Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/09e180-546f-44e3-b783-ef88bdb5c850/1/arr8uyOrAeWt7M0WmjHvt8XDxSI.mft
File:                     arr8uyOrAeWt7M0WmjHvt8XDxSI.mft (raw, json)
Hash identifier:          jpt3Io+mWf+F+/kP34zfOrBiynzXN5d2nP0XRJ+mCx0=
Subject key identifier:   1F:AB:84:26:97:EC:8E:C2:86:C8:C6:C5:43:69:8A:A2:DE:20:04:F0
Authority key identifier: 6A:BA:FC:BB:23:AB:01:E5:AD:EC:CD:16:9A:31:EF:B7:C5:C3:C5:22
Certificate issuer:       /CN=6abafcbb23ab01e5adeccd169a31efb7c5c3c522
Certificate serial:       01852937855871D59CD45BD03AF8EC521FC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/arr8uyOrAeWt7M0WmjHvt8XDxSI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/09e180-546f-44e3-b783-ef88bdb5c850/1/arr8uyOrAeWt7M0WmjHvt8XDxSI.mft
Manifest number:          0BE1
Signing time:             Mon 19 Dec 2022 07:09:42 +0000
Manifest this update:     Mon 19 Dec 2022 07:09:42 +0000
Manifest next update:     Tue 20 Dec 2022 07:09:42 +0000
Files and hashes:         1: 4BKswGj5cl44GOA-Vz7ydN531Yk.roa (hash: nvkdU2CDN5Jn+ksk8EzSoRyKjfU8PqqTrAkaK0w1+7w=)
                          2: arr8uyOrAeWt7M0WmjHvt8XDxSI.crl (hash: U4GUSiU1XlXqQAd96KAxY5YuQ9AlI1IwuMOspi+/Reg=)
                          3: e9QqvKtqs1vM4KiAOLdLEqMEkww.roa (hash: SYRAR6VV2sD3Ydm3GI3PZKLM4TMORPy5yYYR1Vn8xow=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:29:37:85:58:71:d5:9c:d4:5b:d0:3a:f8:ec:52:1f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6abafcbb23ab01e5adeccd169a31efb7c5c3c522
        Validity
            Not Before: Dec 19 07:09:42 2022 GMT
            Not After : Dec 20 07:09:42 2022 GMT
        Subject: CN=1fab842697ec8ec286c8c6c543698aa2de2004f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:3c:6b:45:0c:7e:09:a8:8a:26:48:ce:f3:c3:
                    f5:28:6d:96:56:f7:41:c8:b0:49:7d:f4:f0:d6:a0:
                    26:d8:dd:33:55:4b:91:aa:81:57:4c:0e:6f:f7:c4:
                    26:ee:73:cd:b8:27:9c:b9:8e:1e:ee:c9:a1:34:34:
                    e1:e1:ef:6e:12:0f:43:02:4d:a7:40:17:09:00:e7:
                    ed:ed:ee:b8:14:d9:9f:e8:9f:57:af:61:50:4d:ae:
                    06:e2:27:f4:69:34:01:75:5e:ca:db:da:7c:f4:24:
                    71:b3:16:c4:5a:d4:a2:3e:78:cd:bc:9e:c5:04:88:
                    81:20:11:43:68:42:ce:5a:f7:1d:9d:27:9e:f2:e2:
                    4d:f4:f6:a2:82:09:f7:9d:7a:a4:6f:13:b0:de:91:
                    17:4b:42:d0:6f:3c:b2:4d:08:63:a9:88:74:d6:3b:
                    22:99:b9:18:7e:65:84:04:a3:8a:41:d6:a2:16:37:
                    84:21:cc:a5:36:1b:6e:a5:d9:85:77:18:41:33:19:
                    59:92:56:0e:97:41:d0:11:4b:bd:fc:5b:ae:62:1a:
                    47:d2:a4:e8:10:72:fc:69:b2:22:ae:27:e9:e5:4d:
                    70:29:ae:52:34:fb:b2:7d:7b:cc:55:c8:ef:7a:6f:
                    69:a1:f9:8d:d6:4b:54:4e:59:03:6e:69:55:75:a8:
                    fb:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:AB:84:26:97:EC:8E:C2:86:C8:C6:C5:43:69:8A:A2:DE:20:04:F0
            X509v3 Authority Key Identifier:
                keyid:6A:BA:FC:BB:23:AB:01:E5:AD:EC:CD:16:9A:31:EF:B7:C5:C3:C5:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/arr8uyOrAeWt7M0WmjHvt8XDxSI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/09e180-546f-44e3-b783-ef88bdb5c850/1/arr8uyOrAeWt7M0WmjHvt8XDxSI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/09e180-546f-44e3-b783-ef88bdb5c850/1/arr8uyOrAeWt7M0WmjHvt8XDxSI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:94:89:9d:b4:9b:d9:39:50:72:b7:a6:e8:ea:6d:51:99:56:
         f7:60:59:d8:e0:a3:9e:63:93:c0:39:d1:19:d9:b8:69:c4:46:
         4d:7e:7d:d6:18:87:cb:70:0e:d5:19:88:93:72:b3:c6:21:fb:
         ae:ac:40:ef:16:66:38:f3:1a:77:89:b7:1f:46:cc:8b:01:e5:
         3b:75:32:ec:42:3c:ed:a2:e2:a5:a2:7b:68:6c:53:4b:75:61:
         d6:ad:ff:66:7f:ae:1e:b1:fa:f3:27:9d:22:c1:58:0e:fb:6b:
         6f:e4:67:00:99:c7:b6:2a:e9:b5:ff:87:b6:35:e1:e8:16:8a:
         52:28:53:97:d9:12:f0:ca:f4:8a:79:88:f5:30:7c:53:f9:c0:
         7f:5c:c1:2c:1f:04:06:8c:18:06:d7:11:8e:d2:ba:2b:d6:90:
         b8:f7:13:fe:59:74:22:e9:1d:cb:f0:bb:0b:d3:d6:fa:60:a7:
         2f:32:b9:61:62:8b:d2:36:52:a2:19:c7:6b:ba:e0:82:26:13:
         30:4b:68:a5:d9:f9:29:b5:39:3f:c2:28:4f:61:3c:a9:50:ac:
         45:b3:c9:9e:45:7b:e8:1a:ba:be:15:39:11:1f:95:e2:24:59:
         1d:61:21:54:98:d2:b2:86:4b:33:eb:0e:19:f1:d9:c4:14:88:
         56:bf:39:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYUpN4VYcdWc1FvQOvjsUh/AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhYmFmY2JiMjNhYjAxZTVhZGVjY2QxNjlhMzFlZmI3YzVj
M2M1MjIwHhcNMjIxMjE5MDcwOTQyWhcNMjIxMjIwMDcwOTQyWjAzMTEwLwYDVQQD
EygxZmFiODQyNjk3ZWM4ZWMyODZjOGM2YzU0MzY5OGFhMmRlMjAwNGYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzxrRQx+CaiKJkjO88P1KG2WVvdB
yLBJffTw1qAm2N0zVUuRqoFXTA5v98Qm7nPNuCecuY4e7smhNDTh4e9uEg9DAk2n
QBcJAOft7e64FNmf6J9Xr2FQTa4G4if0aTQBdV7K29p89CRxsxbEWtSiPnjNvJ7F
BIiBIBFDaELOWvcdnSee8uJN9Paiggn3nXqkbxOw3pEXS0LQbzyyTQhjqYh01jsi
mbkYfmWEBKOKQdaiFjeEIcylNhtupdmFdxhBMxlZklYOl0HQEUu9/FuuYhpH0qTo
EHL8abIirifp5U1wKa5SNPuyfXvMVcjvem9pofmN1ktUTlkDbmlVdaj77wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB+rhCaX7I7ChsjGxUNpiqLeIATwMB8GA1UdIwQY
MBaAFGq6/LsjqwHlrezNFpox77fFw8UiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXJyOHV5T3JBZVd0N00wV21qSHZ0OFhEeFNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC8wOWUxODAtNTQ2Zi00NGUzLWI3ODMt
ZWY4OGJkYjVjODUwLzEvYXJyOHV5T3JBZVd0N00wV21qSHZ0OFhEeFNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC8wOWUxODAtNTQ2Zi00NGUzLWI3ODMtZWY4OGJkYjVjODUw
LzEvYXJyOHV5T3JBZVd0N00wV21qSHZ0OFhEeFNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkJSJnbSb
2TlQcrem6OptUZlW92BZ2OCjnmOTwDnRGdm4acRGTX591hiHy3AO1RmIk3KzxiH7
rqxA7xZmOPMad4m3H0bMiwHlO3Uy7EI87aLipaJ7aGxTS3Vh1q3/Zn+uHrH68yed
IsFYDvtrb+RnAJnHtirptf+HtjXh6BaKUihTl9kS8Mr0inmI9TB8U/nAf1zBLB8E
BowYBtcRjtK6K9aQuPcT/ll0Iukdy/C7C9PW+mCnLzK5YWKL0jZSohnHa7rggiYT
MEtopdn5KbU5P8IoT2E8qVCsRbPJnkV76Bq6vhU5ER+V4iRZHWEhVJjSsoZLM+sO
GfHZxBSIVr852A==
-----END CERTIFICATE-----