Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/b50d8f-a95f-4eca-a822-658bc41b10fa/1/M1GLv3EVzYVz4N646-Z1hI8lvfs.mft
File:                     M1GLv3EVzYVz4N646-Z1hI8lvfs.mft (raw, json)
Hash identifier:          4bVOtsgmxzbrvUTYKxpM1lYZ7KAfP8XUS9CK0CXqwBo=
Subject key identifier:   80:9E:19:8C:68:4B:B6:E9:5E:C4:F3:03:A3:CA:B8:6D:79:25:A1:B0
Authority key identifier: 33:51:8B:BF:71:15:CD:85:73:E0:DE:B8:EB:E6:75:84:8F:25:BD:FB
Certificate issuer:       /CN=33518bbf7115cd8573e0deb8ebe675848f25bdfb
Certificate serial:       018C0FCB859AD0DF8D2E58A59ADEFC86DB8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M1GLv3EVzYVz4N646-Z1hI8lvfs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/b50d8f-a95f-4eca-a822-658bc41b10fa/1/M1GLv3EVzYVz4N646-Z1hI8lvfs.mft
Manifest number:          08D2
Signing time:             Mon 27 Nov 2023 08:00:45 +0000
Manifest this update:     Mon 27 Nov 2023 08:00:45 +0000
Manifest next update:     Tue 28 Nov 2023 08:00:45 +0000
Files and hashes:         1: M1GLv3EVzYVz4N646-Z1hI8lvfs.crl (hash: sEOdyj0fQ2hlO1FlVHUplocivuYp3zVrBFcvFxx/Dqk=)
                          2: OKNMinHAr4l-xoafNYcpbJEJZHQ.roa (hash: dLBHlFWIhK5IFDmQXwDrGhLOfkK9eOnHoB/6xPgyhM0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:0f:cb:85:9a:d0:df:8d:2e:58:a5:9a:de:fc:86:db:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33518bbf7115cd8573e0deb8ebe675848f25bdfb
        Validity
            Not Before: Nov 27 08:00:45 2023 GMT
            Not After : Nov 28 08:00:45 2023 GMT
        Subject: CN=809e198c684bb6e95ec4f303a3cab86d7925a1b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ce:ff:cf:3c:96:78:d3:9d:dc:0a:e1:77:18:
                    b7:1d:7c:27:c3:47:40:e0:e8:d0:0a:47:6a:0b:66:
                    1c:2f:67:20:f0:68:5f:cf:dd:51:1b:21:12:e5:66:
                    b1:40:e1:e0:e9:e0:ae:77:5e:df:84:c1:d2:6f:60:
                    4a:5e:9f:39:e5:73:22:b4:52:e3:a3:44:17:e3:2a:
                    1b:d2:3e:49:e9:b4:a8:65:e8:3f:de:05:69:a3:da:
                    e3:44:ea:2b:85:d8:a4:a9:e2:28:c8:9d:e8:32:73:
                    4b:35:44:c1:59:c6:09:45:c3:87:dc:e0:f5:47:24:
                    d1:1b:f0:c0:76:c6:72:a9:e9:34:56:13:ae:4b:b4:
                    34:a9:7b:86:b1:a1:78:5c:7c:ae:61:36:2c:24:f3:
                    fb:0d:6d:d0:01:de:42:32:b9:37:4b:c7:09:56:77:
                    ab:98:82:24:31:80:32:47:bc:5f:bd:9d:7f:d4:78:
                    8a:45:64:2f:d2:d8:d0:31:6a:7d:e9:2b:95:1d:3b:
                    cb:75:b2:78:cc:eb:05:7c:67:9e:d6:18:59:49:f3:
                    c3:71:da:c6:a6:c4:c7:0b:2a:aa:17:9e:c7:9b:3f:
                    33:00:ab:15:00:f5:2c:52:87:46:0c:eb:9a:3d:c7:
                    fc:4d:32:92:16:6e:52:7a:0f:06:83:75:a3:85:9d:
                    fa:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:9E:19:8C:68:4B:B6:E9:5E:C4:F3:03:A3:CA:B8:6D:79:25:A1:B0
            X509v3 Authority Key Identifier:
                keyid:33:51:8B:BF:71:15:CD:85:73:E0:DE:B8:EB:E6:75:84:8F:25:BD:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1GLv3EVzYVz4N646-Z1hI8lvfs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/b50d8f-a95f-4eca-a822-658bc41b10fa/1/M1GLv3EVzYVz4N646-Z1hI8lvfs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/b50d8f-a95f-4eca-a822-658bc41b10fa/1/M1GLv3EVzYVz4N646-Z1hI8lvfs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:10:18:71:58:06:4e:20:74:56:30:29:02:b5:b7:9d:5d:56:
         95:4d:9e:2a:d2:d1:d7:f5:7e:fa:01:d1:d7:af:4f:aa:7b:bb:
         8b:27:d9:18:c5:2e:a8:ca:83:cb:3f:43:43:0e:25:e8:2c:68:
         be:a6:11:ca:0e:10:43:e1:ae:45:84:d5:61:b5:20:13:6a:bd:
         cb:3f:05:84:66:03:11:7a:f2:59:d2:a1:d6:02:4f:5c:e5:87:
         97:5f:51:ed:b2:fb:9b:24:1c:fe:23:2c:fa:52:6b:9b:f7:2e:
         8e:07:bf:68:e9:ac:ab:45:0a:82:d7:9b:b3:59:31:ba:15:f6:
         96:79:6c:3e:3c:cc:48:aa:a2:e3:6e:64:79:5a:cb:14:71:7b:
         64:5c:99:ef:93:ff:48:09:96:12:ad:3a:86:c1:0e:92:39:9d:
         56:d3:e4:2b:f7:8c:ce:a3:9a:61:ee:ea:48:1c:7c:ea:76:27:
         c1:b9:68:c4:9e:1e:48:da:6b:d9:e7:21:d1:5c:60:98:d8:94:
         94:93:c7:2b:4c:d4:ae:05:c9:64:b1:71:93:30:e4:a4:38:b0:
         22:e1:28:b5:f6:34:d9:db:3d:13:c0:42:46:a5:c8:a8:50:34:
         78:85:36:fa:75:04:7f:dc:cc:dd:72:2a:47:4c:d9:9f:80:54:
         54:40:50:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYwPy4Wa0N+NLlilmt78htuMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzNTE4YmJmNzExNWNkODU3M2UwZGViOGViZTY3NTg0OGYy
NWJkZmIwHhcNMjMxMTI3MDgwMDQ1WhcNMjMxMTI4MDgwMDQ1WjAzMTEwLwYDVQQD
Eyg4MDllMTk4YzY4NGJiNmU5NWVjNGYzMDNhM2NhYjg2ZDc5MjVhMWIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAks7/zzyWeNOd3Arhdxi3HXwnw0dA
4OjQCkdqC2YcL2cg8Ghfz91RGyES5WaxQOHg6eCud17fhMHSb2BKXp855XMitFLj
o0QX4yob0j5J6bSoZeg/3gVpo9rjROorhdikqeIoyJ3oMnNLNUTBWcYJRcOH3OD1
RyTRG/DAdsZyqek0VhOuS7Q0qXuGsaF4XHyuYTYsJPP7DW3QAd5CMrk3S8cJVner
mIIkMYAyR7xfvZ1/1HiKRWQv0tjQMWp96SuVHTvLdbJ4zOsFfGee1hhZSfPDcdrG
psTHCyqqF57Hmz8zAKsVAPUsUodGDOuaPcf8TTKSFm5Seg8Gg3WjhZ36AwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFICeGYxoS7bpXsTzA6PKuG15JaGwMB8GA1UdIwQY
MBaAFDNRi79xFc2Fc+DeuOvmdYSPJb37MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTFHTHYzRVZ6WVZ6NE42NDYtWjFoSThsdmZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9iNTBkOGYtYTk1Zi00ZWNhLWE4MjIt
NjU4YmM0MWIxMGZhLzEvTTFHTHYzRVZ6WVZ6NE42NDYtWjFoSThsdmZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS9iNTBkOGYtYTk1Zi00ZWNhLWE4MjItNjU4YmM0MWIxMGZh
LzEvTTFHTHYzRVZ6WVZ6NE42NDYtWjFoSThsdmZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeRAYcVgG
TiB0VjApArW3nV1WlU2eKtLR1/V++gHR169Pqnu7iyfZGMUuqMqDyz9DQw4l6Cxo
vqYRyg4QQ+GuRYTVYbUgE2q9yz8FhGYDEXryWdKh1gJPXOWHl19R7bL7myQc/iMs
+lJrm/cujge/aOmsq0UKgtebs1kxuhX2lnlsPjzMSKqi425keVrLFHF7ZFyZ75P/
SAmWEq06hsEOkjmdVtPkK/eMzqOaYe7qSBx86nYnwbloxJ4eSNpr2ech0VxgmNiU
lJPHK0zUrgXJZLFxkzDkpDiwIuEotfY02ds9E8BCRqXIqFA0eIU2+nUEf9zM3XIq
R0zZn4BUVEBQww==
-----END CERTIFICATE-----