Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/024665-f329-4dae-839a-0044f8a3f7c3/1/3zH46yVAPX_-SGsKE4M1BgEhqPY.mft
File:                     3zH46yVAPX_-SGsKE4M1BgEhqPY.mft (raw, json)
Hash identifier:          yYcEQjn97QFVA+63T0PMGvHQeVQ+iEYYCc6NrB7sxE8=
Subject key identifier:   18:C8:43:53:52:AE:B6:76:01:83:66:CD:7E:E3:6E:84:1C:45:EC:14
Authority key identifier: DF:31:F8:EB:25:40:3D:7F:FE:48:6B:0A:13:83:35:06:01:21:A8:F6
Certificate issuer:       /CN=df31f8eb25403d7ffe486b0a138335060121a8f6
Certificate serial:       018B36006EF3C7B66129E5255A180F3FC646
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3zH46yVAPX_-SGsKE4M1BgEhqPY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/024665-f329-4dae-839a-0044f8a3f7c3/1/3zH46yVAPX_-SGsKE4M1BgEhqPY.mft
Manifest number:          089D
Signing time:             Mon 16 Oct 2023 01:01:19 +0000
Manifest this update:     Mon 16 Oct 2023 01:01:19 +0000
Manifest next update:     Tue 17 Oct 2023 01:01:19 +0000
Files and hashes:         1: 3zH46yVAPX_-SGsKE4M1BgEhqPY.crl (hash: w8sMNUjDsIoeIl3he97sbonFjs/w7mnFyKT51Nze3UA=)
                          2: hQCP0jtWv29xoUSkEKPjz7f1b1U.roa (hash: 5eGmImxiU3tJehYh/6ZiaH/GlHCCCvPYFqRYJHB7Zuc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:36:00:6e:f3:c7:b6:61:29:e5:25:5a:18:0f:3f:c6:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df31f8eb25403d7ffe486b0a138335060121a8f6
        Validity
            Not Before: Oct 16 01:01:19 2023 GMT
            Not After : Oct 17 01:01:19 2023 GMT
        Subject: CN=18c8435352aeb676018366cd7ee36e841c45ec14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:24:60:0d:5a:0e:2b:54:90:bf:f8:14:aa:b9:
                    25:f6:02:58:f0:2f:fd:17:08:97:de:be:48:c4:1f:
                    03:f9:98:b5:ef:12:25:6d:18:2f:51:c7:2d:40:f8:
                    fe:17:30:f0:68:1f:86:8d:3c:c5:e5:f5:6c:3a:a2:
                    86:a2:97:ed:51:5a:76:bf:95:45:3e:5d:d1:8c:fb:
                    f1:65:66:df:96:2a:dc:a9:d6:88:36:b3:b0:f7:5a:
                    65:16:61:6b:27:f1:33:2d:ff:5d:5d:1d:bf:e0:d7:
                    42:c9:07:ed:50:ea:76:97:9a:13:4e:68:0e:fe:bd:
                    c9:5a:7c:0c:65:2a:4d:ff:f5:d3:17:01:7d:04:df:
                    d5:b8:3a:94:22:64:77:08:4b:d2:bc:4f:59:af:e5:
                    31:87:6f:4f:0a:84:63:f4:3c:4c:fa:73:ba:2e:c3:
                    bf:a4:35:0b:f1:17:c5:18:f8:dc:81:eb:c2:73:ec:
                    7d:ed:f4:dd:73:f7:7e:ca:de:9d:26:68:6c:1d:71:
                    9f:a1:25:66:cf:27:49:e5:12:d6:0c:be:6d:78:6e:
                    b8:a1:67:68:f5:79:95:01:12:b5:bf:68:b7:0b:31:
                    b5:73:9b:58:53:70:aa:ec:04:ce:71:8b:f4:cf:29:
                    90:9f:cf:58:f9:da:f7:71:e2:ed:e4:87:ce:6f:32:
                    ce:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:C8:43:53:52:AE:B6:76:01:83:66:CD:7E:E3:6E:84:1C:45:EC:14
            X509v3 Authority Key Identifier:
                keyid:DF:31:F8:EB:25:40:3D:7F:FE:48:6B:0A:13:83:35:06:01:21:A8:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3zH46yVAPX_-SGsKE4M1BgEhqPY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/024665-f329-4dae-839a-0044f8a3f7c3/1/3zH46yVAPX_-SGsKE4M1BgEhqPY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/024665-f329-4dae-839a-0044f8a3f7c3/1/3zH46yVAPX_-SGsKE4M1BgEhqPY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:23:2b:d2:07:99:97:ce:96:79:4b:d9:4d:eb:7b:59:b6:80:
         2b:73:f7:c6:fa:62:28:f3:96:6d:49:4b:3f:90:e3:88:90:a8:
         dc:24:1b:76:94:ec:23:43:fe:ca:63:76:ef:95:0a:28:22:f7:
         0a:a0:34:13:22:98:d0:20:fc:16:25:be:97:2d:38:b2:da:82:
         0f:a0:af:23:a4:a5:01:d1:42:af:f0:79:ac:c9:e3:1e:d6:ef:
         f3:f3:49:a5:e9:55:be:23:87:d2:29:04:eb:bd:9b:ce:3a:1e:
         ac:b5:00:7a:7f:d5:71:02:ac:26:dc:b8:4d:6d:f6:ad:45:7f:
         e4:35:8a:f5:e6:ce:d2:cf:28:7a:7b:fb:b7:b8:39:4e:06:25:
         16:ae:24:74:04:7b:79:9c:29:be:3f:8e:08:7d:20:cb:9f:42:
         9d:0f:7d:b0:a2:4a:27:53:2d:1e:7d:d8:85:42:1f:de:4f:07:
         5c:c3:b3:b8:61:71:2a:fd:28:0b:ab:81:ea:d5:1a:5a:8a:f3:
         fe:eb:44:1d:9d:12:19:74:b9:1c:a3:a0:5a:3a:f1:73:11:16:
         0f:d0:0c:1b:f5:69:12:5e:4d:a5:99:e6:08:6d:7f:18:05:3d:
         8b:55:c7:f1:0c:01:f1:a8:79:ae:12:e0:0a:cc:4b:ac:0a:22:
         f3:13:57:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYs2AG7zx7ZhKeUlWhgPP8ZGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmMzFmOGViMjU0MDNkN2ZmZTQ4NmIwYTEzODMzNTA2MDEy
MWE4ZjYwHhcNMjMxMDE2MDEwMTE5WhcNMjMxMDE3MDEwMTE5WjAzMTEwLwYDVQQD
EygxOGM4NDM1MzUyYWViNjc2MDE4MzY2Y2Q3ZWUzNmU4NDFjNDVlYzE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCRgDVoOK1SQv/gUqrkl9gJY8C/9
FwiX3r5IxB8D+Zi17xIlbRgvUcctQPj+FzDwaB+GjTzF5fVsOqKGopftUVp2v5VF
Pl3RjPvxZWbflircqdaINrOw91plFmFrJ/EzLf9dXR2/4NdCyQftUOp2l5oTTmgO
/r3JWnwMZSpN//XTFwF9BN/VuDqUImR3CEvSvE9Zr+Uxh29PCoRj9DxM+nO6LsO/
pDUL8RfFGPjcgevCc+x97fTdc/d+yt6dJmhsHXGfoSVmzydJ5RLWDL5teG64oWdo
9XmVARK1v2i3CzG1c5tYU3Cq7ATOcYv0zymQn89Y+dr3ceLt5IfObzLOhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBjIQ1NSrrZ2AYNmzX7jboQcRewUMB8GA1UdIwQY
MBaAFN8x+OslQD1//khrChODNQYBIaj2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3pINDZ5VkFQWF8tU0dzS0U0TTFCZ0VocVBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8wMjQ2NjUtZjMyOS00ZGFlLTgzOWEt
MDA0NGY4YTNmN2MzLzEvM3pINDZ5VkFQWF8tU0dzS0U0TTFCZ0VocVBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS8wMjQ2NjUtZjMyOS00ZGFlLTgzOWEtMDA0NGY4YTNmN2Mz
LzEvM3pINDZ5VkFQWF8tU0dzS0U0TTFCZ0VocVBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARyMr0geZ
l86WeUvZTet7WbaAK3P3xvpiKPOWbUlLP5DjiJCo3CQbdpTsI0P+ymN275UKKCL3
CqA0EyKY0CD8FiW+ly04stqCD6CvI6SlAdFCr/B5rMnjHtbv8/NJpelVviOH0ikE
672bzjoerLUAen/VcQKsJty4TW32rUV/5DWK9ebO0s8oenv7t7g5TgYlFq4kdAR7
eZwpvj+OCH0gy59CnQ99sKJKJ1MtHn3YhUIf3k8HXMOzuGFxKv0oC6uB6tUaWorz
/utEHZ0SGXS5HKOgWjrxcxEWD9AMG/VpEl5NpZnmCG1/GAU9i1XH8QwB8ah5rhLg
CsxLrAoi8xNX7A==
-----END CERTIFICATE-----