Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/1e7aa3-6add-4f3e-a615-945b267ba502/1/X7MPVJCe_20tvhkLd8zXi-rR6d0.mft
File:                     X7MPVJCe_20tvhkLd8zXi-rR6d0.mft (raw, json)
Hash identifier:          at5msG7VyP9nyj+mKzWDqHPLDAKoGk6QTQkNj5akLGg=
Subject key identifier:   F7:34:88:71:76:0C:27:CB:86:26:A6:F7:58:E3:A7:1D:47:DB:60:0A
Authority key identifier: 5F:B3:0F:54:90:9E:FF:6D:2D:BE:19:0B:77:CC:D7:8B:EA:D1:E9:DD
Certificate issuer:       /CN=5fb30f54909eff6d2dbe190b77ccd78bead1e9dd
Certificate serial:       018BD1FFFFD770F83F29E394E727A5CA67C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X7MPVJCe_20tvhkLd8zXi-rR6d0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/1e7aa3-6add-4f3e-a615-945b267ba502/1/X7MPVJCe_20tvhkLd8zXi-rR6d0.mft
Manifest number:          08B8
Signing time:             Wed 15 Nov 2023 08:01:37 +0000
Manifest this update:     Wed 15 Nov 2023 08:01:37 +0000
Manifest next update:     Thu 16 Nov 2023 08:01:37 +0000
Files and hashes:         1: X7MPVJCe_20tvhkLd8zXi-rR6d0.crl (hash: cxagVG4ntCtBamhf4Gndj4XRNp7G5RhR+kFmzy0HQp4=)
                          2: jsV7oxp32gLy3GVMhNPV-tM3Wlo.roa (hash: cxiYD92EglEZmlU/7Boj+4p3c0TCAMIKenc8ivGl1Uo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:d1:ff:ff:d7:70:f8:3f:29:e3:94:e7:27:a5:ca:67:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fb30f54909eff6d2dbe190b77ccd78bead1e9dd
        Validity
            Not Before: Nov 15 08:01:37 2023 GMT
            Not After : Nov 16 08:01:37 2023 GMT
        Subject: CN=f7348871760c27cb8626a6f758e3a71d47db600a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:df:4f:4f:1a:76:2b:5a:dd:ad:32:4b:53:53:
                    b7:e3:e1:35:a3:ae:45:d5:f9:5c:46:d5:55:eb:15:
                    51:dc:c7:c5:f7:c3:80:1e:f9:27:8b:90:16:bc:bd:
                    4f:83:ff:9e:6e:fe:10:0d:aa:89:76:f0:8c:0c:97:
                    a8:70:d4:7b:1d:64:ca:6c:18:b4:c6:cc:02:d8:45:
                    75:9f:98:35:ab:c0:4f:00:63:c3:d0:31:e6:86:b2:
                    1c:40:33:b1:8a:14:53:7d:55:82:c7:de:cd:79:74:
                    8a:28:5b:67:88:d2:2c:9d:fc:64:be:8b:5b:09:67:
                    fe:cf:b0:46:97:a3:69:03:37:77:ea:25:4d:14:f0:
                    97:f8:ae:81:80:f4:6d:96:3f:92:e4:62:53:c0:65:
                    b1:fe:23:50:87:43:e0:fc:fb:3a:8d:e5:98:bc:60:
                    ed:f9:2d:dd:e4:e9:7a:85:2d:8a:7b:92:f2:e9:f6:
                    39:f8:43:bb:1d:34:26:41:e9:ce:17:8a:e8:7b:e2:
                    43:c6:7d:2f:31:ed:af:e3:82:88:1c:13:78:8b:47:
                    a9:68:36:87:07:35:d7:5f:21:33:29:02:e5:28:f0:
                    78:12:c9:24:d1:32:53:25:06:57:1a:a8:9a:dd:35:
                    8a:4d:bc:a4:4b:73:8e:6b:a8:c3:62:6f:c1:c0:f5:
                    ed:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:34:88:71:76:0C:27:CB:86:26:A6:F7:58:E3:A7:1D:47:DB:60:0A
            X509v3 Authority Key Identifier:
                keyid:5F:B3:0F:54:90:9E:FF:6D:2D:BE:19:0B:77:CC:D7:8B:EA:D1:E9:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X7MPVJCe_20tvhkLd8zXi-rR6d0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/1e7aa3-6add-4f3e-a615-945b267ba502/1/X7MPVJCe_20tvhkLd8zXi-rR6d0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/1e7aa3-6add-4f3e-a615-945b267ba502/1/X7MPVJCe_20tvhkLd8zXi-rR6d0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:93:f6:d7:56:90:51:76:d6:ee:9d:50:a2:37:73:59:7c:7f:
         34:bd:62:99:ed:7c:55:93:e9:f2:0a:87:6c:6e:f7:ba:f6:55:
         8c:79:81:ed:92:5e:99:70:2e:e3:30:c8:3a:58:6b:04:42:d7:
         fe:d8:9e:ae:d9:d6:22:e8:af:7e:47:04:3d:41:8e:3f:2f:e6:
         76:14:e5:4c:40:07:5c:8b:76:df:ae:a2:01:bb:39:f1:08:50:
         bd:43:da:e4:e7:7b:ee:32:e4:c3:4a:03:83:cc:80:c2:57:8e:
         7d:b6:df:35:6d:4e:ce:5b:ab:00:39:ac:b4:9d:d2:5c:d5:f8:
         54:aa:04:8e:25:49:0d:a8:15:bb:a9:59:49:4b:9d:8a:d9:d7:
         95:c5:bf:7c:9e:c8:08:7b:e9:bd:d6:62:19:8b:ba:3c:f2:5c:
         6a:35:4a:07:7a:39:4b:be:47:dd:76:6a:38:d6:64:da:29:fb:
         66:95:dc:52:b0:e9:e8:01:be:c5:f6:cc:f0:4b:36:c0:44:52:
         30:a1:4b:4e:14:cd:86:56:8e:bd:8b:cf:82:81:a7:95:3b:b8:
         66:d3:74:51:f2:35:53:f4:99:6b:b5:14:b7:40:c9:5d:05:4d:
         a8:fc:f0:89:24:f8:75:37:4b:7c:74:d2:e1:82:f7:55:42:1b:
         35:24:18:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYvR///XcPg/KeOU5yelymfGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmYjMwZjU0OTA5ZWZmNmQyZGJlMTkwYjc3Y2NkNzhiZWFk
MWU5ZGQwHhcNMjMxMTE1MDgwMTM3WhcNMjMxMTE2MDgwMTM3WjAzMTEwLwYDVQQD
EyhmNzM0ODg3MTc2MGMyN2NiODYyNmE2Zjc1OGUzYTcxZDQ3ZGI2MDBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtt9PTxp2K1rdrTJLU1O34+E1o65F
1flcRtVV6xVR3MfF98OAHvkni5AWvL1Pg/+ebv4QDaqJdvCMDJeocNR7HWTKbBi0
xswC2EV1n5g1q8BPAGPD0DHmhrIcQDOxihRTfVWCx97NeXSKKFtniNIsnfxkvotb
CWf+z7BGl6NpAzd36iVNFPCX+K6BgPRtlj+S5GJTwGWx/iNQh0Pg/Ps6jeWYvGDt
+S3d5Ol6hS2Ke5Ly6fY5+EO7HTQmQenOF4roe+JDxn0vMe2v44KIHBN4i0epaDaH
BzXXXyEzKQLlKPB4Eskk0TJTJQZXGqia3TWKTbykS3OOa6jDYm/BwPXtzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPc0iHF2DCfLhiam91jjpx1H22AKMB8GA1UdIwQY
MBaAFF+zD1SQnv9tLb4ZC3fM14vq0endMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDdNUFZKQ2VfMjB0dmhrTGQ4elhpLXJSNmQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8xZTdhYTMtNmFkZC00ZjNlLWE2MTUt
OTQ1YjI2N2JhNTAyLzEvWDdNUFZKQ2VfMjB0dmhrTGQ4elhpLXJSNmQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy8xZTdhYTMtNmFkZC00ZjNlLWE2MTUtOTQ1YjI2N2JhNTAy
LzEvWDdNUFZKQ2VfMjB0dmhrTGQ4elhpLXJSNmQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHJP211aQ
UXbW7p1QojdzWXx/NL1ime18VZPp8gqHbG73uvZVjHmB7ZJemXAu4zDIOlhrBELX
/tiertnWIuivfkcEPUGOPy/mdhTlTEAHXIt2366iAbs58QhQvUPa5Od77jLkw0oD
g8yAwleOfbbfNW1OzlurADmstJ3SXNX4VKoEjiVJDagVu6lZSUuditnXlcW/fJ7I
CHvpvdZiGYu6PPJcajVKB3o5S75H3XZqONZk2in7ZpXcUrDp6AG+xfbM8Es2wERS
MKFLThTNhlaOvYvPgoGnlTu4ZtN0UfI1U/SZa7UUt0DJXQVNqPzwiST4dTdLfHTS
4YL3VUIbNSQYQg==
-----END CERTIFICATE-----