Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/038a04-4661-4bed-8a17-b5260b44a7bd/1/63XAq130262KekQ5ff1rlXly_vE.mft
File:                     63XAq130262KekQ5ff1rlXly_vE.mft (raw, json)
Hash identifier:          9r7ztzr4OMRvyMHCPdhYk1QGEl0iJcoHj2vHq5qjZNg=
Subject key identifier:   BE:A7:4B:54:DC:1C:F3:E3:EB:21:E3:17:61:03:EB:46:1E:9B:0E:51
Authority key identifier: EB:75:C0:AB:5D:F4:DB:AD:8A:7A:44:39:7D:FD:6B:95:79:72:FE:F1
Certificate issuer:       /CN=eb75c0ab5df4dbad8a7a44397dfd6b957972fef1
Certificate serial:       0187FF4A2463B60B6DDCEE58BEAA6F61AE3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/63XAq130262KekQ5ff1rlXly_vE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/038a04-4661-4bed-8a17-b5260b44a7bd/1/63XAq130262KekQ5ff1rlXly_vE.mft
Manifest number:          07F9
Signing time:             Tue 09 May 2023 06:54:21 +0000
Manifest this update:     Tue 09 May 2023 06:54:21 +0000
Manifest next update:     Wed 10 May 2023 06:54:21 +0000
Files and hashes:         1: 63XAq130262KekQ5ff1rlXly_vE.crl (hash: 7dBb/uffPAxlZPGDTYukVzw2hkMxRspns1a+kPTQXMw=)
                          2: MaxESoJDLSvAa5QjznS4BoOG2dA.roa (hash: XLRqsng5mJ0e9g/SxI2hYvuuFwn+8SWPvK0wcdFF4Hc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:ff:4a:24:63:b6:0b:6d:dc:ee:58:be:aa:6f:61:ae:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb75c0ab5df4dbad8a7a44397dfd6b957972fef1
        Validity
            Not Before: May  9 06:54:21 2023 GMT
            Not After : May 10 06:54:21 2023 GMT
        Subject: CN=bea74b54dc1cf3e3eb21e3176103eb461e9b0e51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c6:e9:6c:51:4f:e2:01:15:d0:28:7d:36:f2:
                    07:71:95:b1:ab:0e:74:dd:ad:05:86:cf:d8:b0:1a:
                    0d:17:c0:01:95:aa:35:1a:3c:56:a3:09:38:24:6a:
                    b3:b5:de:ae:08:10:0b:e4:ec:98:cf:be:46:18:a6:
                    34:cf:3c:d4:92:19:62:a2:1f:db:17:d2:71:d8:c9:
                    91:4f:63:cc:f3:8e:e2:32:c1:48:d9:cb:5b:62:51:
                    02:5d:43:a3:ed:0d:17:37:6c:9e:1e:76:1e:1b:1b:
                    c8:2e:26:2b:e0:03:b4:2c:db:22:b1:64:14:6d:95:
                    6d:df:12:b9:30:ab:31:90:74:98:87:2d:24:bd:fa:
                    9a:e3:28:d4:d2:ba:7d:af:77:a9:28:42:3e:48:ea:
                    ff:87:d1:49:1e:3f:9a:57:0e:8d:4e:ee:6b:38:c5:
                    82:55:3b:31:92:b4:2e:1c:2e:62:9d:f7:38:51:5c:
                    26:19:76:ba:24:cf:8a:f1:47:26:f9:c7:87:77:40:
                    89:f0:9f:5a:1e:5f:db:62:e5:5f:98:60:83:b7:a2:
                    39:e3:82:00:d2:c8:e1:c0:33:77:18:70:14:7e:7e:
                    81:07:bd:75:6c:d1:3c:78:10:d5:cf:b7:fb:e8:ef:
                    76:28:75:4b:3f:60:e6:3d:ef:42:4c:61:37:cf:18:
                    f2:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:A7:4B:54:DC:1C:F3:E3:EB:21:E3:17:61:03:EB:46:1E:9B:0E:51
            X509v3 Authority Key Identifier:
                keyid:EB:75:C0:AB:5D:F4:DB:AD:8A:7A:44:39:7D:FD:6B:95:79:72:FE:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/63XAq130262KekQ5ff1rlXly_vE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/038a04-4661-4bed-8a17-b5260b44a7bd/1/63XAq130262KekQ5ff1rlXly_vE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/038a04-4661-4bed-8a17-b5260b44a7bd/1/63XAq130262KekQ5ff1rlXly_vE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:f5:ed:f5:47:11:77:1e:b7:5e:a5:f0:7c:4e:cd:82:67:95:
         75:53:01:d6:70:69:5c:80:a7:86:f6:03:36:ee:42:74:17:36:
         71:26:fe:0e:4b:96:95:96:86:53:fe:2f:24:c3:6c:03:a5:2d:
         4f:8b:af:ab:32:98:0e:eb:68:db:bc:a4:de:69:46:6b:35:19:
         a2:df:7c:13:2d:45:05:03:98:fc:38:e4:69:f5:ad:eb:2e:d6:
         fb:11:0c:3d:be:20:3d:4c:6c:9b:14:c1:00:84:98:4c:cd:97:
         fe:59:ba:b1:96:9e:86:3d:c4:8c:15:64:44:e5:15:fe:b9:28:
         c2:e5:a9:35:89:c4:ef:c4:83:8c:32:03:e8:24:df:0f:d8:09:
         b3:b4:23:43:8e:01:ae:a5:e5:9f:69:9a:a4:01:fe:d2:c6:08:
         f1:28:9c:5e:0e:af:33:74:37:38:0b:8d:b8:aa:a9:bd:23:23:
         f0:24:b4:ab:82:5b:56:a6:07:89:aa:b3:c2:36:10:67:dc:25:
         30:a4:17:32:9e:73:7e:54:1a:5d:b7:e2:f7:77:77:51:c3:3c:
         58:64:e2:2b:d9:39:34:da:4f:35:28:30:18:d1:dd:59:65:08:
         b2:42:80:25:a8:32:b9:b5:6f:93:0d:bc:8d:fc:37:d1:78:81:
         18:85:32:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYf/SiRjtgtt3O5YvqpvYa47MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViNzVjMGFiNWRmNGRiYWQ4YTdhNDQzOTdkZmQ2Yjk1Nzk3
MmZlZjEwHhcNMjMwNTA5MDY1NDIxWhcNMjMwNTEwMDY1NDIxWjAzMTEwLwYDVQQD
EyhiZWE3NGI1NGRjMWNmM2UzZWIyMWUzMTc2MTAzZWI0NjFlOWIwZTUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2cbpbFFP4gEV0Ch9NvIHcZWxqw50
3a0Fhs/YsBoNF8ABlao1GjxWowk4JGqztd6uCBAL5OyYz75GGKY0zzzUkhlioh/b
F9Jx2MmRT2PM847iMsFI2ctbYlECXUOj7Q0XN2yeHnYeGxvILiYr4AO0LNsisWQU
bZVt3xK5MKsxkHSYhy0kvfqa4yjU0rp9r3epKEI+SOr/h9FJHj+aVw6NTu5rOMWC
VTsxkrQuHC5infc4UVwmGXa6JM+K8Ucm+ceHd0CJ8J9aHl/bYuVfmGCDt6I544IA
0sjhwDN3GHAUfn6BB711bNE8eBDVz7f76O92KHVLP2DmPe9CTGE3zxjyAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL6nS1TcHPPj6yHjF2ED60Yemw5RMB8GA1UdIwQY
MBaAFOt1wKtd9NutinpEOX39a5V5cv7xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjNYQXExMzAyNjJLZWtRNWZmMXJsWGx5X3ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8wMzhhMDQtNDY2MS00YmVkLThhMTct
YjUyNjBiNDRhN2JkLzEvNjNYQXExMzAyNjJLZWtRNWZmMXJsWGx5X3ZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8wMzhhMDQtNDY2MS00YmVkLThhMTctYjUyNjBiNDRhN2Jk
LzEvNjNYQXExMzAyNjJLZWtRNWZmMXJsWGx5X3ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyvXt9UcR
dx63XqXwfE7NgmeVdVMB1nBpXICnhvYDNu5CdBc2cSb+DkuWlZaGU/4vJMNsA6Ut
T4uvqzKYDuto27yk3mlGazUZot98Ey1FBQOY/DjkafWt6y7W+xEMPb4gPUxsmxTB
AISYTM2X/lm6sZaehj3EjBVkROUV/rkowuWpNYnE78SDjDID6CTfD9gJs7QjQ44B
rqXln2mapAH+0sYI8SicXg6vM3Q3OAuNuKqpvSMj8CS0q4JbVqYHiaqzwjYQZ9wl
MKQXMp5zflQaXbfi93d3UcM8WGTiK9k5NNpPNSgwGNHdWWUIskKAJagyubVvkw28
jfw30XiBGIUyoA==
-----END CERTIFICATE-----