Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/29a016-f614-4bc3-9362-5ee30989b6eb/1/73OJCflNmWhDa7Tgmi1HzHkBczw.mft
File:                     73OJCflNmWhDa7Tgmi1HzHkBczw.mft (raw, json)
Hash identifier:          K66emoapZuWSZeYvMqePfXAZ1/u8wVzIYl7G+1KpkDI=
Subject key identifier:   AC:45:03:E7:14:6C:2D:E5:61:72:8F:A8:1E:86:8A:F9:41:AC:A1:1C
Authority key identifier: EF:73:89:09:F9:4D:99:68:43:6B:B4:E0:9A:2D:47:CC:79:01:73:3C
Certificate issuer:       /CN=ef738909f94d9968436bb4e09a2d47cc7901733c
Certificate serial:       018D822718E4E7DBA9707314C118E5CD1CB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/73OJCflNmWhDa7Tgmi1HzHkBczw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/29a016-f614-4bc3-9362-5ee30989b6eb/1/73OJCflNmWhDa7Tgmi1HzHkBczw.mft
Manifest number:          0947
Signing time:             Wed 07 Feb 2024 06:00:16 +0000
Manifest this update:     Wed 07 Feb 2024 06:00:16 +0000
Manifest next update:     Thu 08 Feb 2024 06:00:16 +0000
Files and hashes:         1: 73OJCflNmWhDa7Tgmi1HzHkBczw.crl (hash: 4OuRa+NaTr3dE2KG74SPLKt1kT1ny7SKQf5RIFnc63Q=)
                          2: 9-29GJe5Zg7tYkQBmtJEGvxqBEk.roa (hash: 3sKn0WrYK94DKIhNBA2kyP3IMTl1ktdvMS3KrMYTjVw=)
                          3: UN9vSirRPlkQNZSLz6S-4q_0hgc.roa (hash: k4buypy7OfYmZUOCVpHMcT9rXbCNMeWUDz6Gb5HIJ4A=)
                          4: UwUTZAJnMvJP6VnkzHC0Uh0pEKY.roa (hash: C4k3lDPwvLNaFUHOIozNkug71hQ+DUjeo2/eAbptufI=)
                          5: rwbFhws32F2lDHYN3wGoo8mpEEw.roa (hash: HnUOdmy4ZYedx9GnzS05cWnRyB1XV7Pohkcxxl402jc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:82:27:18:e4:e7:db:a9:70:73:14:c1:18:e5:cd:1c:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef738909f94d9968436bb4e09a2d47cc7901733c
        Validity
            Not Before: Feb  7 06:00:16 2024 GMT
            Not After : Feb  8 06:00:16 2024 GMT
        Subject: CN=ac4503e7146c2de561728fa81e868af941aca11c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:cc:69:8a:8c:1a:6d:db:ac:17:83:c3:52:89:
                    8a:40:be:ec:2e:7e:25:9d:48:2b:ac:9d:ae:55:3b:
                    8e:4b:62:65:8c:7a:d7:27:7a:6d:bf:2b:96:a9:9c:
                    b0:1d:94:1c:43:7f:45:47:7a:af:a8:df:95:e4:93:
                    23:4d:fd:ab:9b:97:80:f0:bf:99:42:e9:5e:10:a4:
                    f2:92:df:6a:1c:5b:04:9b:ea:2d:a8:a4:0f:95:c8:
                    fd:a3:38:01:d6:11:73:f0:a8:a2:d8:d7:99:c7:4b:
                    13:14:96:2e:3a:51:e0:64:9d:1b:05:fd:b1:a7:ba:
                    d7:49:98:6f:9f:58:31:9f:f8:8b:1c:b1:60:0e:2d:
                    46:94:6e:d5:53:e8:f3:3a:4d:9a:82:1e:65:5c:13:
                    6a:a4:9f:a4:1c:25:b1:00:3e:22:55:24:4a:2f:d3:
                    08:de:c8:81:a1:e6:0c:a7:b6:7f:4a:ac:74:47:22:
                    37:52:e4:0a:b3:2c:f0:74:5f:1d:03:32:e5:1a:4a:
                    69:4d:37:47:83:f1:82:75:1e:fe:51:ed:a0:a7:f1:
                    23:73:f5:3c:c7:98:0b:3c:c5:53:da:24:d0:07:f5:
                    45:89:de:0e:d2:23:28:92:d2:51:14:c2:1e:d9:82:
                    b3:62:2b:a6:c8:b8:c9:f9:34:30:26:e2:ad:5a:99:
                    73:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:45:03:E7:14:6C:2D:E5:61:72:8F:A8:1E:86:8A:F9:41:AC:A1:1C
            X509v3 Authority Key Identifier:
                keyid:EF:73:89:09:F9:4D:99:68:43:6B:B4:E0:9A:2D:47:CC:79:01:73:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73OJCflNmWhDa7Tgmi1HzHkBczw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/29a016-f614-4bc3-9362-5ee30989b6eb/1/73OJCflNmWhDa7Tgmi1HzHkBczw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/29a016-f614-4bc3-9362-5ee30989b6eb/1/73OJCflNmWhDa7Tgmi1HzHkBczw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:4b:96:69:8f:df:3d:27:34:68:a4:bf:40:09:58:be:44:ea:
         c7:41:9e:d0:b3:8a:37:1c:6f:92:6e:38:e2:b8:78:c4:ed:80:
         b6:9b:36:65:fc:d3:99:b1:c4:83:3c:ce:39:bc:9c:6e:59:f6:
         2f:9c:41:a1:e0:fe:ff:87:fa:47:69:70:e9:09:98:c4:17:33:
         61:b0:16:34:97:0d:34:f1:00:71:7a:46:fc:1d:61:42:94:c8:
         5b:1d:cd:60:b2:36:8e:bd:d7:7e:29:34:8b:74:dc:90:2b:fe:
         2e:8e:f4:f2:35:81:19:07:41:da:1f:eb:9e:23:b1:fa:3b:35:
         71:e4:aa:ba:94:e2:61:b3:29:fe:26:76:80:ee:45:dd:d4:dc:
         83:85:bd:44:03:dc:70:27:3a:2a:1e:bc:34:5b:25:a4:e9:f3:
         dd:85:51:83:10:50:12:93:12:cd:0c:55:bb:2f:17:f1:17:3e:
         78:c5:a0:dd:57:36:4b:31:35:96:4f:88:d6:03:d4:46:d7:e9:
         20:14:21:3a:f7:28:fe:c5:01:bc:3d:77:17:90:8a:50:7c:68:
         e5:d5:01:e7:4e:8e:f8:b9:74:d2:95:f0:30:d4:32:1e:c5:5e:
         0b:77:e4:e6:6d:05:12:6a:74:ed:1c:d5:e5:ec:c5:f4:b8:1f:
         18:9f:26:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY2CJxjk59upcHMUwRjlzRy0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmNzM4OTA5Zjk0ZDk5Njg0MzZiYjRlMDlhMmQ0N2NjNzkw
MTczM2MwHhcNMjQwMjA3MDYwMDE2WhcNMjQwMjA4MDYwMDE2WjAzMTEwLwYDVQQD
EyhhYzQ1MDNlNzE0NmMyZGU1NjE3MjhmYTgxZTg2OGFmOTQxYWNhMTFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgsxpiowabdusF4PDUomKQL7sLn4l
nUgrrJ2uVTuOS2JljHrXJ3ptvyuWqZywHZQcQ39FR3qvqN+V5JMjTf2rm5eA8L+Z
QuleEKTykt9qHFsEm+otqKQPlcj9ozgB1hFz8Kii2NeZx0sTFJYuOlHgZJ0bBf2x
p7rXSZhvn1gxn/iLHLFgDi1GlG7VU+jzOk2agh5lXBNqpJ+kHCWxAD4iVSRKL9MI
3siBoeYMp7Z/Sqx0RyI3UuQKsyzwdF8dAzLlGkppTTdHg/GCdR7+Ue2gp/Ejc/U8
x5gLPMVT2iTQB/VFid4O0iMoktJRFMIe2YKzYiumyLjJ+TQwJuKtWplzdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKxFA+cUbC3lYXKPqB6GivlBrKEcMB8GA1UdIwQY
MBaAFO9ziQn5TZloQ2u04JotR8x5AXM8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzNPSkNmbE5tV2hEYTdUZ21pMUh6SGtCY3p3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC8yOWEwMTYtZjYxNC00YmMzLTkzNjIt
NWVlMzA5ODliNmViLzEvNzNPSkNmbE5tV2hEYTdUZ21pMUh6SGtCY3p3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC8yOWEwMTYtZjYxNC00YmMzLTkzNjItNWVlMzA5ODliNmVi
LzEvNzNPSkNmbE5tV2hEYTdUZ21pMUh6SGtCY3p3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVEuWaY/f
PSc0aKS/QAlYvkTqx0Ge0LOKNxxvkm444rh4xO2Atps2ZfzTmbHEgzzOObycbln2
L5xBoeD+/4f6R2lw6QmYxBczYbAWNJcNNPEAcXpG/B1hQpTIWx3NYLI2jr3Xfik0
i3TckCv+Lo708jWBGQdB2h/rniOx+js1ceSqupTiYbMp/iZ2gO5F3dTcg4W9RAPc
cCc6Kh68NFslpOnz3YVRgxBQEpMSzQxVuy8X8Rc+eMWg3Vc2SzE1lk+I1gPURtfp
IBQhOvco/sUBvD13F5CKUHxo5dUB506O+Ll00pXwMNQyHsVeC3fk5m0FEmp07RzV
5ezF9LgfGJ8mwg==
-----END CERTIFICATE-----