Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/f4fc94-9904-4f6f-a472-4a6ab0cdb319/1/d8YTGy2Xn5V-se0dvL7jxd8ojHg.mft
File:                     d8YTGy2Xn5V-se0dvL7jxd8ojHg.mft (raw, json)
Hash identifier:          9xztcgLxkezvh9kVlEVOk20AtJVDSFTOOwLpNQ0pCyA=
Subject key identifier:   C8:E8:AE:30:F9:1E:A6:BC:2D:D3:19:ED:D2:8B:46:15:EC:B3:21:CB
Authority key identifier: 77:C6:13:1B:2D:97:9F:95:7E:B1:ED:1D:BC:BE:E3:C5:DF:28:8C:78
Certificate issuer:       /CN=77c6131b2d979f957eb1ed1dbcbee3c5df288c78
Certificate serial:       018BD2DB71E1273B0F1EA5458E5525493E12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d8YTGy2Xn5V-se0dvL7jxd8ojHg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/f4fc94-9904-4f6f-a472-4a6ab0cdb319/1/d8YTGy2Xn5V-se0dvL7jxd8ojHg.mft
Manifest number:          0851
Signing time:             Wed 15 Nov 2023 12:01:18 +0000
Manifest this update:     Wed 15 Nov 2023 12:01:18 +0000
Manifest next update:     Thu 16 Nov 2023 12:01:18 +0000
Files and hashes:         1: Un-YwpOSqB2TGYbKrGtHXywq9h8.roa (hash: axwiacqctQOol19pnrZhU3x4b/bUjQxMWOHT+r9RtUs=)
                          2: d8YTGy2Xn5V-se0dvL7jxd8ojHg.crl (hash: 1bC7flhXOCMBGDx95OXqtUGCxMBrNfZbWNwDshKGUVQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:d2:db:71:e1:27:3b:0f:1e:a5:45:8e:55:25:49:3e:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77c6131b2d979f957eb1ed1dbcbee3c5df288c78
        Validity
            Not Before: Nov 15 12:01:18 2023 GMT
            Not After : Nov 16 12:01:18 2023 GMT
        Subject: CN=c8e8ae30f91ea6bc2dd319edd28b4615ecb321cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:af:48:14:63:24:00:0f:10:28:20:ca:7d:0c:
                    1a:1c:a5:28:fd:83:bf:3f:5d:2f:76:2a:e1:1e:cc:
                    01:6f:29:71:26:68:b9:99:15:70:c1:cf:da:67:5b:
                    e2:c7:de:cf:60:3a:8e:b3:73:85:2d:2b:69:46:93:
                    c6:4d:5f:7e:4b:b5:4c:4b:28:b0:67:66:ca:5e:57:
                    35:c4:f6:62:19:83:f4:1b:bf:56:8e:38:a7:7d:22:
                    14:61:af:1d:4f:f5:10:4f:4c:47:90:75:92:0d:5b:
                    15:78:bc:48:19:ad:dc:eb:b9:97:59:fc:19:9f:36:
                    79:90:59:3b:dd:96:80:39:10:92:2d:4e:65:fd:a7:
                    97:54:b6:97:41:77:e5:1d:05:30:42:96:3f:c6:8d:
                    4b:65:55:cb:93:01:77:39:13:a9:c0:b2:3a:ee:95:
                    ed:03:60:9c:2b:fb:af:4e:40:b4:ab:fb:c2:87:70:
                    c1:a8:d8:64:28:3b:bc:e4:98:24:6f:98:47:85:af:
                    1b:29:02:e4:74:1c:df:b0:05:c2:5d:e1:21:ab:c9:
                    aa:5f:6b:e9:30:59:9a:30:d4:64:5c:ef:9f:20:3f:
                    30:09:a8:c2:47:50:9f:fb:04:8a:b7:dc:2a:4e:21:
                    1f:99:6a:09:c7:1d:81:d0:9b:73:04:4f:1a:3f:ff:
                    fb:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:E8:AE:30:F9:1E:A6:BC:2D:D3:19:ED:D2:8B:46:15:EC:B3:21:CB
            X509v3 Authority Key Identifier:
                keyid:77:C6:13:1B:2D:97:9F:95:7E:B1:ED:1D:BC:BE:E3:C5:DF:28:8C:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8YTGy2Xn5V-se0dvL7jxd8ojHg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/f4fc94-9904-4f6f-a472-4a6ab0cdb319/1/d8YTGy2Xn5V-se0dvL7jxd8ojHg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/f4fc94-9904-4f6f-a472-4a6ab0cdb319/1/d8YTGy2Xn5V-se0dvL7jxd8ojHg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:d7:38:43:1c:91:64:ae:ad:ce:53:f5:a3:f2:77:5a:3a:2e:
         b5:a3:57:de:c4:02:9c:a3:10:76:4c:7a:57:25:4b:08:4d:59:
         d6:fc:c2:98:11:b4:6b:83:9f:eb:8b:6a:ce:0d:22:ba:5e:d2:
         24:0b:65:ef:ae:c5:49:ff:77:a1:2a:b5:3e:85:d0:9e:0a:a7:
         e6:bc:75:33:86:07:0d:09:ca:d6:fa:30:af:28:c2:74:59:f4:
         b7:d4:f6:12:85:ae:bb:5a:71:55:d5:08:f2:01:22:ee:69:fb:
         24:22:17:54:66:c4:8e:cb:95:12:a6:cf:6d:ef:30:2e:d4:66:
         17:f0:0d:96:7a:a9:da:2c:ce:39:5b:ba:66:f6:f1:b6:4d:6d:
         3e:86:a9:f2:12:40:55:69:4f:77:95:ea:cd:5b:c7:1b:65:c0:
         fa:2d:aa:d8:81:78:59:b0:5f:22:d8:47:6e:70:a0:1f:c7:60:
         ca:8e:91:7e:92:62:f3:33:02:be:22:5f:da:f4:b4:4f:83:b3:
         76:b7:90:a3:64:dc:9b:3c:42:25:64:9d:f1:c9:79:32:89:72:
         9b:25:ca:9f:27:5b:d2:0a:de:7a:c4:03:c8:38:c0:09:9c:09:
         39:7f:2a:00:2a:2d:de:98:73:49:90:4f:2b:5f:61:cd:e2:25:
         32:02:d2:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYvS23HhJzsPHqVFjlUlST4SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3YzYxMzFiMmQ5NzlmOTU3ZWIxZWQxZGJjYmVlM2M1ZGYy
ODhjNzgwHhcNMjMxMTE1MTIwMTE4WhcNMjMxMTE2MTIwMTE4WjAzMTEwLwYDVQQD
EyhjOGU4YWUzMGY5MWVhNmJjMmRkMzE5ZWRkMjhiNDYxNWVjYjMyMWNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoa9IFGMkAA8QKCDKfQwaHKUo/YO/
P10vdirhHswBbylxJmi5mRVwwc/aZ1vix97PYDqOs3OFLStpRpPGTV9+S7VMSyiw
Z2bKXlc1xPZiGYP0G79WjjinfSIUYa8dT/UQT0xHkHWSDVsVeLxIGa3c67mXWfwZ
nzZ5kFk73ZaAORCSLU5l/aeXVLaXQXflHQUwQpY/xo1LZVXLkwF3OROpwLI67pXt
A2CcK/uvTkC0q/vCh3DBqNhkKDu85Jgkb5hHha8bKQLkdBzfsAXCXeEhq8mqX2vp
MFmaMNRkXO+fID8wCajCR1Cf+wSKt9wqTiEfmWoJxx2B0JtzBE8aP//7mQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMjorjD5Hqa8LdMZ7dKLRhXssyHLMB8GA1UdIwQY
MBaAFHfGExstl5+VfrHtHby+48XfKIx4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDhZVEd5MlhuNVYtc2UwZHZMN2p4ZDhvakhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9mNGZjOTQtOTkwNC00ZjZmLWE0NzIt
NGE2YWIwY2RiMzE5LzEvZDhZVEd5MlhuNVYtc2UwZHZMN2p4ZDhvakhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS9mNGZjOTQtOTkwNC00ZjZmLWE0NzItNGE2YWIwY2RiMzE5
LzEvZDhZVEd5MlhuNVYtc2UwZHZMN2p4ZDhvakhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUNc4QxyR
ZK6tzlP1o/J3WjoutaNX3sQCnKMQdkx6VyVLCE1Z1vzCmBG0a4Of64tqzg0iul7S
JAtl767FSf93oSq1PoXQngqn5rx1M4YHDQnK1vowryjCdFn0t9T2EoWuu1pxVdUI
8gEi7mn7JCIXVGbEjsuVEqbPbe8wLtRmF/ANlnqp2izOOVu6Zvbxtk1tPoap8hJA
VWlPd5XqzVvHG2XA+i2q2IF4WbBfIthHbnCgH8dgyo6RfpJi8zMCviJf2vS0T4Oz
dreQo2TcmzxCJWSd8cl5MolymyXKnydb0greesQDyDjACZwJOX8qACot3phzSZBP
K19hzeIlMgLSfg==
-----END CERTIFICATE-----