Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/2fc518-506f-4fb8-abd9-718cae5766bb/1/F6i-ubgte09rnpxDZ4AceQoOFEc.mft
File:                     F6i-ubgte09rnpxDZ4AceQoOFEc.mft (raw, json)
Hash identifier:          3VutOVqslCGZpuqGfEnVKZNc6PPs1w9gSSJvCeU6pUo=
Subject key identifier:   18:0D:3E:06:0A:D7:FF:70:00:AB:7E:2F:37:B0:E2:A8:A9:60:18:C6
Authority key identifier: 17:A8:BE:B9:B8:2D:7B:4F:6B:9E:9C:43:67:80:1C:79:0A:0E:14:47
Certificate issuer:       /CN=17a8beb9b82d7b4f6b9e9c4367801c790a0e1447
Certificate serial:       018BFED7AA1852902310505DCE71425FA705
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F6i-ubgte09rnpxDZ4AceQoOFEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/2fc518-506f-4fb8-abd9-718cae5766bb/1/F6i-ubgte09rnpxDZ4AceQoOFEc.mft
Manifest number:          05B7
Signing time:             Fri 24 Nov 2023 01:00:28 +0000
Manifest this update:     Fri 24 Nov 2023 01:00:28 +0000
Manifest next update:     Sat 25 Nov 2023 01:00:28 +0000
Files and hashes:         1: F6i-ubgte09rnpxDZ4AceQoOFEc.crl (hash: 9seCxNb1pO728ZK44JwYtOSeMQxFVhsHEG2/RT2iYgk=)
                          2: ZhGRChiWPfOWg_QdP2G43gf4CyA.roa (hash: CvAOhQlQYXeudKTreBvAnGKxZ4eS/bMYdjW+DwmjQWw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:fe:d7:aa:18:52:90:23:10:50:5d:ce:71:42:5f:a7:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17a8beb9b82d7b4f6b9e9c4367801c790a0e1447
        Validity
            Not Before: Nov 24 01:00:28 2023 GMT
            Not After : Nov 25 01:00:28 2023 GMT
        Subject: CN=180d3e060ad7ff7000ab7e2f37b0e2a8a96018c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:83:6f:25:bc:98:e6:b9:8b:69:6d:9f:d5:87:
                    ab:4a:d4:ad:dd:32:0d:0f:af:a2:8b:8a:b0:30:b1:
                    df:ca:43:fc:68:a6:67:3f:3c:e8:36:72:3c:a8:40:
                    2f:f6:41:03:b8:f2:a5:3b:70:99:9c:9a:86:88:c5:
                    cc:1c:9b:46:46:56:23:5f:d6:9d:73:90:be:d2:a2:
                    4d:54:f8:89:20:88:4b:49:92:da:23:26:4b:c1:a8:
                    7f:35:bf:0e:bb:ab:ce:2b:d2:98:2f:c6:b0:95:f4:
                    0e:58:cd:43:d8:be:8e:1f:21:07:8d:28:8c:ae:18:
                    7c:88:94:b9:6a:90:2c:fc:39:f0:ce:ce:1d:c4:7d:
                    54:5a:b8:a5:11:5b:85:40:1e:23:69:be:0f:9b:e4:
                    6e:3a:cc:7f:db:b7:e2:f2:56:d1:33:00:5e:a6:02:
                    f4:48:27:eb:24:b5:c9:dc:15:05:76:b9:52:31:6b:
                    ca:e9:4c:03:d4:17:f8:93:74:b0:e7:80:4c:21:a8:
                    2a:8c:76:39:b7:7d:60:9f:5d:b6:00:0b:f8:23:31:
                    72:2e:ff:f9:37:ec:81:9e:fb:cf:62:18:3d:50:8e:
                    f8:61:59:3a:87:db:a5:52:1c:f5:5e:01:e5:49:87:
                    5f:9b:44:95:ef:63:0a:9b:0e:15:fe:f1:47:3d:2d:
                    ad:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:0D:3E:06:0A:D7:FF:70:00:AB:7E:2F:37:B0:E2:A8:A9:60:18:C6
            X509v3 Authority Key Identifier:
                keyid:17:A8:BE:B9:B8:2D:7B:4F:6B:9E:9C:43:67:80:1C:79:0A:0E:14:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F6i-ubgte09rnpxDZ4AceQoOFEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2fc518-506f-4fb8-abd9-718cae5766bb/1/F6i-ubgte09rnpxDZ4AceQoOFEc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2fc518-506f-4fb8-abd9-718cae5766bb/1/F6i-ubgte09rnpxDZ4AceQoOFEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:91:46:4e:9e:35:35:74:bb:ca:e8:8e:ac:04:29:c8:81:d1:
         17:f4:6d:c4:aa:91:64:ce:cd:d0:41:8d:60:47:31:e5:38:9d:
         e5:f0:b9:af:51:ad:69:36:9a:42:80:50:94:28:f9:92:47:c5:
         63:89:39:69:22:47:d5:fb:9f:91:cc:b9:16:ae:d8:04:7a:34:
         fd:16:c3:eb:8a:d7:d0:44:f9:fe:29:bb:13:9f:21:ae:c6:cc:
         b1:2b:6a:69:1c:23:f5:be:3c:74:b2:02:ba:2a:12:c0:70:d7:
         dc:ab:2c:e9:df:b4:3e:15:e2:87:14:b6:35:6b:7b:91:64:45:
         5e:1d:0f:1e:6f:09:cd:d4:6d:b7:57:c3:31:d6:0d:23:e6:67:
         7d:88:51:6f:1d:1b:ad:35:63:40:f4:a9:94:03:26:f0:d0:e9:
         88:98:1d:45:4b:9f:2e:a1:28:61:31:36:3d:80:fc:01:60:1f:
         96:96:05:2f:d0:58:1f:af:47:f1:95:e5:53:10:48:38:f6:1b:
         48:3a:bd:44:df:4c:f3:ae:dd:46:d0:bf:b8:96:a4:80:03:df:
         2f:24:74:13:df:ff:bc:ef:8e:47:84:0e:33:bd:8c:6c:a0:c2:
         4d:38:df:6e:3e:17:57:19:30:d1:af:7c:a9:d0:f9:02:db:95:
         25:3c:3b:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYv+16oYUpAjEFBdznFCX6cFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3YThiZWI5YjgyZDdiNGY2YjllOWM0MzY3ODAxYzc5MGEw
ZTE0NDcwHhcNMjMxMTI0MDEwMDI4WhcNMjMxMTI1MDEwMDI4WjAzMTEwLwYDVQQD
EygxODBkM2UwNjBhZDdmZjcwMDBhYjdlMmYzN2IwZTJhOGE5NjAxOGM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4NvJbyY5rmLaW2f1YerStSt3TIN
D6+ii4qwMLHfykP8aKZnPzzoNnI8qEAv9kEDuPKlO3CZnJqGiMXMHJtGRlYjX9ad
c5C+0qJNVPiJIIhLSZLaIyZLwah/Nb8Ou6vOK9KYL8awlfQOWM1D2L6OHyEHjSiM
rhh8iJS5apAs/Dnwzs4dxH1UWrilEVuFQB4jab4Pm+RuOsx/27fi8lbRMwBepgL0
SCfrJLXJ3BUFdrlSMWvK6UwD1Bf4k3Sw54BMIagqjHY5t31gn122AAv4IzFyLv/5
N+yBnvvPYhg9UI74YVk6h9ulUhz1XgHlSYdfm0SV72MKmw4V/vFHPS2tnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBgNPgYK1/9wAKt+Lzew4qipYBjGMB8GA1UdIwQY
MBaAFBeovrm4LXtPa56cQ2eAHHkKDhRHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjZpLXViZ3RlMDlybnB4RFo0QWNlUW9PRkVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8yZmM1MTgtNTA2Zi00ZmI4LWFiZDkt
NzE4Y2FlNTc2NmJiLzEvRjZpLXViZ3RlMDlybnB4RFo0QWNlUW9PRkVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi8yZmM1MTgtNTA2Zi00ZmI4LWFiZDktNzE4Y2FlNTc2NmJi
LzEvRjZpLXViZ3RlMDlybnB4RFo0QWNlUW9PRkVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgpFGTp41
NXS7yuiOrAQpyIHRF/RtxKqRZM7N0EGNYEcx5Tid5fC5r1GtaTaaQoBQlCj5kkfF
Y4k5aSJH1fufkcy5Fq7YBHo0/RbD64rX0ET5/im7E58hrsbMsStqaRwj9b48dLIC
uioSwHDX3Kss6d+0PhXihxS2NWt7kWRFXh0PHm8JzdRtt1fDMdYNI+ZnfYhRbx0b
rTVjQPSplAMm8NDpiJgdRUufLqEoYTE2PYD8AWAflpYFL9BYH69H8ZXlUxBIOPYb
SDq9RN9M867dRtC/uJakgAPfLyR0E9//vO+OR4QOM72MbKDCTTjfbj4XVxkw0a98
qdD5AtuVJTw7Uw==
-----END CERTIFICATE-----