Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/310bec-44c2-4a5b-8bc7-c9e551449a4f/1/KQ_guFzTt8U5qxPk6upfI3yBVUk.mft
File:                     KQ_guFzTt8U5qxPk6upfI3yBVUk.mft (raw, json)
Hash identifier:          wZ5rSh3uVxCYdIj2M60MdxO2S0nUiTCtYpbRNsQjIjk=
Subject key identifier:   A6:A3:A3:47:AD:4F:08:52:D9:58:42:88:B8:B3:BB:33:7D:B9:42:11
Authority key identifier: 29:0F:E0:B8:5C:D3:B7:C5:39:AB:13:E4:EA:EA:5F:23:7C:81:55:49
Certificate issuer:       /CN=290fe0b85cd3b7c539ab13e4eaea5f237c815549
Certificate serial:       018BDC8338F439955AF1021E3A0F2C82A831
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KQ_guFzTt8U5qxPk6upfI3yBVUk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/310bec-44c2-4a5b-8bc7-c9e551449a4f/1/KQ_guFzTt8U5qxPk6upfI3yBVUk.mft
Manifest number:          0874
Signing time:             Fri 17 Nov 2023 09:01:08 +0000
Manifest this update:     Fri 17 Nov 2023 09:01:08 +0000
Manifest next update:     Sat 18 Nov 2023 09:01:08 +0000
Files and hashes:         1: 9G9xSwBAmTtD4bc0DumPJ30X4EU.roa (hash: UJ9e3Tsnrmzqj2ofSw+CRyCvvpX7cbdzy9IheLLGcEA=)
                          2: KQ_guFzTt8U5qxPk6upfI3yBVUk.crl (hash: cKbZhSa+dW/7Jxx11F4esxNK6VONfX8C09uLL99Jje4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:dc:83:38:f4:39:95:5a:f1:02:1e:3a:0f:2c:82:a8:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=290fe0b85cd3b7c539ab13e4eaea5f237c815549
        Validity
            Not Before: Nov 17 09:01:08 2023 GMT
            Not After : Nov 18 09:01:08 2023 GMT
        Subject: CN=a6a3a347ad4f0852d9584288b8b3bb337db94211
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:4b:a8:71:f2:dc:d7:ae:61:4a:a8:cf:83:68:
                    76:bb:ff:76:b1:51:75:2c:af:ad:94:42:0f:e7:f5:
                    96:c4:4d:81:ae:2c:74:ee:0b:2d:44:a4:16:93:bb:
                    aa:1e:10:1e:29:9a:49:e7:66:ea:0c:32:44:b6:1c:
                    85:28:09:55:10:fc:c7:83:41:b4:6d:e3:2b:07:13:
                    a5:c7:33:31:b7:c5:86:a1:1b:96:fd:a9:42:50:53:
                    76:13:27:b4:39:2b:3a:e0:f2:6f:d3:23:c3:15:28:
                    c8:4b:a2:b9:34:a2:87:c5:fe:ad:2d:6e:24:af:00:
                    88:bc:f6:7e:39:47:2a:84:69:f5:11:17:3b:74:9d:
                    c3:5d:f1:91:f5:e1:8c:92:18:98:73:7a:38:18:ba:
                    c7:a0:c8:a1:fd:b3:98:e3:df:c8:96:2e:77:65:05:
                    24:82:c7:04:63:48:30:33:d8:e5:77:74:3c:fd:f0:
                    03:24:05:11:23:0a:22:80:d0:5e:c2:fc:5d:08:c6:
                    0a:38:42:c2:e4:31:e3:fd:ce:18:ee:38:24:b5:c8:
                    9a:02:76:06:e9:55:52:75:fb:7d:69:97:ed:9a:47:
                    5a:8e:29:5d:4f:bc:85:1f:ed:ab:7e:2d:20:01:d1:
                    42:79:34:20:18:5d:89:1e:b7:e1:36:22:6d:7d:7a:
                    57:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:A3:A3:47:AD:4F:08:52:D9:58:42:88:B8:B3:BB:33:7D:B9:42:11
            X509v3 Authority Key Identifier:
                keyid:29:0F:E0:B8:5C:D3:B7:C5:39:AB:13:E4:EA:EA:5F:23:7C:81:55:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQ_guFzTt8U5qxPk6upfI3yBVUk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/310bec-44c2-4a5b-8bc7-c9e551449a4f/1/KQ_guFzTt8U5qxPk6upfI3yBVUk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/310bec-44c2-4a5b-8bc7-c9e551449a4f/1/KQ_guFzTt8U5qxPk6upfI3yBVUk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:4c:ce:05:1a:98:3e:e9:52:71:da:bf:a9:aa:fb:8e:fb:34:
         f0:f4:bf:ae:b8:38:cd:5d:b8:8c:52:bd:79:da:10:35:6b:4a:
         fe:9a:0c:c5:96:8a:78:f7:92:a2:0e:1f:cf:91:42:61:00:8e:
         de:bd:66:e3:08:22:da:22:1c:ef:b8:15:99:88:60:29:4c:08:
         27:43:ae:7a:9d:26:7c:e3:14:e9:28:e1:f2:7e:a6:bf:3b:cf:
         62:05:33:24:e8:d8:44:a0:a6:74:57:38:ba:b6:d1:cc:41:c0:
         cc:d8:22:ca:6b:76:61:b4:11:15:ef:bf:ca:14:58:90:c2:cc:
         ad:14:6e:eb:a6:e3:2d:6c:21:27:45:b8:11:29:db:86:5b:08:
         43:b4:64:99:33:a2:be:a4:48:5a:2e:f0:43:a7:db:a6:bf:70:
         5e:1c:47:9b:b7:c9:09:3b:f4:f0:6a:78:4e:1f:bc:41:3c:7c:
         31:d4:ce:08:75:e3:89:30:8b:8e:22:30:8f:7b:91:d6:c7:2d:
         c9:75:e4:74:94:89:09:c7:5c:bb:11:e6:45:68:37:f1:2f:35:
         a9:2a:ec:21:d7:6b:81:b8:a9:36:34:0a:8b:72:53:91:49:fc:
         9a:23:40:c5:48:58:95:20:a0:d5:dc:7a:8b:c0:3e:91:4a:7f:
         d4:60:df:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYvcgzj0OZVa8QIeOg8sgqgxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5MGZlMGI4NWNkM2I3YzUzOWFiMTNlNGVhZWE1ZjIzN2M4
MTU1NDkwHhcNMjMxMTE3MDkwMTA4WhcNMjMxMTE4MDkwMTA4WjAzMTEwLwYDVQQD
EyhhNmEzYTM0N2FkNGYwODUyZDk1ODQyODhiOGIzYmIzMzdkYjk0MjExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEuocfLc165hSqjPg2h2u/92sVF1
LK+tlEIP5/WWxE2Brix07gstRKQWk7uqHhAeKZpJ52bqDDJEthyFKAlVEPzHg0G0
beMrBxOlxzMxt8WGoRuW/alCUFN2Eye0OSs64PJv0yPDFSjIS6K5NKKHxf6tLW4k
rwCIvPZ+OUcqhGn1ERc7dJ3DXfGR9eGMkhiYc3o4GLrHoMih/bOY49/Ili53ZQUk
gscEY0gwM9jld3Q8/fADJAURIwoigNBewvxdCMYKOELC5DHj/c4Y7jgktciaAnYG
6VVSdft9aZftmkdajildT7yFH+2rfi0gAdFCeTQgGF2JHrfhNiJtfXpXswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKajo0etTwhS2VhCiLizuzN9uUIRMB8GA1UdIwQY
MBaAFCkP4Lhc07fFOasT5OrqXyN8gVVJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1FfZ3VGelR0OFU1cXhQazZ1cGZJM3lCVlVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8zMTBiZWMtNDRjMi00YTViLThiYzct
YzllNTUxNDQ5YTRmLzEvS1FfZ3VGelR0OFU1cXhQazZ1cGZJM3lCVlVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi8zMTBiZWMtNDRjMi00YTViLThiYzctYzllNTUxNDQ5YTRm
LzEvS1FfZ3VGelR0OFU1cXhQazZ1cGZJM3lCVlVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfUzOBRqY
PulScdq/qar7jvs08PS/rrg4zV24jFK9edoQNWtK/poMxZaKePeSog4fz5FCYQCO
3r1m4wgi2iIc77gVmYhgKUwIJ0Ouep0mfOMU6Sjh8n6mvzvPYgUzJOjYRKCmdFc4
urbRzEHAzNgiymt2YbQRFe+/yhRYkMLMrRRu66bjLWwhJ0W4ESnbhlsIQ7RkmTOi
vqRIWi7wQ6fbpr9wXhxHm7fJCTv08Gp4Th+8QTx8MdTOCHXjiTCLjiIwj3uR1sct
yXXkdJSJCcdcuxHmRWg38S81qSrsIddrgbipNjQKi3JTkUn8miNAxUhYlSCg1dx6
i8A+kUp/1GDfZQ==
-----END CERTIFICATE-----