Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/cb6995-d591-487d-a48e-bc7ce6d0ea97/1/Ob8P-WLwQA38NO0qpRmyR9VqWio.mft
File:                     Ob8P-WLwQA38NO0qpRmyR9VqWio.mft (raw, json)
Hash identifier:          D2EKui5FFEEZTyLwIZMRg4S1tQkzplRdl1bFJJl/xSo=
Subject key identifier:   40:FB:63:63:CC:7E:A2:17:46:DB:59:0E:4C:C4:C3:3A:63:75:B6:A6
Authority key identifier: 39:BF:0F:F9:62:F0:40:0D:FC:34:ED:2A:A5:19:B2:47:D5:6A:5A:2A
Certificate issuer:       /CN=39bf0ff962f0400dfc34ed2aa519b247d56a5a2a
Certificate serial:       018AB5420DF1B28112AD95BA0C78CC4FFCDC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ob8P-WLwQA38NO0qpRmyR9VqWio.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/cb6995-d591-487d-a48e-bc7ce6d0ea97/1/Ob8P-WLwQA38NO0qpRmyR9VqWio.mft
Manifest number:          088C
Signing time:             Thu 21 Sep 2023 01:01:59 +0000
Manifest this update:     Thu 21 Sep 2023 01:01:59 +0000
Manifest next update:     Fri 22 Sep 2023 01:01:59 +0000
Files and hashes:         1: Ob8P-WLwQA38NO0qpRmyR9VqWio.crl (hash: dSdQUnDlotw7lacHatmLw8gfapMCIhfiWwVpWE1a7uQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:b5:42:0d:f1:b2:81:12:ad:95:ba:0c:78:cc:4f:fc:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39bf0ff962f0400dfc34ed2aa519b247d56a5a2a
        Validity
            Not Before: Sep 21 01:01:59 2023 GMT
            Not After : Sep 22 01:01:59 2023 GMT
        Subject: CN=40fb6363cc7ea21746db590e4cc4c33a6375b6a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:5b:1b:70:82:13:46:15:77:9f:3c:87:27:5d:
                    8f:1d:55:bf:f4:30:22:9c:61:27:8a:5c:2f:6f:bb:
                    97:95:20:c5:e3:de:a9:9d:3c:38:04:68:99:27:01:
                    f9:b1:b1:72:96:b0:a8:d0:3e:0c:1c:a1:33:37:c2:
                    7b:a7:0a:69:b8:b5:b0:8d:d3:4c:a5:3c:1a:6e:d6:
                    89:f2:86:53:69:9d:44:ae:7d:60:a5:34:b3:96:de:
                    8c:01:42:45:1f:52:e2:0a:5d:b7:d1:97:3f:a2:71:
                    b1:b1:ab:93:86:13:a5:ce:b5:5d:ae:49:83:bc:36:
                    6e:31:6e:a1:22:d0:44:09:7f:45:55:61:74:47:02:
                    f7:1d:1a:5c:b1:b0:b2:56:eb:ae:51:cc:fc:bd:8d:
                    0a:5d:99:81:af:12:dd:eb:e5:aa:55:b8:39:c0:a6:
                    cb:b8:3c:af:5c:31:5c:a2:a2:15:73:1e:d0:bb:38:
                    09:2d:46:52:b3:5e:31:fa:d6:98:51:1c:d7:6e:d3:
                    8d:c4:78:41:7e:94:31:0a:3d:ee:66:9f:d1:0f:ae:
                    cc:df:57:32:69:fa:5f:8b:84:96:e3:0f:d2:7c:e0:
                    4d:60:51:d4:a7:29:0b:c2:8a:fd:e3:66:fb:34:a2:
                    d2:03:a2:94:5a:a4:fe:ad:fa:8b:ca:4b:d0:f5:76:
                    1a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:FB:63:63:CC:7E:A2:17:46:DB:59:0E:4C:C4:C3:3A:63:75:B6:A6
            X509v3 Authority Key Identifier:
                keyid:39:BF:0F:F9:62:F0:40:0D:FC:34:ED:2A:A5:19:B2:47:D5:6A:5A:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ob8P-WLwQA38NO0qpRmyR9VqWio.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/cb6995-d591-487d-a48e-bc7ce6d0ea97/1/Ob8P-WLwQA38NO0qpRmyR9VqWio.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/cb6995-d591-487d-a48e-bc7ce6d0ea97/1/Ob8P-WLwQA38NO0qpRmyR9VqWio.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:b6:f8:d6:f0:52:60:01:f2:3b:31:5b:1e:e0:58:df:58:c7:
         e2:2c:b1:03:fc:bc:81:90:77:50:19:99:17:9e:2f:4d:46:a9:
         b9:78:ea:86:e4:27:b7:58:d1:66:b5:a4:71:6b:31:80:e2:c0:
         c8:a3:83:6b:88:2d:1c:4e:d1:1f:22:12:34:7e:d5:34:b2:d1:
         ad:fd:5f:0d:f6:64:4d:8a:26:96:e6:73:cc:f2:9a:25:8c:e1:
         53:58:39:51:2c:a4:25:29:47:a5:b7:40:a5:3a:e1:91:56:ae:
         5f:2f:1b:05:02:08:dc:51:b3:a1:13:a8:17:8c:8e:a6:c8:a6:
         00:21:ff:89:b2:38:2f:d1:8d:ba:1c:17:1f:f8:db:d0:0a:74:
         fe:3c:7a:0a:88:8c:b3:05:77:e1:7b:1c:57:ef:9c:75:62:be:
         01:1c:94:cb:37:ac:b8:58:41:ef:b7:b3:87:2b:4f:bb:fe:6d:
         3b:c8:6e:5e:0e:7e:74:5d:08:ce:b8:d8:32:9d:d1:a9:8c:6f:
         c0:99:04:6a:8b:2c:10:41:61:bf:01:bd:a2:71:fd:3e:ae:3d:
         f2:96:72:39:dc:b0:96:51:21:a0:9d:92:59:f2:f7:fd:ed:54:
         a5:9a:d5:bf:d1:47:12:49:86:68:d1:b9:3f:3c:98:6b:0f:0e:
         ac:28:5b:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYq1Qg3xsoESrZW6DHjMT/zcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5YmYwZmY5NjJmMDQwMGRmYzM0ZWQyYWE1MTliMjQ3ZDU2
YTVhMmEwHhcNMjMwOTIxMDEwMTU5WhcNMjMwOTIyMDEwMTU5WjAzMTEwLwYDVQQD
Eyg0MGZiNjM2M2NjN2VhMjE3NDZkYjU5MGU0Y2M0YzMzYTYzNzViNmE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlsbcIITRhV3nzyHJ12PHVW/9DAi
nGEnilwvb7uXlSDF496pnTw4BGiZJwH5sbFylrCo0D4MHKEzN8J7pwppuLWwjdNM
pTwabtaJ8oZTaZ1Ern1gpTSzlt6MAUJFH1LiCl230Zc/onGxsauThhOlzrVdrkmD
vDZuMW6hItBECX9FVWF0RwL3HRpcsbCyVuuuUcz8vY0KXZmBrxLd6+WqVbg5wKbL
uDyvXDFcoqIVcx7QuzgJLUZSs14x+taYURzXbtONxHhBfpQxCj3uZp/RD67M31cy
afpfi4SW4w/SfOBNYFHUpykLwor942b7NKLSA6KUWqT+rfqLykvQ9XYa3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFED7Y2PMfqIXRttZDkzEwzpjdbamMB8GA1UdIwQY
MBaAFDm/D/li8EAN/DTtKqUZskfValoqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2I4UC1XTHdRQTM4Tk8wcXBSbXlSOVZxV2lvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9jYjY5OTUtZDU5MS00ODdkLWE0OGUt
YmM3Y2U2ZDBlYTk3LzEvT2I4UC1XTHdRQTM4Tk8wcXBSbXlSOVZxV2lvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9jYjY5OTUtZDU5MS00ODdkLWE0OGUtYmM3Y2U2ZDBlYTk3
LzEvT2I4UC1XTHdRQTM4Tk8wcXBSbXlSOVZxV2lvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV7b41vBS
YAHyOzFbHuBY31jH4iyxA/y8gZB3UBmZF54vTUapuXjqhuQnt1jRZrWkcWsxgOLA
yKODa4gtHE7RHyISNH7VNLLRrf1fDfZkTYomluZzzPKaJYzhU1g5USykJSlHpbdA
pTrhkVauXy8bBQII3FGzoROoF4yOpsimACH/ibI4L9GNuhwXH/jb0Ap0/jx6CoiM
swV34XscV++cdWK+ARyUyzesuFhB77ezhytPu/5tO8huXg5+dF0IzrjYMp3RqYxv
wJkEaossEEFhvwG9onH9Pq498pZyOdywllEhoJ2SWfL3/e1UpZrVv9FHEkmGaNG5
PzyYaw8OrChbFA==
-----END CERTIFICATE-----