Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/c14eaf-7b9a-4502-b645-2406da244ce8/1/3j8sXyFTDIhzsfrlfddMac-zXc4.mft
File:                     3j8sXyFTDIhzsfrlfddMac-zXc4.mft (raw, json)
Hash identifier:          cEYuVaeDSvkEDykJqDX5EMay7oDqu2An61Aii+Habm4=
Subject key identifier:   3E:12:0B:FE:8C:54:B7:D2:9C:DD:70:83:F7:43:EE:C1:59:3A:97:BA
Authority key identifier: DE:3F:2C:5F:21:53:0C:88:73:B1:FA:E5:7D:D7:4C:69:CF:B3:5D:CE
Certificate issuer:       /CN=de3f2c5f21530c8873b1fae57dd74c69cfb35dce
Certificate serial:       0187E6E2D13CBE4C117B58EA08EB2571E799
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3j8sXyFTDIhzsfrlfddMac-zXc4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/c14eaf-7b9a-4502-b645-2406da244ce8/1/3j8sXyFTDIhzsfrlfddMac-zXc4.mft
Manifest number:          0D64
Signing time:             Thu 04 May 2023 13:10:36 +0000
Manifest this update:     Thu 04 May 2023 13:10:36 +0000
Manifest next update:     Fri 05 May 2023 13:10:36 +0000
Files and hashes:         1: 3j8sXyFTDIhzsfrlfddMac-zXc4.crl (hash: gj4a7q2wkdbaDkfnVPY6eRgBLOW7mqnZFYIpVR9Qjas=)
                          2: TaMEvJt_xkhRmb9JeBVE5gJBD9c.roa (hash: UA7xNc7Ye3b4os5YN5R5NVRCGIGSLEUsvr2dsrWHuqE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:e6:e2:d1:3c:be:4c:11:7b:58:ea:08:eb:25:71:e7:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de3f2c5f21530c8873b1fae57dd74c69cfb35dce
        Validity
            Not Before: May  4 13:10:36 2023 GMT
            Not After : May  5 13:10:36 2023 GMT
        Subject: CN=3e120bfe8c54b7d29cdd7083f743eec1593a97ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:26:0d:a5:c8:a4:09:68:fb:c2:c5:c9:46:80:
                    f4:20:b4:e3:f6:b6:07:92:e0:75:f8:e0:1a:5d:94:
                    a0:e3:8f:90:14:4c:ef:a6:08:5c:8e:bd:36:3f:cd:
                    51:72:ce:5d:94:d9:80:65:7e:ab:9f:2b:f8:7f:5b:
                    3b:26:2f:fe:d6:6b:ca:42:5b:d8:6c:ff:e3:59:15:
                    18:07:41:46:b5:0b:c6:1f:cf:73:0e:f0:76:d6:d1:
                    01:09:50:34:4c:5d:63:b5:f7:e2:e3:01:3b:a6:87:
                    e2:16:cb:2c:cd:01:84:bc:4f:96:f8:84:0d:e4:2c:
                    fa:bf:5e:08:a8:07:cb:5b:9a:54:82:3f:de:75:a9:
                    a1:3b:84:2b:4d:f3:37:d4:1b:99:2c:ab:71:04:c8:
                    7e:19:7a:a2:03:72:3f:c2:bf:6e:cd:4b:ce:a3:d6:
                    da:84:14:9b:a3:7a:1e:e0:19:bd:db:ab:c5:e7:2b:
                    02:87:8a:ae:93:01:3d:c4:ca:cd:ae:24:8d:11:54:
                    71:dd:d4:dc:fe:4f:bc:f3:a7:39:59:cd:4e:43:3d:
                    ef:31:53:6d:66:2d:ea:d8:4c:2b:32:c2:ab:c3:7e:
                    68:3b:4f:2e:fb:23:bc:9a:45:9c:30:72:32:b9:5d:
                    21:9f:d9:42:f2:43:7b:ef:bc:e1:22:da:80:af:7d:
                    e5:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:12:0B:FE:8C:54:B7:D2:9C:DD:70:83:F7:43:EE:C1:59:3A:97:BA
            X509v3 Authority Key Identifier:
                keyid:DE:3F:2C:5F:21:53:0C:88:73:B1:FA:E5:7D:D7:4C:69:CF:B3:5D:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3j8sXyFTDIhzsfrlfddMac-zXc4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/c14eaf-7b9a-4502-b645-2406da244ce8/1/3j8sXyFTDIhzsfrlfddMac-zXc4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/c14eaf-7b9a-4502-b645-2406da244ce8/1/3j8sXyFTDIhzsfrlfddMac-zXc4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:4f:e4:d3:78:7a:35:c1:bb:a9:51:c8:22:e2:1d:16:41:46:
         46:1e:7c:98:bf:77:a0:83:c8:27:3d:c9:0e:a0:a1:85:49:0e:
         3b:b1:49:f9:e4:7c:77:63:dc:f0:6f:83:d6:4e:f5:19:ee:8e:
         05:8e:b2:f1:69:10:ff:76:e2:aa:93:ae:fa:3c:06:97:9b:2d:
         2e:97:4c:04:0f:69:27:98:36:27:d9:18:3a:ff:b4:b9:da:e5:
         5b:89:b1:78:58:e7:61:8b:7d:45:ae:10:ff:c3:b9:93:e2:bf:
         1a:0d:d0:4d:30:1a:11:df:4f:6e:13:99:73:1b:db:87:c9:75:
         8c:2d:50:2d:c3:15:ac:fd:37:ea:7d:ab:1b:e2:ab:aa:d8:5a:
         83:95:e3:fd:e7:bd:62:3d:0a:e0:ba:85:c1:a8:0b:95:09:8f:
         58:d6:1b:65:2c:f2:7f:dc:b8:f2:95:1b:48:d9:ba:ed:65:eb:
         2a:4a:e3:8a:7e:ac:cf:bd:b0:3a:02:a8:90:04:e9:67:0f:4c:
         db:e6:1e:02:54:5d:98:85:e3:f8:ad:c6:3c:5e:c1:7a:2f:78:
         8f:8e:32:0e:ce:35:70:76:dd:ac:83:30:fb:cd:71:09:2a:c7:
         86:9a:65:4a:cb:f1:99:17:4d:8e:e4:39:b7:d7:db:9a:a9:00:
         50:bf:ce:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYfm4tE8vkwRe1jqCOslceeZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlM2YyYzVmMjE1MzBjODg3M2IxZmFlNTdkZDc0YzY5Y2Zi
MzVkY2UwHhcNMjMwNTA0MTMxMDM2WhcNMjMwNTA1MTMxMDM2WjAzMTEwLwYDVQQD
EygzZTEyMGJmZThjNTRiN2QyOWNkZDcwODNmNzQzZWVjMTU5M2E5N2JhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyYNpcikCWj7wsXJRoD0ILTj9rYH
kuB1+OAaXZSg44+QFEzvpghcjr02P81Rcs5dlNmAZX6rnyv4f1s7Ji/+1mvKQlvY
bP/jWRUYB0FGtQvGH89zDvB21tEBCVA0TF1jtffi4wE7pofiFssszQGEvE+W+IQN
5Cz6v14IqAfLW5pUgj/edamhO4QrTfM31BuZLKtxBMh+GXqiA3I/wr9uzUvOo9ba
hBSbo3oe4Bm926vF5ysCh4qukwE9xMrNriSNEVRx3dTc/k+886c5Wc1OQz3vMVNt
Zi3q2EwrMsKrw35oO08u+yO8mkWcMHIyuV0hn9lC8kN777zhItqAr33l8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD4SC/6MVLfSnN1wg/dD7sFZOpe6MB8GA1UdIwQY
MBaAFN4/LF8hUwyIc7H65X3XTGnPs13OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2o4c1h5RlRESWh6c2ZybGZkZE1hYy16WGM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9jMTRlYWYtN2I5YS00NTAyLWI2NDUt
MjQwNmRhMjQ0Y2U4LzEvM2o4c1h5RlRESWh6c2ZybGZkZE1hYy16WGM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS9jMTRlYWYtN2I5YS00NTAyLWI2NDUtMjQwNmRhMjQ0Y2U4
LzEvM2o4c1h5RlRESWh6c2ZybGZkZE1hYy16WGM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe0/k03h6
NcG7qVHIIuIdFkFGRh58mL93oIPIJz3JDqChhUkOO7FJ+eR8d2Pc8G+D1k71Ge6O
BY6y8WkQ/3biqpOu+jwGl5stLpdMBA9pJ5g2J9kYOv+0udrlW4mxeFjnYYt9Ra4Q
/8O5k+K/Gg3QTTAaEd9PbhOZcxvbh8l1jC1QLcMVrP036n2rG+Krqthag5Xj/ee9
Yj0K4LqFwagLlQmPWNYbZSzyf9y48pUbSNm67WXrKkrjin6sz72wOgKokATpZw9M
2+YeAlRdmIXj+K3GPF7Bei94j44yDs41cHbdrIMw+81xCSrHhpplSsvxmRdNjuQ5
t9fbmqkAUL/ONA==
-----END CERTIFICATE-----