Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f75c65-885e-417d-8076-bf7d8fca46e1/1/Q7AQW8y55gkxIHZzVKi4STy-TNY.mft
File:                     Q7AQW8y55gkxIHZzVKi4STy-TNY.mft (raw, json)
Hash identifier:          aaaY17ekchQwq3eNEgn+U+qdJ4meoXP0QM737mDTcLc=
Subject key identifier:   B6:73:E2:08:F2:93:7D:22:32:CA:A9:D3:6E:1F:BC:62:82:03:9F:58
Authority key identifier: 43:B0:10:5B:CC:B9:E6:09:31:20:76:73:54:A8:B8:49:3C:BE:4C:D6
Certificate issuer:       /CN=43b0105bccb9e6093120767354a8b8493cbe4cd6
Certificate serial:       018C66E92F394C8C2537550C8A870C178C8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q7AQW8y55gkxIHZzVKi4STy-TNY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/f75c65-885e-417d-8076-bf7d8fca46e1/1/Q7AQW8y55gkxIHZzVKi4STy-TNY.mft
Manifest number:          0FDE
Signing time:             Thu 14 Dec 2023 06:00:07 +0000
Manifest this update:     Thu 14 Dec 2023 06:00:07 +0000
Manifest next update:     Fri 15 Dec 2023 06:00:07 +0000
Files and hashes:         1: 8vm-GsY8wzvdi-8D178nsB3NOkg.roa (hash: UTcAI2uMN1Tsr3rPGRTammYmbBkg2C6SK0Vyvqo/JuI=)
                          2: Bz6VDpB03faNu8VYncirv62zdYE.roa (hash: d5lvdsSvibgPm/oBwtjaj8XFW6/6VOV6eVy71uBIgts=)
                          3: Q7AQW8y55gkxIHZzVKi4STy-TNY.crl (hash: zOXUjOqNeeG9kKeDuu7tbldDxuxWO74AlbgchAQNBR8=)
                          4: iLKliSZv1epNLjfD6yC6mlPzHUw.roa (hash: GMOc93c0bsba9SGlEc+M0jwwrUEeZnFEuh+eugB9vgo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:66:e9:2f:39:4c:8c:25:37:55:0c:8a:87:0c:17:8c:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43b0105bccb9e6093120767354a8b8493cbe4cd6
        Validity
            Not Before: Dec 14 06:00:07 2023 GMT
            Not After : Dec 15 06:00:07 2023 GMT
        Subject: CN=b673e208f2937d2232caa9d36e1fbc6282039f58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:0e:dc:b5:47:36:bf:8f:db:03:81:d3:41:a2:
                    08:5c:e8:00:e2:e0:c1:3b:1a:80:17:4b:4b:a9:89:
                    13:d9:69:43:16:ac:da:f1:dd:f7:a2:75:ad:94:3e:
                    3e:e3:5e:87:7e:84:c5:ac:13:34:bb:a5:4a:bd:6b:
                    4d:90:ce:20:c2:45:08:a5:2c:20:86:ef:e3:f9:18:
                    12:5b:a2:e4:b4:6c:a8:e1:5f:0a:03:80:b6:33:66:
                    6d:b7:5c:d3:eb:62:a7:d1:47:90:bf:13:ed:28:e8:
                    c3:ef:4d:99:33:37:1e:2b:bd:ec:99:57:a4:dc:a8:
                    be:b8:be:47:6f:53:40:72:62:fc:1d:7d:a1:a8:1b:
                    18:fa:33:16:a2:2b:ae:9b:9b:7b:d2:9f:d3:43:cd:
                    b3:ed:7a:fb:25:f2:e8:fc:4f:8b:45:76:53:23:34:
                    55:2d:1e:79:d3:4b:0b:e1:78:a0:1f:4d:6c:d7:a0:
                    29:97:72:0b:03:26:51:cf:17:d2:25:64:19:8b:b4:
                    0e:bc:b3:d7:b2:c4:22:97:e2:2a:bf:98:fc:6d:ea:
                    59:90:2e:83:7d:45:10:fe:65:1f:29:63:74:ed:2d:
                    36:b9:83:8b:c9:67:d3:af:18:59:83:74:52:41:dd:
                    9f:88:dc:3a:7d:d6:5b:77:4f:c2:7b:08:19:7a:0d:
                    c5:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:73:E2:08:F2:93:7D:22:32:CA:A9:D3:6E:1F:BC:62:82:03:9F:58
            X509v3 Authority Key Identifier:
                keyid:43:B0:10:5B:CC:B9:E6:09:31:20:76:73:54:A8:B8:49:3C:BE:4C:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q7AQW8y55gkxIHZzVKi4STy-TNY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f75c65-885e-417d-8076-bf7d8fca46e1/1/Q7AQW8y55gkxIHZzVKi4STy-TNY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f75c65-885e-417d-8076-bf7d8fca46e1/1/Q7AQW8y55gkxIHZzVKi4STy-TNY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:e2:28:00:2c:73:a1:30:41:e4:e5:4c:3c:0b:6f:dc:93:47:
         86:83:b5:df:e0:64:ba:21:76:62:cd:24:a8:7e:49:fe:d4:db:
         3e:87:9c:f6:ad:1b:66:14:03:ea:5e:f5:1b:8c:38:7b:04:2e:
         18:fa:77:19:fe:11:b7:77:90:35:c5:b5:f0:3e:72:cf:ff:fb:
         f0:97:ba:65:21:4a:d4:5d:0e:bc:6a:bb:dc:3f:48:27:3b:58:
         d8:cf:4a:ca:ec:cf:d5:89:95:17:3c:95:ad:21:fd:75:ca:f4:
         f8:c7:52:9f:be:c6:0f:72:1d:54:c6:9c:5b:59:51:f1:88:a8:
         ed:e8:c0:c0:43:c1:2e:da:30:80:9c:64:20:4a:fd:15:e9:ce:
         c4:7b:3b:40:60:9e:fb:b7:88:8a:fc:5d:cc:61:0d:f6:d7:ea:
         49:c4:73:a3:74:99:7b:0e:1b:bc:e6:22:b3:2e:8f:01:a1:58:
         70:74:1d:82:9a:51:53:dc:73:00:99:ae:37:9e:3a:ad:a9:69:
         7a:59:62:55:2e:3d:56:9f:9b:62:b7:a8:b9:c2:96:ae:02:15:
         80:f8:22:ca:60:bc:24:d7:58:80:6f:bf:87:b7:e0:d6:a3:d8:
         5e:4e:a9:f2:b9:ac:76:0f:7a:74:69:2c:29:84:a8:22:15:c7:
         31:e6:44:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYxm6S85TIwlN1UMiocMF4yPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzYjAxMDViY2NiOWU2MDkzMTIwNzY3MzU0YThiODQ5M2Ni
ZTRjZDYwHhcNMjMxMjE0MDYwMDA3WhcNMjMxMjE1MDYwMDA3WjAzMTEwLwYDVQQD
EyhiNjczZTIwOGYyOTM3ZDIyMzJjYWE5ZDM2ZTFmYmM2MjgyMDM5ZjU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqg7ctUc2v4/bA4HTQaIIXOgA4uDB
OxqAF0tLqYkT2WlDFqza8d33onWtlD4+416HfoTFrBM0u6VKvWtNkM4gwkUIpSwg
hu/j+RgSW6LktGyo4V8KA4C2M2Ztt1zT62Kn0UeQvxPtKOjD702ZMzceK73smVek
3Ki+uL5Hb1NAcmL8HX2hqBsY+jMWoiuum5t70p/TQ82z7Xr7JfLo/E+LRXZTIzRV
LR5500sL4XigH01s16Apl3ILAyZRzxfSJWQZi7QOvLPXssQil+Iqv5j8bepZkC6D
fUUQ/mUfKWN07S02uYOLyWfTrxhZg3RSQd2fiNw6fdZbd0/CewgZeg3FewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLZz4gjyk30iMsqp024fvGKCA59YMB8GA1UdIwQY
MBaAFEOwEFvMueYJMSB2c1SouEk8vkzWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTdBUVc4eTU1Z2t4SUhaelZLaTRTVHktVE5ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9mNzVjNjUtODg1ZS00MTdkLTgwNzYt
YmY3ZDhmY2E0NmUxLzEvUTdBUVc4eTU1Z2t4SUhaelZLaTRTVHktVE5ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9mNzVjNjUtODg1ZS00MTdkLTgwNzYtYmY3ZDhmY2E0NmUx
LzEvUTdBUVc4eTU1Z2t4SUhaelZLaTRTVHktVE5ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN+IoACxz
oTBB5OVMPAtv3JNHhoO13+BkuiF2Ys0kqH5J/tTbPoec9q0bZhQD6l71G4w4ewQu
GPp3Gf4Rt3eQNcW18D5yz//78Je6ZSFK1F0OvGq73D9IJztY2M9KyuzP1YmVFzyV
rSH9dcr0+MdSn77GD3IdVMacW1lR8Yio7ejAwEPBLtowgJxkIEr9FenOxHs7QGCe
+7eIivxdzGEN9tfqScRzo3SZew4bvOYisy6PAaFYcHQdgppRU9xzAJmuN546ralp
elliVS49Vp+bYreoucKWrgIVgPgiymC8JNdYgG+/h7fg1qPYXk6p8rmsdg96dGks
KYSoIhXHMeZEtg==
-----END CERTIFICATE-----