Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/b7392f-8c88-4c38-915e-0cf77c1e8584/1/nOTdhrz9i49QakCAUWBex022zqA.mft
File:                     nOTdhrz9i49QakCAUWBex022zqA.mft (raw, json)
Hash identifier:          WCCt77jOtT3BVoMASD0lPLZC+ZJLXDhWTUjB0JtWpVw=
Subject key identifier:   26:F9:F7:53:EA:19:20:BA:33:FA:08:D3:8F:B9:0F:30:15:2B:F9:E9
Authority key identifier: 9C:E4:DD:86:BC:FD:8B:8F:50:6A:40:80:51:60:5E:C7:4D:B6:CE:A0
Certificate issuer:       /CN=9ce4dd86bcfd8b8f506a408051605ec74db6cea0
Certificate serial:       018BD2A4D01650C72EC27057031E4796A701
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nOTdhrz9i49QakCAUWBex022zqA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/b7392f-8c88-4c38-915e-0cf77c1e8584/1/nOTdhrz9i49QakCAUWBex022zqA.mft
Manifest number:          0867
Signing time:             Wed 15 Nov 2023 11:01:38 +0000
Manifest this update:     Wed 15 Nov 2023 11:01:38 +0000
Manifest next update:     Thu 16 Nov 2023 11:01:38 +0000
Files and hashes:         1: nOTdhrz9i49QakCAUWBex022zqA.crl (hash: rtjRm7+MwP/Dwuk9B9OpjMLzXnOaB1V4lpoYWMlKVZA=)
                          2: uglN1FfKxut5ZfQMi90eTw1MmKI.roa (hash: 3B7C9jVAkNPJKbOLflZqvQI2eogpzvBG9jo+lrBu1ZU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:d2:a4:d0:16:50:c7:2e:c2:70:57:03:1e:47:96:a7:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ce4dd86bcfd8b8f506a408051605ec74db6cea0
        Validity
            Not Before: Nov 15 11:01:38 2023 GMT
            Not After : Nov 16 11:01:38 2023 GMT
        Subject: CN=26f9f753ea1920ba33fa08d38fb90f30152bf9e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a0:c6:60:e9:50:9d:76:e9:f8:ef:33:f8:cf:
                    f2:25:86:6d:a6:56:80:cb:bf:f6:a0:04:34:b8:a5:
                    92:9b:a9:22:07:51:12:3c:3b:63:95:29:1e:b9:41:
                    ec:85:67:40:84:9f:0c:6a:a8:ee:b8:04:18:3b:51:
                    d3:0b:17:51:64:36:5e:20:0b:05:b8:0d:47:d4:b6:
                    03:e1:54:d7:a4:0b:48:05:f8:65:b0:e1:51:a7:1a:
                    b5:b3:6e:1b:b6:8e:c4:75:ae:c1:6c:1b:9d:e4:64:
                    a3:34:97:fe:30:4f:3c:4f:92:b3:62:90:8d:d6:23:
                    13:7f:1e:06:4b:8a:d1:b6:44:08:0c:3d:19:be:30:
                    93:ae:f1:72:0f:01:76:c2:d9:8d:02:c8:6c:ec:c0:
                    37:b4:0a:5e:81:5e:58:b4:e8:33:bd:aa:46:3e:7e:
                    4c:0e:89:d4:00:55:83:50:4e:3e:d4:e6:9e:61:64:
                    a0:b8:87:dd:2a:b4:8c:d3:28:f8:17:32:07:d6:0b:
                    10:14:62:8a:65:36:f3:7a:e0:bc:cf:a0:e9:79:9b:
                    2c:1d:40:72:d1:c3:63:6b:ea:11:5d:37:6b:9a:fe:
                    07:45:df:2b:5f:69:41:af:86:7e:b3:ab:4f:23:27:
                    63:ac:91:2b:14:a4:28:ef:1b:50:f4:91:d7:d8:43:
                    fc:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:F9:F7:53:EA:19:20:BA:33:FA:08:D3:8F:B9:0F:30:15:2B:F9:E9
            X509v3 Authority Key Identifier:
                keyid:9C:E4:DD:86:BC:FD:8B:8F:50:6A:40:80:51:60:5E:C7:4D:B6:CE:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nOTdhrz9i49QakCAUWBex022zqA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/b7392f-8c88-4c38-915e-0cf77c1e8584/1/nOTdhrz9i49QakCAUWBex022zqA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/b7392f-8c88-4c38-915e-0cf77c1e8584/1/nOTdhrz9i49QakCAUWBex022zqA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:40:7b:dd:c4:62:53:8e:ff:ad:05:7d:ee:1b:fc:e1:7d:ff:
         60:bb:48:3c:8e:6c:e6:68:66:b5:46:af:dc:8b:71:2f:c3:07:
         04:9d:19:9a:3c:60:88:f2:dd:57:5b:37:4e:bc:e5:52:61:3f:
         44:3c:4c:fb:5b:57:41:a9:b8:dc:43:7a:85:dd:48:ac:c4:14:
         dc:93:79:2e:cb:91:c8:27:62:a4:a5:6d:cc:81:0f:58:c0:00:
         01:34:e0:e7:33:ed:29:77:a1:58:7b:e6:af:fc:b1:55:b2:52:
         9f:e0:e2:20:10:05:52:3c:a8:76:36:e9:a3:b6:e8:c8:e8:85:
         e7:0a:9e:0f:1a:c8:85:5b:3b:d7:26:73:d8:b5:81:ec:bb:1e:
         3a:fe:0d:d4:12:57:7a:0b:48:8f:6e:fe:a6:85:91:03:ca:ff:
         16:f6:91:1a:05:b1:a3:60:b0:db:7c:1c:21:23:84:03:f6:5c:
         6c:b6:c3:40:96:dd:aa:6e:7e:10:dc:7a:cd:ef:e5:76:05:a1:
         d1:56:14:76:7b:4a:ff:ed:b3:41:fc:29:89:ae:06:a5:35:e5:
         38:c5:e6:5e:7e:ee:a8:73:61:6f:26:d8:a9:55:15:1a:61:7f:
         f9:5d:a2:4d:fd:1f:ab:e7:73:50:b5:a4:9a:4e:e0:14:30:bc:
         0c:91:ac:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYvSpNAWUMcuwnBXAx5HlqcBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljZTRkZDg2YmNmZDhiOGY1MDZhNDA4MDUxNjA1ZWM3NGRi
NmNlYTAwHhcNMjMxMTE1MTEwMTM4WhcNMjMxMTE2MTEwMTM4WjAzMTEwLwYDVQQD
EygyNmY5Zjc1M2VhMTkyMGJhMzNmYTA4ZDM4ZmI5MGYzMDE1MmJmOWU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKDGYOlQnXbp+O8z+M/yJYZtplaA
y7/2oAQ0uKWSm6kiB1ESPDtjlSkeuUHshWdAhJ8MaqjuuAQYO1HTCxdRZDZeIAsF
uA1H1LYD4VTXpAtIBfhlsOFRpxq1s24bto7Eda7BbBud5GSjNJf+ME88T5KzYpCN
1iMTfx4GS4rRtkQIDD0ZvjCTrvFyDwF2wtmNAshs7MA3tApegV5YtOgzvapGPn5M
DonUAFWDUE4+1OaeYWSguIfdKrSM0yj4FzIH1gsQFGKKZTbzeuC8z6DpeZssHUBy
0cNja+oRXTdrmv4HRd8rX2lBr4Z+s6tPIydjrJErFKQo7xtQ9JHX2EP86wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCb591PqGSC6M/oI04+5DzAVK/npMB8GA1UdIwQY
MBaAFJzk3Ya8/YuPUGpAgFFgXsdNts6gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbk9UZGhyejlpNDlRYWtDQVVXQmV4MDIyenFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9iNzM5MmYtOGM4OC00YzM4LTkxNWUt
MGNmNzdjMWU4NTg0LzEvbk9UZGhyejlpNDlRYWtDQVVXQmV4MDIyenFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC9iNzM5MmYtOGM4OC00YzM4LTkxNWUtMGNmNzdjMWU4NTg0
LzEvbk9UZGhyejlpNDlRYWtDQVVXQmV4MDIyenFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcUB73cRi
U47/rQV97hv84X3/YLtIPI5s5mhmtUav3ItxL8MHBJ0ZmjxgiPLdV1s3TrzlUmE/
RDxM+1tXQam43EN6hd1IrMQU3JN5LsuRyCdipKVtzIEPWMAAATTg5zPtKXehWHvm
r/yxVbJSn+DiIBAFUjyodjbpo7boyOiF5wqeDxrIhVs71yZz2LWB7LseOv4N1BJX
egtIj27+poWRA8r/FvaRGgWxo2Cw23wcISOEA/ZcbLbDQJbdqm5+ENx6ze/ldgWh
0VYUdntK/+2zQfwpia4GpTXlOMXmXn7uqHNhbybYqVUVGmF/+V2iTf0fq+dzULWk
mk7gFDC8DJGsWg==
-----END CERTIFICATE-----