Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/361f6d-ae67-4291-afba-05d2aa84d2c0/1/oA4m67RNKklqQvjNhhm_jYbOTtA.mft
File:                     oA4m67RNKklqQvjNhhm_jYbOTtA.mft (raw, json)
Hash identifier:          K73keu6GPiMhN0rc2SsqF2AxK8Kbr5WR9iZh1ZXFrqk=
Subject key identifier:   AA:A0:49:49:4B:37:53:B6:BB:39:D3:1B:44:57:64:66:C0:C7:B5:B1
Authority key identifier: A0:0E:26:EB:B4:4D:2A:49:6A:42:F8:CD:86:19:BF:8D:86:CE:4E:D0
Certificate issuer:       /CN=a00e26ebb44d2a496a42f8cd8619bf8d86ce4ed0
Certificate serial:       01898586F03A22005E4F5EF9E5E77AF8D754
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oA4m67RNKklqQvjNhhm_jYbOTtA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/361f6d-ae67-4291-afba-05d2aa84d2c0/1/oA4m67RNKklqQvjNhhm_jYbOTtA.mft
Manifest number:          0892
Signing time:             Mon 24 Jul 2023 01:32:40 +0000
Manifest this update:     Mon 24 Jul 2023 01:32:40 +0000
Manifest next update:     Tue 25 Jul 2023 01:32:40 +0000
Files and hashes:         1: ZD_FpKjKViUl879tuolvb-XDzO0.roa (hash: XIiyyRUq6mqDvWS83FyRivSsC1buAtOIRwyu1cLCUZc=)
                          2: oA4m67RNKklqQvjNhhm_jYbOTtA.crl (hash: Y6ctNOLxxGLF6mwZtQJqUi+Arg9tvHPelgNg+BBYngI=)
                          3: qg8kWaoBEv0NpRtPVcJahL-7v6I.roa (hash: CXkxcW8NhKUqIo6ZNSVLR9UNbiLKweUWDoOL0tIc3C0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:85:86:f0:3a:22:00:5e:4f:5e:f9:e5:e7:7a:f8:d7:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a00e26ebb44d2a496a42f8cd8619bf8d86ce4ed0
        Validity
            Not Before: Jul 24 01:32:40 2023 GMT
            Not After : Jul 25 01:32:40 2023 GMT
        Subject: CN=aaa049494b3753b6bb39d31b44576466c0c7b5b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:60:8f:44:a5:60:89:90:40:b8:62:f3:fa:bf:
                    12:8a:88:8b:4e:fb:ad:ef:c1:8c:41:a8:2c:8c:c3:
                    af:34:d2:59:ef:20:35:92:1a:72:72:1d:34:90:c7:
                    5e:b6:6e:38:ed:1f:ad:1f:2b:03:1b:68:f5:b7:99:
                    e7:ce:09:7a:3b:1f:b9:0f:5b:58:4a:e0:19:45:66:
                    2f:2e:65:cc:ad:7e:14:da:20:3a:0a:f6:ab:3f:9f:
                    e3:e8:05:bb:1c:03:3e:ed:f8:a2:27:7e:a0:0a:95:
                    a2:09:7d:0d:a7:f1:89:fa:81:79:ed:02:2f:eb:c9:
                    87:47:c3:79:6b:6c:e1:c0:88:89:7c:dd:17:5a:40:
                    a3:20:6e:ba:d6:89:76:a8:ef:93:a6:c2:68:c3:7b:
                    80:5d:04:20:61:1b:8d:81:5b:eb:2e:96:e9:e0:2c:
                    80:e5:2a:38:d7:bd:f8:f2:3f:b7:17:0b:31:90:e0:
                    a4:e2:59:71:3d:e7:20:78:d2:b9:81:e5:92:e2:82:
                    17:21:ca:9f:1e:23:ec:7d:37:0a:34:c3:8a:4f:63:
                    f9:e1:e5:68:22:37:e7:07:65:3f:9d:7e:e9:84:7d:
                    25:6b:f7:d9:a6:ae:61:b1:07:4a:d7:1a:25:35:07:
                    99:a3:ea:ed:55:db:93:59:d9:93:14:9e:bd:29:44:
                    f0:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:A0:49:49:4B:37:53:B6:BB:39:D3:1B:44:57:64:66:C0:C7:B5:B1
            X509v3 Authority Key Identifier:
                keyid:A0:0E:26:EB:B4:4D:2A:49:6A:42:F8:CD:86:19:BF:8D:86:CE:4E:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oA4m67RNKklqQvjNhhm_jYbOTtA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/361f6d-ae67-4291-afba-05d2aa84d2c0/1/oA4m67RNKklqQvjNhhm_jYbOTtA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/361f6d-ae67-4291-afba-05d2aa84d2c0/1/oA4m67RNKklqQvjNhhm_jYbOTtA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:a5:c4:6a:12:1c:d8:98:a4:2d:f9:40:3f:1b:e9:49:22:ac:
         dd:0b:f8:c1:0b:47:4a:96:bb:51:30:75:a7:53:2e:c5:27:f1:
         a0:2b:76:ba:bd:40:4b:0f:ae:bd:5e:4a:c3:07:ec:b4:be:31:
         33:35:65:77:f7:0a:38:42:9f:86:90:92:94:9b:84:a9:68:e2:
         9d:ca:da:da:dd:bb:4a:07:96:b3:2f:2b:28:37:31:cf:ce:e4:
         54:71:cc:03:ef:3f:07:fe:05:a6:c8:c8:68:10:fb:50:d3:f1:
         09:52:7a:69:cc:69:a0:0c:ee:bb:2d:66:84:86:4a:19:95:cb:
         a3:8e:6d:da:41:de:3f:f5:04:9d:87:23:7f:98:c1:74:3b:21:
         6b:13:92:16:91:39:0f:c7:b0:6b:21:bc:79:85:67:e3:61:40:
         41:9d:7e:a5:a7:14:30:c7:1d:01:14:19:c7:1b:d2:ca:89:d8:
         63:62:19:99:a2:ad:6f:20:65:5f:a1:85:2b:8e:e6:3c:88:98:
         ee:0e:7e:84:39:f5:e8:0e:14:03:70:19:60:9d:4f:05:87:84:
         82:86:b1:11:2f:9c:8b:cb:54:94:da:1c:82:ec:c0:39:e8:ec:
         b9:46:75:42:05:aa:fa:9e:6b:39:25:e7:95:ce:aa:12:d6:c3:
         d1:2a:fe:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYmFhvA6IgBeT1755ed6+NdUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwMGUyNmViYjQ0ZDJhNDk2YTQyZjhjZDg2MTliZjhkODZj
ZTRlZDAwHhcNMjMwNzI0MDEzMjQwWhcNMjMwNzI1MDEzMjQwWjAzMTEwLwYDVQQD
EyhhYWEwNDk0OTRiMzc1M2I2YmIzOWQzMWI0NDU3NjQ2NmMwYzdiNWIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmCPRKVgiZBAuGLz+r8SioiLTvut
78GMQagsjMOvNNJZ7yA1khpych00kMdetm447R+tHysDG2j1t5nnzgl6Ox+5D1tY
SuAZRWYvLmXMrX4U2iA6CvarP5/j6AW7HAM+7fiiJ36gCpWiCX0Np/GJ+oF57QIv
68mHR8N5a2zhwIiJfN0XWkCjIG661ol2qO+TpsJow3uAXQQgYRuNgVvrLpbp4CyA
5So417348j+3FwsxkOCk4llxPecgeNK5geWS4oIXIcqfHiPsfTcKNMOKT2P54eVo
IjfnB2U/nX7phH0la/fZpq5hsQdK1xolNQeZo+rtVduTWdmTFJ69KUTwawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKqgSUlLN1O2uznTG0RXZGbAx7WxMB8GA1UdIwQY
MBaAFKAOJuu0TSpJakL4zYYZv42Gzk7QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0E0bTY3Uk5La2xxUXZqTmhobV9qWWJPVHRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8zNjFmNmQtYWU2Ny00MjkxLWFmYmEt
MDVkMmFhODRkMmMwLzEvb0E0bTY3Uk5La2xxUXZqTmhobV9qWWJPVHRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC8zNjFmNmQtYWU2Ny00MjkxLWFmYmEtMDVkMmFhODRkMmMw
LzEvb0E0bTY3Uk5La2xxUXZqTmhobV9qWWJPVHRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHqXEahIc
2JikLflAPxvpSSKs3Qv4wQtHSpa7UTB1p1MuxSfxoCt2ur1ASw+uvV5KwwfstL4x
MzVld/cKOEKfhpCSlJuEqWjincra2t27SgeWsy8rKDcxz87kVHHMA+8/B/4FpsjI
aBD7UNPxCVJ6acxpoAzuuy1mhIZKGZXLo45t2kHeP/UEnYcjf5jBdDshaxOSFpE5
D8ewayG8eYVn42FAQZ1+pacUMMcdARQZxxvSyonYY2IZmaKtbyBlX6GFK47mPIiY
7g5+hDn16A4UA3AZYJ1PBYeEgoaxES+ci8tUlNocguzAOejsuUZ1QgWq+p5rOSXn
lc6qEtbD0Sr+4A==
-----END CERTIFICATE-----