Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/3aa41d-7ad8-4279-861f-c09bac5476d7/1/Kr6lTwNlHKFbCa-eTSly4t8EAlo.mft
File:                     Kr6lTwNlHKFbCa-eTSly4t8EAlo.mft (raw, json)
Hash identifier:          Pif2rNTGepp1l1ynVIrN0gTfRoz5DVxELm5oqDsRKU0=
Subject key identifier:   28:7D:5A:8E:28:32:7E:70:8E:D7:D0:85:34:8D:35:FE:3B:6E:7F:FE
Authority key identifier: 2A:BE:A5:4F:03:65:1C:A1:5B:09:AF:9E:4D:29:72:E2:DF:04:02:5A
Certificate issuer:       /CN=2abea54f03651ca15b09af9e4d2972e2df04025a
Certificate serial:       018A818B2F2220E3A4D6DF0ADEBD4A85019F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Kr6lTwNlHKFbCa-eTSly4t8EAlo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/3aa41d-7ad8-4279-861f-c09bac5476d7/1/Kr6lTwNlHKFbCa-eTSly4t8EAlo.mft
Manifest number:          089A
Signing time:             Mon 11 Sep 2023 00:01:36 +0000
Manifest this update:     Mon 11 Sep 2023 00:01:36 +0000
Manifest next update:     Tue 12 Sep 2023 00:01:36 +0000
Files and hashes:         1: Kr6lTwNlHKFbCa-eTSly4t8EAlo.crl (hash: rdQ7Y87a7Xstr8s0UkO0MkbyZKNbaWJVpFsbTKfzSSE=)
                          2: V3jzLnR7Qb1vot54S0YzqmMa-RI.roa (hash: WaPPLrhQAcOSwRMeW/jPhUGRVVZJFpS+SjQNGFzyzdk=)
                          3: gLwxgBvEAGcmGDuIFnEsPrNyu0g.roa (hash: Vrgpv4rDa/dy6wNeuAW/3wYcSRbLkE1BEAatQqPeRME=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:81:8b:2f:22:20:e3:a4:d6:df:0a:de:bd:4a:85:01:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2abea54f03651ca15b09af9e4d2972e2df04025a
        Validity
            Not Before: Sep 11 00:01:36 2023 GMT
            Not After : Sep 12 00:01:36 2023 GMT
        Subject: CN=287d5a8e28327e708ed7d085348d35fe3b6e7ffe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:76:a6:a4:b2:a4:fc:ec:a4:bb:a6:10:cf:0f:
                    33:aa:df:c3:68:4f:d6:1a:5d:cd:75:6c:fa:84:26:
                    2f:aa:ad:af:c3:84:37:06:9a:36:90:aa:96:26:53:
                    0d:1b:d8:fc:6a:d5:9f:cb:fd:f6:d0:fa:96:26:a8:
                    48:5d:d9:e5:54:42:01:db:e2:89:2e:81:18:4d:b7:
                    f2:f5:bd:49:5c:3c:2e:96:f3:2e:27:b8:7f:0f:33:
                    ed:8b:c3:18:19:11:df:d2:09:db:34:6d:3f:4f:05:
                    a5:f0:fa:90:69:da:68:15:8d:79:a8:9e:47:7a:60:
                    d2:f3:30:01:99:48:bf:9c:8f:b6:fd:9c:22:07:f7:
                    5f:8f:ac:7f:39:1d:9c:eb:07:8f:58:c9:74:e5:eb:
                    a6:0e:f3:f9:f7:44:ef:a4:86:2b:73:55:b9:2a:92:
                    af:ee:93:82:f9:27:9f:4a:da:36:a6:b6:d6:c3:93:
                    19:c1:a9:34:dc:03:1e:58:3f:44:8b:06:a9:d1:3d:
                    0a:24:fc:7f:7d:b9:d8:cd:95:a1:60:9c:c8:e6:16:
                    57:b8:23:61:e2:47:f0:aa:51:88:13:78:cd:94:1d:
                    e3:5e:dc:96:8b:83:c4:07:7f:82:19:58:d9:19:2c:
                    0e:ac:0e:63:b3:4d:36:b9:33:3e:8d:14:d8:fa:fd:
                    33:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:7D:5A:8E:28:32:7E:70:8E:D7:D0:85:34:8D:35:FE:3B:6E:7F:FE
            X509v3 Authority Key Identifier:
                keyid:2A:BE:A5:4F:03:65:1C:A1:5B:09:AF:9E:4D:29:72:E2:DF:04:02:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kr6lTwNlHKFbCa-eTSly4t8EAlo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/3aa41d-7ad8-4279-861f-c09bac5476d7/1/Kr6lTwNlHKFbCa-eTSly4t8EAlo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/3aa41d-7ad8-4279-861f-c09bac5476d7/1/Kr6lTwNlHKFbCa-eTSly4t8EAlo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:18:09:cd:93:ac:f2:f7:1c:82:21:aa:5e:e6:87:ea:62:5f:
         62:37:3a:62:5d:e1:78:7a:e8:6b:c1:ad:56:88:de:56:59:86:
         df:8f:15:b0:fe:5b:2e:64:9b:8a:47:1f:d3:74:04:68:0a:76:
         e1:00:f8:83:07:da:3c:00:7c:93:89:ac:a8:96:4c:14:a7:8d:
         82:dd:2e:51:10:b3:be:b3:74:91:90:69:ff:39:24:88:bb:02:
         9b:46:bf:6c:99:f1:7d:01:56:ed:e6:c3:3a:3a:fc:1a:64:16:
         6a:b5:b3:0a:54:88:12:f4:0b:2d:48:fe:a0:27:f8:6f:1c:07:
         2a:99:9d:cc:82:38:8d:43:fd:fb:60:9e:b7:43:37:bc:b0:fd:
         96:1b:da:48:99:e5:5e:c8:45:98:5b:84:04:6f:87:e5:39:de:
         7a:6a:1e:0a:41:99:c2:68:86:cd:df:b3:25:ac:a5:ee:5b:0c:
         47:8c:42:54:7d:8c:fa:41:4e:ff:5e:c0:c4:ab:26:67:5e:ee:
         fb:6e:3e:79:cc:00:44:e4:bd:b7:9f:2a:34:32:0e:0a:c2:16:
         bd:de:62:df:e4:6e:fd:a8:36:ff:a5:ce:e2:a2:b9:22:47:63:
         7a:29:cc:b1:74:7b:ae:12:cc:1f:59:34:90:31:2d:fb:01:f7:
         7a:dd:36:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYqBiy8iIOOk1t8K3r1KhQGfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYmVhNTRmMDM2NTFjYTE1YjA5YWY5ZTRkMjk3MmUyZGYw
NDAyNWEwHhcNMjMwOTExMDAwMTM2WhcNMjMwOTEyMDAwMTM2WjAzMTEwLwYDVQQD
EygyODdkNWE4ZTI4MzI3ZTcwOGVkN2QwODUzNDhkMzVmZTNiNmU3ZmZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHampLKk/Oyku6YQzw8zqt/DaE/W
Gl3NdWz6hCYvqq2vw4Q3Bpo2kKqWJlMNG9j8atWfy/320PqWJqhIXdnlVEIB2+KJ
LoEYTbfy9b1JXDwulvMuJ7h/DzPti8MYGRHf0gnbNG0/TwWl8PqQadpoFY15qJ5H
emDS8zABmUi/nI+2/ZwiB/dfj6x/OR2c6wePWMl05eumDvP590TvpIYrc1W5KpKv
7pOC+SefSto2prbWw5MZwak03AMeWD9Eiwap0T0KJPx/fbnYzZWhYJzI5hZXuCNh
4kfwqlGIE3jNlB3jXtyWi4PEB3+CGVjZGSwOrA5js002uTM+jRTY+v0zbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCh9Wo4oMn5wjtfQhTSNNf47bn/+MB8GA1UdIwQY
MBaAFCq+pU8DZRyhWwmvnk0pcuLfBAJaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3I2bFR3TmxIS0ZiQ2EtZVRTbHk0dDhFQWxvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS8zYWE0MWQtN2FkOC00Mjc5LTg2MWYt
YzA5YmFjNTQ3NmQ3LzEvS3I2bFR3TmxIS0ZiQ2EtZVRTbHk0dDhFQWxvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS8zYWE0MWQtN2FkOC00Mjc5LTg2MWYtYzA5YmFjNTQ3NmQ3
LzEvS3I2bFR3TmxIS0ZiQ2EtZVRTbHk0dDhFQWxvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYBgJzZOs
8vccgiGqXuaH6mJfYjc6Yl3heHroa8GtVojeVlmG348VsP5bLmSbikcf03QEaAp2
4QD4gwfaPAB8k4msqJZMFKeNgt0uURCzvrN0kZBp/zkkiLsCm0a/bJnxfQFW7ebD
Ojr8GmQWarWzClSIEvQLLUj+oCf4bxwHKpmdzII4jUP9+2Cet0M3vLD9lhvaSJnl
XshFmFuEBG+H5TneemoeCkGZwmiGzd+zJayl7lsMR4xCVH2M+kFO/17AxKsmZ17u
+24+ecwAROS9t58qNDIOCsIWvd5i3+Ru/ag2/6XO4qK5IkdjeinMsXR7rhLMH1k0
kDEt+wH3et02Qw==
-----END CERTIFICATE-----