Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/f301cd-9f4e-4113-a5fc-66018f715b03/1/nTFcvKZU2A-y8mkl1afk4Y5ajbo.mft
File:                     nTFcvKZU2A-y8mkl1afk4Y5ajbo.mft (raw, json)
Hash identifier:          ewibCxmOa34p8irP+3PibcSjc9YWfqPt9tkEP1J5Df4=
Subject key identifier:   A8:48:71:1C:B3:67:EB:47:49:F3:2D:82:B6:57:53:99:61:29:8C:85
Authority key identifier: 9D:31:5C:BC:A6:54:D8:0F:B2:F2:69:25:D5:A7:E4:E1:8E:5A:8D:BA
Certificate issuer:       /CN=9d315cbca654d80fb2f26925d5a7e4e18e5a8dba
Certificate serial:       01886D2BAF0A0842B619C5CEB7B82651AB70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nTFcvKZU2A-y8mkl1afk4Y5ajbo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/f301cd-9f4e-4113-a5fc-66018f715b03/1/nTFcvKZU2A-y8mkl1afk4Y5ajbo.mft
Manifest number:          09E5
Signing time:             Tue 30 May 2023 14:59:19 +0000
Manifest this update:     Tue 30 May 2023 14:59:19 +0000
Manifest next update:     Wed 31 May 2023 14:59:19 +0000
Files and hashes:         1: XDiJECzEHjRnDcrQstMV6emnUd4.roa (hash: 5IPJilnsoXdd7y4eetYMzbCcCplMGPGoG2922EbZZeU=)
                          2: nTFcvKZU2A-y8mkl1afk4Y5ajbo.crl (hash: p/PVEBKSG3InoO1nsBV3sY4wS8u70Rqkng0f1BEjOdU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:6d:2b:af:0a:08:42:b6:19:c5:ce:b7:b8:26:51:ab:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d315cbca654d80fb2f26925d5a7e4e18e5a8dba
        Validity
            Not Before: May 30 14:59:19 2023 GMT
            Not After : May 31 14:59:19 2023 GMT
        Subject: CN=a848711cb367eb4749f32d82b657539961298c85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:41:e9:0a:d6:0b:f7:17:6a:65:2d:88:b7:7f:
                    84:c5:64:5a:86:2e:46:ad:94:d0:5f:3e:5a:79:b3:
                    7a:4d:a0:8a:79:6e:7f:78:5e:10:58:4b:eb:60:45:
                    a8:c5:56:6a:6a:39:b8:a4:a3:1e:39:c8:8a:a3:cb:
                    73:ae:f2:f2:4d:29:ca:d0:34:b0:5c:09:55:38:a7:
                    34:30:1d:96:d6:60:8a:96:12:a0:2b:7e:00:a9:e2:
                    e3:2f:a8:cd:59:83:80:1b:91:ae:7f:75:01:3d:25:
                    9a:fb:31:0f:36:ff:a6:b8:bd:d1:02:e9:e6:1d:d2:
                    9c:7b:3e:25:24:49:b7:64:87:73:0a:82:80:63:e2:
                    88:7c:b5:99:5c:d5:e4:1f:2c:8c:95:81:63:75:29:
                    9d:f4:f5:9b:72:b1:6f:a6:2f:2a:41:a8:45:96:87:
                    f7:15:6c:22:67:29:b3:22:5c:d4:03:9c:9b:54:23:
                    dd:9a:67:d6:8a:24:26:08:39:8a:4a:78:b3:53:4d:
                    71:7e:7a:ee:5a:ac:00:04:c9:20:07:82:f8:11:4b:
                    0c:73:79:df:cf:f5:c8:90:d0:d6:4c:55:17:8c:70:
                    fd:62:23:49:10:0a:64:1e:44:6b:85:bd:af:ec:3f:
                    1d:5b:5d:00:34:d6:7e:98:5a:dd:f9:89:7d:c1:55:
                    1f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:48:71:1C:B3:67:EB:47:49:F3:2D:82:B6:57:53:99:61:29:8C:85
            X509v3 Authority Key Identifier:
                keyid:9D:31:5C:BC:A6:54:D8:0F:B2:F2:69:25:D5:A7:E4:E1:8E:5A:8D:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nTFcvKZU2A-y8mkl1afk4Y5ajbo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/f301cd-9f4e-4113-a5fc-66018f715b03/1/nTFcvKZU2A-y8mkl1afk4Y5ajbo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/f301cd-9f4e-4113-a5fc-66018f715b03/1/nTFcvKZU2A-y8mkl1afk4Y5ajbo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:38:e3:14:9d:22:58:28:65:b6:f8:59:eb:e4:e5:32:a7:5f:
         89:bd:5b:c1:97:81:1b:11:e9:f7:2b:99:1f:2d:aa:23:a4:dc:
         6d:94:a4:af:a1:a1:d1:c6:fe:6a:30:13:26:3a:eb:63:a3:39:
         d4:29:2d:7b:a2:b3:db:19:e4:cb:24:b9:58:47:7a:dd:2e:e1:
         12:b9:d8:c6:b4:84:5f:89:30:56:0f:c7:0d:27:da:85:2c:c1:
         a1:c8:b7:86:04:20:dd:34:8b:91:d8:4d:c6:e0:d6:06:58:8a:
         4c:68:86:23:3a:47:62:78:56:04:99:7c:27:2a:b9:c5:8b:94:
         4d:07:ee:9e:b2:f9:46:31:25:19:d4:0f:87:b1:aa:b2:8a:41:
         d2:f7:8b:37:63:92:65:20:64:48:f9:c8:e1:fd:5e:3c:10:bc:
         f2:7e:fc:a8:72:a6:83:1e:e1:92:7c:d5:48:26:d9:c8:99:5b:
         8f:27:fd:07:bd:4d:ab:3f:82:e0:9a:60:80:57:2d:cd:43:3a:
         6e:32:14:f8:66:5f:1a:35:a4:e1:45:56:0b:a6:0e:33:0f:0b:
         c4:17:e6:53:e7:03:09:c5:dc:01:29:d6:65:ec:63:44:41:25:
         e1:2c:29:78:07:84:f6:d5:f7:80:1c:78:b6:ce:40:db:f1:dd:
         50:1d:c4:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYhtK68KCEK2GcXOt7gmUatwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMzE1Y2JjYTY1NGQ4MGZiMmYyNjkyNWQ1YTdlNGUxOGU1
YThkYmEwHhcNMjMwNTMwMTQ1OTE5WhcNMjMwNTMxMTQ1OTE5WjAzMTEwLwYDVQQD
EyhhODQ4NzExY2IzNjdlYjQ3NDlmMzJkODJiNjU3NTM5OTYxMjk4Yzg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0HpCtYL9xdqZS2It3+ExWRahi5G
rZTQXz5aebN6TaCKeW5/eF4QWEvrYEWoxVZqajm4pKMeOciKo8tzrvLyTSnK0DSw
XAlVOKc0MB2W1mCKlhKgK34AqeLjL6jNWYOAG5Guf3UBPSWa+zEPNv+muL3RAunm
HdKcez4lJEm3ZIdzCoKAY+KIfLWZXNXkHyyMlYFjdSmd9PWbcrFvpi8qQahFlof3
FWwiZymzIlzUA5ybVCPdmmfWiiQmCDmKSnizU01xfnruWqwABMkgB4L4EUsMc3nf
z/XIkNDWTFUXjHD9YiNJEApkHkRrhb2v7D8dW10ANNZ+mFrd+Yl9wVUf/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKhIcRyzZ+tHSfMtgrZXU5lhKYyFMB8GA1UdIwQY
MBaAFJ0xXLymVNgPsvJpJdWn5OGOWo26MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblRGY3ZLWlUyQS15OG1rbDFhZms0WTVhamJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mMzAxY2QtOWY0ZS00MTEzLWE1ZmMt
NjYwMThmNzE1YjAzLzEvblRGY3ZLWlUyQS15OG1rbDFhZms0WTVhamJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9mMzAxY2QtOWY0ZS00MTEzLWE1ZmMtNjYwMThmNzE1YjAz
LzEvblRGY3ZLWlUyQS15OG1rbDFhZms0WTVhamJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAITjjFJ0i
WChltvhZ6+TlMqdfib1bwZeBGxHp9yuZHy2qI6TcbZSkr6Gh0cb+ajATJjrrY6M5
1Ckte6Kz2xnkyyS5WEd63S7hErnYxrSEX4kwVg/HDSfahSzBoci3hgQg3TSLkdhN
xuDWBliKTGiGIzpHYnhWBJl8Jyq5xYuUTQfunrL5RjElGdQPh7GqsopB0veLN2OS
ZSBkSPnI4f1ePBC88n78qHKmgx7hknzVSCbZyJlbjyf9B71Nqz+C4JpggFctzUM6
bjIU+GZfGjWk4UVWC6YOMw8LxBfmU+cDCcXcASnWZexjREEl4SwpeAeE9tX3gBx4
ts5A2/HdUB3EoA==
-----END CERTIFICATE-----