Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/ece405-7375-446c-9b9e-446bc5f4f972/1/2F9wSZJEaCDnr8GYo7K57ivZ9sI.mft
File:                     2F9wSZJEaCDnr8GYo7K57ivZ9sI.mft (raw, json)
Hash identifier:          b9OfuvN+tB9iFs2nW3heI474ZlaBg5W6Yf8LvXTWVmA=
Subject key identifier:   3F:6A:BB:85:D9:07:6F:7F:7F:71:6E:BD:E3:1C:2F:66:2A:A9:FA:70
Authority key identifier: D8:5F:70:49:92:44:68:20:E7:AF:C1:98:A3:B2:B9:EE:2B:D9:F6:C2
Certificate issuer:       /CN=d85f704992446820e7afc198a3b2b9ee2bd9f6c2
Certificate serial:       018A62A431B7B9FA76F601DA74DC1E099E30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2F9wSZJEaCDnr8GYo7K57ivZ9sI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/ece405-7375-446c-9b9e-446bc5f4f972/1/2F9wSZJEaCDnr8GYo7K57ivZ9sI.mft
Manifest number:          0ECD
Signing time:             Tue 05 Sep 2023 00:00:42 +0000
Manifest this update:     Tue 05 Sep 2023 00:00:42 +0000
Manifest next update:     Wed 06 Sep 2023 00:00:42 +0000
Files and hashes:         1: 2F9wSZJEaCDnr8GYo7K57ivZ9sI.crl (hash: ljyWpTcFVx9LP8qHLMLqudFUqxV1yLIlPgOgxMYL4V0=)
                          2: uevQVzlTrbcd_1EwAyjmOPuekXo.roa (hash: Mvr9+UVaZSn7OWVddZxt2hqFiVdDUIdO2zPyQ0mWWT4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:62:a4:31:b7:b9:fa:76:f6:01:da:74:dc:1e:09:9e:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d85f704992446820e7afc198a3b2b9ee2bd9f6c2
        Validity
            Not Before: Sep  5 00:00:42 2023 GMT
            Not After : Sep  6 00:00:42 2023 GMT
        Subject: CN=3f6abb85d9076f7f7f716ebde31c2f662aa9fa70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ee:62:4d:b5:0b:23:8e:04:b9:5f:6d:be:38:
                    c1:fe:7c:90:20:2c:ff:17:6b:ff:b5:ba:d6:5d:13:
                    b0:0f:3a:1e:75:5d:a7:6c:c7:e8:1b:d4:c3:b3:4b:
                    fb:e6:93:11:10:f6:c9:25:e3:de:3e:e8:d2:f7:67:
                    f8:c6:84:0b:25:aa:7c:8f:1f:29:da:9f:9d:7c:63:
                    98:06:2b:10:c8:56:06:0e:c3:5a:3c:52:3e:2f:a7:
                    10:12:70:27:e6:19:97:7e:a5:64:cf:4c:d7:2c:dd:
                    49:64:76:b9:4b:29:98:fe:55:65:1a:cd:65:44:56:
                    ce:65:a1:e3:a7:9e:7f:ed:da:3b:d7:c4:0e:b0:ac:
                    c1:9c:31:97:98:2a:a1:4d:76:17:fa:22:21:4b:c3:
                    49:e8:04:72:dc:1b:99:a4:fb:9e:e4:e7:44:37:79:
                    1b:11:8d:f5:2e:86:5b:74:c2:cc:74:09:6d:f0:c2:
                    0e:ae:02:bf:ce:09:42:6c:5b:6a:d6:64:e9:e6:b6:
                    2a:55:a0:f7:12:bc:c1:38:a3:87:16:3f:18:15:2e:
                    f1:01:b7:98:49:dd:21:cf:13:c2:a8:38:24:56:70:
                    04:4e:69:45:5c:15:d6:85:d5:ac:c8:87:ce:81:ef:
                    9d:92:d8:8a:81:34:4b:71:4c:a9:37:d3:34:96:6a:
                    81:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:6A:BB:85:D9:07:6F:7F:7F:71:6E:BD:E3:1C:2F:66:2A:A9:FA:70
            X509v3 Authority Key Identifier:
                keyid:D8:5F:70:49:92:44:68:20:E7:AF:C1:98:A3:B2:B9:EE:2B:D9:F6:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2F9wSZJEaCDnr8GYo7K57ivZ9sI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/ece405-7375-446c-9b9e-446bc5f4f972/1/2F9wSZJEaCDnr8GYo7K57ivZ9sI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/ece405-7375-446c-9b9e-446bc5f4f972/1/2F9wSZJEaCDnr8GYo7K57ivZ9sI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:25:77:33:29:07:03:46:96:29:73:e9:98:ab:ae:ff:ce:ee:
         04:d1:de:fe:39:be:25:c2:da:f4:fe:1f:28:16:2c:53:71:63:
         63:84:00:0e:50:22:6c:3b:15:01:8d:39:eb:d8:b8:ec:dd:9e:
         39:9d:64:52:b1:e6:53:a1:fe:e1:12:7e:d2:fb:ec:96:e0:1f:
         79:ab:61:c1:52:6f:5f:86:ce:72:14:70:24:ef:d9:85:6b:78:
         01:83:c4:06:b6:f6:73:34:48:f3:69:3c:30:a5:c3:97:dd:a7:
         b1:0e:21:ae:42:ed:64:dc:27:c7:f7:ec:c3:00:fc:a5:94:c2:
         6e:bd:bd:af:eb:92:d6:b0:48:24:f7:07:41:87:08:4c:dd:7a:
         b4:d3:3d:2f:0d:b9:fd:78:1f:ea:30:b7:6c:ca:eb:d4:01:71:
         fa:44:14:8d:2a:f5:04:a3:c5:47:db:f5:33:3f:1b:9a:7b:32:
         e2:e7:5b:b0:e6:ea:80:fe:7b:d9:6d:3c:4f:26:81:db:80:40:
         b4:9e:5d:b9:65:7b:5d:68:15:28:69:9c:c5:0e:bb:79:8e:53:
         0e:cc:aa:c9:a9:b5:b7:89:8b:3e:ea:bd:1e:c4:5f:23:03:52:
         ae:fd:5a:24:33:20:4b:40:e7:19:b5:87:8b:e5:7f:40:9e:2f:
         3d:4a:cd:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYpipDG3ufp29gHadNweCZ4wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4NWY3MDQ5OTI0NDY4MjBlN2FmYzE5OGEzYjJiOWVlMmJk
OWY2YzIwHhcNMjMwOTA1MDAwMDQyWhcNMjMwOTA2MDAwMDQyWjAzMTEwLwYDVQQD
EygzZjZhYmI4NWQ5MDc2ZjdmN2Y3MTZlYmRlMzFjMmY2NjJhYTlmYTcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+5iTbULI44EuV9tvjjB/nyQICz/
F2v/tbrWXROwDzoedV2nbMfoG9TDs0v75pMREPbJJePePujS92f4xoQLJap8jx8p
2p+dfGOYBisQyFYGDsNaPFI+L6cQEnAn5hmXfqVkz0zXLN1JZHa5SymY/lVlGs1l
RFbOZaHjp55/7do718QOsKzBnDGXmCqhTXYX+iIhS8NJ6ARy3BuZpPue5OdEN3kb
EY31LoZbdMLMdAlt8MIOrgK/zglCbFtq1mTp5rYqVaD3ErzBOKOHFj8YFS7xAbeY
Sd0hzxPCqDgkVnAETmlFXBXWhdWsyIfOge+dktiKgTRLcUypN9M0lmqBNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD9qu4XZB29/f3FuveMcL2YqqfpwMB8GA1UdIwQY
MBaAFNhfcEmSRGgg56/BmKOyue4r2fbCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkY5d1NaSkVhQ0RucjhHWW83SzU3aXZaOXNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9lY2U0MDUtNzM3NS00NDZjLTliOWUt
NDQ2YmM1ZjRmOTcyLzEvMkY5d1NaSkVhQ0RucjhHWW83SzU3aXZaOXNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS9lY2U0MDUtNzM3NS00NDZjLTliOWUtNDQ2YmM1ZjRmOTcy
LzEvMkY5d1NaSkVhQ0RucjhHWW83SzU3aXZaOXNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHCV3MykH
A0aWKXPpmKuu/87uBNHe/jm+JcLa9P4fKBYsU3FjY4QADlAibDsVAY0569i47N2e
OZ1kUrHmU6H+4RJ+0vvsluAfeathwVJvX4bOchRwJO/ZhWt4AYPEBrb2czRI82k8
MKXDl92nsQ4hrkLtZNwnx/fswwD8pZTCbr29r+uS1rBIJPcHQYcITN16tNM9Lw25
/Xgf6jC3bMrr1AFx+kQUjSr1BKPFR9v1Mz8bmnsy4udbsObqgP572W08TyaB24BA
tJ5duWV7XWgVKGmcxQ67eY5TDsyqyam1t4mLPuq9HsRfIwNSrv1aJDMgS0DnGbWH
i+V/QJ4vPUrNYQ==
-----END CERTIFICATE-----