Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/ee92c8-eb89-4e24-8083-c07b0d796923/1/e04fYDDUc1kJ7H73w6Vkn3YsSe8.mft
File:                     e04fYDDUc1kJ7H73w6Vkn3YsSe8.mft (raw, json)
Hash identifier:          oC0Wy4ceNv8EkaWqac0rJ1br1Uug8fuEJH421KBEFXk=
Subject key identifier:   8C:A6:F8:FC:03:C5:FC:2D:34:CF:CE:D6:45:61:1F:99:8A:54:97:5C
Authority key identifier: 7B:4E:1F:60:30:D4:73:59:09:EC:7E:F7:C3:A5:64:9F:76:2C:49:EF
Certificate issuer:       /CN=7b4e1f6030d4735909ec7ef7c3a5649f762c49ef
Certificate serial:       0188E2D195BF86114815336E76D8DA825F49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e04fYDDUc1kJ7H73w6Vkn3YsSe8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/ee92c8-eb89-4e24-8083-c07b0d796923/1/e04fYDDUc1kJ7H73w6Vkn3YsSe8.mft
Manifest number:          0851
Signing time:             Thu 22 Jun 2023 11:16:06 +0000
Manifest this update:     Thu 22 Jun 2023 11:16:06 +0000
Manifest next update:     Fri 23 Jun 2023 11:16:06 +0000
Files and hashes:         1: e04fYDDUc1kJ7H73w6Vkn3YsSe8.crl (hash: BzqBxWk7LQx202Na0P8zyVRgB6rPtaHLE+vNIRnggAA=)
                          2: yO7MuNqEoZLQFJWUPVjPJrgkUCg.roa (hash: T7dUa4DJb8hnTOvhACuW1d3lZMxw0GjwV+e4QJpYcyM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:e2:d1:95:bf:86:11:48:15:33:6e:76:d8:da:82:5f:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b4e1f6030d4735909ec7ef7c3a5649f762c49ef
        Validity
            Not Before: Jun 22 11:16:06 2023 GMT
            Not After : Jun 23 11:16:06 2023 GMT
        Subject: CN=8ca6f8fc03c5fc2d34cfced645611f998a54975c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f9:99:5e:83:a8:35:d7:25:12:84:42:a6:50:
                    cc:df:9b:4c:41:c3:32:c4:59:b0:f8:ba:d8:f7:80:
                    f5:ae:08:81:2a:e9:e7:5d:cd:c3:2e:83:31:92:ef:
                    c8:b8:c0:b8:f8:59:28:37:81:52:4e:a0:d8:1b:08:
                    f7:5d:f0:55:61:d7:5a:23:0c:c6:3f:3d:1d:16:e3:
                    d3:09:bc:dc:be:c7:1d:4b:14:1a:6c:5b:76:0e:03:
                    70:e6:f8:72:ac:35:59:61:82:b5:7a:6e:e6:49:99:
                    6f:8f:56:60:6f:26:44:42:dd:cd:2f:30:c8:7c:9b:
                    40:f7:ba:38:a0:40:be:8a:e7:a7:ff:39:32:ef:89:
                    1e:3a:20:fc:d3:6a:43:90:15:86:85:d4:2f:8a:5f:
                    65:67:83:72:cd:6c:25:d0:bb:1e:a2:31:92:43:68:
                    e2:2a:31:59:0c:de:13:ad:4b:48:da:af:53:d0:04:
                    cd:bc:ee:f3:91:0c:92:6f:f0:b6:84:81:24:b3:7a:
                    5c:d5:72:10:cb:27:ca:1d:11:e0:4e:8c:43:28:67:
                    85:cc:88:bc:40:0d:1f:91:24:65:1c:a5:b3:c1:fe:
                    25:3b:b3:87:59:e7:12:04:18:b8:d9:eb:c0:7e:d6:
                    e8:63:f6:9e:d3:b9:39:19:60:1a:cb:41:cc:c6:cf:
                    4f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:A6:F8:FC:03:C5:FC:2D:34:CF:CE:D6:45:61:1F:99:8A:54:97:5C
            X509v3 Authority Key Identifier:
                keyid:7B:4E:1F:60:30:D4:73:59:09:EC:7E:F7:C3:A5:64:9F:76:2C:49:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e04fYDDUc1kJ7H73w6Vkn3YsSe8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ee92c8-eb89-4e24-8083-c07b0d796923/1/e04fYDDUc1kJ7H73w6Vkn3YsSe8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ee92c8-eb89-4e24-8083-c07b0d796923/1/e04fYDDUc1kJ7H73w6Vkn3YsSe8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:ee:0d:57:a4:c2:ca:3b:a5:98:24:6c:eb:67:0c:31:ed:78:
         b8:4d:43:73:1b:12:50:aa:07:79:6b:14:f7:a1:8d:0d:2b:49:
         e2:f3:20:75:81:9e:cb:85:be:ae:66:67:53:2b:a4:3c:72:93:
         d9:6e:b3:f3:aa:7a:bc:ac:86:1a:49:69:ed:81:8b:64:61:29:
         34:0b:23:41:b4:3c:82:dd:f7:12:4f:2c:96:d3:bb:38:24:fb:
         23:54:e5:a9:9f:a1:10:4e:b9:f2:71:89:f7:10:a1:71:1f:dd:
         ec:6e:fc:c4:83:26:07:91:bc:8a:a6:43:eb:83:d1:10:f9:03:
         e6:c9:0a:c6:45:32:9c:88:5e:41:1e:3c:60:e6:25:a3:61:b5:
         27:40:37:55:4d:d3:57:98:97:d3:22:26:86:51:0d:3c:f7:48:
         cc:84:0d:b3:94:19:9f:31:27:30:06:0b:5f:e1:33:c2:2c:13:
         56:38:a7:4b:8f:46:71:88:32:ff:48:5a:43:7c:f7:e2:7e:5c:
         27:cf:e1:9f:0b:69:07:08:0b:cc:6d:be:c8:49:4d:9f:15:46:
         84:3b:14:c9:e3:20:03:d1:21:34:e5:fa:7c:26:de:84:a4:1b:
         cd:b7:88:74:d0:c3:77:13:fd:3d:84:6a:1b:53:56:48:10:09:
         35:6f:38:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYji0ZW/hhFIFTNudtjagl9JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiNGUxZjYwMzBkNDczNTkwOWVjN2VmN2MzYTU2NDlmNzYy
YzQ5ZWYwHhcNMjMwNjIyMTExNjA2WhcNMjMwNjIzMTExNjA2WjAzMTEwLwYDVQQD
Eyg4Y2E2ZjhmYzAzYzVmYzJkMzRjZmNlZDY0NTYxMWY5OThhNTQ5NzVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPmZXoOoNdclEoRCplDM35tMQcMy
xFmw+LrY94D1rgiBKunnXc3DLoMxku/IuMC4+FkoN4FSTqDYGwj3XfBVYddaIwzG
Pz0dFuPTCbzcvscdSxQabFt2DgNw5vhyrDVZYYK1em7mSZlvj1ZgbyZEQt3NLzDI
fJtA97o4oEC+iuen/zky74keOiD802pDkBWGhdQvil9lZ4NyzWwl0LseojGSQ2ji
KjFZDN4TrUtI2q9T0ATNvO7zkQySb/C2hIEks3pc1XIQyyfKHRHgToxDKGeFzIi8
QA0fkSRlHKWzwf4lO7OHWecSBBi42evAftboY/ae07k5GWAay0HMxs9PjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIym+PwDxfwtNM/O1kVhH5mKVJdcMB8GA1UdIwQY
MBaAFHtOH2Aw1HNZCex+98OlZJ92LEnvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTA0ZllERFVjMWtKN0g3M3c2VmtuM1lzU2U4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9lZTkyYzgtZWI4OS00ZTI0LTgwODMt
YzA3YjBkNzk2OTIzLzEvZTA0ZllERFVjMWtKN0g3M3c2VmtuM1lzU2U4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS9lZTkyYzgtZWI4OS00ZTI0LTgwODMtYzA3YjBkNzk2OTIz
LzEvZTA0ZllERFVjMWtKN0g3M3c2VmtuM1lzU2U4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK+4NV6TC
yjulmCRs62cMMe14uE1DcxsSUKoHeWsU96GNDStJ4vMgdYGey4W+rmZnUyukPHKT
2W6z86p6vKyGGklp7YGLZGEpNAsjQbQ8gt33Ek8sltO7OCT7I1TlqZ+hEE658nGJ
9xChcR/d7G78xIMmB5G8iqZD64PREPkD5skKxkUynIheQR48YOYlo2G1J0A3VU3T
V5iX0yImhlENPPdIzIQNs5QZnzEnMAYLX+EzwiwTVjinS49GcYgy/0haQ3z34n5c
J8/hnwtpBwgLzG2+yElNnxVGhDsUyeMgA9EhNOX6fCbehKQbzbeIdNDDdxP9PYRq
G1NWSBAJNW84LQ==
-----END CERTIFICATE-----