Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/7fefa0-f476-4cc0-a40c-5a39b074f6f5/1/13ejTYDe5yRqdXjlN6QEkX3c9Ak.mft
File:                     13ejTYDe5yRqdXjlN6QEkX3c9Ak.mft (raw, json)
Hash identifier:          xEYeJ7knNDFW8SIGHOFrOh4HCkDagAoWmZfgtNDmwMk=
Subject key identifier:   FF:80:97:46:63:13:FD:DF:52:4F:D8:ED:77:FB:42:B5:40:E5:55:48
Authority key identifier: D7:77:A3:4D:80:DE:E7:24:6A:75:78:E5:37:A4:04:91:7D:DC:F4:09
Certificate issuer:       /CN=d777a34d80dee7246a7578e537a404917ddcf409
Certificate serial:       018B7DE1E1357EF444F9C310E360E08AB9C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/13ejTYDe5yRqdXjlN6QEkX3c9Ak.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/7fefa0-f476-4cc0-a40c-5a39b074f6f5/1/13ejTYDe5yRqdXjlN6QEkX3c9Ak.mft
Manifest number:          084C
Signing time:             Mon 30 Oct 2023 00:00:37 +0000
Manifest this update:     Mon 30 Oct 2023 00:00:37 +0000
Manifest next update:     Tue 31 Oct 2023 00:00:37 +0000
Files and hashes:         1: 13ejTYDe5yRqdXjlN6QEkX3c9Ak.crl (hash: qXqbHNXvkRhBg+IPo4J7BbWiK8Z7Uo4Yc4tllW2wy1A=)
                          2: 8QbaXAUhG26M-hMVHDqEu5ZMXD0.roa (hash: oED7X39tLevHckUrsoKbGzgtUPZ6t+EV/jbe/ibJq1c=)
                          3: DWa8pqNCNrS_oPtta6rVXjQOmJw.roa (hash: FgfUBL/ErM1aidbkz7FbtVBroZijl8bkRXyt6rjRTQU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:7d:e1:e1:35:7e:f4:44:f9:c3:10:e3:60:e0:8a:b9:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d777a34d80dee7246a7578e537a404917ddcf409
        Validity
            Not Before: Oct 30 00:00:37 2023 GMT
            Not After : Oct 31 00:00:37 2023 GMT
        Subject: CN=ff8097466313fddf524fd8ed77fb42b540e55548
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0e:80:dd:05:7c:fc:87:d1:46:ab:c8:3e:39:
                    08:40:fc:6c:b3:d4:a0:26:ed:a6:da:fe:b8:d0:11:
                    13:d3:02:bf:47:05:62:92:04:e4:ca:fd:a3:4c:17:
                    03:72:ad:1f:e4:d7:22:03:98:3a:57:bf:f4:1a:a9:
                    ca:f5:c1:d9:ec:f7:f8:91:be:b8:db:9e:49:81:cf:
                    15:56:6e:0d:82:b6:02:6b:f7:96:63:61:d7:7b:24:
                    24:37:99:9e:0a:2d:fd:fd:72:af:53:4c:6e:a7:38:
                    cb:49:30:ef:91:ec:c8:29:1b:ca:9d:85:03:ad:ff:
                    77:e6:52:d3:a3:94:bc:56:c0:7d:fa:a8:12:36:58:
                    25:f0:2a:8a:a9:4b:94:bf:d0:11:87:60:3d:aa:4d:
                    93:4d:0d:d3:62:09:1c:71:f4:41:c0:38:b8:c1:e8:
                    4a:80:72:fd:d6:92:13:04:12:fa:01:89:3a:57:46:
                    4b:c5:ef:dc:4f:d6:c1:7b:eb:a8:c7:09:f5:8d:80:
                    3a:68:c3:7d:5c:fc:e7:f5:88:af:7d:53:55:18:4a:
                    80:cd:ca:1d:f0:b2:20:c2:8f:e4:0e:5f:b9:35:d8:
                    b5:41:76:27:9f:2b:51:04:52:e4:3a:ae:99:aa:41:
                    f2:15:d5:43:89:d1:9f:3f:06:63:35:0a:5a:2b:8b:
                    71:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:80:97:46:63:13:FD:DF:52:4F:D8:ED:77:FB:42:B5:40:E5:55:48
            X509v3 Authority Key Identifier:
                keyid:D7:77:A3:4D:80:DE:E7:24:6A:75:78:E5:37:A4:04:91:7D:DC:F4:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13ejTYDe5yRqdXjlN6QEkX3c9Ak.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7fefa0-f476-4cc0-a40c-5a39b074f6f5/1/13ejTYDe5yRqdXjlN6QEkX3c9Ak.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7fefa0-f476-4cc0-a40c-5a39b074f6f5/1/13ejTYDe5yRqdXjlN6QEkX3c9Ak.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:df:37:66:12:57:6c:ef:c3:fb:41:d5:d2:87:04:d5:e5:66:
         73:1a:83:e9:c1:c5:50:7b:72:0d:6c:f4:2b:05:13:1d:22:1b:
         e1:b3:cb:45:cb:28:fc:06:27:05:00:b6:2b:da:21:8d:43:66:
         47:8a:52:16:57:a9:78:86:55:71:2f:6e:78:c4:4c:1f:e2:fd:
         d9:27:75:cd:66:96:08:25:6c:d9:63:de:98:09:80:3c:7e:69:
         f1:02:5b:85:8f:0b:aa:83:bc:1b:02:18:70:93:71:d3:33:c5:
         31:70:cd:c1:ec:99:b8:cb:7c:f9:92:b4:1a:0d:71:66:dd:57:
         3b:1d:71:6d:b1:88:17:eb:06:95:b3:d5:48:62:9b:8a:94:f2:
         64:9e:16:1d:8f:88:f2:6d:66:f5:c3:44:f6:5d:bc:9a:81:56:
         b9:23:05:c4:e9:10:24:84:c7:52:d8:55:9b:e3:75:33:0c:ff:
         e5:a8:99:7f:b2:37:e3:cd:af:f5:f5:c0:63:7a:19:aa:ab:91:
         42:6f:ca:e5:c7:69:77:27:3e:aa:3d:4d:b2:af:1d:3a:37:9f:
         03:87:32:81:8d:fb:31:b0:a5:3b:50:6e:46:14:c2:b3:60:ef:
         6d:b8:14:eb:e8:7b:bb:af:2b:85:f8:37:96:a7:99:33:9c:c9:
         b7:ea:2d:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYt94eE1fvRE+cMQ42DgirnDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NzdhMzRkODBkZWU3MjQ2YTc1NzhlNTM3YTQwNDkxN2Rk
Y2Y0MDkwHhcNMjMxMDMwMDAwMDM3WhcNMjMxMDMxMDAwMDM3WjAzMTEwLwYDVQQD
EyhmZjgwOTc0NjYzMTNmZGRmNTI0ZmQ4ZWQ3N2ZiNDJiNTQwZTU1NTQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQ6A3QV8/IfRRqvIPjkIQPxss9Sg
Ju2m2v640BET0wK/RwVikgTkyv2jTBcDcq0f5NciA5g6V7/0GqnK9cHZ7Pf4kb64
255Jgc8VVm4NgrYCa/eWY2HXeyQkN5meCi39/XKvU0xupzjLSTDvkezIKRvKnYUD
rf935lLTo5S8VsB9+qgSNlgl8CqKqUuUv9ARh2A9qk2TTQ3TYgkccfRBwDi4wehK
gHL91pITBBL6AYk6V0ZLxe/cT9bBe+uoxwn1jYA6aMN9XPzn9YivfVNVGEqAzcod
8LIgwo/kDl+5Ndi1QXYnnytRBFLkOq6ZqkHyFdVDidGfPwZjNQpaK4txGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP+Al0ZjE/3fUk/Y7Xf7QrVA5VVIMB8GA1UdIwQY
MBaAFNd3o02A3uckanV45TekBJF93PQJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTNlalRZRGU1eVJxZFhqbE42UUVrWDNjOUFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS83ZmVmYTAtZjQ3Ni00Y2MwLWE0MGMt
NWEzOWIwNzRmNmY1LzEvMTNlalRZRGU1eVJxZFhqbE42UUVrWDNjOUFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS83ZmVmYTAtZjQ3Ni00Y2MwLWE0MGMtNWEzOWIwNzRmNmY1
LzEvMTNlalRZRGU1eVJxZFhqbE42UUVrWDNjOUFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv983ZhJX
bO/D+0HV0ocE1eVmcxqD6cHFUHtyDWz0KwUTHSIb4bPLRcso/AYnBQC2K9ohjUNm
R4pSFlepeIZVcS9ueMRMH+L92Sd1zWaWCCVs2WPemAmAPH5p8QJbhY8LqoO8GwIY
cJNx0zPFMXDNweyZuMt8+ZK0Gg1xZt1XOx1xbbGIF+sGlbPVSGKbipTyZJ4WHY+I
8m1m9cNE9l28moFWuSMFxOkQJITHUthVm+N1Mwz/5aiZf7I3482v9fXAY3oZqquR
Qm/K5cdpdyc+qj1Nsq8dOjefA4cygY37MbClO1BuRhTCs2DvbbgU6+h7u68rhfg3
lqeZM5zJt+otCw==
-----END CERTIFICATE-----