Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/40f481-8130-4096-bf6a-25f9c1de04dd/1/Ds9gDzMRlE3EFJ9pPbV3NakpLIY.mft
File:                     Ds9gDzMRlE3EFJ9pPbV3NakpLIY.mft (raw, json)
Hash identifier:          +KXRDr5imiS2xpHW8XazAMEg09EH/YCcjnbP/jLb5jM=
Subject key identifier:   74:25:FC:44:BA:EC:CB:14:81:D5:A5:E1:CC:6F:1B:B9:E7:A0:CC:B9
Authority key identifier: 0E:CF:60:0F:33:11:94:4D:C4:14:9F:69:3D:B5:77:35:A9:29:2C:86
Certificate issuer:       /CN=0ecf600f3311944dc4149f693db57735a9292c86
Certificate serial:       01886FFA81288975F6CFA2AC8BDEBD334660
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ds9gDzMRlE3EFJ9pPbV3NakpLIY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/40f481-8130-4096-bf6a-25f9c1de04dd/1/Ds9gDzMRlE3EFJ9pPbV3NakpLIY.mft
Manifest number:          0D3D
Signing time:             Wed 31 May 2023 04:04:27 +0000
Manifest this update:     Wed 31 May 2023 04:04:27 +0000
Manifest next update:     Thu 01 Jun 2023 04:04:27 +0000
Files and hashes:         1: Ds9gDzMRlE3EFJ9pPbV3NakpLIY.crl (hash: JVrSCa/g5fnEHLTNvlrqj8kw2TAB9unS1Y3B5WbPs9w=)
                          2: fxu6-s3_-quXC93sMSxWZMBS_Uw.roa (hash: CWmU5HJd+avLgwhtNy8p5M6eMXHmlrlJQJ39iibZKA4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:6f:fa:81:28:89:75:f6:cf:a2:ac:8b:de:bd:33:46:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ecf600f3311944dc4149f693db57735a9292c86
        Validity
            Not Before: May 31 04:04:27 2023 GMT
            Not After : Jun  1 04:04:27 2023 GMT
        Subject: CN=7425fc44baeccb1481d5a5e1cc6f1bb9e7a0ccb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:95:d4:37:49:97:27:5c:cf:c7:d9:c0:a1:6f:
                    31:44:c0:c0:dc:11:10:3a:06:ff:34:77:3d:6c:04:
                    f1:38:87:d3:96:8f:b7:55:f6:f5:7d:70:e0:d7:32:
                    db:c4:71:ac:9d:8e:46:1c:73:8d:a4:c0:b6:fb:b1:
                    f4:24:c2:f2:2e:6a:91:54:48:8e:3e:7d:6e:26:dc:
                    3f:31:79:51:be:63:bc:1a:ca:c9:38:9b:bb:4e:b7:
                    e3:2a:73:57:19:ec:bc:bb:4e:0e:c9:39:8f:61:9b:
                    25:54:99:7a:84:68:31:f2:37:46:dc:63:a8:1b:e5:
                    b9:02:22:a3:ae:7b:72:e7:5e:c6:be:fb:29:1c:df:
                    c0:73:7c:8d:60:bc:bf:a0:18:45:bc:b1:ac:6e:7a:
                    a5:5f:45:0c:b4:fb:c3:52:fc:4d:ea:9b:9c:e9:8f:
                    e9:1e:fd:0a:58:db:9b:17:04:73:71:f7:33:b0:03:
                    00:63:1f:9a:27:51:3d:2d:59:e7:62:ad:b0:e0:9b:
                    82:20:ae:f2:7d:c8:e1:b6:19:4e:d1:f3:9c:80:49:
                    42:ac:6d:38:8f:8f:fc:85:9d:c4:43:39:17:53:e1:
                    43:24:dd:b1:90:95:80:f1:2a:e2:b0:11:a5:1d:b2:
                    6b:f6:f8:01:83:3b:77:16:b3:51:ba:92:5e:58:c1:
                    4b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:25:FC:44:BA:EC:CB:14:81:D5:A5:E1:CC:6F:1B:B9:E7:A0:CC:B9
            X509v3 Authority Key Identifier:
                keyid:0E:CF:60:0F:33:11:94:4D:C4:14:9F:69:3D:B5:77:35:A9:29:2C:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ds9gDzMRlE3EFJ9pPbV3NakpLIY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/40f481-8130-4096-bf6a-25f9c1de04dd/1/Ds9gDzMRlE3EFJ9pPbV3NakpLIY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/40f481-8130-4096-bf6a-25f9c1de04dd/1/Ds9gDzMRlE3EFJ9pPbV3NakpLIY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:db:76:4d:04:29:f2:c3:9f:50:6b:bc:e8:56:f7:af:a3:cb:
         6c:fd:38:09:f0:39:5e:ed:c3:16:9f:9d:cc:9f:65:e8:1e:dc:
         e5:fb:ef:f3:ba:d6:31:f5:6c:f5:2e:13:41:29:8e:d9:f6:fb:
         05:7d:e8:ef:7e:04:6f:cb:31:0c:77:15:4d:15:75:46:00:c7:
         22:ab:c4:b2:b9:b4:f8:af:22:39:ac:53:02:b2:39:4f:7f:8d:
         f2:f8:61:2a:46:01:ae:7a:17:97:d8:d0:f8:f1:92:93:93:d2:
         0f:da:7b:ee:18:16:0b:54:2d:f4:d5:66:02:c0:2b:08:db:81:
         27:4a:56:46:0c:91:6d:38:64:13:83:85:fe:09:61:24:9a:49:
         9a:58:3b:3a:a0:3a:59:e8:31:b4:4c:f0:14:77:82:af:0a:85:
         f5:0b:87:db:55:3d:67:44:c9:33:26:86:37:1b:2d:34:47:c9:
         b3:f8:47:4f:4b:bf:28:e2:26:9f:56:97:cc:cb:33:78:67:2b:
         06:9b:20:b6:65:4f:55:2f:4b:52:53:fd:56:1a:60:8c:c9:5a:
         69:6b:02:dc:fc:f8:f3:48:ba:b4:db:26:0c:7f:70:a0:f4:d9:
         8b:4a:22:c3:be:f0:de:cc:8d:e5:2a:49:cb:4a:8e:70:e1:a6:
         4a:9f:e0:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYhv+oEoiXX2z6Ksi969M0ZgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlY2Y2MDBmMzMxMTk0NGRjNDE0OWY2OTNkYjU3NzM1YTky
OTJjODYwHhcNMjMwNTMxMDQwNDI3WhcNMjMwNjAxMDQwNDI3WjAzMTEwLwYDVQQD
Eyg3NDI1ZmM0NGJhZWNjYjE0ODFkNWE1ZTFjYzZmMWJiOWU3YTBjY2I5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJXUN0mXJ1zPx9nAoW8xRMDA3BEQ
Ogb/NHc9bATxOIfTlo+3Vfb1fXDg1zLbxHGsnY5GHHONpMC2+7H0JMLyLmqRVEiO
Pn1uJtw/MXlRvmO8GsrJOJu7TrfjKnNXGey8u04OyTmPYZslVJl6hGgx8jdG3GOo
G+W5AiKjrnty517GvvspHN/Ac3yNYLy/oBhFvLGsbnqlX0UMtPvDUvxN6puc6Y/p
Hv0KWNubFwRzcfczsAMAYx+aJ1E9LVnnYq2w4JuCIK7yfcjhthlO0fOcgElCrG04
j4/8hZ3EQzkXU+FDJN2xkJWA8SrisBGlHbJr9vgBgzt3FrNRupJeWMFLaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHQl/ES67MsUgdWl4cxvG7nnoMy5MB8GA1UdIwQY
MBaAFA7PYA8zEZRNxBSfaT21dzWpKSyGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHM5Z0R6TVJsRTNFRko5cFBiVjNOYWtwTElZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi80MGY0ODEtODEzMC00MDk2LWJmNmEt
MjVmOWMxZGUwNGRkLzEvRHM5Z0R6TVJsRTNFRko5cFBiVjNOYWtwTElZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi80MGY0ODEtODEzMC00MDk2LWJmNmEtMjVmOWMxZGUwNGRk
LzEvRHM5Z0R6TVJsRTNFRko5cFBiVjNOYWtwTElZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFtt2TQQp
8sOfUGu86Fb3r6PLbP04CfA5Xu3DFp+dzJ9l6B7c5fvv87rWMfVs9S4TQSmO2fb7
BX3o734Eb8sxDHcVTRV1RgDHIqvEsrm0+K8iOaxTArI5T3+N8vhhKkYBrnoXl9jQ
+PGSk5PSD9p77hgWC1Qt9NVmAsArCNuBJ0pWRgyRbThkE4OF/glhJJpJmlg7OqA6
WegxtEzwFHeCrwqF9QuH21U9Z0TJMyaGNxstNEfJs/hHT0u/KOImn1aXzMszeGcr
BpsgtmVPVS9LUlP9VhpgjMlaaWsC3Pz480i6tNsmDH9woPTZi0oiw77w3syN5SpJ
y0qOcOGmSp/g4w==
-----END CERTIFICATE-----