Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/5cf462-df25-4c97-b1ac-070d473561ef/1/8t0hgRDW7hhEyEnmcvZhj7rflhU.mft
File:                     8t0hgRDW7hhEyEnmcvZhj7rflhU.mft (raw, json)
Hash identifier:          FmqTDuM92/yeSqz8xOxwy16Yu8fQyQVvVEzxlUt4J/U=
Subject key identifier:   22:7C:6B:D9:F4:14:DA:2A:92:08:5E:1E:AF:DF:7C:88:5C:E2:CA:4B
Authority key identifier: F2:DD:21:81:10:D6:EE:18:44:C8:49:E6:72:F6:61:8F:BA:DF:96:15
Certificate issuer:       /CN=f2dd218110d6ee1844c849e672f6618fbadf9615
Certificate serial:       018A25662B86DD22ED7B18685F33E5579704
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8t0hgRDW7hhEyEnmcvZhj7rflhU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/5cf462-df25-4c97-b1ac-070d473561ef/1/8t0hgRDW7hhEyEnmcvZhj7rflhU.mft
Manifest number:          089D
Signing time:             Thu 24 Aug 2023 02:36:07 +0000
Manifest this update:     Thu 24 Aug 2023 02:36:07 +0000
Manifest next update:     Fri 25 Aug 2023 02:36:07 +0000
Files and hashes:         1: 8t0hgRDW7hhEyEnmcvZhj7rflhU.crl (hash: fz0F3W0i+6P9sjBuHqczr0MTCbRREoNRCQB2WZgaTsA=)
                          2: jYi3LtRqdXBr9fS5386Q1hiK8D8.roa (hash: g9r0Yp0WBWCNqfB6u7My2NiDV+5TK+eH2YPV68Vtv/k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:25:66:2b:86:dd:22:ed:7b:18:68:5f:33:e5:57:97:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2dd218110d6ee1844c849e672f6618fbadf9615
        Validity
            Not Before: Aug 24 02:36:07 2023 GMT
            Not After : Aug 25 02:36:07 2023 GMT
        Subject: CN=227c6bd9f414da2a92085e1eafdf7c885ce2ca4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:54:09:be:19:cb:67:0d:a0:d6:c1:22:12:f3:
                    28:9a:9d:02:da:18:56:e3:3c:4c:bf:d0:0e:20:cf:
                    25:3b:ba:58:10:cc:b7:15:04:0d:26:a5:b8:a1:bc:
                    03:22:7a:47:7b:8a:f2:5b:8a:c5:f5:6f:be:06:d3:
                    04:fc:2f:8b:f6:68:c9:1d:2e:b8:02:91:3e:d6:4f:
                    82:63:24:d7:de:d5:ae:a3:56:ac:01:1a:78:71:b1:
                    fb:29:56:e7:c3:30:d1:00:28:e7:68:fe:88:df:31:
                    19:4c:55:24:89:e1:86:d4:48:35:34:e9:c7:a1:da:
                    c1:37:08:4a:95:7a:db:28:98:b1:b8:15:dd:99:cb:
                    b2:58:67:fd:d9:8b:12:b8:81:5d:26:b4:e3:d8:fe:
                    8a:8d:37:f6:ec:80:9e:4e:57:1c:37:70:67:e0:dd:
                    4a:34:c3:02:87:82:ea:6f:20:29:c7:c0:e4:c1:7f:
                    81:95:af:99:4e:e2:ec:ac:b9:fd:20:de:a1:9e:a4:
                    4c:1d:e3:50:01:cc:0d:7c:cc:3b:f1:d5:2b:2c:d4:
                    34:56:04:3f:d1:ed:d2:af:56:5c:da:7f:30:2b:60:
                    0d:75:c6:b4:ef:86:e4:8c:91:af:00:4f:96:f0:95:
                    5f:6d:08:86:d3:8d:ec:32:3a:42:73:e2:d8:1e:ee:
                    0a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:7C:6B:D9:F4:14:DA:2A:92:08:5E:1E:AF:DF:7C:88:5C:E2:CA:4B
            X509v3 Authority Key Identifier:
                keyid:F2:DD:21:81:10:D6:EE:18:44:C8:49:E6:72:F6:61:8F:BA:DF:96:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8t0hgRDW7hhEyEnmcvZhj7rflhU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5cf462-df25-4c97-b1ac-070d473561ef/1/8t0hgRDW7hhEyEnmcvZhj7rflhU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5cf462-df25-4c97-b1ac-070d473561ef/1/8t0hgRDW7hhEyEnmcvZhj7rflhU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:b3:35:bf:f4:64:48:33:bd:e7:16:f3:0f:44:66:71:fe:5a:
         5d:78:81:99:e6:3c:a6:57:c7:c0:61:ac:96:f9:58:43:22:81:
         78:41:29:e0:d4:f0:df:a9:5c:80:79:c7:20:05:f9:29:71:5c:
         a4:98:62:d1:91:e1:2f:2e:03:fe:33:e8:83:61:5b:ea:fe:44:
         c8:f5:7f:61:06:cc:3a:ed:48:9a:50:6e:41:12:f3:73:e8:23:
         5f:5e:a0:f2:f6:c9:29:fc:42:3b:e7:7d:cf:ad:59:3c:22:62:
         c5:90:a3:90:3f:bd:8d:a9:2d:6f:96:e8:3a:db:86:c2:61:11:
         7a:40:ac:02:bb:a1:8d:ab:b9:f7:7f:ef:37:69:fe:09:13:10:
         0b:5d:a0:14:fe:22:bd:0c:cb:67:c6:dc:cc:97:5e:91:3f:1a:
         b1:b6:c7:92:48:be:32:4a:03:8b:b5:61:a6:49:3d:d6:ca:c5:
         fe:45:90:09:18:12:ce:e8:46:aa:d9:0b:09:b2:10:ec:e4:ec:
         03:ca:12:71:f2:17:86:4f:ec:7a:ff:15:1f:a2:27:ee:c4:83:
         ed:d5:a1:3c:75:0c:2f:e0:03:fa:a5:cb:b0:60:36:88:08:b7:
         cc:0a:de:1e:6a:b3:7b:bf:6d:ba:2a:d6:28:5e:01:13:13:f8:
         46:ec:99:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYolZiuG3SLtexhoXzPlV5cEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyZGQyMTgxMTBkNmVlMTg0NGM4NDllNjcyZjY2MThmYmFk
Zjk2MTUwHhcNMjMwODI0MDIzNjA3WhcNMjMwODI1MDIzNjA3WjAzMTEwLwYDVQQD
EygyMjdjNmJkOWY0MTRkYTJhOTIwODVlMWVhZmRmN2M4ODVjZTJjYTRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0VQJvhnLZw2g1sEiEvMomp0C2hhW
4zxMv9AOIM8lO7pYEMy3FQQNJqW4obwDInpHe4ryW4rF9W++BtME/C+L9mjJHS64
ApE+1k+CYyTX3tWuo1asARp4cbH7KVbnwzDRACjnaP6I3zEZTFUkieGG1Eg1NOnH
odrBNwhKlXrbKJixuBXdmcuyWGf92YsSuIFdJrTj2P6KjTf27ICeTlccN3Bn4N1K
NMMCh4LqbyApx8DkwX+Bla+ZTuLsrLn9IN6hnqRMHeNQAcwNfMw78dUrLNQ0VgQ/
0e3Sr1Zc2n8wK2ANdca074bkjJGvAE+W8JVfbQiG043sMjpCc+LYHu4KNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCJ8a9n0FNoqkgheHq/ffIhc4spLMB8GA1UdIwQY
MBaAFPLdIYEQ1u4YRMhJ5nL2YY+635YVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHQwaGdSRFc3aGhFeUVubWN2WmhqN3JmbGhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi81Y2Y0NjItZGYyNS00Yzk3LWIxYWMt
MDcwZDQ3MzU2MWVmLzEvOHQwaGdSRFc3aGhFeUVubWN2WmhqN3JmbGhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi81Y2Y0NjItZGYyNS00Yzk3LWIxYWMtMDcwZDQ3MzU2MWVm
LzEvOHQwaGdSRFc3aGhFeUVubWN2WmhqN3JmbGhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAerM1v/Rk
SDO95xbzD0Rmcf5aXXiBmeY8plfHwGGslvlYQyKBeEEp4NTw36lcgHnHIAX5KXFc
pJhi0ZHhLy4D/jPog2Fb6v5EyPV/YQbMOu1ImlBuQRLzc+gjX16g8vbJKfxCO+d9
z61ZPCJixZCjkD+9jaktb5boOtuGwmERekCsAruhjau593/vN2n+CRMQC12gFP4i
vQzLZ8bczJdekT8asbbHkki+MkoDi7Vhpkk91srF/kWQCRgSzuhGqtkLCbIQ7OTs
A8oScfIXhk/sev8VH6In7sSD7dWhPHUML+AD+qXLsGA2iAi3zAreHmqze79tuirW
KF4BExP4RuyZyA==
-----END CERTIFICATE-----