Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/1d8824-545a-4b05-8daf-7d87c1940fe9/1/TJVUyECy-tJl7NeTMEo25WMmjio.mft
File:                     TJVUyECy-tJl7NeTMEo25WMmjio.mft (raw, json)
Hash identifier:          rAWUL7vRGEabw9OgA9bOma/Wj4+/hRBnMqGXKGRfeyI=
Subject key identifier:   61:34:ED:BC:DA:36:59:BA:3B:15:48:13:BA:83:FA:2A:C8:DA:EE:3B
Authority key identifier: 4C:95:54:C8:40:B2:FA:D2:65:EC:D7:93:30:4A:36:E5:63:26:8E:2A
Certificate issuer:       /CN=4c9554c840b2fad265ecd793304a36e563268e2a
Certificate serial:       01892A8DA9FC7FDEC9E2BF206AAF291D1EBD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TJVUyECy-tJl7NeTMEo25WMmjio.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/1d8824-545a-4b05-8daf-7d87c1940fe9/1/TJVUyECy-tJl7NeTMEo25WMmjio.mft
Manifest number:          0879
Signing time:             Thu 06 Jul 2023 09:34:34 +0000
Manifest this update:     Thu 06 Jul 2023 09:34:34 +0000
Manifest next update:     Fri 07 Jul 2023 09:34:34 +0000
Files and hashes:         1: TJVUyECy-tJl7NeTMEo25WMmjio.crl (hash: sZDt2p1M4+kaKnxA6Or9Tfy4iFCAmY2WSfwL5KlJ6Jw=)
                          2: oSs4WXr3MKs7x446eNEg-dZXeOg.roa (hash: qBAipOSTmvRz9qCdkD69235yAPPsK/XkbAR/Aye6u38=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:2a:8d:a9:fc:7f:de:c9:e2:bf:20:6a:af:29:1d:1e:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c9554c840b2fad265ecd793304a36e563268e2a
        Validity
            Not Before: Jul  6 09:34:34 2023 GMT
            Not After : Jul  7 09:34:34 2023 GMT
        Subject: CN=6134edbcda3659ba3b154813ba83fa2ac8daee3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c1:59:57:c6:47:15:54:ae:e5:d0:32:54:db:
                    aa:33:1f:5c:98:b4:18:6b:ef:03:a3:39:cb:9d:6d:
                    9e:23:ed:68:5a:03:ca:c6:f4:90:e1:8e:45:bd:51:
                    22:03:3b:e1:88:76:24:f9:38:f8:da:fa:77:7a:1f:
                    60:ec:a6:f7:e5:0c:34:f6:e8:ac:be:03:25:bd:b8:
                    b7:4d:6c:6e:6d:b0:92:77:d7:9f:ad:be:67:1f:1c:
                    b3:8f:ae:3f:16:a4:9f:87:75:ee:46:aa:92:f2:b1:
                    4d:98:85:24:8e:4f:81:81:99:51:2c:34:c8:ab:63:
                    fe:70:d7:50:35:22:7b:21:12:52:a0:f3:ed:d5:3b:
                    8d:1b:3d:f5:97:05:6b:78:24:bf:27:d9:91:56:cb:
                    7d:0a:9c:da:84:03:f0:f8:bf:82:19:9f:d6:ef:67:
                    39:ec:58:7f:7e:8c:68:0f:b5:42:ca:dc:d9:ff:da:
                    f4:e6:3e:ca:bf:fa:04:ee:70:ca:67:00:01:7d:37:
                    24:e6:53:bf:5e:ce:cd:08:a0:db:2e:7a:fd:e5:26:
                    34:00:8e:2b:09:88:57:c0:7d:4f:72:85:ac:d2:5c:
                    d0:99:be:5e:3b:2f:13:25:06:96:8d:94:f9:b5:c0:
                    ee:2b:fd:1c:dc:e2:49:8f:07:91:18:16:2c:fe:1d:
                    47:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:34:ED:BC:DA:36:59:BA:3B:15:48:13:BA:83:FA:2A:C8:DA:EE:3B
            X509v3 Authority Key Identifier:
                keyid:4C:95:54:C8:40:B2:FA:D2:65:EC:D7:93:30:4A:36:E5:63:26:8E:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJVUyECy-tJl7NeTMEo25WMmjio.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1d8824-545a-4b05-8daf-7d87c1940fe9/1/TJVUyECy-tJl7NeTMEo25WMmjio.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1d8824-545a-4b05-8daf-7d87c1940fe9/1/TJVUyECy-tJl7NeTMEo25WMmjio.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:eb:07:a3:dd:b0:bd:92:17:53:8b:e9:b7:3e:37:5c:bc:a9:
         0b:00:36:db:dc:14:0c:0f:8f:49:90:76:b8:66:ff:3e:99:c5:
         ef:61:97:fa:eb:56:ac:e7:9f:09:7c:7a:02:20:de:78:4a:7d:
         a5:26:a1:99:5e:fc:13:49:80:63:11:a8:8a:7d:92:44:9a:93:
         68:59:a2:e0:df:e3:77:f9:ba:b1:30:5d:6d:81:3a:31:d1:25:
         93:0e:2b:b3:31:e1:08:56:c6:b1:0c:bb:f6:d0:38:bb:7c:e2:
         9b:46:79:16:3a:0c:0c:df:10:2d:1e:e0:32:e1:0d:ef:fd:08:
         28:aa:03:f4:db:c3:94:25:79:a4:9f:87:a0:be:b4:cd:51:31:
         5c:60:bf:bc:46:55:93:36:c3:53:96:43:30:7f:08:08:f8:a0:
         89:fb:40:15:1e:ec:98:84:ad:9e:3d:0c:1d:c2:93:cc:4b:67:
         3b:bc:ba:84:a8:69:fc:4d:79:b5:1d:72:5e:79:3f:84:50:a1:
         8a:39:89:5d:e4:f0:d0:b2:61:bf:d1:63:3d:79:96:0a:38:6f:
         4e:55:5a:03:73:17:6e:53:c2:da:f6:87:a6:38:fe:85:03:9c:
         da:76:44:62:51:73:cc:4d:36:92:6d:16:c1:ad:fe:34:4c:4c:
         10:f5:2c:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYkqjan8f97J4r8gaq8pHR69MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjOTU1NGM4NDBiMmZhZDI2NWVjZDc5MzMwNGEzNmU1NjMy
NjhlMmEwHhcNMjMwNzA2MDkzNDM0WhcNMjMwNzA3MDkzNDM0WjAzMTEwLwYDVQQD
Eyg2MTM0ZWRiY2RhMzY1OWJhM2IxNTQ4MTNiYTgzZmEyYWM4ZGFlZTNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8FZV8ZHFVSu5dAyVNuqMx9cmLQY
a+8DoznLnW2eI+1oWgPKxvSQ4Y5FvVEiAzvhiHYk+Tj42vp3eh9g7Kb35Qw09uis
vgMlvbi3TWxubbCSd9efrb5nHxyzj64/FqSfh3XuRqqS8rFNmIUkjk+BgZlRLDTI
q2P+cNdQNSJ7IRJSoPPt1TuNGz31lwVreCS/J9mRVst9CpzahAPw+L+CGZ/W72c5
7Fh/foxoD7VCytzZ/9r05j7Kv/oE7nDKZwABfTck5lO/Xs7NCKDbLnr95SY0AI4r
CYhXwH1PcoWs0lzQmb5eOy8TJQaWjZT5tcDuK/0c3OJJjweRGBYs/h1HJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGE07bzaNlm6OxVIE7qD+irI2u47MB8GA1UdIwQY
MBaAFEyVVMhAsvrSZezXkzBKNuVjJo4qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEpWVXlFQ3ktdEpsN05lVE1FbzI1V01tamlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8xZDg4MjQtNTQ1YS00YjA1LThkYWYt
N2Q4N2MxOTQwZmU5LzEvVEpWVXlFQ3ktdEpsN05lVE1FbzI1V01tamlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi8xZDg4MjQtNTQ1YS00YjA1LThkYWYtN2Q4N2MxOTQwZmU5
LzEvVEpWVXlFQ3ktdEpsN05lVE1FbzI1V01tamlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUesHo92w
vZIXU4vptz43XLypCwA229wUDA+PSZB2uGb/PpnF72GX+utWrOefCXx6AiDeeEp9
pSahmV78E0mAYxGoin2SRJqTaFmi4N/jd/m6sTBdbYE6MdElkw4rszHhCFbGsQy7
9tA4u3zim0Z5FjoMDN8QLR7gMuEN7/0IKKoD9NvDlCV5pJ+HoL60zVExXGC/vEZV
kzbDU5ZDMH8ICPigiftAFR7smIStnj0MHcKTzEtnO7y6hKhp/E15tR1yXnk/hFCh
ijmJXeTw0LJhv9FjPXmWCjhvTlVaA3MXblPC2vaHpjj+hQOc2nZEYlFzzE02km0W
wa3+NExMEPUspw==
-----END CERTIFICATE-----