Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/dc1dbc-090b-4df3-be56-41028edbf710/1/JtmK9BB1HV7HvVT3UVciR-vog5k.mft
File:                     JtmK9BB1HV7HvVT3UVciR-vog5k.mft (raw, json)
Hash identifier:          wj67gf1u1jXCrLFImH9KJ2IiWCH83lBTqEukFKNHv3E=
Subject key identifier:   F4:E1:FC:28:C0:38:A2:58:AC:30:7A:90:5E:08:F6:D6:E2:EE:E6:8B
Authority key identifier: 26:D9:8A:F4:10:75:1D:5E:C7:BD:54:F7:51:57:22:47:EB:E8:83:99
Certificate issuer:       /CN=26d98af410751d5ec7bd54f751572247ebe88399
Certificate serial:       018A2B01106BA3184D226AE408A54B76101A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JtmK9BB1HV7HvVT3UVciR-vog5k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/dc1dbc-090b-4df3-be56-41028edbf710/1/JtmK9BB1HV7HvVT3UVciR-vog5k.mft
Manifest number:          05B0
Signing time:             Fri 25 Aug 2023 04:43:24 +0000
Manifest this update:     Fri 25 Aug 2023 04:43:24 +0000
Manifest next update:     Sat 26 Aug 2023 04:43:24 +0000
Files and hashes:         1: JtmK9BB1HV7HvVT3UVciR-vog5k.crl (hash: 2S3bMkv3S6Ha055WpsRsRHhKIx5jZzXPVTrSi7iJ/a8=)
                          2: fZ1qug1wr0qOHMFCstKbWaBREmQ.roa (hash: 9OfpmLk/HtvlMgThHdbL+wJD8l73Gbq5vPYLlMungZc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:2b:01:10:6b:a3:18:4d:22:6a:e4:08:a5:4b:76:10:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26d98af410751d5ec7bd54f751572247ebe88399
        Validity
            Not Before: Aug 25 04:43:24 2023 GMT
            Not After : Aug 26 04:43:24 2023 GMT
        Subject: CN=f4e1fc28c038a258ac307a905e08f6d6e2eee68b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:76:dc:19:db:76:ca:0f:d7:26:55:fa:c7:df:
                    2e:c5:69:96:06:13:8a:fd:0f:54:e9:e8:b1:e8:ff:
                    7a:7b:a6:38:f3:8b:bc:52:55:48:19:96:50:e4:28:
                    15:75:97:23:70:89:79:7e:28:38:ad:eb:bb:1c:7c:
                    5d:69:ba:41:ec:01:fc:c3:02:49:5d:e7:e0:3d:e6:
                    28:df:e0:55:fe:f0:a4:e1:87:7a:f6:16:27:23:73:
                    8f:bd:b3:17:34:b2:93:13:b5:14:19:dd:53:40:21:
                    ac:47:54:5e:8f:ad:3c:76:1e:2c:4f:91:38:c3:4c:
                    2f:b8:34:6c:23:5e:be:c8:50:76:94:b1:80:b4:be:
                    17:ac:6a:64:e0:b3:b8:03:88:d0:d5:3f:9e:99:83:
                    a8:19:c9:a9:00:5f:bb:a4:fa:2f:a2:59:dd:4e:fc:
                    75:42:9e:16:db:54:ef:60:61:e2:05:e4:f7:c8:a7:
                    97:fc:f0:c2:88:25:48:7f:3c:ae:1d:2a:0b:99:f6:
                    d8:2d:59:15:a7:84:7e:59:d6:39:e9:46:24:c3:47:
                    64:c2:a2:59:43:72:08:73:23:20:fb:94:4b:f3:86:
                    6a:43:ec:45:ab:3a:1a:65:7d:28:ed:9c:a3:74:6e:
                    89:1c:00:9f:2e:58:30:a4:e5:2f:a9:0d:38:72:42:
                    20:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:E1:FC:28:C0:38:A2:58:AC:30:7A:90:5E:08:F6:D6:E2:EE:E6:8B
            X509v3 Authority Key Identifier:
                keyid:26:D9:8A:F4:10:75:1D:5E:C7:BD:54:F7:51:57:22:47:EB:E8:83:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JtmK9BB1HV7HvVT3UVciR-vog5k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/dc1dbc-090b-4df3-be56-41028edbf710/1/JtmK9BB1HV7HvVT3UVciR-vog5k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/dc1dbc-090b-4df3-be56-41028edbf710/1/JtmK9BB1HV7HvVT3UVciR-vog5k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:dc:1f:66:23:6c:ae:8c:52:3a:b1:2d:ef:88:5c:a3:43:7e:
         6f:08:15:04:21:fe:79:ac:fd:97:8c:fe:48:32:b3:2a:b8:8a:
         59:96:91:eb:35:10:a6:9c:6e:6f:cb:5f:10:0d:2c:8e:a4:fc:
         a9:bd:70:d8:98:0e:8e:b0:6b:32:d1:78:83:52:c3:b3:69:2e:
         11:f5:24:ef:8c:26:34:7f:eb:ca:d4:d9:8e:f8:f1:8c:4e:64:
         b5:01:d2:b4:9e:38:ae:c2:6b:77:4b:ff:43:2b:c0:10:09:7e:
         fd:98:bb:84:72:76:db:9c:15:6b:6c:8c:9c:f5:21:22:47:da:
         c1:88:c5:b1:7b:64:76:a0:99:1b:06:98:6f:98:16:86:11:9c:
         5e:2c:bf:a2:8c:3f:fd:ab:9f:f9:5a:c4:ff:9f:89:50:a0:12:
         e4:6a:3a:46:a7:52:4d:96:0f:ad:c2:65:d0:66:52:7d:d8:f8:
         5a:49:b3:8f:37:05:63:84:a6:26:a3:11:ab:4c:5b:d6:04:18:
         c3:65:2c:77:8d:74:d6:c3:3e:75:a1:71:da:bb:78:01:f3:1b:
         8a:7b:a8:88:e4:7d:73:9f:e2:1e:d8:96:5b:2f:82:43:ae:30:
         bd:5c:4c:8d:3b:ba:d0:50:67:74:4d:ab:2e:37:0d:53:28:95:
         95:23:af:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYorARBroxhNImrkCKVLdhAaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2ZDk4YWY0MTA3NTFkNWVjN2JkNTRmNzUxNTcyMjQ3ZWJl
ODgzOTkwHhcNMjMwODI1MDQ0MzI0WhcNMjMwODI2MDQ0MzI0WjAzMTEwLwYDVQQD
EyhmNGUxZmMyOGMwMzhhMjU4YWMzMDdhOTA1ZTA4ZjZkNmUyZWVlNjhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1HbcGdt2yg/XJlX6x98uxWmWBhOK
/Q9U6eix6P96e6Y484u8UlVIGZZQ5CgVdZcjcIl5fig4reu7HHxdabpB7AH8wwJJ
XefgPeYo3+BV/vCk4Yd69hYnI3OPvbMXNLKTE7UUGd1TQCGsR1Rej608dh4sT5E4
w0wvuDRsI16+yFB2lLGAtL4XrGpk4LO4A4jQ1T+emYOoGcmpAF+7pPovolndTvx1
Qp4W21TvYGHiBeT3yKeX/PDCiCVIfzyuHSoLmfbYLVkVp4R+WdY56UYkw0dkwqJZ
Q3IIcyMg+5RL84ZqQ+xFqzoaZX0o7ZyjdG6JHACfLlgwpOUvqQ04ckIgKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPTh/CjAOKJYrDB6kF4I9tbi7uaLMB8GA1UdIwQY
MBaAFCbZivQQdR1ex71U91FXIkfr6IOZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnRtSzlCQjFIVjdIdlZUM1VWY2lSLXZvZzVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9kYzFkYmMtMDkwYi00ZGYzLWJlNTYt
NDEwMjhlZGJmNzEwLzEvSnRtSzlCQjFIVjdIdlZUM1VWY2lSLXZvZzVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9kYzFkYmMtMDkwYi00ZGYzLWJlNTYtNDEwMjhlZGJmNzEw
LzEvSnRtSzlCQjFIVjdIdlZUM1VWY2lSLXZvZzVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQNwfZiNs
roxSOrEt74hco0N+bwgVBCH+eaz9l4z+SDKzKriKWZaR6zUQppxub8tfEA0sjqT8
qb1w2JgOjrBrMtF4g1LDs2kuEfUk74wmNH/rytTZjvjxjE5ktQHStJ44rsJrd0v/
QyvAEAl+/Zi7hHJ225wVa2yMnPUhIkfawYjFsXtkdqCZGwaYb5gWhhGcXiy/oow/
/auf+VrE/5+JUKAS5Go6RqdSTZYPrcJl0GZSfdj4WkmzjzcFY4SmJqMRq0xb1gQY
w2Usd4101sM+daFx2rt4AfMbinuoiOR9c5/iHtiWWy+CQ64wvVxMjTu60FBndE2r
LjcNUyiVlSOvxQ==
-----END CERTIFICATE-----