Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/3a0cc5-3851-4b93-9163-0be4625badb4/1/3IElQJmGt34L0JSth7r_PrSiXWc.mft
File:                     3IElQJmGt34L0JSth7r_PrSiXWc.mft (raw, json)
Hash identifier:          1GudInfjXYl9WFyayRCU6W4AsXrw7OCGucfgWtsQmIw=
Subject key identifier:   9B:2D:A8:56:4D:49:17:AF:19:12:88:91:82:E1:BE:B7:91:FC:E7:11
Authority key identifier: DC:81:25:40:99:86:B7:7E:0B:D0:94:AD:87:BA:FF:3E:B4:A2:5D:67
Certificate issuer:       /CN=dc8125409986b77e0bd094ad87baff3eb4a25d67
Certificate serial:       0187BC1E4D90FC65A7E49242A253AD177C19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3IElQJmGt34L0JSth7r_PrSiXWc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/3a0cc5-3851-4b93-9163-0be4625badb4/1/3IElQJmGt34L0JSth7r_PrSiXWc.mft
Manifest number:          0D4B
Signing time:             Wed 26 Apr 2023 05:51:55 +0000
Manifest this update:     Wed 26 Apr 2023 05:51:55 +0000
Manifest next update:     Thu 27 Apr 2023 05:51:55 +0000
Files and hashes:         1: 3IElQJmGt34L0JSth7r_PrSiXWc.crl (hash: 81NotIQdQp66m14JDt3X81SCCPyUdztet645LFafXdE=)
                          2: mCl-pgnAZ_Ci_HAG0mJ49KS8R_w.roa (hash: SK8l2YzO34Igy7JA9O3Q4lLLGRrYh+4WLuX644WXyQU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:bc:1e:4d:90:fc:65:a7:e4:92:42:a2:53:ad:17:7c:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc8125409986b77e0bd094ad87baff3eb4a25d67
        Validity
            Not Before: Apr 26 05:51:55 2023 GMT
            Not After : Apr 27 05:51:55 2023 GMT
        Subject: CN=9b2da8564d4917af1912889182e1beb791fce711
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:1b:db:b1:fd:d5:38:61:24:63:72:a5:34:81:
                    33:6d:94:df:f9:3a:18:52:28:a7:16:82:38:bb:dc:
                    e5:d7:07:4d:13:6c:3b:12:fb:0b:bd:c2:f8:1b:96:
                    d0:96:cc:bc:db:e9:88:b2:8f:19:0a:2e:72:fe:fb:
                    c3:9b:9d:24:f2:79:4a:c5:63:00:78:31:67:4f:22:
                    09:0c:eb:4d:70:16:76:18:22:b4:43:55:66:b6:34:
                    15:5d:39:28:8e:d5:18:a3:d4:79:79:e6:06:cb:fb:
                    ba:35:24:03:79:e6:68:65:83:b7:7c:56:cf:29:fb:
                    58:2f:8c:ba:79:bc:f7:ec:ef:86:4f:70:3c:10:ac:
                    22:95:dd:b5:52:5a:ed:92:04:68:af:79:d9:98:6d:
                    0b:5e:0c:81:1c:48:92:01:df:4f:63:6c:d7:e7:71:
                    98:4e:ce:c9:70:9e:0d:8d:e9:b6:e8:13:19:3c:14:
                    e6:62:3c:0a:66:2a:e3:9e:d9:6c:16:5c:f1:02:5e:
                    63:65:a7:e6:b1:57:24:4c:65:ab:99:b0:72:21:a6:
                    ca:cb:cb:84:80:6f:af:10:e7:86:67:85:28:cc:be:
                    4d:3b:6c:be:16:e0:8f:9c:07:7d:36:f7:1a:96:00:
                    27:71:9e:e9:1c:e3:b3:d2:d5:96:fa:8a:f2:42:f7:
                    db:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:2D:A8:56:4D:49:17:AF:19:12:88:91:82:E1:BE:B7:91:FC:E7:11
            X509v3 Authority Key Identifier:
                keyid:DC:81:25:40:99:86:B7:7E:0B:D0:94:AD:87:BA:FF:3E:B4:A2:5D:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3IElQJmGt34L0JSth7r_PrSiXWc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/3a0cc5-3851-4b93-9163-0be4625badb4/1/3IElQJmGt34L0JSth7r_PrSiXWc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/3a0cc5-3851-4b93-9163-0be4625badb4/1/3IElQJmGt34L0JSth7r_PrSiXWc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:79:a4:8d:e1:b3:b8:55:65:8d:ea:3f:82:29:7f:26:f1:b9:
         bc:e3:7c:0e:e8:7f:14:0a:a8:70:03:96:46:80:04:02:e9:99:
         ee:dc:81:6c:7d:13:81:65:ce:14:1b:31:ce:49:c4:6d:16:71:
         24:6f:10:2e:87:3d:4a:d6:a7:3e:b3:30:22:0a:75:e1:d2:3a:
         96:9a:a2:db:33:9c:76:fe:00:99:f7:59:a6:d9:3e:08:1d:fd:
         8b:1e:d5:10:b2:55:ef:6f:ad:08:09:42:8d:dc:c8:84:21:91:
         7b:18:47:f5:16:10:6e:9a:fe:fc:98:73:a2:51:65:cc:8c:27:
         8b:8a:c6:bb:ca:8c:81:e5:fe:05:af:f5:9b:6c:6f:f9:ea:dc:
         d8:ae:66:f0:18:f0:3f:8f:be:d2:08:05:73:1d:9f:5f:c3:fa:
         c7:31:10:a1:ee:0c:69:42:78:9e:c4:fc:d7:ac:19:ea:8b:62:
         79:b2:07:82:24:7e:02:fd:39:56:64:c7:ef:b3:7b:d6:1a:10:
         3e:c4:d0:b7:2a:da:87:7e:18:1e:2c:c4:41:f5:5a:7e:4d:cd:
         94:17:89:86:16:ba:1a:88:28:45:0d:8d:c0:af:09:93:2a:c1:
         dc:d8:14:df:c1:89:7f:c7:ed:c3:83:ce:b5:3b:e3:52:42:4c:
         42:3d:f6:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYe8Hk2Q/GWn5JJColOtF3wZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjODEyNTQwOTk4NmI3N2UwYmQwOTRhZDg3YmFmZjNlYjRh
MjVkNjcwHhcNMjMwNDI2MDU1MTU1WhcNMjMwNDI3MDU1MTU1WjAzMTEwLwYDVQQD
Eyg5YjJkYTg1NjRkNDkxN2FmMTkxMjg4OTE4MmUxYmViNzkxZmNlNzExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBvbsf3VOGEkY3KlNIEzbZTf+ToY
UiinFoI4u9zl1wdNE2w7EvsLvcL4G5bQlsy82+mIso8ZCi5y/vvDm50k8nlKxWMA
eDFnTyIJDOtNcBZ2GCK0Q1VmtjQVXTkojtUYo9R5eeYGy/u6NSQDeeZoZYO3fFbP
KftYL4y6ebz37O+GT3A8EKwild21UlrtkgRor3nZmG0LXgyBHEiSAd9PY2zX53GY
Ts7JcJ4Njem26BMZPBTmYjwKZirjntlsFlzxAl5jZafmsVckTGWrmbByIabKy8uE
gG+vEOeGZ4UozL5NO2y+FuCPnAd9NvcalgAncZ7pHOOz0tWW+oryQvfb5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJstqFZNSRevGRKIkYLhvreR/OcRMB8GA1UdIwQY
MBaAFNyBJUCZhrd+C9CUrYe6/z60ol1nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0lFbFFKbUd0MzRMMEpTdGg3cl9QclNpWFdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC8zYTBjYzUtMzg1MS00YjkzLTkxNjMt
MGJlNDYyNWJhZGI0LzEvM0lFbFFKbUd0MzRMMEpTdGg3cl9QclNpWFdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC8zYTBjYzUtMzg1MS00YjkzLTkxNjMtMGJlNDYyNWJhZGI0
LzEvM0lFbFFKbUd0MzRMMEpTdGg3cl9QclNpWFdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV3mkjeGz
uFVljeo/gil/JvG5vON8Duh/FAqocAOWRoAEAumZ7tyBbH0TgWXOFBsxzknEbRZx
JG8QLoc9StanPrMwIgp14dI6lpqi2zOcdv4AmfdZptk+CB39ix7VELJV72+tCAlC
jdzIhCGRexhH9RYQbpr+/JhzolFlzIwni4rGu8qMgeX+Ba/1m2xv+erc2K5m8Bjw
P4++0ggFcx2fX8P6xzEQoe4MaUJ4nsT816wZ6otiebIHgiR+Av05VmTH77N71hoQ
PsTQtyrah34YHizEQfVafk3NlBeJhha6GogoRQ2NwK8JkyrB3NgU38GJf8ftw4PO
tTvjUkJMQj32vw==
-----END CERTIFICATE-----