Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/f9d547-c86c-44da-a9c0-007e84c0f9e5/1/YlXwc_-wRyfRXNdYOZxsYT-u8Q4.mft
File:                     YlXwc_-wRyfRXNdYOZxsYT-u8Q4.mft (raw, json)
Hash identifier:          2GGVC0tdFzJ8m8l7mSojATBJ/r1TNguBiYH9rsIx4Tc=
Subject key identifier:   7E:03:BB:81:72:7A:EF:CB:B1:70:C9:C3:21:49:0F:AD:97:16:23:C3
Authority key identifier: 62:55:F0:73:FF:B0:47:27:D1:5C:D7:58:39:9C:6C:61:3F:AE:F1:0E
Certificate issuer:       /CN=6255f073ffb04727d15cd758399c6c613faef10e
Certificate serial:       018C5C9D936F197B99FDD4E883C620359A3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YlXwc_-wRyfRXNdYOZxsYT-u8Q4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/f9d547-c86c-44da-a9c0-007e84c0f9e5/1/YlXwc_-wRyfRXNdYOZxsYT-u8Q4.mft
Manifest number:          08B5
Signing time:             Tue 12 Dec 2023 06:01:19 +0000
Manifest this update:     Tue 12 Dec 2023 06:01:19 +0000
Manifest next update:     Wed 13 Dec 2023 06:01:19 +0000
Files and hashes:         1: GivlB1zFhQ0g86StZFmh1w5e9SQ.roa (hash: ToBHcYGuzEvnfnc1NeP52OtHb86V6eK+mw3de3AaZrs=)
                          2: YlXwc_-wRyfRXNdYOZxsYT-u8Q4.crl (hash: p+qebXUJb8QWeS612Pha5Z+yHJ7AJPXfOR98Fuod9Vw=)
                          3: eKdG3c2vUbkEdmiXt6KcTY6Xr3I.roa (hash: oy03/f9sIfsoxUuv8nNrlDvuYuLlk/0i++I4kQuaVZg=)
                          4: tIVTEeVCZOcGQifUFevCpn0z00A.roa (hash: AUD2/DRU9BfqzGAilPdfhXA8h5JIlnE99dzraDhwNtU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:5c:9d:93:6f:19:7b:99:fd:d4:e8:83:c6:20:35:9a:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6255f073ffb04727d15cd758399c6c613faef10e
        Validity
            Not Before: Dec 12 06:01:19 2023 GMT
            Not After : Dec 13 06:01:19 2023 GMT
        Subject: CN=7e03bb81727aefcbb170c9c321490fad971623c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:83:ef:8f:a9:55:05:a3:ac:fd:64:d5:5b:94:
                    10:84:02:34:cb:8c:5f:4d:5e:1b:b8:77:7d:97:17:
                    42:ff:60:64:04:68:bd:72:fa:1e:72:8c:11:01:e7:
                    42:bb:40:0f:f6:cc:b8:a5:87:0e:34:d9:39:fc:e5:
                    d7:7c:74:77:fa:57:6d:0c:26:46:29:75:7d:c5:7b:
                    3a:c7:8e:8a:7f:80:5b:a4:2a:8d:85:8b:65:2f:70:
                    f3:35:39:ac:20:5a:25:1e:ef:58:32:b5:0a:c2:88:
                    c8:6c:b1:92:c5:9b:fe:c8:16:8d:f6:e4:3a:1c:7c:
                    43:fd:12:64:ff:39:28:35:14:f6:c8:e9:d9:ed:da:
                    3d:ec:29:40:59:84:3e:58:85:26:c4:49:60:0d:ce:
                    0a:26:dc:95:df:f4:60:21:74:d4:f8:25:10:5c:80:
                    23:8a:55:23:12:7c:80:e2:7b:1d:2d:51:8a:8c:fe:
                    32:41:d4:50:9b:a8:00:42:64:af:6e:19:cf:78:b6:
                    4e:17:d3:0a:81:bb:35:49:75:63:ae:a6:a1:f8:f3:
                    64:0a:60:51:fb:bd:91:00:76:5c:25:b7:84:65:bb:
                    24:6a:91:cc:35:13:fd:4a:de:34:f7:66:1e:05:08:
                    de:88:f0:1b:91:3d:32:b7:eb:c8:a3:ab:cd:41:9b:
                    03:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:03:BB:81:72:7A:EF:CB:B1:70:C9:C3:21:49:0F:AD:97:16:23:C3
            X509v3 Authority Key Identifier:
                keyid:62:55:F0:73:FF:B0:47:27:D1:5C:D7:58:39:9C:6C:61:3F:AE:F1:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YlXwc_-wRyfRXNdYOZxsYT-u8Q4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f9d547-c86c-44da-a9c0-007e84c0f9e5/1/YlXwc_-wRyfRXNdYOZxsYT-u8Q4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f9d547-c86c-44da-a9c0-007e84c0f9e5/1/YlXwc_-wRyfRXNdYOZxsYT-u8Q4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:d7:c1:55:2f:ee:1a:c0:ca:f4:c8:76:03:86:4a:48:46:ff:
         af:6b:22:57:05:c2:a3:ec:97:5b:6d:5e:f0:dc:db:52:fe:66:
         bd:94:29:fc:29:a3:95:fa:08:9e:d4:68:ad:4f:46:19:e1:71:
         20:0e:e8:96:9a:ca:bd:79:9d:75:0b:38:9d:18:62:b3:bd:ad:
         8d:ba:51:0b:5a:a2:04:0d:c9:45:54:5e:dd:b4:91:c0:60:16:
         7b:4b:d8:4b:bf:c9:66:be:02:66:46:4c:16:c0:da:dd:6c:56:
         2b:d3:78:79:a2:21:1a:0e:3f:3f:8c:f2:d1:c5:8e:60:bd:1c:
         d6:92:75:3b:e9:99:65:91:65:9b:f2:12:8c:b0:cd:0e:e5:68:
         9c:ba:67:92:08:8a:ed:39:10:99:c5:06:05:17:00:73:f1:ad:
         92:fb:e7:47:b3:8f:33:9e:33:0b:41:a2:54:04:22:a6:11:b3:
         8f:51:8b:d2:a6:4e:a2:9d:ac:8e:26:9d:74:23:5f:74:55:36:
         7b:a0:39:49:a1:39:fb:38:a6:36:19:34:e0:63:bc:3f:c0:5e:
         81:fc:fb:74:88:ba:4f:4d:e7:d7:f2:00:0b:ef:25:83:9a:ad:
         06:25:5c:73:9b:30:53:a2:1a:3c:54:32:74:25:0f:b6:cd:b1:
         12:2b:a6:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYxcnZNvGXuZ/dTog8YgNZo+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyNTVmMDczZmZiMDQ3MjdkMTVjZDc1ODM5OWM2YzYxM2Zh
ZWYxMGUwHhcNMjMxMjEyMDYwMTE5WhcNMjMxMjEzMDYwMTE5WjAzMTEwLwYDVQQD
Eyg3ZTAzYmI4MTcyN2FlZmNiYjE3MGM5YzMyMTQ5MGZhZDk3MTYyM2MzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxoPvj6lVBaOs/WTVW5QQhAI0y4xf
TV4buHd9lxdC/2BkBGi9cvoecowRAedCu0AP9sy4pYcONNk5/OXXfHR3+ldtDCZG
KXV9xXs6x46Kf4BbpCqNhYtlL3DzNTmsIFolHu9YMrUKwojIbLGSxZv+yBaN9uQ6
HHxD/RJk/zkoNRT2yOnZ7do97ClAWYQ+WIUmxElgDc4KJtyV3/RgIXTU+CUQXIAj
ilUjEnyA4nsdLVGKjP4yQdRQm6gAQmSvbhnPeLZOF9MKgbs1SXVjrqah+PNkCmBR
+72RAHZcJbeEZbskapHMNRP9St4092YeBQjeiPAbkT0yt+vIo6vNQZsDYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH4Du4Fyeu/LsXDJwyFJD62XFiPDMB8GA1UdIwQY
MBaAFGJV8HP/sEcn0VzXWDmcbGE/rvEOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWxYd2NfLXdSeWZSWE5kWU9aeHNZVC11OFE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9mOWQ1NDctYzg2Yy00NGRhLWE5YzAt
MDA3ZTg0YzBmOWU1LzEvWWxYd2NfLXdSeWZSWE5kWU9aeHNZVC11OFE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi9mOWQ1NDctYzg2Yy00NGRhLWE5YzAtMDA3ZTg0YzBmOWU1
LzEvWWxYd2NfLXdSeWZSWE5kWU9aeHNZVC11OFE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAptfBVS/u
GsDK9Mh2A4ZKSEb/r2siVwXCo+yXW21e8NzbUv5mvZQp/CmjlfoIntRorU9GGeFx
IA7olprKvXmddQs4nRhis72tjbpRC1qiBA3JRVRe3bSRwGAWe0vYS7/JZr4CZkZM
FsDa3WxWK9N4eaIhGg4/P4zy0cWOYL0c1pJ1O+mZZZFlm/ISjLDNDuVonLpnkgiK
7TkQmcUGBRcAc/GtkvvnR7OPM54zC0GiVAQiphGzj1GL0qZOop2sjiaddCNfdFU2
e6A5SaE5+zimNhk04GO8P8Begfz7dIi6T03n1/IAC+8lg5qtBiVcc5swU6IaPFQy
dCUPts2xEium6Q==
-----END CERTIFICATE-----