Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/40d8ed-1b7c-4f11-8295-6577cb19cd5a/1/WgFhRh__5D6fivGn0WwRgJ8wHXQ.mft
File:                     WgFhRh__5D6fivGn0WwRgJ8wHXQ.mft (raw, json)
Hash identifier:          Us17seFZKzB3KmkjYOhe8OIwwJpFbwa6keRHpv/J7v8=
Subject key identifier:   BA:7E:C4:D0:3F:3C:70:43:5C:52:6A:06:53:5D:38:C4:7A:E0:C6:8D
Authority key identifier: 5A:01:61:46:1F:FF:E4:3E:9F:8A:F1:A7:D1:6C:11:80:9F:30:1D:74
Certificate issuer:       /CN=5a0161461fffe43e9f8af1a7d16c11809f301d74
Certificate serial:       018A1FD1F6C4D27375861D29912F5E9326C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WgFhRh__5D6fivGn0WwRgJ8wHXQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/40d8ed-1b7c-4f11-8295-6577cb19cd5a/1/WgFhRh__5D6fivGn0WwRgJ8wHXQ.mft
Manifest number:          6C
Signing time:             Wed 23 Aug 2023 00:36:08 +0000
Manifest this update:     Wed 23 Aug 2023 00:36:08 +0000
Manifest next update:     Thu 24 Aug 2023 00:36:08 +0000
Files and hashes:         1: WgFhRh__5D6fivGn0WwRgJ8wHXQ.crl (hash: 2uNd4JC6T3xtPfjcUxnPAAnUJuIzccrYeCKa8Ry/HeY=)
                          2: tsEv1qVQHykcMReMnSxiv4bgVCQ.roa (hash: OI4f+7xY0kZYXGjjR9gMRShWIXb9+DNc4VhZ+Jq0GH4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:1f:d1:f6:c4:d2:73:75:86:1d:29:91:2f:5e:93:26:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a0161461fffe43e9f8af1a7d16c11809f301d74
        Validity
            Not Before: Aug 23 00:36:08 2023 GMT
            Not After : Aug 24 00:36:08 2023 GMT
        Subject: CN=ba7ec4d03f3c70435c526a06535d38c47ae0c68d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a2:b2:51:eb:10:20:d7:db:63:e5:4e:d9:c2:
                    eb:27:f9:6d:a1:b5:3b:ff:7e:cb:21:2e:94:5e:a5:
                    e7:da:21:75:cc:dc:49:7b:e0:a4:18:94:34:5c:00:
                    6d:d6:f7:6e:ca:f2:2c:ae:bc:1d:e4:c9:23:05:5f:
                    b1:24:fa:ad:e7:db:e8:2e:0b:7b:e8:a9:80:db:6b:
                    bf:33:c5:4e:6a:3d:0b:e5:a1:cc:1e:42:d6:4e:b0:
                    3e:ab:df:b6:e0:b2:ad:84:d6:ec:c2:b5:3d:9b:65:
                    c2:02:2c:0e:75:e6:f4:7b:3e:18:bd:6b:57:c3:13:
                    67:82:c3:98:fa:d5:62:60:52:90:b1:d7:c9:8f:9b:
                    1a:69:a8:92:64:1a:32:62:f6:37:80:72:cc:14:5d:
                    15:75:34:5d:2c:66:fc:0c:a3:b1:52:a9:ac:8b:47:
                    5a:c3:63:fd:f7:54:35:fc:59:fb:e3:e6:8f:3f:c7:
                    49:7d:8a:11:da:78:50:73:a9:84:79:d2:7c:94:d4:
                    67:df:c7:29:cc:f4:71:36:87:65:8e:d1:58:e1:80:
                    54:45:59:c5:4a:95:c8:a5:2e:7c:89:f6:53:9d:4c:
                    20:0c:05:11:7f:c9:4d:01:b4:5c:08:eb:91:cd:af:
                    37:f5:3f:e5:99:37:32:29:6d:51:7d:58:1c:c5:22:
                    ed:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:7E:C4:D0:3F:3C:70:43:5C:52:6A:06:53:5D:38:C4:7A:E0:C6:8D
            X509v3 Authority Key Identifier:
                keyid:5A:01:61:46:1F:FF:E4:3E:9F:8A:F1:A7:D1:6C:11:80:9F:30:1D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WgFhRh__5D6fivGn0WwRgJ8wHXQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/40d8ed-1b7c-4f11-8295-6577cb19cd5a/1/WgFhRh__5D6fivGn0WwRgJ8wHXQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/40d8ed-1b7c-4f11-8295-6577cb19cd5a/1/WgFhRh__5D6fivGn0WwRgJ8wHXQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:67:ce:ec:0a:88:5d:be:a0:4e:a9:03:9e:2e:b0:9d:c2:dd:
         31:99:90:58:d8:f3:c8:38:2b:9b:90:0d:3e:4e:d6:2b:8f:d7:
         b3:ea:00:f1:21:29:b1:6f:f9:a4:eb:e7:1a:1f:2e:88:bb:92:
         a1:16:22:ef:89:88:c4:44:ac:5c:e0:4a:8c:e7:1b:a9:f1:92:
         a1:e6:8c:2b:fd:c0:f0:a5:f8:46:6b:18:4f:1d:27:60:45:f2:
         b3:d5:14:b7:a3:bb:3d:44:f7:3a:b6:21:ea:7c:c7:a0:00:90:
         72:0f:d6:ab:30:88:90:38:5b:69:81:c6:96:f8:39:e7:ec:85:
         fd:6d:60:8b:c4:9d:ba:2d:d5:a3:69:69:50:84:2e:e7:3e:02:
         d1:88:75:34:ad:e9:13:be:e1:be:60:97:d0:03:88:ea:73:3d:
         45:5d:1a:ad:f4:21:45:0e:37:8f:2b:71:69:dd:26:fe:df:5b:
         0b:a1:3c:8c:0b:0c:e5:ee:55:a1:f2:25:f4:e2:d2:c9:d3:11:
         53:1f:e4:4a:42:23:f0:d7:de:10:9e:59:c2:be:e4:27:1d:0e:
         df:7b:82:5d:3b:65:5a:9d:b8:e5:36:7a:f0:05:89:60:a2:d6:
         dc:d4:54:07:6b:cb:3a:e4:03:0b:c7:4e:c5:3f:d7:43:50:a8:
         fc:0c:03:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYof0fbE0nN1hh0pkS9ekybEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhMDE2MTQ2MWZmZmU0M2U5ZjhhZjFhN2QxNmMxMTgwOWYz
MDFkNzQwHhcNMjMwODIzMDAzNjA4WhcNMjMwODI0MDAzNjA4WjAzMTEwLwYDVQQD
EyhiYTdlYzRkMDNmM2M3MDQzNWM1MjZhMDY1MzVkMzhjNDdhZTBjNjhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqKyUesQINfbY+VO2cLrJ/ltobU7
/37LIS6UXqXn2iF1zNxJe+CkGJQ0XABt1vduyvIsrrwd5MkjBV+xJPqt59voLgt7
6KmA22u/M8VOaj0L5aHMHkLWTrA+q9+24LKthNbswrU9m2XCAiwOdeb0ez4YvWtX
wxNngsOY+tViYFKQsdfJj5saaaiSZBoyYvY3gHLMFF0VdTRdLGb8DKOxUqmsi0da
w2P991Q1/Fn74+aPP8dJfYoR2nhQc6mEedJ8lNRn38cpzPRxNodljtFY4YBURVnF
SpXIpS58ifZTnUwgDAURf8lNAbRcCOuRza839T/lmTcyKW1RfVgcxSLt+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLp+xNA/PHBDXFJqBlNdOMR64MaNMB8GA1UdIwQY
MBaAFFoBYUYf/+Q+n4rxp9FsEYCfMB10MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2dGaFJoX181RDZmaXZHbjBXd1JnSjh3SFhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC80MGQ4ZWQtMWI3Yy00ZjExLTgyOTUt
NjU3N2NiMTljZDVhLzEvV2dGaFJoX181RDZmaXZHbjBXd1JnSjh3SFhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC80MGQ4ZWQtMWI3Yy00ZjExLTgyOTUtNjU3N2NiMTljZDVh
LzEvV2dGaFJoX181RDZmaXZHbjBXd1JnSjh3SFhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbGfO7AqI
Xb6gTqkDni6wncLdMZmQWNjzyDgrm5ANPk7WK4/Xs+oA8SEpsW/5pOvnGh8uiLuS
oRYi74mIxESsXOBKjOcbqfGSoeaMK/3A8KX4RmsYTx0nYEXys9UUt6O7PUT3OrYh
6nzHoACQcg/WqzCIkDhbaYHGlvg55+yF/W1gi8Sdui3Vo2lpUIQu5z4C0Yh1NK3p
E77hvmCX0AOI6nM9RV0arfQhRQ43jytxad0m/t9bC6E8jAsM5e5VofIl9OLSydMR
Ux/kSkIj8NfeEJ5Zwr7kJx0O33uCXTtlWp245TZ68AWJYKLW3NRUB2vLOuQDC8dO
xT/XQ1Co/AwDTw==
-----END CERTIFICATE-----