Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/11debc-a3ed-4a5b-b73e-294ea22cf9a6/1/Gj9iJc7pwIZG4tbavIv2u7Iz7-o.mft
File:                     Gj9iJc7pwIZG4tbavIv2u7Iz7-o.mft (raw, json)
Hash identifier:          JGX0PwDSCv/L8W4DjsFnV5VyxXEriQvyio0zqW6PNPY=
Subject key identifier:   6C:A8:C6:26:84:85:60:49:24:98:B9:8C:57:17:04:32:C6:EB:32:87
Authority key identifier: 1A:3F:62:25:CE:E9:C0:86:46:E2:D6:DA:BC:8B:F6:BB:B2:33:EF:EA
Certificate issuer:       /CN=1a3f6225cee9c08646e2d6dabc8bf6bbb233efea
Certificate serial:       018BAC71C55548ABE52D18CC66F1D858E147
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gj9iJc7pwIZG4tbavIv2u7Iz7-o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/11debc-a3ed-4a5b-b73e-294ea22cf9a6/1/Gj9iJc7pwIZG4tbavIv2u7Iz7-o.mft
Manifest number:          0F78
Signing time:             Wed 08 Nov 2023 01:00:18 +0000
Manifest this update:     Wed 08 Nov 2023 01:00:18 +0000
Manifest next update:     Thu 09 Nov 2023 01:00:18 +0000
Files and hashes:         1: Gj9iJc7pwIZG4tbavIv2u7Iz7-o.crl (hash: 1MBTb3Q+UcawmWU8oZ/J0JTcC13PPQLSZ/r+aSj63l4=)
                          2: iSnugqEGJsiGzL7mn_WRGZc-9yc.roa (hash: 100wL3xfvlcayWVsONnphX1qz9k5qXO5K4nUFi24Z1g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:ac:71:c5:55:48:ab:e5:2d:18:cc:66:f1:d8:58:e1:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a3f6225cee9c08646e2d6dabc8bf6bbb233efea
        Validity
            Not Before: Nov  8 01:00:18 2023 GMT
            Not After : Nov  9 01:00:18 2023 GMT
        Subject: CN=6ca8c626848560492498b98c57170432c6eb3287
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5a:5d:3d:56:8e:90:e6:fe:3f:06:b7:e2:5e:
                    f8:33:20:01:d7:3c:64:2a:d3:44:f9:fc:e8:d3:0b:
                    4e:61:77:73:0f:37:8b:bc:e0:3f:f7:67:31:fb:d0:
                    7d:51:c7:13:06:09:29:ff:b5:b2:da:fb:c8:05:74:
                    d5:6d:74:c1:42:74:76:80:4b:44:51:4f:63:39:77:
                    7f:1b:2d:ce:ca:19:55:bf:b1:a4:c8:00:76:ea:6e:
                    4e:30:32:c0:12:6d:24:4b:4c:35:80:0b:a4:aa:51:
                    f3:dc:51:96:a8:4c:18:90:df:0e:9a:33:f4:18:81:
                    f7:f5:c1:94:18:43:c5:db:b0:8a:c5:76:d1:57:60:
                    c1:52:49:e8:56:24:76:a1:31:ba:de:57:6e:99:e0:
                    6f:e1:2c:f6:ed:d6:52:58:83:79:d5:71:64:ac:43:
                    53:ab:cf:63:48:87:5d:d0:52:cd:3e:96:e4:e8:9a:
                    71:19:88:53:b4:eb:39:c8:b9:a1:0f:ab:f7:ef:bb:
                    6f:0a:8e:42:8f:bd:3f:e0:0a:59:bf:3a:a7:e8:4a:
                    cf:5f:22:f8:f0:97:12:0c:47:df:b6:92:f2:f8:81:
                    e3:91:03:eb:d1:80:a5:41:f2:7b:58:91:d7:e7:42:
                    5d:3e:28:f5:e8:8a:8a:5f:cb:5d:f3:31:6d:2b:10:
                    f0:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:A8:C6:26:84:85:60:49:24:98:B9:8C:57:17:04:32:C6:EB:32:87
            X509v3 Authority Key Identifier:
                keyid:1A:3F:62:25:CE:E9:C0:86:46:E2:D6:DA:BC:8B:F6:BB:B2:33:EF:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gj9iJc7pwIZG4tbavIv2u7Iz7-o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/11debc-a3ed-4a5b-b73e-294ea22cf9a6/1/Gj9iJc7pwIZG4tbavIv2u7Iz7-o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/11debc-a3ed-4a5b-b73e-294ea22cf9a6/1/Gj9iJc7pwIZG4tbavIv2u7Iz7-o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:aa:b7:fe:c6:7f:d6:6e:e1:60:73:ae:e6:8a:fe:30:66:3f:
         6c:48:2e:2b:bf:e2:40:97:a3:f7:29:cd:98:d7:a7:c7:10:12:
         e3:f5:4b:51:93:0e:ea:a0:59:46:bf:96:fd:36:79:a2:4a:e1:
         42:9d:1c:e7:04:6b:c9:ee:d7:29:03:7a:ff:83:a6:58:c1:c7:
         e4:3a:88:a5:ea:92:0d:f8:56:52:bc:f7:57:3b:c9:7a:db:4f:
         83:db:aa:ca:64:0b:5a:57:91:86:2e:84:e9:df:54:62:1c:c2:
         71:9d:eb:9b:0d:11:40:fc:df:7b:eb:5f:fe:a1:af:9c:52:08:
         b9:bd:32:56:85:d8:27:8a:55:3e:24:a2:1b:8a:17:be:46:f0:
         2b:dc:26:f9:28:d1:d3:a3:7f:d2:03:72:5d:5f:a2:a2:71:ad:
         c5:7c:cf:b0:8c:01:97:c6:42:37:6b:a7:35:38:8f:85:56:de:
         9c:4c:e6:6d:cf:dc:6b:af:d7:d2:e0:89:82:ab:dc:22:8f:94:
         8b:e6:03:6b:e4:a2:6f:07:58:2b:f6:00:b7:11:b0:ec:81:0d:
         3f:cc:66:e2:ad:d0:19:d5:6b:62:e9:46:69:e1:f0:d9:0f:bd:
         69:ab:0d:4a:67:9c:e4:d2:b6:21:6d:af:41:1e:f5:ac:d3:59:
         80:5d:de:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYusccVVSKvlLRjMZvHYWOFHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhM2Y2MjI1Y2VlOWMwODY0NmUyZDZkYWJjOGJmNmJiYjIz
M2VmZWEwHhcNMjMxMTA4MDEwMDE4WhcNMjMxMTA5MDEwMDE4WjAzMTEwLwYDVQQD
Eyg2Y2E4YzYyNjg0ODU2MDQ5MjQ5OGI5OGM1NzE3MDQzMmM2ZWIzMjg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVpdPVaOkOb+Pwa34l74MyAB1zxk
KtNE+fzo0wtOYXdzDzeLvOA/92cx+9B9UccTBgkp/7Wy2vvIBXTVbXTBQnR2gEtE
UU9jOXd/Gy3OyhlVv7GkyAB26m5OMDLAEm0kS0w1gAukqlHz3FGWqEwYkN8OmjP0
GIH39cGUGEPF27CKxXbRV2DBUknoViR2oTG63ldumeBv4Sz27dZSWIN51XFkrENT
q89jSIdd0FLNPpbk6JpxGYhTtOs5yLmhD6v377tvCo5Cj70/4ApZvzqn6ErPXyL4
8JcSDEfftpLy+IHjkQPr0YClQfJ7WJHX50JdPij16IqKX8td8zFtKxDwiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGyoxiaEhWBJJJi5jFcXBDLG6zKHMB8GA1UdIwQY
MBaAFBo/YiXO6cCGRuLW2ryL9ruyM+/qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2o5aUpjN3B3SVpHNHRiYXZJdjJ1N0l6Ny1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS8xMWRlYmMtYTNlZC00YTViLWI3M2Ut
Mjk0ZWEyMmNmOWE2LzEvR2o5aUpjN3B3SVpHNHRiYXZJdjJ1N0l6Ny1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS8xMWRlYmMtYTNlZC00YTViLWI3M2UtMjk0ZWEyMmNmOWE2
LzEvR2o5aUpjN3B3SVpHNHRiYXZJdjJ1N0l6Ny1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVaq3/sZ/
1m7hYHOu5or+MGY/bEguK7/iQJej9ynNmNenxxAS4/VLUZMO6qBZRr+W/TZ5okrh
Qp0c5wRrye7XKQN6/4OmWMHH5DqIpeqSDfhWUrz3VzvJettPg9uqymQLWleRhi6E
6d9UYhzCcZ3rmw0RQPzfe+tf/qGvnFIIub0yVoXYJ4pVPiSiG4oXvkbwK9wm+SjR
06N/0gNyXV+ionGtxXzPsIwBl8ZCN2unNTiPhVbenEzmbc/ca6/X0uCJgqvcIo+U
i+YDa+SibwdYK/YAtxGw7IENP8xm4q3QGdVrYulGaeHw2Q+9aasNSmec5NK2IW2v
QR71rNNZgF3epg==
-----END CERTIFICATE-----