Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/ba3f2b-a225-44f6-8edd-cfcc20242b9f/1/1Zj0sj06mTe0Q0pC_t4ALfxIF_I.mft
File:                     1Zj0sj06mTe0Q0pC_t4ALfxIF_I.mft (raw, json)
Hash identifier:          fDmmwg1ygBnKNQX/6oahIYn8ghopgzEe+1wqUF4XehU=
Subject key identifier:   1A:19:CD:F9:FC:F9:41:E3:05:2C:17:39:3B:0B:90:7E:CE:FD:7E:FF
Authority key identifier: D5:98:F4:B2:3D:3A:99:37:B4:43:4A:42:FE:DE:00:2D:FC:48:17:F2
Certificate issuer:       /CN=d598f4b23d3a9937b4434a42fede002dfc4817f2
Certificate serial:       018B7FD098A18375FED4E0D684EAA35F9BDE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1Zj0sj06mTe0Q0pC_t4ALfxIF_I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/ba3f2b-a225-44f6-8edd-cfcc20242b9f/1/1Zj0sj06mTe0Q0pC_t4ALfxIF_I.mft
Manifest number:          088D
Signing time:             Mon 30 Oct 2023 09:00:58 +0000
Manifest this update:     Mon 30 Oct 2023 09:00:58 +0000
Manifest next update:     Tue 31 Oct 2023 09:00:58 +0000
Files and hashes:         1: 1Zj0sj06mTe0Q0pC_t4ALfxIF_I.crl (hash: 9Cxw+9MFkC36IxZewXsLyUDk27GooE2/2wCT6ySd3bQ=)
                          2: pCFI5U80czZs3ywclIize22bNgc.roa (hash: 5hoE284ncMHi2e4TaQAKxny8AGrFKJ6rk0i5UZBYx7c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:7f:d0:98:a1:83:75:fe:d4:e0:d6:84:ea:a3:5f:9b:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d598f4b23d3a9937b4434a42fede002dfc4817f2
        Validity
            Not Before: Oct 30 09:00:58 2023 GMT
            Not After : Oct 31 09:00:58 2023 GMT
        Subject: CN=1a19cdf9fcf941e3052c17393b0b907ecefd7eff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2a:5c:6d:da:24:38:26:0d:37:6c:a6:41:20:
                    5e:2b:21:ec:16:fe:88:af:0a:12:df:e0:8a:82:63:
                    ec:76:6b:96:e1:1f:39:89:42:aa:5a:34:44:d5:71:
                    c4:63:6b:d8:02:9d:1c:a1:4a:98:29:af:fe:2a:e5:
                    46:34:fe:36:a0:58:e6:4c:4f:24:18:52:28:9a:76:
                    28:e7:e1:45:92:a6:a5:04:54:8e:ed:ce:66:56:2a:
                    b8:91:8d:96:07:31:f7:97:3a:82:05:dd:fb:0d:60:
                    52:50:d5:9e:86:be:63:92:7e:81:53:78:85:c7:fa:
                    44:ad:5f:d6:fc:a5:06:d9:c8:96:f4:a2:f1:f3:73:
                    43:0a:8b:21:ee:fb:90:27:da:98:0d:e9:ec:11:55:
                    4c:45:ee:77:18:67:82:25:cd:0b:14:85:ee:12:6a:
                    05:f3:8c:12:74:89:e0:94:63:b4:f8:db:f4:07:46:
                    49:20:c2:a7:56:c1:2f:91:fc:da:7a:70:ce:59:77:
                    46:8a:b5:d8:d7:b6:3f:8c:5a:1a:48:80:33:4f:b9:
                    41:ca:c0:56:3b:d7:c8:5c:bb:51:32:ab:0f:13:2b:
                    ab:35:b2:3d:47:f3:9e:ca:67:37:60:bd:2a:25:22:
                    c4:84:60:07:c6:73:76:c9:21:bc:cd:64:1f:f9:17:
                    40:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:19:CD:F9:FC:F9:41:E3:05:2C:17:39:3B:0B:90:7E:CE:FD:7E:FF
            X509v3 Authority Key Identifier:
                keyid:D5:98:F4:B2:3D:3A:99:37:B4:43:4A:42:FE:DE:00:2D:FC:48:17:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Zj0sj06mTe0Q0pC_t4ALfxIF_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ba3f2b-a225-44f6-8edd-cfcc20242b9f/1/1Zj0sj06mTe0Q0pC_t4ALfxIF_I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ba3f2b-a225-44f6-8edd-cfcc20242b9f/1/1Zj0sj06mTe0Q0pC_t4ALfxIF_I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:86:11:42:db:34:8e:7e:b3:0c:d1:2a:1e:c8:1a:d1:f4:67:
         19:63:3a:81:fc:df:c3:bb:d9:25:de:9d:4b:57:ec:87:ff:9c:
         18:fe:07:b5:d0:75:22:7d:ee:c1:2f:c3:aa:e4:5e:c0:4e:dd:
         84:b5:ee:89:c5:c2:a4:8d:65:5f:fd:d0:49:0e:1c:f5:30:d1:
         db:d9:29:83:81:7a:f8:31:76:f0:94:4b:71:fc:9c:5d:94:52:
         79:d2:65:f7:d2:5a:6f:76:b6:71:66:00:c3:7f:8d:ce:49:ed:
         10:51:36:17:15:e7:4d:e1:33:c7:e7:7a:d8:ed:b9:50:01:02:
         fc:37:13:f0:cf:8a:18:b9:3d:e5:5b:e7:90:f8:c5:d8:34:05:
         7e:9e:91:8c:dd:56:66:73:5c:5a:a1:ee:68:bb:24:29:55:9a:
         df:6b:79:39:f6:9f:cd:ea:df:ba:5a:25:e5:a3:c6:64:69:31:
         1e:7b:57:c0:0d:b9:05:25:b0:fc:39:3d:d2:0f:b0:ea:00:b7:
         4d:35:01:82:69:ee:4c:f9:46:71:a4:03:21:3c:16:0e:9e:50:
         26:01:1c:4d:4f:54:e7:68:b5:18:1d:04:28:d6:1c:1c:62:8f:
         87:ad:5a:8e:d3:b5:a3:08:ed:c0:5c:2e:71:df:34:1c:92:eb:
         54:50:bf:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYt/0Jihg3X+1ODWhOqjX5veMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1OThmNGIyM2QzYTk5MzdiNDQzNGE0MmZlZGUwMDJkZmM0
ODE3ZjIwHhcNMjMxMDMwMDkwMDU4WhcNMjMxMDMxMDkwMDU4WjAzMTEwLwYDVQQD
EygxYTE5Y2RmOWZjZjk0MWUzMDUyYzE3MzkzYjBiOTA3ZWNlZmQ3ZWZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSpcbdokOCYNN2ymQSBeKyHsFv6I
rwoS3+CKgmPsdmuW4R85iUKqWjRE1XHEY2vYAp0coUqYKa/+KuVGNP42oFjmTE8k
GFIomnYo5+FFkqalBFSO7c5mViq4kY2WBzH3lzqCBd37DWBSUNWehr5jkn6BU3iF
x/pErV/W/KUG2ciW9KLx83NDCosh7vuQJ9qYDensEVVMRe53GGeCJc0LFIXuEmoF
84wSdInglGO0+Nv0B0ZJIMKnVsEvkfzaenDOWXdGirXY17Y/jFoaSIAzT7lBysBW
O9fIXLtRMqsPEyurNbI9R/Oeymc3YL0qJSLEhGAHxnN2ySG8zWQf+RdADwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBoZzfn8+UHjBSwXOTsLkH7O/X7/MB8GA1UdIwQY
MBaAFNWY9LI9Opk3tENKQv7eAC38SBfyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVpqMHNqMDZtVGUwUTBwQ190NEFMZnhJRl9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9iYTNmMmItYTIyNS00NGY2LThlZGQt
Y2ZjYzIwMjQyYjlmLzEvMVpqMHNqMDZtVGUwUTBwQ190NEFMZnhJRl9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC9iYTNmMmItYTIyNS00NGY2LThlZGQtY2ZjYzIwMjQyYjlm
LzEvMVpqMHNqMDZtVGUwUTBwQ190NEFMZnhJRl9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY4YRQts0
jn6zDNEqHsga0fRnGWM6gfzfw7vZJd6dS1fsh/+cGP4HtdB1In3uwS/DquRewE7d
hLXuicXCpI1lX/3QSQ4c9TDR29kpg4F6+DF28JRLcfycXZRSedJl99Jab3a2cWYA
w3+NzkntEFE2FxXnTeEzx+d62O25UAEC/DcT8M+KGLk95VvnkPjF2DQFfp6RjN1W
ZnNcWqHuaLskKVWa32t5Ofafzerfulol5aPGZGkxHntXwA25BSWw/Dk90g+w6gC3
TTUBgmnuTPlGcaQDITwWDp5QJgEcTU9U52i1GB0EKNYcHGKPh61ajtO1owjtwFwu
cd80HJLrVFC/GA==
-----END CERTIFICATE-----