Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/a85b2e-b438-4ce6-a126-fd9916fd957b/1/4yv9zNO7BhAtR6ZX5guNejsERXk.mft
File:                     4yv9zNO7BhAtR6ZX5guNejsERXk.mft (raw, json)
Hash identifier:          96FvU1o7pCUBwE4BJrNJmOyt6Xvffi69DDq5iY35fuc=
Subject key identifier:   CA:E9:49:34:5D:5D:9B:4F:90:AE:99:6D:DA:96:2A:32:95:2C:72:0E
Authority key identifier: E3:2B:FD:CC:D3:BB:06:10:2D:47:A6:57:E6:0B:8D:7A:3B:04:45:79
Certificate issuer:       /CN=e32bfdccd3bb06102d47a657e60b8d7a3b044579
Certificate serial:       018BD7CA2CD0FED5B2635AABE90A6D0FB7F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4yv9zNO7BhAtR6ZX5guNejsERXk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/a85b2e-b438-4ce6-a126-fd9916fd957b/1/4yv9zNO7BhAtR6ZX5guNejsERXk.mft
Manifest number:          076C
Signing time:             Thu 16 Nov 2023 11:00:32 +0000
Manifest this update:     Thu 16 Nov 2023 11:00:32 +0000
Manifest next update:     Fri 17 Nov 2023 11:00:32 +0000
Files and hashes:         1: 4yv9zNO7BhAtR6ZX5guNejsERXk.crl (hash: uvSytmW9dCpJTEZo2r0OTZCiMkM1CD0OxcqgD3k3EkU=)
                          2: eLi3F0zHUOsLBtuR01MhEUbUijQ.roa (hash: 4yR+IVWiwDQO81/sxSo3o6v+caH36o3ykxvpH4KkaEo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:d7:ca:2c:d0:fe:d5:b2:63:5a:ab:e9:0a:6d:0f:b7:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e32bfdccd3bb06102d47a657e60b8d7a3b044579
        Validity
            Not Before: Nov 16 11:00:32 2023 GMT
            Not After : Nov 17 11:00:32 2023 GMT
        Subject: CN=cae949345d5d9b4f90ae996dda962a32952c720e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:97:85:39:39:ab:3e:e7:b1:6e:9a:97:a5:f3:
                    65:26:d4:d0:d1:b2:1b:99:a3:fd:f4:2e:e0:3d:e0:
                    6c:26:12:b8:f3:6c:5a:6f:8b:47:20:f9:22:07:90:
                    9a:20:b7:3f:fc:a1:91:38:3c:f6:bf:2b:da:64:eb:
                    1b:9f:ee:c7:c0:89:98:9f:1a:5d:36:81:07:69:d8:
                    7d:42:46:69:56:ac:f6:83:d4:2a:19:34:a6:4c:80:
                    6e:73:c3:5e:44:30:08:ac:76:fe:a3:2e:cf:69:f9:
                    e9:05:eb:68:ce:24:92:e2:01:8b:c3:25:3c:2c:5a:
                    a6:36:e4:87:5d:fc:d9:ff:90:bd:ca:58:e3:d4:fe:
                    ef:c2:d1:d9:d2:8c:c8:d2:17:26:4c:ac:af:41:c0:
                    54:d3:85:42:a2:d6:f3:0e:1e:ef:66:27:4d:3d:ac:
                    40:25:68:fd:b4:f8:7a:5d:95:1d:b7:c2:d3:cb:79:
                    22:69:ab:40:e2:cb:89:6f:c5:1c:c8:5c:21:2b:31:
                    e4:96:e2:f1:34:a7:f0:91:f1:65:c2:ca:07:34:fe:
                    59:d3:df:f8:b2:52:ea:84:16:09:14:18:db:30:16:
                    1c:43:a3:2d:fe:7e:ee:74:9b:7c:58:d6:a5:aa:98:
                    0d:84:1a:d1:af:f4:1a:ca:ec:d0:ac:68:5a:df:f4:
                    c1:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:E9:49:34:5D:5D:9B:4F:90:AE:99:6D:DA:96:2A:32:95:2C:72:0E
            X509v3 Authority Key Identifier:
                keyid:E3:2B:FD:CC:D3:BB:06:10:2D:47:A6:57:E6:0B:8D:7A:3B:04:45:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4yv9zNO7BhAtR6ZX5guNejsERXk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/a85b2e-b438-4ce6-a126-fd9916fd957b/1/4yv9zNO7BhAtR6ZX5guNejsERXk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/a85b2e-b438-4ce6-a126-fd9916fd957b/1/4yv9zNO7BhAtR6ZX5guNejsERXk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:9d:8e:ad:dc:76:7e:a4:cc:b8:c9:91:4c:d3:2f:b5:34:44:
         28:90:a8:27:9c:8c:5e:8e:41:05:8f:08:43:b8:59:0d:56:46:
         c2:3e:c9:41:04:02:df:78:d1:fe:a6:69:53:e3:27:36:dd:64:
         76:cb:81:fe:b9:38:a2:a9:3a:99:ae:37:0f:70:6b:10:fa:db:
         87:6e:85:37:d7:a9:03:c8:d0:7b:e1:5f:f3:4f:06:58:04:b6:
         fa:f4:e5:20:d3:18:4f:16:6a:f5:20:fc:f0:40:90:b4:a8:89:
         f1:33:19:86:8a:64:ba:a8:2a:64:54:bf:5b:65:e7:b3:fc:05:
         cc:50:ba:b5:e4:88:b5:01:38:ed:ef:d9:cb:d6:e7:d8:a9:cb:
         23:f4:b5:f0:33:fd:d5:ba:9d:9b:21:8f:c8:7d:e1:cf:cb:4e:
         d9:92:94:15:97:47:f9:1c:b6:d5:1b:83:15:92:52:f7:ba:59:
         00:0d:85:8d:4f:55:98:6b:b8:50:b2:5b:59:db:79:9a:f8:c7:
         6c:c0:16:51:02:ed:89:9b:eb:b2:1e:8e:f5:e3:87:b3:53:2c:
         08:01:f2:4b:dc:e2:ec:19:9f:a2:67:d9:0e:f9:a7:af:aa:b4:
         3f:b2:35:2f:99:f7:79:df:cc:9e:ff:4d:04:72:dc:69:b2:43:
         f5:47:9a:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYvXyizQ/tWyY1qr6QptD7f2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzMmJmZGNjZDNiYjA2MTAyZDQ3YTY1N2U2MGI4ZDdhM2Iw
NDQ1NzkwHhcNMjMxMTE2MTEwMDMyWhcNMjMxMTE3MTEwMDMyWjAzMTEwLwYDVQQD
EyhjYWU5NDkzNDVkNWQ5YjRmOTBhZTk5NmRkYTk2MmEzMjk1MmM3MjBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspeFOTmrPuexbpqXpfNlJtTQ0bIb
maP99C7gPeBsJhK482xab4tHIPkiB5CaILc//KGRODz2vyvaZOsbn+7HwImYnxpd
NoEHadh9QkZpVqz2g9QqGTSmTIBuc8NeRDAIrHb+oy7PafnpBetoziSS4gGLwyU8
LFqmNuSHXfzZ/5C9yljj1P7vwtHZ0ozI0hcmTKyvQcBU04VCotbzDh7vZidNPaxA
JWj9tPh6XZUdt8LTy3kiaatA4suJb8UcyFwhKzHkluLxNKfwkfFlwsoHNP5Z09/4
slLqhBYJFBjbMBYcQ6Mt/n7udJt8WNalqpgNhBrRr/QayuzQrGha3/TBwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMrpSTRdXZtPkK6ZbdqWKjKVLHIOMB8GA1UdIwQY
MBaAFOMr/czTuwYQLUemV+YLjXo7BEV5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHl2OXpOTzdCaEF0UjZaWDVndU5lanNFUlhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9hODViMmUtYjQzOC00Y2U2LWExMjYt
ZmQ5OTE2ZmQ5NTdiLzEvNHl2OXpOTzdCaEF0UjZaWDVndU5lanNFUlhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi9hODViMmUtYjQzOC00Y2U2LWExMjYtZmQ5OTE2ZmQ5NTdi
LzEvNHl2OXpOTzdCaEF0UjZaWDVndU5lanNFUlhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADJ2Ordx2
fqTMuMmRTNMvtTREKJCoJ5yMXo5BBY8IQ7hZDVZGwj7JQQQC33jR/qZpU+MnNt1k
dsuB/rk4oqk6ma43D3BrEPrbh26FN9epA8jQe+Ff808GWAS2+vTlINMYTxZq9SD8
8ECQtKiJ8TMZhopkuqgqZFS/W2Xns/wFzFC6teSItQE47e/Zy9bn2KnLI/S18DP9
1bqdmyGPyH3hz8tO2ZKUFZdH+Ry21RuDFZJS97pZAA2FjU9VmGu4ULJbWdt5mvjH
bMAWUQLtiZvrsh6O9eOHs1MsCAHyS9zi7BmfomfZDvmnr6q0P7I1L5n3ed/Mnv9N
BHLcabJD9UeaKQ==
-----END CERTIFICATE-----