Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/4c0417-dcb0-4add-a265-d8da1fe4b080/1/KYB0rUMEdldNhtLVbFT3a-Koahc.mft
File:                     KYB0rUMEdldNhtLVbFT3a-Koahc.mft (raw, json)
Hash identifier:          cLujW2TmDhjBc2utHGVDClx23xZhKQatOytJ1dI4k8E=
Subject key identifier:   F0:06:42:DC:E3:CD:F2:E3:6A:4D:56:2C:E0:2F:EA:E2:92:25:21:56
Authority key identifier: 29:80:74:AD:43:04:76:57:4D:86:D2:D5:6C:54:F7:6B:E2:A8:6A:17
Certificate issuer:       /CN=298074ad430476574d86d2d56c54f76be2a86a17
Certificate serial:       018C57ADE057B4F2122FA26896644DA24522
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KYB0rUMEdldNhtLVbFT3a-Koahc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/4c0417-dcb0-4add-a265-d8da1fe4b080/1/KYB0rUMEdldNhtLVbFT3a-Koahc.mft
Manifest number:          0AAF
Signing time:             Mon 11 Dec 2023 07:01:01 +0000
Manifest this update:     Mon 11 Dec 2023 07:01:01 +0000
Manifest next update:     Tue 12 Dec 2023 07:01:01 +0000
Files and hashes:         1: 2NObW5VGSlzYcasrYrPZtig282Q.roa (hash: jvQHVAuaZWF1IXUovly7TsCtvwRQ+OlFzRy9K14zk1Q=)
                          2: KYB0rUMEdldNhtLVbFT3a-Koahc.crl (hash: wYKsRSHDld9gf6/vKXOD9RwqwzK5QpYKLniZaWQKEGE=)
                          3: mhFQHeTPyN09ufnL2pkXsJ2I2rA.roa (hash: VLFxBVYxp7Sjt4e5KS5Y0+TAnS3A1Jl96w3StbYusSM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:57:ad:e0:57:b4:f2:12:2f:a2:68:96:64:4d:a2:45:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=298074ad430476574d86d2d56c54f76be2a86a17
        Validity
            Not Before: Dec 11 07:01:01 2023 GMT
            Not After : Dec 12 07:01:01 2023 GMT
        Subject: CN=f00642dce3cdf2e36a4d562ce02feae292252156
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:5a:d2:20:de:f7:00:43:13:05:91:cc:86:8e:
                    aa:b9:d4:b9:21:79:9e:cd:e7:fd:7f:76:93:86:95:
                    ba:81:47:34:83:23:d4:4a:87:1d:e8:46:91:d4:d0:
                    58:ab:47:19:c8:cd:b4:c2:f9:fe:90:3f:d5:7d:54:
                    f9:fa:d5:58:94:1f:b2:85:4c:85:c4:99:8f:d7:6a:
                    6f:6e:98:dc:ea:78:2e:03:e9:55:60:ac:55:58:80:
                    0d:2e:bd:d6:80:8b:72:85:42:de:1f:46:7a:b5:ff:
                    e0:0e:21:0c:e2:f0:18:29:64:21:5b:2c:51:58:8b:
                    d3:11:d3:4b:47:2a:50:28:68:dd:e5:1b:bb:38:f4:
                    5e:8d:fd:b5:70:83:ac:16:54:fb:c4:f5:6f:f4:62:
                    d0:08:93:39:d5:0b:e7:43:78:bc:26:9d:f8:ca:8b:
                    de:a9:be:11:5a:53:04:19:24:00:11:94:5a:27:89:
                    e4:d8:20:0d:a7:11:00:1b:14:e6:88:92:fc:c1:b1:
                    56:ec:9f:b1:6b:fa:98:8d:cb:dc:b0:9d:35:32:62:
                    72:42:fb:27:06:d1:74:4f:4d:f8:ed:4e:26:33:4c:
                    96:6c:a2:1d:39:0c:29:0e:ec:6e:cc:2c:8f:56:f2:
                    92:64:db:33:3d:a9:06:72:10:ca:8b:95:34:3d:a7:
                    dd:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:06:42:DC:E3:CD:F2:E3:6A:4D:56:2C:E0:2F:EA:E2:92:25:21:56
            X509v3 Authority Key Identifier:
                keyid:29:80:74:AD:43:04:76:57:4D:86:D2:D5:6C:54:F7:6B:E2:A8:6A:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYB0rUMEdldNhtLVbFT3a-Koahc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4c0417-dcb0-4add-a265-d8da1fe4b080/1/KYB0rUMEdldNhtLVbFT3a-Koahc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4c0417-dcb0-4add-a265-d8da1fe4b080/1/KYB0rUMEdldNhtLVbFT3a-Koahc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:00:63:be:00:bf:1c:10:a2:a1:4c:d2:2f:59:0e:4f:af:c9:
         ce:08:89:a6:e7:33:64:23:b7:38:96:8e:ee:6c:6e:6e:d5:b4:
         af:8e:f8:be:df:59:24:da:be:f4:7b:18:5c:cc:d6:2d:fa:3c:
         0c:8b:05:8b:22:da:e0:f1:5d:d0:92:8d:7d:96:3b:b8:bf:ad:
         11:04:c4:34:40:50:1a:2f:6a:a2:a1:4c:eb:29:3c:d3:7a:32:
         c9:2f:e5:da:f8:54:58:0d:98:63:53:fc:d6:4d:b7:00:4a:a0:
         d6:85:79:f0:f1:b9:70:6e:5c:b6:e4:8d:a1:ae:0f:0c:34:20:
         72:78:04:a1:22:37:05:ae:f2:a5:cc:7c:cf:fa:e8:42:05:36:
         9c:fa:64:46:ae:cf:37:ac:6f:cb:92:92:12:7a:ec:00:47:3e:
         08:67:fc:ae:86:8a:83:33:a8:d8:77:c2:16:ed:3a:c7:62:a2:
         9f:b1:34:07:02:ea:0a:1c:41:47:57:31:44:b3:8a:15:00:cc:
         85:e3:ae:2b:43:6c:df:96:0d:8f:74:bc:5a:8b:9c:cf:8f:01:
         5c:3d:ee:6b:6f:d4:e9:41:45:c1:22:d2:e9:fb:5d:43:c2:6f:
         e9:8c:e0:93:e4:95:f0:23:fb:34:ac:b1:73:ce:b7:c0:06:87:
         0d:be:c4:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYxXreBXtPISL6JolmRNokUiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ODA3NGFkNDMwNDc2NTc0ZDg2ZDJkNTZjNTRmNzZiZTJh
ODZhMTcwHhcNMjMxMjExMDcwMTAxWhcNMjMxMjEyMDcwMTAxWjAzMTEwLwYDVQQD
EyhmMDA2NDJkY2UzY2RmMmUzNmE0ZDU2MmNlMDJmZWFlMjkyMjUyMTU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVrSIN73AEMTBZHMho6qudS5IXme
zef9f3aThpW6gUc0gyPUSocd6EaR1NBYq0cZyM20wvn+kD/VfVT5+tVYlB+yhUyF
xJmP12pvbpjc6nguA+lVYKxVWIANLr3WgItyhULeH0Z6tf/gDiEM4vAYKWQhWyxR
WIvTEdNLRypQKGjd5Ru7OPRejf21cIOsFlT7xPVv9GLQCJM51QvnQ3i8Jp34yove
qb4RWlMEGSQAEZRaJ4nk2CANpxEAGxTmiJL8wbFW7J+xa/qYjcvcsJ01MmJyQvsn
BtF0T0347U4mM0yWbKIdOQwpDuxuzCyPVvKSZNszPakGchDKi5U0PafdKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPAGQtzjzfLjak1WLOAv6uKSJSFWMB8GA1UdIwQY
MBaAFCmAdK1DBHZXTYbS1WxU92viqGoXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1lCMHJVTUVkbGROaHRMVmJGVDNhLUtvYWhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80YzA0MTctZGNiMC00YWRkLWEyNjUt
ZDhkYTFmZTRiMDgwLzEvS1lCMHJVTUVkbGROaHRMVmJGVDNhLUtvYWhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC80YzA0MTctZGNiMC00YWRkLWEyNjUtZDhkYTFmZTRiMDgw
LzEvS1lCMHJVTUVkbGROaHRMVmJGVDNhLUtvYWhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmABjvgC/
HBCioUzSL1kOT6/JzgiJpuczZCO3OJaO7mxubtW0r474vt9ZJNq+9HsYXMzWLfo8
DIsFiyLa4PFd0JKNfZY7uL+tEQTENEBQGi9qoqFM6yk803oyyS/l2vhUWA2YY1P8
1k23AEqg1oV58PG5cG5ctuSNoa4PDDQgcngEoSI3Ba7ypcx8z/roQgU2nPpkRq7P
N6xvy5KSEnrsAEc+CGf8roaKgzOo2HfCFu06x2Kin7E0BwLqChxBR1cxRLOKFQDM
heOuK0Ns35YNj3S8Woucz48BXD3ua2/U6UFFwSLS6ftdQ8Jv6Yzgk+SV8CP7NKyx
c863wAaHDb7ECA==
-----END CERTIFICATE-----