Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/d97443-9a5f-4655-80cc-82159d94d3e9/1/2SlU732bhLgzgLy-UXhQ5Vp5x1s.mft
File:                     2SlU732bhLgzgLy-UXhQ5Vp5x1s.mft (raw, json)
Hash identifier:          1D6WozKRBHR1tnAldxFfLq7ijQszmuykW9eNJogW3Mo=
Subject key identifier:   A4:F9:14:52:EF:63:B0:E7:E9:4B:5A:63:6F:B0:71:2E:E5:15:F2:5E
Authority key identifier: D9:29:54:EF:7D:9B:84:B8:33:80:BC:BE:51:78:50:E5:5A:79:C7:5B
Certificate issuer:       /CN=d92954ef7d9b84b83380bcbe517850e55a79c75b
Certificate serial:       018B3C6FA1EF9F46A662D1FE101930E17934
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2SlU732bhLgzgLy-UXhQ5Vp5x1s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/d97443-9a5f-4655-80cc-82159d94d3e9/1/2SlU732bhLgzgLy-UXhQ5Vp5x1s.mft
Manifest number:          0877
Signing time:             Tue 17 Oct 2023 07:00:30 +0000
Manifest this update:     Tue 17 Oct 2023 07:00:30 +0000
Manifest next update:     Wed 18 Oct 2023 07:00:30 +0000
Files and hashes:         1: 2SlU732bhLgzgLy-UXhQ5Vp5x1s.crl (hash: bTk/TDrneHOgS0FWpb5sB4V3CK00nXFeLArasOsrIFA=)
                          2: a4Pa9PbKVeUPRkfgje976ctZtqE.roa (hash: hv13m7o1/J9F/CWMsBq4UredwJxM1TWMDoJu2FLQhdo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:3c:6f:a1:ef:9f:46:a6:62:d1:fe:10:19:30:e1:79:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d92954ef7d9b84b83380bcbe517850e55a79c75b
        Validity
            Not Before: Oct 17 07:00:30 2023 GMT
            Not After : Oct 18 07:00:30 2023 GMT
        Subject: CN=a4f91452ef63b0e7e94b5a636fb0712ee515f25e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e4:fb:15:21:8d:b5:4b:da:7b:62:d8:18:8b:
                    98:a8:9f:f5:40:b6:e4:36:c0:29:23:dc:91:56:3d:
                    cc:3f:31:cc:4e:13:54:de:0b:d0:70:aa:a0:c1:6c:
                    82:a4:92:28:5a:87:78:ed:ae:53:f2:02:26:8b:a6:
                    ad:de:b0:9c:5f:99:7d:60:ab:85:89:9d:70:94:a0:
                    ed:28:f9:43:5b:58:f8:c3:3a:ad:03:08:2f:16:cd:
                    f9:5f:cf:4b:e6:cb:0b:6b:86:e2:33:e0:b2:82:55:
                    b9:d8:1a:f4:f5:f1:f8:d8:b2:4f:24:22:e8:31:68:
                    95:f6:7f:34:25:b0:c0:50:0f:39:99:78:9f:46:f2:
                    3b:d2:8f:60:20:9c:4f:52:d0:f7:18:9a:c6:f2:01:
                    22:c9:22:b5:e2:4b:9f:db:17:04:19:1a:a1:5e:fe:
                    c1:9e:de:91:e2:34:17:22:06:fa:46:fc:94:c1:a2:
                    ed:4f:a1:d0:d1:b6:17:af:19:86:77:c4:13:87:75:
                    6a:9e:46:fe:d5:28:72:55:8e:3f:a1:34:84:9b:50:
                    78:3e:da:a9:92:a4:59:ab:0f:ab:30:66:76:c0:71:
                    ab:b9:ad:9c:6b:81:5c:fb:f1:2e:d9:22:f5:aa:e9:
                    3a:a0:1e:cc:28:4b:d1:c6:fc:58:8e:0a:3f:36:4f:
                    d7:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:F9:14:52:EF:63:B0:E7:E9:4B:5A:63:6F:B0:71:2E:E5:15:F2:5E
            X509v3 Authority Key Identifier:
                keyid:D9:29:54:EF:7D:9B:84:B8:33:80:BC:BE:51:78:50:E5:5A:79:C7:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2SlU732bhLgzgLy-UXhQ5Vp5x1s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d97443-9a5f-4655-80cc-82159d94d3e9/1/2SlU732bhLgzgLy-UXhQ5Vp5x1s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d97443-9a5f-4655-80cc-82159d94d3e9/1/2SlU732bhLgzgLy-UXhQ5Vp5x1s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:23:f6:1f:b7:52:48:bb:1f:51:e0:24:b4:2b:ed:1e:8f:d9:
         2f:16:18:60:e9:fa:c9:d7:e5:ee:40:25:20:2d:e4:03:2d:50:
         75:77:c5:0d:00:ff:ba:15:05:38:50:88:92:e9:f5:47:b0:c3:
         d2:af:87:48:b8:6e:f0:2b:c5:0a:72:f9:d3:c4:39:8e:fd:44:
         a6:6c:11:32:79:ba:83:33:9b:fe:5c:98:8d:d8:12:a3:ad:cd:
         53:ab:6c:70:0f:9a:78:a1:e9:38:c7:6f:14:50:c4:34:83:69:
         6e:31:d9:16:2b:97:98:e6:6d:3b:50:4a:e6:1a:82:e4:b0:1e:
         01:0f:d9:fd:ef:0c:52:1c:b2:99:6b:f0:49:93:50:88:a9:9b:
         2c:be:af:4e:59:31:78:6e:1a:d8:a0:7a:91:2e:96:87:ac:a5:
         2c:db:c3:73:69:d9:76:cb:81:58:ca:f5:8c:06:79:2e:81:9b:
         89:bf:ab:88:d0:2e:cc:9a:12:38:50:c1:d6:95:db:6d:e9:dc:
         4c:3c:22:bf:11:10:7c:2e:e8:50:65:8e:46:c7:89:34:a6:8f:
         12:6a:fd:6c:8a:d5:63:fc:58:17:9c:9a:55:82:90:fc:6d:b2:
         67:3a:13:53:55:8c:8b:9a:b2:60:5f:a6:0c:35:74:79:f6:85:
         38:56:0b:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYs8b6Hvn0amYtH+EBkw4Xk0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5Mjk1NGVmN2Q5Yjg0YjgzMzgwYmNiZTUxNzg1MGU1NWE3
OWM3NWIwHhcNMjMxMDE3MDcwMDMwWhcNMjMxMDE4MDcwMDMwWjAzMTEwLwYDVQQD
EyhhNGY5MTQ1MmVmNjNiMGU3ZTk0YjVhNjM2ZmIwNzEyZWU1MTVmMjVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0uT7FSGNtUvae2LYGIuYqJ/1QLbk
NsApI9yRVj3MPzHMThNU3gvQcKqgwWyCpJIoWod47a5T8gImi6at3rCcX5l9YKuF
iZ1wlKDtKPlDW1j4wzqtAwgvFs35X89L5ssLa4biM+CyglW52Br09fH42LJPJCLo
MWiV9n80JbDAUA85mXifRvI70o9gIJxPUtD3GJrG8gEiySK14kuf2xcEGRqhXv7B
nt6R4jQXIgb6RvyUwaLtT6HQ0bYXrxmGd8QTh3Vqnkb+1ShyVY4/oTSEm1B4Ptqp
kqRZqw+rMGZ2wHGrua2ca4Fc+/Eu2SL1quk6oB7MKEvRxvxYjgo/Nk/XOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKT5FFLvY7Dn6UtaY2+wcS7lFfJeMB8GA1UdIwQY
MBaAFNkpVO99m4S4M4C8vlF4UOVaecdbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlNsVTczMmJoTGd6Z0x5LVVYaFE1VnA1eDFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9kOTc0NDMtOWE1Zi00NjU1LTgwY2Mt
ODIxNTlkOTRkM2U5LzEvMlNsVTczMmJoTGd6Z0x5LVVYaFE1VnA1eDFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS9kOTc0NDMtOWE1Zi00NjU1LTgwY2MtODIxNTlkOTRkM2U5
LzEvMlNsVTczMmJoTGd6Z0x5LVVYaFE1VnA1eDFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxCP2H7dS
SLsfUeAktCvtHo/ZLxYYYOn6ydfl7kAlIC3kAy1QdXfFDQD/uhUFOFCIkun1R7DD
0q+HSLhu8CvFCnL508Q5jv1EpmwRMnm6gzOb/lyYjdgSo63NU6tscA+aeKHpOMdv
FFDENINpbjHZFiuXmOZtO1BK5hqC5LAeAQ/Z/e8MUhyymWvwSZNQiKmbLL6vTlkx
eG4a2KB6kS6Wh6ylLNvDc2nZdsuBWMr1jAZ5LoGbib+riNAuzJoSOFDB1pXbbenc
TDwivxEQfC7oUGWORseJNKaPEmr9bIrVY/xYF5yaVYKQ/G2yZzoTU1WMi5qyYF+m
DDV0efaFOFYLFg==
-----END CERTIFICATE-----