Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/3e1e68-972c-41c2-a16a-992f4b4cb9cc/1/etBjYUBeaxgXxywdasgbW84_8Ws.mft
File:                     etBjYUBeaxgXxywdasgbW84_8Ws.mft (raw, json)
Hash identifier:          A7ITdJtJYjTf867SfXc9FkdaqPBQxusTam5xVQepW7A=
Subject key identifier:   17:9A:72:4A:7A:A8:C4:3F:74:21:C3:DF:2D:21:9B:8E:94:AE:41:A4
Authority key identifier: 7A:D0:63:61:40:5E:6B:18:17:C7:2C:1D:6A:C8:1B:5B:CE:3F:F1:6B
Certificate issuer:       /CN=7ad06361405e6b1817c72c1d6ac81b5bce3ff16b
Certificate serial:       018A927F197C95B9631B9F2B78EE83916D3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/etBjYUBeaxgXxywdasgbW84_8Ws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/3e1e68-972c-41c2-a16a-992f4b4cb9cc/1/etBjYUBeaxgXxywdasgbW84_8Ws.mft
Manifest number:          09A1
Signing time:             Thu 14 Sep 2023 07:01:57 +0000
Manifest this update:     Thu 14 Sep 2023 07:01:57 +0000
Manifest next update:     Fri 15 Sep 2023 07:01:57 +0000
Files and hashes:         1: 2rqUKqcIHvGw9_SDd9jiaWBmzG8.roa (hash: uZJfPd8/UVuFqKRBS+Ouo4aSWFvQdSb6uM+nbHx/s6k=)
                          2: etBjYUBeaxgXxywdasgbW84_8Ws.crl (hash: 0y855SV1TGNqcrGdQW5eXyXEvXEZzXpAzu0yovei1ZE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:92:7f:19:7c:95:b9:63:1b:9f:2b:78:ee:83:91:6d:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ad06361405e6b1817c72c1d6ac81b5bce3ff16b
        Validity
            Not Before: Sep 14 07:01:57 2023 GMT
            Not After : Sep 15 07:01:57 2023 GMT
        Subject: CN=179a724a7aa8c43f7421c3df2d219b8e94ae41a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9e:56:e4:12:79:90:77:8c:c3:87:1c:55:0f:
                    06:81:03:b8:30:88:72:b0:59:1f:d1:4b:d6:5c:74:
                    e2:39:f7:17:72:96:5c:9f:0a:3b:f3:ba:8c:e9:93:
                    8a:67:f5:7f:fa:5a:f7:d8:a2:37:00:2d:01:30:1c:
                    13:dd:43:c2:27:9c:6f:8a:48:dc:70:cb:43:f9:a4:
                    44:b5:45:b4:3e:21:b2:f9:f0:6f:6d:93:e8:41:fd:
                    19:f9:c5:4f:20:c4:af:a8:f5:57:16:50:1f:ad:a6:
                    44:f4:94:2a:c2:50:85:4e:83:e3:d7:f8:8a:b9:ff:
                    3d:51:91:54:d4:ed:f8:08:66:fd:73:6c:99:73:5f:
                    d0:bb:fe:25:c5:73:5d:d8:23:95:31:1d:35:7d:53:
                    06:cb:d6:38:cf:cf:17:ca:25:12:12:7b:58:3e:2d:
                    1e:5f:7e:50:02:57:8e:5d:09:ac:82:dc:e4:c4:7e:
                    2a:62:ba:82:21:52:01:48:db:1d:62:fd:9e:52:24:
                    d6:bd:d5:bf:a2:55:a0:53:21:eb:d4:bc:50:1f:fe:
                    c2:bf:1b:c2:6e:5a:96:37:10:dc:d4:a6:50:e9:04:
                    77:d9:d4:ad:c0:1f:9d:b3:db:c8:0b:a7:40:48:42:
                    e7:39:d1:18:10:fb:b7:50:84:88:00:fe:7b:25:00:
                    bd:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:9A:72:4A:7A:A8:C4:3F:74:21:C3:DF:2D:21:9B:8E:94:AE:41:A4
            X509v3 Authority Key Identifier:
                keyid:7A:D0:63:61:40:5E:6B:18:17:C7:2C:1D:6A:C8:1B:5B:CE:3F:F1:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/etBjYUBeaxgXxywdasgbW84_8Ws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3e1e68-972c-41c2-a16a-992f4b4cb9cc/1/etBjYUBeaxgXxywdasgbW84_8Ws.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3e1e68-972c-41c2-a16a-992f4b4cb9cc/1/etBjYUBeaxgXxywdasgbW84_8Ws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:36:01:c9:14:34:29:a0:76:c4:3c:8a:6c:fa:88:f7:c1:ec:
         fd:5e:ad:91:fa:40:48:96:f4:3d:03:91:12:e6:2e:00:b3:3c:
         a5:ae:01:14:e1:99:86:b5:34:89:1f:c0:72:9a:2c:dc:4c:2b:
         e3:fc:bf:11:39:7b:65:44:fc:6a:b2:46:16:f0:09:ff:07:41:
         29:ce:23:b7:f2:d3:a4:1c:95:f3:df:28:79:4d:ff:9e:6c:2f:
         88:0d:97:8f:fd:37:90:45:ce:4b:12:e0:eb:fe:08:a6:34:90:
         50:43:7f:e0:e3:10:a9:da:7b:92:bb:2e:88:94:cc:13:38:d5:
         10:2d:90:33:e7:29:34:47:13:6d:0d:62:5a:02:19:62:98:10:
         f1:7f:ae:42:15:76:fe:32:95:d4:2c:bd:88:92:97:af:1d:dc:
         e7:b8:46:29:f3:5a:75:b1:0f:68:17:bc:5e:88:a7:da:0d:a0:
         f0:33:be:99:ef:cf:da:34:a5:b3:fe:d3:1c:a0:a9:da:91:eb:
         ba:fb:28:c2:14:9b:fc:fc:64:c5:f8:40:25:6c:dd:9d:9f:ed:
         5c:37:19:ea:7f:60:44:4b:76:b9:bf:e7:10:26:1d:00:d2:ae:
         cb:e6:1b:b9:c2:7c:55:14:52:08:11:59:cf:1d:ee:9c:a1:49:
         37:c3:dd:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYqSfxl8lbljG58reO6DkW0+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhZDA2MzYxNDA1ZTZiMTgxN2M3MmMxZDZhYzgxYjViY2Uz
ZmYxNmIwHhcNMjMwOTE0MDcwMTU3WhcNMjMwOTE1MDcwMTU3WjAzMTEwLwYDVQQD
EygxNzlhNzI0YTdhYThjNDNmNzQyMWMzZGYyZDIxOWI4ZTk0YWU0MWE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwp5W5BJ5kHeMw4ccVQ8GgQO4MIhy
sFkf0UvWXHTiOfcXcpZcnwo787qM6ZOKZ/V/+lr32KI3AC0BMBwT3UPCJ5xvikjc
cMtD+aREtUW0PiGy+fBvbZPoQf0Z+cVPIMSvqPVXFlAfraZE9JQqwlCFToPj1/iK
uf89UZFU1O34CGb9c2yZc1/Qu/4lxXNd2COVMR01fVMGy9Y4z88XyiUSEntYPi0e
X35QAleOXQmsgtzkxH4qYrqCIVIBSNsdYv2eUiTWvdW/olWgUyHr1LxQH/7CvxvC
blqWNxDc1KZQ6QR32dStwB+ds9vIC6dASELnOdEYEPu3UISIAP57JQC90wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBeackp6qMQ/dCHD3y0hm46UrkGkMB8GA1UdIwQY
MBaAFHrQY2FAXmsYF8csHWrIG1vOP/FrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXRCallVQmVheGdYeHl3ZGFzZ2JXODRfOFdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8zZTFlNjgtOTcyYy00MWMyLWExNmEt
OTkyZjRiNGNiOWNjLzEvZXRCallVQmVheGdYeHl3ZGFzZ2JXODRfOFdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS8zZTFlNjgtOTcyYy00MWMyLWExNmEtOTkyZjRiNGNiOWNj
LzEvZXRCallVQmVheGdYeHl3ZGFzZ2JXODRfOFdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjzYByRQ0
KaB2xDyKbPqI98Hs/V6tkfpASJb0PQOREuYuALM8pa4BFOGZhrU0iR/Acpos3Ewr
4/y/ETl7ZUT8arJGFvAJ/wdBKc4jt/LTpByV898oeU3/nmwviA2Xj/03kEXOSxLg
6/4IpjSQUEN/4OMQqdp7krsuiJTMEzjVEC2QM+cpNEcTbQ1iWgIZYpgQ8X+uQhV2
/jKV1Cy9iJKXrx3c57hGKfNadbEPaBe8Xoin2g2g8DO+me/P2jSls/7THKCp2pHr
uvsowhSb/PxkxfhAJWzdnZ/tXDcZ6n9gREt2ub/nECYdANKuy+YbucJ8VRRSCBFZ
zx3unKFJN8Pdhg==
-----END CERTIFICATE-----