Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/172cf6-3c86-434f-baa5-7f7201c9c05f/1/2nmy2SwZztqi20I1f4VNpliOGZM.mft
File:                     2nmy2SwZztqi20I1f4VNpliOGZM.mft (raw, json)
Hash identifier:          FIAwVTgGnViLHx5nXpiAWuRcDl/+MAngwFuKlMO2mY0=
Subject key identifier:   33:5C:B8:2D:F4:77:14:9F:E7:7E:49:C8:5B:61:A4:B8:AE:33:62:B3
Authority key identifier: DA:79:B2:D9:2C:19:CE:DA:A2:DB:42:35:7F:85:4D:A6:58:8E:19:93
Certificate issuer:       /CN=da79b2d92c19cedaa2db42357f854da6588e1993
Certificate serial:       018BB23E1E0167A5650D4EB210F7B484E3E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2nmy2SwZztqi20I1f4VNpliOGZM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/172cf6-3c86-434f-baa5-7f7201c9c05f/1/2nmy2SwZztqi20I1f4VNpliOGZM.mft
Manifest number:          088A
Signing time:             Thu 09 Nov 2023 04:01:37 +0000
Manifest this update:     Thu 09 Nov 2023 04:01:37 +0000
Manifest next update:     Fri 10 Nov 2023 04:01:37 +0000
Files and hashes:         1: 2nmy2SwZztqi20I1f4VNpliOGZM.crl (hash: yAKEXASeUrJuFm0nfbkrWNyKsN5kZ+Unss+X4eTYcsQ=)
                          2: bEgVe-ofYadc598A_T1LLMS2fAY.roa (hash: +IU1ovwG3QUpV+Ek3W8r9mLqjwMjjZrJi+i+9Dom6OA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:b2:3e:1e:01:67:a5:65:0d:4e:b2:10:f7:b4:84:e3:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da79b2d92c19cedaa2db42357f854da6588e1993
        Validity
            Not Before: Nov  9 04:01:37 2023 GMT
            Not After : Nov 10 04:01:37 2023 GMT
        Subject: CN=335cb82df477149fe77e49c85b61a4b8ae3362b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c1:3e:c4:6a:68:ba:df:53:12:90:36:a3:e6:
                    70:bd:62:a0:e9:b4:9b:53:f6:b8:af:98:e5:ab:55:
                    23:da:fa:ab:fd:3e:e7:69:9a:f0:43:e9:10:44:ba:
                    99:92:ad:09:e9:7e:9d:ed:56:62:0c:57:a3:11:6f:
                    0e:9d:60:84:de:d5:9a:73:56:a3:ab:75:86:58:91:
                    7c:fc:74:df:90:1e:b7:59:83:3a:9f:ee:c3:e4:40:
                    cd:bb:05:1f:ae:e3:bf:d7:35:47:94:be:d4:2a:85:
                    53:6b:1a:28:9b:26:cb:86:d9:f5:9a:0b:4f:8d:f4:
                    92:b6:da:69:20:87:de:9e:e8:62:3f:5c:f0:1f:74:
                    b0:47:42:94:8a:14:ce:ce:5b:ac:f4:e5:fb:eb:86:
                    66:3d:27:ad:a7:03:78:38:a4:83:53:80:12:57:1b:
                    a8:26:fd:36:11:f0:39:31:ab:0c:41:39:d3:b6:9d:
                    be:7c:cd:b4:16:6d:d2:03:e3:b9:d8:91:eb:24:23:
                    a6:66:df:cd:37:5c:97:9b:67:db:6c:c5:bd:1f:2c:
                    c0:80:a6:9d:70:6e:f9:b7:5f:af:2f:e7:7e:e4:76:
                    63:13:67:10:57:fa:82:bc:41:d1:5f:dc:69:68:0b:
                    a1:da:8c:a3:d4:fc:da:12:72:e7:ff:69:14:dd:32:
                    27:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:5C:B8:2D:F4:77:14:9F:E7:7E:49:C8:5B:61:A4:B8:AE:33:62:B3
            X509v3 Authority Key Identifier:
                keyid:DA:79:B2:D9:2C:19:CE:DA:A2:DB:42:35:7F:85:4D:A6:58:8E:19:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2nmy2SwZztqi20I1f4VNpliOGZM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/172cf6-3c86-434f-baa5-7f7201c9c05f/1/2nmy2SwZztqi20I1f4VNpliOGZM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/172cf6-3c86-434f-baa5-7f7201c9c05f/1/2nmy2SwZztqi20I1f4VNpliOGZM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:55:2d:77:66:ca:d0:93:bc:1d:66:cd:b7:c7:90:2c:97:45:
         80:0a:90:1f:02:bc:ab:76:2d:9d:1e:85:9e:fe:2b:ef:7f:9d:
         6f:59:4d:42:1b:aa:7d:6d:b4:68:a2:2e:2d:c6:5d:26:1f:50:
         2d:62:56:38:e5:b2:22:04:14:3f:b5:53:4d:83:ac:0f:e2:22:
         f9:7c:77:6b:af:84:8a:fd:fc:f0:bf:61:94:6b:a9:f9:0f:30:
         a5:a1:66:f7:3d:59:89:3c:da:e0:aa:a4:b3:18:6a:3d:73:98:
         8e:46:e9:36:9d:cf:81:3f:21:67:5e:63:46:58:94:4a:19:70:
         9f:ce:8e:48:94:f8:cc:cc:3c:d1:a3:a8:d1:9f:2e:05:8b:88:
         7f:0f:af:32:e4:f4:ac:93:76:4a:03:1d:7e:1f:d3:8b:a2:9a:
         c8:d0:7a:b3:b6:f7:e7:e2:43:cb:39:17:69:01:6f:c5:8a:c9:
         5c:c6:a4:3e:76:f5:c1:c2:05:47:57:60:1d:0a:93:00:bf:c0:
         94:d0:d8:e6:67:f6:4a:32:73:dd:93:38:8a:b7:7d:cb:58:d8:
         29:db:59:e9:cd:7a:39:25:28:56:60:5c:aa:8d:de:86:87:7c:
         98:5c:e0:14:4b:ed:fa:64:7e:ec:12:59:d6:8a:6d:2b:4b:d8:
         f9:9c:a4:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYuyPh4BZ6VlDU6yEPe0hOPiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhNzliMmQ5MmMxOWNlZGFhMmRiNDIzNTdmODU0ZGE2NTg4
ZTE5OTMwHhcNMjMxMTA5MDQwMTM3WhcNMjMxMTEwMDQwMTM3WjAzMTEwLwYDVQQD
EygzMzVjYjgyZGY0NzcxNDlmZTc3ZTQ5Yzg1YjYxYTRiOGFlMzM2MmIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8E+xGpout9TEpA2o+ZwvWKg6bSb
U/a4r5jlq1Uj2vqr/T7naZrwQ+kQRLqZkq0J6X6d7VZiDFejEW8OnWCE3tWac1aj
q3WGWJF8/HTfkB63WYM6n+7D5EDNuwUfruO/1zVHlL7UKoVTaxoomybLhtn1mgtP
jfSSttppIIfenuhiP1zwH3SwR0KUihTOzlus9OX764ZmPSetpwN4OKSDU4ASVxuo
Jv02EfA5MasMQTnTtp2+fM20Fm3SA+O52JHrJCOmZt/NN1yXm2fbbMW9HyzAgKad
cG75t1+vL+d+5HZjE2cQV/qCvEHRX9xpaAuh2oyj1PzaEnLn/2kU3TInowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDNcuC30dxSf535JyFthpLiuM2KzMB8GA1UdIwQY
MBaAFNp5stksGc7aottCNX+FTaZYjhmTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMm5teTJTd1p6dHFpMjBJMWY0Vk5wbGlPR1pNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8xNzJjZjYtM2M4Ni00MzRmLWJhYTUt
N2Y3MjAxYzljMDVmLzEvMm5teTJTd1p6dHFpMjBJMWY0Vk5wbGlPR1pNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy8xNzJjZjYtM2M4Ni00MzRmLWJhYTUtN2Y3MjAxYzljMDVm
LzEvMm5teTJTd1p6dHFpMjBJMWY0Vk5wbGlPR1pNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABFUtd2bK
0JO8HWbNt8eQLJdFgAqQHwK8q3YtnR6Fnv4r73+db1lNQhuqfW20aKIuLcZdJh9Q
LWJWOOWyIgQUP7VTTYOsD+Ii+Xx3a6+Eiv388L9hlGup+Q8wpaFm9z1ZiTza4Kqk
sxhqPXOYjkbpNp3PgT8hZ15jRliUShlwn86OSJT4zMw80aOo0Z8uBYuIfw+vMuT0
rJN2SgMdfh/Ti6KayNB6s7b35+JDyzkXaQFvxYrJXMakPnb1wcIFR1dgHQqTAL/A
lNDY5mf2SjJz3ZM4ird9y1jYKdtZ6c16OSUoVmBcqo3ehod8mFzgFEvt+mR+7BJZ
1optK0vY+Zyk4w==
-----END CERTIFICATE-----