:
         b6:93:85:f2:91:e1:e0:bd:e1:93:dd:0b:be:7d:1f:41:31:f5:
         9a:a5:eb:2b:e0:35:91:d2:d5:c2:13:95:6d:a3:e9:3a:88:83:
         89:d9:cd:e4:60:fd:46:07:85:f9:41:84:88:50:08:f4:7b:6f:
         86:ed:c2:c7:fd:8c:a8:48:bf:0b:9c:14:9d:bb:a6:a2:59:37:
         dc:93:ea:1d:02:01:67:e3:f5:77:f7:3a:47:c8:37:c8:03:a0:
         78:db:ae:b1:5c:e2:08:7d:80:47:36:fe:46:79:de:bf:8b:c6:
         84:e5:9a:2d:36:60:26:2d:01:7d:66:3b:29:77:85:d9:84:e6:
         ad:f3:85:d9:06:e4:32:ba:2b:6d:c7:58:04:74:21:24:60:7d:
         39:d4:bf:55:99:2f:72:9c:83:b7:94:80:d6:ae:22:97:17:a0:
         14:fe:6a:af:46:24:47:d8:85:4d:86:6c:d1:ae:9e:c0:9b:c0:
         07:b8:15:d5:43:44:25:93:94:bb:79:b1:94:90:1c:0b:41:c4:
         8a:84:72:fa:10:2f:33:53:56:f0:0b:67:1c:3f:8a:22:e5:0d:
         94:d4:bf:6d:c5:9a:6b:06:6b:6a:3a:a5:a8:93:32:b5:30:ed:
         2d:a1:87:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYvW74CzqHK5FFrUJqQYR2JBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlZWQyMzA0NTlhOGMyNTEyYTQ0YmQ2ZjMxNGRjZDIzMTBj
MTc0OTUwHhcNMjMxMTE2MDcwMTQyWhcNMjMxMTE3MDcwMTQyWjAzMTEwLwYDVQQD
EyhkMThmYzI4MTkwZjc3MzdmZjQ3OGM0ZmYxY2ZmNzE3MzY3MDMyNTRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhceupir9gd9r5y+L5hfTJaDhvtay
5QQZrIwWlZ3qkQzpsk47tJO8Ut9TUDJSrlR/ZN8FW4UiOk8UirT/05MX6i5aEEfB
bozxFpo648FxWqn+YtQ6icB/Vm2GdRf470jDR6OfbbsRNsGHj0shM1+WJP11enG2
Y4T5pi4JiYdLfDDKpUhCKYm3n/+bEywfVxyMaU8ASGYWpJba9dWcBRLJWIvRW2BY
k7IUeAOhvZ/YWEd0D5U3w1ykPywSsXYB0EF9sDo2wHOYqIe4vxyMPgWHDSoST4Sl
UKcbc/3vT+ufbNw4o1FLx0ad8krHXzb2eihyC6GexlDN24KNGai4xDWkiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNGPwoGQ93N/9HjE/xz/cXNnAyVKMB8GA1UdIwQY
MBaAFP7tIwRZqMJRKkS9bzFNzSMQwXSVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3UwakJGbW93bEVxUkwxdk1VM05JeERCZEpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9iYTA0NzYtNmZjZC00ZmU3LWFhNzgt
N2QxOWQxZmEzYmYxLzEvX3UwakJGbW93bEVxUkwxdk1VM05JeERCZEpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9iYTA0NzYtNmZjZC00ZmU3LWFhNzgtN2QxOWQxZmEzYmYx
LzEvX3UwakJGbW93bEVxUkwxdk1VM05JeERCZEpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAccEcqwLe
svOP78D/KNORB2iXtpOF8pHh4L3hk90Lvn0fQTH1mqXrK+A1kdLVwhOVbaPpOoiD
idnN5GD9RgeF+UGEiFAI9Htvhu3Cx/2MqEi/C5wUnbumolk33JPqHQIBZ+P1d/c6
R8g3yAOgeNuusVziCH2ARzb+Rnnev4vGhOWaLTZgJi0BfWY7KXeF2YTmrfOF2Qbk
MrorbcdYBHQhJGB9OdS/VZkvcpyDt5SA1q4ilxegFP5qr0YkR9iFTYZs0a6ewJvA
B7gV1UNEJZOUu3mxlJAcC0HEioRy+hAvM1NW8AtnHD+KIuUNlNS/bcWaawZrajql
qJMytTDtLaGHuA==
-----END CERTIFICATE-----