Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/551d69-5721-4448-b2d7-4a5fc4c05ee7/1/eiFiYd8qUPxWBIer7bn4PcRTBAA.mft
File:                     eiFiYd8qUPxWBIer7bn4PcRTBAA.mft (raw, json)
Hash identifier:          sKtu/QnS3wEZ04uGG7v5ZGWwvwoVIqWAj+l/evjoadg=
Subject key identifier:   DC:6E:FE:A8:A5:CE:77:A0:CC:3E:90:D1:E5:F6:7D:52:4C:FC:7A:83
Authority key identifier: 7A:21:62:61:DF:2A:50:FC:56:04:87:AB:ED:B9:F8:3D:C4:53:04:00
Certificate issuer:       /CN=7a216261df2a50fc560487abedb9f83dc4530400
Certificate serial:       018C1FACBA3E049FDC52575C9F1EDA27B057
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eiFiYd8qUPxWBIer7bn4PcRTBAA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/551d69-5721-4448-b2d7-4a5fc4c05ee7/1/eiFiYd8qUPxWBIer7bn4PcRTBAA.mft
Manifest number:          0872
Signing time:             Thu 30 Nov 2023 10:01:02 +0000
Manifest this update:     Thu 30 Nov 2023 10:01:02 +0000
Manifest next update:     Fri 01 Dec 2023 10:01:02 +0000
Files and hashes:         1: TfGxDFZMmzM7vEIYnw0r3LEzoDA.roa (hash: rcE5zvkewjT5zBJObbt+7B8Cjmg/nSfxOXCbuTCjlNY=)
                          2: eiFiYd8qUPxWBIer7bn4PcRTBAA.crl (hash: yaMUO8NNRUGl2IoMj8tPHw34WIPo3y7am0Y3cx4oQas=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:1f:ac:ba:3e:04:9f:dc:52:57:5c:9f:1e:da:27:b0:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a216261df2a50fc560487abedb9f83dc4530400
        Validity
            Not Before: Nov 30 10:01:02 2023 GMT
            Not After : Dec  1 10:01:02 2023 GMT
        Subject: CN=dc6efea8a5ce77a0cc3e90d1e5f67d524cfc7a83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:9d:e1:b4:e7:fc:f1:4b:a1:4a:a5:1a:c7:e1:
                    99:46:e6:f7:1e:ae:38:3e:2e:36:d4:41:ee:34:33:
                    79:dc:02:60:28:0f:5e:f9:9d:4d:e9:3c:a9:dc:64:
                    0f:e4:53:e5:ea:40:2d:f6:df:66:96:7c:0a:ef:2d:
                    41:48:7a:fd:96:52:68:c2:d7:59:c2:83:17:6d:1f:
                    3f:91:a8:a0:b0:a0:b8:30:37:7d:56:1a:5c:c3:93:
                    c2:3b:b1:0d:70:ca:49:6d:f2:87:67:cf:f2:94:78:
                    b1:54:28:1d:bd:53:ac:0b:69:10:3a:67:93:3a:1c:
                    e2:9a:bf:c2:6c:83:09:6e:16:09:17:a6:75:be:4c:
                    bb:8b:61:02:c2:ce:1b:29:58:47:32:a1:df:87:4d:
                    a3:cf:1f:de:94:f3:38:fe:cb:7b:f4:76:d9:42:9e:
                    b6:d0:5b:38:f4:5e:ca:88:5b:d0:79:73:9a:88:42:
                    d7:25:e5:50:02:03:86:96:07:c1:b2:71:88:a4:cb:
                    ca:47:54:6a:3d:5e:13:19:8d:de:f8:ec:87:63:49:
                    8c:3b:85:fc:0f:dc:63:8e:3b:d7:81:8a:26:24:f3:
                    f0:ca:c0:fe:6e:19:18:56:bb:49:f2:f1:44:d7:c6:
                    81:c2:d6:32:36:80:25:da:a1:87:b4:0e:da:da:9e:
                    e5:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:6E:FE:A8:A5:CE:77:A0:CC:3E:90:D1:E5:F6:7D:52:4C:FC:7A:83
            X509v3 Authority Key Identifier:
                keyid:7A:21:62:61:DF:2A:50:FC:56:04:87:AB:ED:B9:F8:3D:C4:53:04:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eiFiYd8qUPxWBIer7bn4PcRTBAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/551d69-5721-4448-b2d7-4a5fc4c05ee7/1/eiFiYd8qUPxWBIer7bn4PcRTBAA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/551d69-5721-4448-b2d7-4a5fc4c05ee7/1/eiFiYd8qUPxWBIer7bn4PcRTBAA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:b5:8d:6b:5b:bc:3c:dc:40:a2:a7:2e:83:35:d6:d5:4d:da:
         62:e6:9c:f3:70:07:9f:8e:c1:28:1c:ab:b2:c1:2b:7d:ac:0a:
         31:32:d1:c2:4f:55:88:d9:c8:f3:24:aa:72:45:63:f9:37:70:
         c8:15:3f:5b:62:f4:a1:c2:b4:40:0c:76:bc:a6:0f:a2:49:38:
         b8:61:3b:e5:ea:e0:0c:47:b4:81:93:cc:d1:a5:a5:e4:01:f0:
         cd:e6:4b:e5:64:aa:2b:54:83:7f:cf:68:2d:a1:81:c9:64:32:
         df:21:d1:97:79:d1:5e:0c:9c:68:7b:5d:47:95:c3:e3:84:66:
         2d:78:d8:76:76:d8:40:9c:3a:4e:31:0d:be:9d:01:d9:73:7f:
         62:d1:21:8d:e0:a0:54:5a:54:05:6f:ca:19:a3:92:fc:e9:d8:
         a5:3d:03:16:30:73:d2:be:52:d5:be:b5:2d:d3:60:34:9c:76:
         eb:da:13:a3:7e:93:5b:bf:0d:92:26:8d:5f:0e:b6:aa:09:53:
         4e:70:a0:db:21:60:c6:7c:e7:cf:f2:07:8a:67:20:75:14:01:
         eb:18:d6:ac:8c:93:e0:c8:90:90:9d:8b:ff:ca:1c:cb:eb:14:
         48:c6:2e:14:dd:b0:02:a9:20:7e:d0:61:cb:58:c7:0e:ca:03:
         e3:80:0d:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYwfrLo+BJ/cUldcnx7aJ7BXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhMjE2MjYxZGYyYTUwZmM1NjA0ODdhYmVkYjlmODNkYzQ1
MzA0MDAwHhcNMjMxMTMwMTAwMTAyWhcNMjMxMjAxMTAwMTAyWjAzMTEwLwYDVQQD
EyhkYzZlZmVhOGE1Y2U3N2EwY2MzZTkwZDFlNWY2N2Q1MjRjZmM3YTgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA353htOf88UuhSqUax+GZRub3Hq44
Pi421EHuNDN53AJgKA9e+Z1N6Typ3GQP5FPl6kAt9t9mlnwK7y1BSHr9llJowtdZ
woMXbR8/kaigsKC4MDd9Vhpcw5PCO7ENcMpJbfKHZ8/ylHixVCgdvVOsC2kQOmeT
Ohzimr/CbIMJbhYJF6Z1vky7i2ECws4bKVhHMqHfh02jzx/elPM4/st79HbZQp62
0Fs49F7KiFvQeXOaiELXJeVQAgOGlgfBsnGIpMvKR1RqPV4TGY3e+OyHY0mMO4X8
D9xjjjvXgYomJPPwysD+bhkYVrtJ8vFE18aBwtYyNoAl2qGHtA7a2p7llwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNxu/qilznegzD6Q0eX2fVJM/HqDMB8GA1UdIwQY
MBaAFHohYmHfKlD8VgSHq+25+D3EUwQAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWlGaVlkOHFVUHhXQkllcjdibjRQY1JUQkFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS81NTFkNjktNTcyMS00NDQ4LWIyZDct
NGE1ZmM0YzA1ZWU3LzEvZWlGaVlkOHFVUHhXQkllcjdibjRQY1JUQkFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS81NTFkNjktNTcyMS00NDQ4LWIyZDctNGE1ZmM0YzA1ZWU3
LzEvZWlGaVlkOHFVUHhXQkllcjdibjRQY1JUQkFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR7WNa1u8
PNxAoqcugzXW1U3aYuac83AHn47BKByrssErfawKMTLRwk9ViNnI8ySqckVj+Tdw
yBU/W2L0ocK0QAx2vKYPokk4uGE75ergDEe0gZPM0aWl5AHwzeZL5WSqK1SDf89o
LaGByWQy3yHRl3nRXgycaHtdR5XD44RmLXjYdnbYQJw6TjENvp0B2XN/YtEhjeCg
VFpUBW/KGaOS/OnYpT0DFjBz0r5S1b61LdNgNJx269oTo36TW78NkiaNXw62qglT
TnCg2yFgxnznz/IHimcgdRQB6xjWrIyT4MiQkJ2L/8ocy+sUSMYuFN2wAqkgftBh
y1jHDsoD44ANVg==
-----END CERTIFICATE-----