Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/k14FffGD8JfaZnyooBQIXniTmkE.mft
File:                     k14FffGD8JfaZnyooBQIXniTmkE.mft (raw, json)
Hash identifier:          9lvFC7Z62FuovXetL1SImaDkeJg9ANrP2MZDpjV7/NA=
Subject key identifier:   A4:27:88:27:55:8B:46:EF:14:FE:C2:74:ED:29:49:C2:89:C2:07:56
Authority key identifier: 93:5E:05:7D:F1:83:F0:97:DA:66:7C:A8:A0:14:08:5E:78:93:9A:41
Certificate issuer:       /CN=935e057df183f097da667ca8a014085e78939a41
Certificate serial:       018B7DE237D4C165374CF5F1265491C73A69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k14FffGD8JfaZnyooBQIXniTmkE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/k14FffGD8JfaZnyooBQIXniTmkE.mft
Manifest number:          C9
Signing time:             Mon 30 Oct 2023 00:00:59 +0000
Manifest this update:     Mon 30 Oct 2023 00:00:59 +0000
Manifest next update:     Tue 31 Oct 2023 00:00:59 +0000
Files and hashes:         1: TCQJUc_EnvjekEBaQ95LueiGC8s.roa (hash: JgvZz8xqg5y+nuw53H+IVs4aZ5iGNMPMMA1BzEJgDNA=)
                          2: k14FffGD8JfaZnyooBQIXniTmkE.crl (hash: jay8LuveysoqC+WqQVacEnfh7DeuZw5O+eqEREMSv3g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:7d:e2:37:d4:c1:65:37:4c:f5:f1:26:54:91:c7:3a:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=935e057df183f097da667ca8a014085e78939a41
        Validity
            Not Before: Oct 30 00:00:59 2023 GMT
            Not After : Oct 31 00:00:59 2023 GMT
        Subject: CN=a4278827558b46ef14fec274ed2949c289c20756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:26:73:72:43:ba:ec:d5:d0:d4:c9:15:18:8a:
                    e7:fa:10:99:9f:26:93:5a:1e:3b:f3:f9:e6:e2:2e:
                    ad:c0:e0:0b:2c:18:ba:06:96:23:e4:0e:c0:9e:00:
                    1f:03:ef:69:5e:4c:e0:2e:3e:c8:7a:cd:de:09:bb:
                    d8:fc:26:46:4c:e8:a6:c7:7c:22:61:08:30:b8:f3:
                    55:5d:e0:55:5c:c0:8c:25:d0:48:b4:44:38:7a:68:
                    50:2f:b5:d9:9a:da:45:ae:62:e0:b0:4b:60:92:7e:
                    8d:d5:d2:4d:7a:50:c5:0f:bb:d0:cb:57:8a:91:c0:
                    5e:53:3a:64:7e:16:f0:41:95:96:e9:cd:79:00:0f:
                    b0:6f:71:2f:f0:01:ad:ab:7f:d5:89:bb:b8:f1:5f:
                    3f:ca:56:f8:85:b7:59:c0:7f:b5:2e:37:78:c4:de:
                    67:99:56:36:6e:37:65:06:89:2a:a5:a9:0d:90:b5:
                    f0:3b:d6:ea:74:22:61:c3:a3:87:fd:08:29:de:30:
                    1a:c4:5f:60:d3:85:3a:82:0d:18:ac:09:cd:b7:64:
                    2f:8c:54:12:37:ff:0e:8c:99:59:43:aa:82:ec:97:
                    f3:cf:4a:c8:0c:7e:c9:b9:2d:d5:42:26:b5:c2:11:
                    68:48:3b:46:1d:1a:e7:3b:26:bf:0a:9a:b5:7b:3c:
                    c2:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:27:88:27:55:8B:46:EF:14:FE:C2:74:ED:29:49:C2:89:C2:07:56
            X509v3 Authority Key Identifier:
                keyid:93:5E:05:7D:F1:83:F0:97:DA:66:7C:A8:A0:14:08:5E:78:93:9A:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k14FffGD8JfaZnyooBQIXniTmkE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/k14FffGD8JfaZnyooBQIXniTmkE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/k14FffGD8JfaZnyooBQIXniTmkE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:09:7f:07:6f:77:d6:ab:b0:f1:92:4d:66:1b:7c:12:02:6d:
         45:b9:a7:72:99:7b:13:47:0d:89:32:97:98:92:b3:c7:58:ca:
         8c:af:47:9a:4f:06:07:24:3d:08:e3:79:7f:ed:fb:21:d2:b8:
         91:59:49:70:f7:fd:5c:f0:43:6f:2d:fd:66:64:6f:d3:04:7f:
         17:50:1b:8e:3b:12:e3:3f:52:ed:34:bc:57:b8:02:b7:cc:9b:
         da:f4:00:e7:03:91:c1:8d:11:cd:49:bb:ba:db:89:82:d4:32:
         ff:30:39:ca:09:49:04:70:8f:c0:68:3b:21:e6:48:5b:2e:21:
         81:a8:68:77:d9:8f:9e:9b:14:9c:14:2a:ea:65:64:1a:26:23:
         f4:4b:ec:7d:4e:36:44:60:a4:3b:1d:71:fa:9b:fc:60:06:01:
         1c:bc:a6:51:ee:df:f0:8c:31:fa:78:ff:68:6b:83:51:27:ef:
         dd:18:83:c1:e4:09:80:9e:89:f0:ac:3e:4d:e5:5c:e7:b8:15:
         b3:7d:d1:a5:38:38:c2:e6:39:a0:36:dd:f0:a3:55:61:19:fa:
         e8:3d:0a:25:97:e1:f2:61:85:13:3f:37:eb:47:b0:ea:67:ee:
         ba:81:92:9a:47:97:a8:bf:3d:7d:59:f1:3d:31:3a:37:7f:e1:
         88:c4:29:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYt94jfUwWU3TPXxJlSRxzppMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNWUwNTdkZjE4M2YwOTdkYTY2N2NhOGEwMTQwODVlNzg5
MzlhNDEwHhcNMjMxMDMwMDAwMDU5WhcNMjMxMDMxMDAwMDU5WjAzMTEwLwYDVQQD
EyhhNDI3ODgyNzU1OGI0NmVmMTRmZWMyNzRlZDI5NDljMjg5YzIwNzU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiZzckO67NXQ1MkVGIrn+hCZnyaT
Wh478/nm4i6twOALLBi6BpYj5A7AngAfA+9pXkzgLj7Ies3eCbvY/CZGTOimx3wi
YQgwuPNVXeBVXMCMJdBItEQ4emhQL7XZmtpFrmLgsEtgkn6N1dJNelDFD7vQy1eK
kcBeUzpkfhbwQZWW6c15AA+wb3Ev8AGtq3/Vibu48V8/ylb4hbdZwH+1Ljd4xN5n
mVY2bjdlBokqpakNkLXwO9bqdCJhw6OH/Qgp3jAaxF9g04U6gg0YrAnNt2QvjFQS
N/8OjJlZQ6qC7Jfzz0rIDH7JuS3VQia1whFoSDtGHRrnOya/Cpq1ezzCKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKQniCdVi0bvFP7CdO0pScKJwgdWMB8GA1UdIwQY
MBaAFJNeBX3xg/CX2mZ8qKAUCF54k5pBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazE0RmZmR0Q4SmZhWm55b29CUUlYbmlUbWtFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9iZDIwMDUtZmI3Yi00MDUyLWIzZjIt
ODhmYTNiNmViMDA2LzEvazE0RmZmR0Q4SmZhWm55b29CUUlYbmlUbWtFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9iZDIwMDUtZmI3Yi00MDUyLWIzZjItODhmYTNiNmViMDA2
LzEvazE0RmZmR0Q4SmZhWm55b29CUUlYbmlUbWtFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJgl/B293
1quw8ZJNZht8EgJtRbmncpl7E0cNiTKXmJKzx1jKjK9Hmk8GByQ9CON5f+37IdK4
kVlJcPf9XPBDby39ZmRv0wR/F1AbjjsS4z9S7TS8V7gCt8yb2vQA5wORwY0RzUm7
utuJgtQy/zA5yglJBHCPwGg7IeZIWy4hgahod9mPnpsUnBQq6mVkGiYj9EvsfU42
RGCkOx1x+pv8YAYBHLymUe7f8Iwx+nj/aGuDUSfv3RiDweQJgJ6J8Kw+TeVc57gV
s33RpTg4wuY5oDbd8KNVYRn66D0KJZfh8mGFEz8360ew6mfuuoGSmkeXqL89fVnx
PTE6N3/hiMQpvQ==
-----END CERTIFICATE-----