Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/4b8090-fa5d-4ab7-a4ca-2e9d9fd29340/1/pDXQQ8q45QkfQVRuhIAG6ug8za0.mft
File:                     pDXQQ8q45QkfQVRuhIAG6ug8za0.mft (raw, json)
Hash identifier:          12QQY5+UViq2btbL6P4Hqq6QwnU6Y3AEDlGX5T7ZGSw=
Subject key identifier:   41:BC:50:04:0A:7F:7F:9C:7D:67:B7:BA:1A:28:FF:69:72:5C:13:7C
Authority key identifier: A4:35:D0:43:CA:B8:E5:09:1F:41:54:6E:84:80:06:EA:E8:3C:CD:AD
Certificate issuer:       /CN=a435d043cab8e5091f41546e848006eae83ccdad
Certificate serial:       018ACFA5881765AE74A65C8189863D82CB97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pDXQQ8q45QkfQVRuhIAG6ug8za0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/4b8090-fa5d-4ab7-a4ca-2e9d9fd29340/1/pDXQQ8q45QkfQVRuhIAG6ug8za0.mft
Manifest number:          01F0
Signing time:             Tue 26 Sep 2023 04:00:46 +0000
Manifest this update:     Tue 26 Sep 2023 04:00:46 +0000
Manifest next update:     Wed 27 Sep 2023 04:00:46 +0000
Files and hashes:         1: 269pBW3juvEWRJHRqXO0LiQ4epg.roa (hash: PEd3A4qiTv8e0ZBX6g2l0Rb+HYl5cbm12a1Nu8Jg+8s=)
                          2: N2fm9S3MNbNcbNXqm7i2Mc-SFHg.roa (hash: PmqXt2ditQ8X3c6QoyVWFjizktuL88g7HeANQGqifoM=)
                          3: PudMx1fTuavbINPNFeweAlc5N9w.roa (hash: Mn2iNcEMmsIzku9pL3K/OSZ1p6W0Xte4xTWeSllpUkQ=)
                          4: pDXQQ8q45QkfQVRuhIAG6ug8za0.crl (hash: ENsMZ/xh1F2gO2RFyHvn7EscewDKToK2ZXcYGQKMV7M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:cf:a5:88:17:65:ae:74:a6:5c:81:89:86:3d:82:cb:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a435d043cab8e5091f41546e848006eae83ccdad
        Validity
            Not Before: Sep 26 04:00:46 2023 GMT
            Not After : Sep 27 04:00:46 2023 GMT
        Subject: CN=41bc50040a7f7f9c7d67b7ba1a28ff69725c137c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:05:fc:6a:a2:6f:ed:be:4d:26:4c:de:27:09:
                    07:4c:dd:07:08:98:53:24:17:44:8e:7b:cc:c3:22:
                    22:16:6a:03:36:db:68:f0:08:97:e5:62:3e:39:2c:
                    be:a5:e1:db:e1:e0:47:d9:37:57:37:7f:61:37:3e:
                    5c:26:bc:fa:8a:65:ac:d9:d7:5b:86:9b:f7:cd:99:
                    36:2b:e2:a7:e4:09:4d:3e:35:68:ed:8d:77:53:fe:
                    ac:86:ed:9d:1a:a2:0a:4f:f4:49:15:db:05:60:fd:
                    67:c0:43:5e:c9:4a:70:51:83:00:07:08:01:ee:d5:
                    ae:fc:8e:08:1d:15:93:24:9f:9c:f4:b1:25:7f:5c:
                    f9:74:4e:35:25:83:98:a4:88:d9:d1:15:af:c3:12:
                    b9:88:e8:cf:3a:52:27:0f:09:31:c7:b2:02:b9:f5:
                    d9:64:3c:2c:48:86:10:57:7b:0c:10:88:9b:f4:2a:
                    bb:46:18:c2:43:14:af:9d:30:c0:32:ae:22:fe:f3:
                    6c:bb:8c:0e:aa:a2:b4:f5:ea:73:04:20:9d:23:87:
                    35:47:28:31:1c:c4:c8:eb:a8:c2:3d:d3:05:cf:79:
                    1f:c9:22:37:cf:bb:37:51:c3:85:a9:dc:a8:3e:08:
                    13:db:76:80:ac:8f:32:17:0d:8f:59:db:d8:4f:84:
                    f8:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:BC:50:04:0A:7F:7F:9C:7D:67:B7:BA:1A:28:FF:69:72:5C:13:7C
            X509v3 Authority Key Identifier:
                keyid:A4:35:D0:43:CA:B8:E5:09:1F:41:54:6E:84:80:06:EA:E8:3C:CD:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDXQQ8q45QkfQVRuhIAG6ug8za0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4b8090-fa5d-4ab7-a4ca-2e9d9fd29340/1/pDXQQ8q45QkfQVRuhIAG6ug8za0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4b8090-fa5d-4ab7-a4ca-2e9d9fd29340/1/pDXQQ8q45QkfQVRuhIAG6ug8za0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:d6:c2:6d:31:b5:d1:ad:ea:b4:81:6a:a9:eb:c5:eb:ed:ec:
         8e:72:8f:02:99:69:97:d9:f7:8d:91:a4:f5:af:10:26:6c:b7:
         4c:fc:f7:6a:34:32:a1:8b:37:dd:cb:75:aa:bb:3e:25:ca:f0:
         4a:cb:53:e1:de:c9:bf:fd:59:9e:70:f6:6f:60:a2:73:ea:37:
         88:5f:67:45:4c:45:5a:ea:d1:e2:b0:a9:13:fc:85:bb:21:37:
         ad:05:bd:97:06:59:f1:2b:da:3b:d0:73:e6:40:11:c2:78:76:
         33:37:20:58:ab:7a:7e:c5:48:44:48:ad:68:a9:8f:c1:10:29:
         cf:84:06:c6:34:d8:eb:10:72:92:3c:73:d3:90:cf:5e:84:88:
         6b:ad:47:50:81:6f:22:f5:e0:3d:7d:50:1a:3e:59:2f:db:b1:
         a5:87:27:56:5e:7f:e3:30:de:3e:b2:e5:a6:6f:db:49:2c:99:
         d2:18:f7:70:03:a2:ab:a2:7c:54:8d:fb:8a:67:db:cd:dd:ab:
         44:4b:ce:ab:02:05:00:cb:f6:3f:47:de:3a:91:10:30:c9:a1:
         a9:32:e7:50:5c:36:3b:58:f0:41:5c:9e:b6:e1:c7:05:ff:9b:
         2f:b0:66:13:b9:97:7a:42:7e:fe:08:6a:73:79:b6:af:08:0c:
         f0:40:58:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYrPpYgXZa50plyBiYY9gsuXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0MzVkMDQzY2FiOGU1MDkxZjQxNTQ2ZTg0ODAwNmVhZTgz
Y2NkYWQwHhcNMjMwOTI2MDQwMDQ2WhcNMjMwOTI3MDQwMDQ2WjAzMTEwLwYDVQQD
Eyg0MWJjNTAwNDBhN2Y3ZjljN2Q2N2I3YmExYTI4ZmY2OTcyNWMxMzdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwX8aqJv7b5NJkzeJwkHTN0HCJhT
JBdEjnvMwyIiFmoDNtto8AiX5WI+OSy+peHb4eBH2TdXN39hNz5cJrz6imWs2ddb
hpv3zZk2K+Kn5AlNPjVo7Y13U/6shu2dGqIKT/RJFdsFYP1nwENeyUpwUYMABwgB
7tWu/I4IHRWTJJ+c9LElf1z5dE41JYOYpIjZ0RWvwxK5iOjPOlInDwkxx7ICufXZ
ZDwsSIYQV3sMEIib9Cq7RhjCQxSvnTDAMq4i/vNsu4wOqqK09epzBCCdI4c1Rygx
HMTI66jCPdMFz3kfySI3z7s3UcOFqdyoPggT23aArI8yFw2PWdvYT4T49QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEG8UAQKf3+cfWe3uhoo/2lyXBN8MB8GA1UdIwQY
MBaAFKQ10EPKuOUJH0FUboSABuroPM2tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcERYUVE4cTQ1UWtmUVZSdWhJQUc2dWc4emEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC80YjgwOTAtZmE1ZC00YWI3LWE0Y2Et
MmU5ZDlmZDI5MzQwLzEvcERYUVE4cTQ1UWtmUVZSdWhJQUc2dWc4emEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC80YjgwOTAtZmE1ZC00YWI3LWE0Y2EtMmU5ZDlmZDI5MzQw
LzEvcERYUVE4cTQ1UWtmUVZSdWhJQUc2dWc4emEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhtbCbTG1
0a3qtIFqqevF6+3sjnKPAplpl9n3jZGk9a8QJmy3TPz3ajQyoYs33ct1qrs+Jcrw
SstT4d7Jv/1ZnnD2b2Cic+o3iF9nRUxFWurR4rCpE/yFuyE3rQW9lwZZ8SvaO9Bz
5kARwnh2MzcgWKt6fsVIREitaKmPwRApz4QGxjTY6xBykjxz05DPXoSIa61HUIFv
IvXgPX1QGj5ZL9uxpYcnVl5/4zDePrLlpm/bSSyZ0hj3cAOiq6J8VI37imfbzd2r
REvOqwIFAMv2P0feOpEQMMmhqTLnUFw2O1jwQVyetuHHBf+bL7BmE7mXekJ+/ghq
c3m2rwgM8EBYEA==
-----END CERTIFICATE-----