Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/6580c1-0ea6-47d5-8a7b-2522a281d1ad/1/ECHP_ql0NTxdW2I_V1UUL63V4uA.mft
File:                     ECHP_ql0NTxdW2I_V1UUL63V4uA.mft (raw, json)
Hash identifier:          WX0QVGlOahXzwhzi7NO/go0krCkhMN/VMf5iUups0bs=
Subject key identifier:   FF:56:D9:FE:4C:C6:31:F6:48:C7:05:5F:13:94:C5:C1:FA:39:EC:48
Authority key identifier: 10:21:CF:FE:A9:74:35:3C:5D:5B:62:3F:57:55:14:2F:AD:D5:E2:E0
Certificate issuer:       /CN=1021cffea974353c5d5b623f5755142fadd5e2e0
Certificate serial:       018B6C801F32BBD031E3FB9E6894A4CFD8BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ECHP_ql0NTxdW2I_V1UUL63V4uA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/6580c1-0ea6-47d5-8a7b-2522a281d1ad/1/ECHP_ql0NTxdW2I_V1UUL63V4uA.mft
Manifest number:          01D1
Signing time:             Thu 26 Oct 2023 15:00:17 +0000
Manifest this update:     Thu 26 Oct 2023 15:00:17 +0000
Manifest next update:     Fri 27 Oct 2023 15:00:17 +0000
Files and hashes:         1: ECHP_ql0NTxdW2I_V1UUL63V4uA.crl (hash: +hQhufXMpXkxonqVhH5ZnfO0EdE+IF1s0DpOyWKBgf0=)
                          2: n1ZX4HIWFyw0K5ERu4d_e4OkhHk.roa (hash: wV12P2vaTkMHXusTMgX4+VopZl27DaPkYtOqd/E35+M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:6c:80:1f:32:bb:d0:31:e3:fb:9e:68:94:a4:cf:d8:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1021cffea974353c5d5b623f5755142fadd5e2e0
        Validity
            Not Before: Oct 26 15:00:17 2023 GMT
            Not After : Oct 27 15:00:17 2023 GMT
        Subject: CN=ff56d9fe4cc631f648c7055f1394c5c1fa39ec48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e7:7a:53:59:47:b6:5c:18:83:73:15:9a:19:
                    03:9a:80:24:69:75:20:12:dc:fb:db:e7:72:3d:5c:
                    07:15:09:71:3b:d8:59:89:87:61:94:f5:6c:6f:48:
                    f8:cd:55:e8:80:97:d8:a9:be:2e:ad:c0:7a:8a:db:
                    d0:8b:8c:79:dd:70:ef:c0:76:c3:30:82:93:c7:f3:
                    b7:ca:67:79:d5:d7:09:2e:12:00:75:cb:97:a0:e8:
                    1e:1e:fa:a8:78:61:df:33:81:1f:a4:f9:b0:da:98:
                    ea:cf:42:aa:db:71:a2:52:5a:27:95:7f:93:c1:a0:
                    a9:19:44:c2:04:0a:4e:31:26:66:9f:fb:d6:7e:4f:
                    27:67:fc:9c:17:b0:78:19:b0:0a:4f:e2:c3:88:7a:
                    09:d8:f8:c5:b0:32:d2:b5:07:ad:7b:f7:46:ea:33:
                    b6:27:40:4b:6b:41:74:85:d3:ff:ea:a0:34:5a:f4:
                    db:35:10:e6:a8:41:fe:52:55:2f:53:85:09:d6:27:
                    d5:d8:a8:fb:4b:cb:80:5d:ac:b4:9a:10:20:dd:a3:
                    c8:5d:3f:72:a6:5d:87:72:18:34:b7:3e:04:19:87:
                    e7:57:ce:83:97:e8:ba:9a:95:26:13:0b:c3:39:ef:
                    fd:e2:c6:8e:45:d1:22:86:98:65:15:07:0a:bf:b1:
                    65:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:56:D9:FE:4C:C6:31:F6:48:C7:05:5F:13:94:C5:C1:FA:39:EC:48
            X509v3 Authority Key Identifier:
                keyid:10:21:CF:FE:A9:74:35:3C:5D:5B:62:3F:57:55:14:2F:AD:D5:E2:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECHP_ql0NTxdW2I_V1UUL63V4uA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6580c1-0ea6-47d5-8a7b-2522a281d1ad/1/ECHP_ql0NTxdW2I_V1UUL63V4uA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6580c1-0ea6-47d5-8a7b-2522a281d1ad/1/ECHP_ql0NTxdW2I_V1UUL63V4uA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:3d:17:56:2d:65:d0:e2:3e:bf:9c:e9:c7:91:58:9f:a8:b6:
         c1:a1:ec:a7:75:32:45:97:d4:6e:6b:6f:cc:91:b9:14:d3:78:
         20:8e:9e:39:6e:e5:07:bd:27:18:e7:0e:29:c7:7f:58:7e:a7:
         10:3e:e4:a1:86:41:87:f3:73:2c:7a:65:b5:72:06:81:10:47:
         79:90:d0:bc:7a:e3:4b:04:2e:dc:a0:5a:97:69:55:43:85:e8:
         14:94:27:da:ac:f3:04:ee:dc:ca:26:45:71:34:1d:f4:02:e4:
         38:ee:ae:9f:f2:8d:5d:bf:40:93:60:76:68:81:f8:98:47:45:
         e8:03:bf:1c:0e:32:6d:6a:98:d8:f2:7c:bc:14:1e:bc:8e:cb:
         4c:34:91:77:f7:30:7b:c1:00:9d:32:4a:0f:ad:dc:17:63:33:
         37:81:5b:52:1a:33:6d:31:97:5d:a5:0c:33:4c:bb:1a:cc:2c:
         81:50:71:b3:03:17:83:60:2a:b6:42:5a:79:d4:fa:c9:81:87:
         d7:99:0e:ec:53:f3:1f:6a:df:c1:fd:9c:70:df:79:6c:d6:c1:
         c0:d1:9b:bb:89:89:8d:df:32:83:80:7d:28:5e:5b:be:2c:4d:
         d7:09:4b:09:d8:49:22:2b:a1:5d:6a:fc:fd:29:b6:56:16:d6:
         6d:1c:e4:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYtsgB8yu9Ax4/ueaJSkz9i6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwMjFjZmZlYTk3NDM1M2M1ZDViNjIzZjU3NTUxNDJmYWRk
NWUyZTAwHhcNMjMxMDI2MTUwMDE3WhcNMjMxMDI3MTUwMDE3WjAzMTEwLwYDVQQD
EyhmZjU2ZDlmZTRjYzYzMWY2NDhjNzA1NWYxMzk0YzVjMWZhMzllYzQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnud6U1lHtlwYg3MVmhkDmoAkaXUg
Etz72+dyPVwHFQlxO9hZiYdhlPVsb0j4zVXogJfYqb4urcB6itvQi4x53XDvwHbD
MIKTx/O3ymd51dcJLhIAdcuXoOgeHvqoeGHfM4EfpPmw2pjqz0Kq23GiUlonlX+T
waCpGUTCBApOMSZmn/vWfk8nZ/ycF7B4GbAKT+LDiHoJ2PjFsDLStQete/dG6jO2
J0BLa0F0hdP/6qA0WvTbNRDmqEH+UlUvU4UJ1ifV2Kj7S8uAXay0mhAg3aPIXT9y
pl2Hchg0tz4EGYfnV86Dl+i6mpUmEwvDOe/94saORdEihphlFQcKv7FlowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP9W2f5MxjH2SMcFXxOUxcH6OexIMB8GA1UdIwQY
MBaAFBAhz/6pdDU8XVtiP1dVFC+t1eLgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUNIUF9xbDBOVHhkVzJJX1YxVVVMNjNWNHVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS82NTgwYzEtMGVhNi00N2Q1LThhN2It
MjUyMmEyODFkMWFkLzEvRUNIUF9xbDBOVHhkVzJJX1YxVVVMNjNWNHVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS82NTgwYzEtMGVhNi00N2Q1LThhN2ItMjUyMmEyODFkMWFk
LzEvRUNIUF9xbDBOVHhkVzJJX1YxVVVMNjNWNHVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaD0XVi1l
0OI+v5zpx5FYn6i2waHsp3UyRZfUbmtvzJG5FNN4II6eOW7lB70nGOcOKcd/WH6n
ED7koYZBh/NzLHpltXIGgRBHeZDQvHrjSwQu3KBal2lVQ4XoFJQn2qzzBO7cyiZF
cTQd9ALkOO6un/KNXb9Ak2B2aIH4mEdF6AO/HA4ybWqY2PJ8vBQevI7LTDSRd/cw
e8EAnTJKD63cF2MzN4FbUhozbTGXXaUMM0y7GswsgVBxswMXg2AqtkJaedT6yYGH
15kO7FPzH2rfwf2ccN95bNbBwNGbu4mJjd8yg4B9KF5bvixN1wlLCdhJIiuhXWr8
/Sm2VhbWbRzkfQ==
-----END CERTIFICATE-----