Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/1c1c19-d4cc-49cd-af5a-177102917199/1/RRz7cSF8JCTRtIRP9FBOhzy_4z4.mft
File:                     RRz7cSF8JCTRtIRP9FBOhzy_4z4.mft (raw, json)
Hash identifier:          DhFuD5vbSm/GzH3Rvfy2KUPmzxa9kyzivO8z/F11IiU=
Subject key identifier:   FA:38:45:59:43:68:BC:19:AD:22:54:C7:FD:A4:8E:AA:97:08:B4:FA
Authority key identifier: 45:1C:FB:71:21:7C:24:24:D1:B4:84:4F:F4:50:4E:87:3C:BF:E3:3E
Certificate issuer:       /CN=451cfb71217c2424d1b4844ff4504e873cbfe33e
Certificate serial:       018BAD4E12B30EF1ECA3EE4977C312870DA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RRz7cSF8JCTRtIRP9FBOhzy_4z4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/1c1c19-d4cc-49cd-af5a-177102917199/1/RRz7cSF8JCTRtIRP9FBOhzy_4z4.mft
Manifest number:          0F7A
Signing time:             Wed 08 Nov 2023 05:00:56 +0000
Manifest this update:     Wed 08 Nov 2023 05:00:56 +0000
Manifest next update:     Thu 09 Nov 2023 05:00:56 +0000
Files and hashes:         1: RRz7cSF8JCTRtIRP9FBOhzy_4z4.crl (hash: rnCLNeg3UE/DBR/zhX+J2z/xZj76Ao5NOn+Zmr3XtAg=)
                          2: n37zMfSsnQJfdwhS79rMT-_4Zfs.roa (hash: DtQfWuXQkFfW6DvvReSKeu74x40RI04DreBiwZjR70s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:ad:4e:12:b3:0e:f1:ec:a3:ee:49:77:c3:12:87:0d:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=451cfb71217c2424d1b4844ff4504e873cbfe33e
        Validity
            Not Before: Nov  8 05:00:56 2023 GMT
            Not After : Nov  9 05:00:56 2023 GMT
        Subject: CN=fa3845594368bc19ad2254c7fda48eaa9708b4fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:b0:e3:00:8a:78:a3:3d:d8:3d:49:e5:66:54:
                    60:d1:fb:b4:1a:11:f0:62:7a:25:ae:a0:80:63:32:
                    55:70:be:5a:d3:ce:d6:29:98:64:1f:dd:3b:f5:30:
                    ab:2b:2a:e8:5b:45:21:17:2a:c9:75:a3:da:62:4d:
                    61:18:60:8a:8b:81:15:93:33:f0:b4:59:63:be:7b:
                    d1:43:7f:94:a5:d3:3a:df:44:96:52:85:27:d3:5c:
                    56:7f:96:10:c8:63:c1:9c:d4:2c:90:f1:12:02:b9:
                    68:62:2f:28:9a:fa:5a:f8:09:0e:53:69:17:50:ca:
                    27:1a:23:55:3d:17:fa:25:d2:20:ba:19:ed:be:b8:
                    cb:10:ac:54:99:c2:63:1b:c2:9f:09:62:8a:89:d6:
                    8f:55:b8:c1:e1:41:19:be:bf:ac:dc:44:6c:7e:51:
                    ed:5f:e4:83:97:38:7a:e5:03:81:3a:78:68:48:24:
                    1a:22:df:46:6c:5b:2e:4e:3a:a1:cb:76:85:cc:4c:
                    51:f6:cd:6d:13:eb:5e:7f:40:eb:b0:4c:20:15:be:
                    d9:17:e1:aa:b7:93:e1:76:51:e4:1f:fd:dc:06:50:
                    f0:be:48:dd:3e:1f:b8:3b:79:58:1a:df:c3:69:19:
                    6a:85:cf:f7:fc:30:0e:25:a4:ae:9b:81:89:2a:0b:
                    ba:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:38:45:59:43:68:BC:19:AD:22:54:C7:FD:A4:8E:AA:97:08:B4:FA
            X509v3 Authority Key Identifier:
                keyid:45:1C:FB:71:21:7C:24:24:D1:B4:84:4F:F4:50:4E:87:3C:BF:E3:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RRz7cSF8JCTRtIRP9FBOhzy_4z4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/1c1c19-d4cc-49cd-af5a-177102917199/1/RRz7cSF8JCTRtIRP9FBOhzy_4z4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/1c1c19-d4cc-49cd-af5a-177102917199/1/RRz7cSF8JCTRtIRP9FBOhzy_4z4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e2:19:60:89:37:36:50:ac:5b:2b:86:c1:b4:31:00:31:d8:49:
         e9:7e:b2:96:27:46:6c:a7:a9:0a:54:2f:54:5f:3e:6d:7d:d5:
         f8:ac:c2:38:ac:2c:03:a6:50:f1:47:c2:cf:a9:c8:ec:c4:c1:
         17:09:54:1e:a2:4a:49:41:ff:5d:a3:74:82:eb:d8:06:de:c2:
         bb:e2:3b:41:51:d3:37:8e:89:a0:a2:33:8b:05:8d:70:fc:7d:
         b2:d5:18:f1:50:f5:ba:51:41:7c:72:a9:7e:2b:3c:6c:59:cc:
         c2:88:b1:04:71:39:4e:f7:37:3c:c9:b3:c5:d1:c9:b2:04:f3:
         22:4c:71:04:dd:fc:75:eb:49:7e:18:84:72:48:c7:b5:23:cf:
         d1:f5:25:8a:3d:a5:ff:25:c5:bc:b7:c3:d5:86:8e:2b:ed:7e:
         b1:3b:f1:fa:7c:ba:4a:a5:fb:3d:81:bc:ff:0f:3b:78:52:ee:
         ad:27:63:f5:56:06:8f:b0:39:24:63:f8:a1:be:42:11:1d:33:
         4b:12:ee:06:63:4b:9f:59:b2:7b:62:e1:c3:09:90:02:d0:a9:
         b3:ac:78:7b:47:5f:f9:d0:5c:dd:97:9f:b3:02:bf:17:6c:c9:
         69:d9:e1:d3:cc:9e:1a:96:ab:ba:d7:c3:bd:ce:3a:da:d5:7b:
         22:8b:86:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYutThKzDvHso+5Jd8MShw2nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1MWNmYjcxMjE3YzI0MjRkMWI0ODQ0ZmY0NTA0ZTg3M2Ni
ZmUzM2UwHhcNMjMxMTA4MDUwMDU2WhcNMjMxMTA5MDUwMDU2WjAzMTEwLwYDVQQD
EyhmYTM4NDU1OTQzNjhiYzE5YWQyMjU0YzdmZGE0OGVhYTk3MDhiNGZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgbDjAIp4oz3YPUnlZlRg0fu0GhHw
YnolrqCAYzJVcL5a087WKZhkH9079TCrKyroW0UhFyrJdaPaYk1hGGCKi4EVkzPw
tFljvnvRQ3+UpdM630SWUoUn01xWf5YQyGPBnNQskPESArloYi8omvpa+AkOU2kX
UMonGiNVPRf6JdIguhntvrjLEKxUmcJjG8KfCWKKidaPVbjB4UEZvr+s3ERsflHt
X+SDlzh65QOBOnhoSCQaIt9GbFsuTjqhy3aFzExR9s1tE+tef0DrsEwgFb7ZF+Gq
t5PhdlHkH/3cBlDwvkjdPh+4O3lYGt/DaRlqhc/3/DAOJaSum4GJKgu6XwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPo4RVlDaLwZrSJUx/2kjqqXCLT6MB8GA1UdIwQY
MBaAFEUc+3EhfCQk0bSET/RQToc8v+M+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlJ6N2NTRjhKQ1RSdElSUDlGQk9oenlfNHo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS8xYzFjMTktZDRjYy00OWNkLWFmNWEt
MTc3MTAyOTE3MTk5LzEvUlJ6N2NTRjhKQ1RSdElSUDlGQk9oenlfNHo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS8xYzFjMTktZDRjYy00OWNkLWFmNWEtMTc3MTAyOTE3MTk5
LzEvUlJ6N2NTRjhKQ1RSdElSUDlGQk9oenlfNHo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4hlgiTc2
UKxbK4bBtDEAMdhJ6X6ylidGbKepClQvVF8+bX3V+KzCOKwsA6ZQ8UfCz6nI7MTB
FwlUHqJKSUH/XaN0guvYBt7Cu+I7QVHTN46JoKIziwWNcPx9stUY8VD1ulFBfHKp
fis8bFnMwoixBHE5Tvc3PMmzxdHJsgTzIkxxBN38detJfhiEckjHtSPP0fUlij2l
/yXFvLfD1YaOK+1+sTvx+ny6SqX7PYG8/w87eFLurSdj9VYGj7A5JGP4ob5CER0z
SxLuBmNLn1mye2LhwwmQAtCps6x4e0df+dBc3ZefswK/F2zJadnh08yeGparutfD
vc462tV7IouG4A==
-----END CERTIFICATE-----