Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/908b7e-81b9-478f-9543-b1f3eaa15212/1/OIPJVHClukqHxQW2g7gWV2Nx48g.mft
File:                     OIPJVHClukqHxQW2g7gWV2Nx48g.mft (raw, json)
Hash identifier:          /XUyCj9WmkJhgZOrIp2QBYLGChOyCkz3u+XT+tKH34U=
Subject key identifier:   BE:23:31:29:F2:DF:55:62:DD:49:20:77:2C:83:71:0F:E8:98:E1:0C
Authority key identifier: 38:83:C9:54:70:A5:BA:4A:87:C5:05:B6:83:B8:16:57:63:71:E3:C8
Certificate issuer:       /CN=3883c95470a5ba4a87c505b683b816576371e3c8
Certificate serial:       018BD123B36AB3F0445E3B4FBB096D004E70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OIPJVHClukqHxQW2g7gWV2Nx48g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/908b7e-81b9-478f-9543-b1f3eaa15212/1/OIPJVHClukqHxQW2g7gWV2Nx48g.mft
Manifest number:          088D
Signing time:             Wed 15 Nov 2023 04:00:59 +0000
Manifest this update:     Wed 15 Nov 2023 04:00:59 +0000
Manifest next update:     Thu 16 Nov 2023 04:00:59 +0000
Files and hashes:         1: IaekO2oCBc3g9mW5K-F9OYerIUk.roa (hash: iRwL6OkS81sE24Gf5aLxUDmZGjaGIY3LJoNO/6tJ6dk=)
                          2: OIPJVHClukqHxQW2g7gWV2Nx48g.crl (hash: QbY8RwQwzyiOTuiuNR4u7+4g8hh9kOtQqBlzDNoPX/U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:d1:23:b3:6a:b3:f0:44:5e:3b:4f:bb:09:6d:00:4e:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3883c95470a5ba4a87c505b683b816576371e3c8
        Validity
            Not Before: Nov 15 04:00:59 2023 GMT
            Not After : Nov 16 04:00:59 2023 GMT
        Subject: CN=be233129f2df5562dd4920772c83710fe898e10c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:eb:01:0a:33:15:a2:95:9c:0c:d2:0a:5b:13:
                    7a:81:56:8c:67:1f:ec:0f:1f:8a:64:bd:bd:35:d3:
                    cc:70:03:00:ad:8a:d8:85:23:e2:65:7b:44:48:c3:
                    51:c8:35:35:c4:9b:cd:bf:0d:75:51:c6:0e:c2:d2:
                    72:8b:c3:20:0a:51:7d:24:86:2d:ec:68:11:8b:90:
                    10:8e:96:31:37:5e:1d:72:be:81:3f:f9:f6:ec:13:
                    b4:e6:ef:fe:2f:06:32:2c:ba:81:80:a7:87:52:9a:
                    4a:42:8e:93:18:77:d4:d3:f7:97:ea:ac:e1:d6:38:
                    e9:09:b9:d0:58:79:cd:db:20:5c:fe:29:3c:c1:8b:
                    8d:46:4b:32:d9:c3:43:ea:e3:b3:cf:7d:42:b5:76:
                    ff:7b:66:f1:a7:dd:3e:46:3e:22:fb:06:3d:53:ef:
                    f3:fc:e3:90:42:b4:cf:3e:7f:10:fc:32:72:0f:bf:
                    19:9a:10:21:ee:fb:d9:0a:33:94:87:cb:88:63:35:
                    00:b4:ce:28:18:84:65:9b:4c:c2:3a:c9:4b:77:23:
                    75:aa:19:6e:05:0b:2d:99:9e:19:e6:22:2b:5d:81:
                    7c:ec:3c:55:21:f8:22:ef:9e:fa:0c:df:d7:bc:1f:
                    a7:68:49:14:96:c5:bd:e7:53:2e:ee:7a:dd:a6:4d:
                    c4:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:23:31:29:F2:DF:55:62:DD:49:20:77:2C:83:71:0F:E8:98:E1:0C
            X509v3 Authority Key Identifier:
                keyid:38:83:C9:54:70:A5:BA:4A:87:C5:05:B6:83:B8:16:57:63:71:E3:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OIPJVHClukqHxQW2g7gWV2Nx48g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/908b7e-81b9-478f-9543-b1f3eaa15212/1/OIPJVHClukqHxQW2g7gWV2Nx48g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/908b7e-81b9-478f-9543-b1f3eaa15212/1/OIPJVHClukqHxQW2g7gWV2Nx48g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:11:a7:5a:de:2b:c6:cc:1b:36:35:b3:d7:16:65:d1:a5:68:
         fb:e2:1c:21:c9:8a:96:28:bc:49:a9:bb:64:ee:37:f1:c7:c5:
         f1:44:93:3c:52:7c:8c:47:6c:70:39:67:fc:84:6f:09:ff:45:
         59:4b:31:b3:08:bd:c3:fe:33:6a:df:e6:51:36:9e:37:e2:83:
         c2:b6:da:6e:41:21:ab:3d:cd:1f:01:64:9c:05:e0:d4:fb:e7:
         97:af:bf:a3:bd:2a:6c:e6:3e:35:ef:63:65:3f:86:44:78:9e:
         08:0e:1f:9b:13:a4:72:d9:6c:05:54:65:0b:29:f3:73:bc:ff:
         21:8a:c6:16:fb:76:08:7b:af:a9:c5:bd:c0:18:50:70:df:ea:
         9c:8a:bd:4a:cf:4a:70:49:a3:0f:8c:52:6e:4c:10:8e:d0:78:
         c9:0b:eb:70:8f:17:e9:33:71:dc:6e:e0:af:af:5c:34:70:1a:
         fe:38:88:63:11:09:67:c3:b3:79:e6:c1:c4:76:dc:cc:83:30:
         80:63:ac:3d:12:7b:01:f8:1d:88:48:33:4c:13:fe:22:e5:ed:
         df:f8:7f:aa:ec:8e:48:5d:99:10:70:e9:9f:e9:9a:fb:fb:e0:
         68:d7:b9:ab:42:71:76:ea:9e:e0:d2:51:a5:61:e1:3f:2d:3e:
         ca:f4:7a:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYvRI7Nqs/BEXjtPuwltAE5wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4ODNjOTU0NzBhNWJhNGE4N2M1MDViNjgzYjgxNjU3NjM3
MWUzYzgwHhcNMjMxMTE1MDQwMDU5WhcNMjMxMTE2MDQwMDU5WjAzMTEwLwYDVQQD
EyhiZTIzMzEyOWYyZGY1NTYyZGQ0OTIwNzcyYzgzNzEwZmU4OThlMTBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOsBCjMVopWcDNIKWxN6gVaMZx/s
Dx+KZL29NdPMcAMArYrYhSPiZXtESMNRyDU1xJvNvw11UcYOwtJyi8MgClF9JIYt
7GgRi5AQjpYxN14dcr6BP/n27BO05u/+LwYyLLqBgKeHUppKQo6TGHfU0/eX6qzh
1jjpCbnQWHnN2yBc/ik8wYuNRksy2cND6uOzz31CtXb/e2bxp90+Rj4i+wY9U+/z
/OOQQrTPPn8Q/DJyD78ZmhAh7vvZCjOUh8uIYzUAtM4oGIRlm0zCOslLdyN1qhlu
BQstmZ4Z5iIrXYF87DxVIfgi7576DN/XvB+naEkUlsW951Mu7nrdpk3EqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL4jMSny31Vi3UkgdyyDcQ/omOEMMB8GA1UdIwQY
MBaAFDiDyVRwpbpKh8UFtoO4FldjcePIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0lQSlZIQ2x1a3FIeFFXMmc3Z1dWMk54NDhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi85MDhiN2UtODFiOS00NzhmLTk1NDMt
YjFmM2VhYTE1MjEyLzEvT0lQSlZIQ2x1a3FIeFFXMmc3Z1dWMk54NDhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi85MDhiN2UtODFiOS00NzhmLTk1NDMtYjFmM2VhYTE1MjEy
LzEvT0lQSlZIQ2x1a3FIeFFXMmc3Z1dWMk54NDhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaBGnWt4r
xswbNjWz1xZl0aVo++IcIcmKlii8Sam7ZO438cfF8USTPFJ8jEdscDln/IRvCf9F
WUsxswi9w/4zat/mUTaeN+KDwrbabkEhqz3NHwFknAXg1Pvnl6+/o70qbOY+Ne9j
ZT+GRHieCA4fmxOkctlsBVRlCynzc7z/IYrGFvt2CHuvqcW9wBhQcN/qnIq9Ss9K
cEmjD4xSbkwQjtB4yQvrcI8X6TNx3G7gr69cNHAa/jiIYxEJZ8OzeebBxHbczIMw
gGOsPRJ7AfgdiEgzTBP+IuXt3/h/quyOSF2ZEHDpn+ma+/vgaNe5q0Jxduqe4NJR
pWHhPy0+yvR67w==
-----END CERTIFICATE-----