Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/9cceef-c1da-467b-af24-49797b889454/1/H23HEQLs51bB2axPy_xPK9hHckw.mft
File:                     H23HEQLs51bB2axPy_xPK9hHckw.mft (raw, json)
Hash identifier:          TxL6mL3j8R6QRavxWTaDQS8fJXsO1wRosvViSCy3I1k=
Subject key identifier:   76:E4:91:7E:63:82:14:16:B4:91:1C:C1:6A:CF:19:65:DF:5C:7A:7D
Authority key identifier: 1F:6D:C7:11:02:EC:E7:56:C1:D9:AC:4F:CB:FC:4F:2B:D8:47:72:4C
Certificate issuer:       /CN=1f6dc71102ece756c1d9ac4fcbfc4f2bd847724c
Certificate serial:       0189D7CEC4AA78536D32CA82C66B0AB498F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H23HEQLs51bB2axPy_xPK9hHckw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/9cceef-c1da-467b-af24-49797b889454/1/H23HEQLs51bB2axPy_xPK9hHckw.mft
Manifest number:          07B6
Signing time:             Wed 09 Aug 2023 00:59:59 +0000
Manifest this update:     Wed 09 Aug 2023 00:59:59 +0000
Manifest next update:     Thu 10 Aug 2023 00:59:59 +0000
Files and hashes:         1: H23HEQLs51bB2axPy_xPK9hHckw.crl (hash: jMiNsJYHYvZDesrDOzwDigaYt7ZBRe/SptEAMguYiJY=)
                          2: MI5roXHKfRvuPKIEH7bAivjHJPk.roa (hash: 0DjO9ZDGgLFlxV+uY6SKRA6mLfzVI55OErEVg/NTR3s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:d7:ce:c4:aa:78:53:6d:32:ca:82:c6:6b:0a:b4:98:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f6dc71102ece756c1d9ac4fcbfc4f2bd847724c
        Validity
            Not Before: Aug  9 00:59:59 2023 GMT
            Not After : Aug 10 00:59:59 2023 GMT
        Subject: CN=76e4917e63821416b4911cc16acf1965df5c7a7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:18:28:ec:78:b4:04:ff:9d:4e:26:ed:d4:8d:
                    6b:3d:0c:72:30:af:75:42:4e:0c:9d:ac:29:53:9c:
                    99:f9:25:16:05:43:13:e4:12:61:cc:e2:08:d0:69:
                    0d:1b:48:73:de:b4:4d:69:97:4b:6a:88:c9:2d:c6:
                    f4:d3:4e:8d:b1:4f:c5:53:b3:20:d4:56:dc:7e:3a:
                    23:fe:b2:ee:81:08:f1:36:28:11:86:9e:20:fa:d4:
                    f2:b3:13:2e:a9:d9:66:1c:a7:e2:11:41:f7:6e:f0:
                    b2:2c:87:e5:a0:ff:6f:dd:44:52:ff:17:d8:86:fc:
                    bb:5e:a9:0e:38:d5:87:6f:47:76:41:8a:9a:9e:dd:
                    81:04:60:4f:5a:14:26:ea:be:45:e7:4a:ad:92:8d:
                    d0:61:32:51:33:a2:89:5d:01:f9:8f:53:73:93:18:
                    36:2d:c7:60:0d:0e:e9:08:2b:d9:27:29:11:d7:58:
                    de:1a:67:13:a0:07:ec:17:51:a3:b4:4c:ff:a8:11:
                    f6:0f:6e:25:8a:7d:c0:0d:f7:11:07:a6:70:52:af:
                    34:57:04:c9:79:8b:e8:1c:f4:4c:bc:8e:16:36:d3:
                    31:c1:5b:7e:ac:0f:a3:1f:5f:e6:2b:df:0f:12:e8:
                    07:19:a3:26:6c:2a:cd:a7:74:48:6e:84:24:db:cd:
                    15:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:E4:91:7E:63:82:14:16:B4:91:1C:C1:6A:CF:19:65:DF:5C:7A:7D
            X509v3 Authority Key Identifier:
                keyid:1F:6D:C7:11:02:EC:E7:56:C1:D9:AC:4F:CB:FC:4F:2B:D8:47:72:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H23HEQLs51bB2axPy_xPK9hHckw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9cceef-c1da-467b-af24-49797b889454/1/H23HEQLs51bB2axPy_xPK9hHckw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9cceef-c1da-467b-af24-49797b889454/1/H23HEQLs51bB2axPy_xPK9hHckw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:54:d9:09:91:6e:2e:89:6b:10:8a:72:31:78:23:59:79:88:
         cb:53:44:40:5f:e3:d6:b0:90:b3:c4:03:12:dc:12:2b:bc:d9:
         fa:c8:9d:8d:fd:22:73:24:ab:fb:b0:5c:95:8d:17:67:24:71:
         c0:25:0d:83:8c:42:a9:15:36:b4:66:93:44:9d:a5:1a:36:77:
         8f:d0:ca:98:77:e5:f9:62:d2:e6:b6:97:21:4e:d5:3e:67:a9:
         87:ab:db:b1:bb:b7:6a:e6:9e:4a:56:fa:9b:b8:ca:c0:84:a8:
         f6:dc:ee:02:dd:cd:57:6c:f7:61:f7:17:0e:40:6b:51:d8:3f:
         e4:49:df:e2:42:ba:0c:db:61:44:49:2f:ae:32:cd:c1:6d:f4:
         4c:58:47:31:5f:94:25:46:da:40:66:6e:59:47:07:80:13:10:
         2e:54:9a:e6:65:7b:da:ee:53:c6:7e:03:0d:02:e5:cd:3b:e8:
         da:88:18:b5:e6:44:ba:64:73:e9:e7:b4:72:48:f7:ea:a9:be:
         e3:02:01:8c:d3:2b:68:e1:38:a5:b2:65:5f:04:bb:c8:56:59:
         4a:bd:70:ff:d5:d7:65:23:95:e5:78:77:71:fb:e9:8d:ac:5a:
         83:95:d0:b5:1d:ec:16:6b:8b:eb:12:15:4e:c2:b5:05:b6:24:
         b7:95:48:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYnXzsSqeFNtMsqCxmsKtJjxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmNmRjNzExMDJlY2U3NTZjMWQ5YWM0ZmNiZmM0ZjJiZDg0
NzcyNGMwHhcNMjMwODA5MDA1OTU5WhcNMjMwODEwMDA1OTU5WjAzMTEwLwYDVQQD
Eyg3NmU0OTE3ZTYzODIxNDE2YjQ5MTFjYzE2YWNmMTk2NWRmNWM3YTdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBgo7Hi0BP+dTibt1I1rPQxyMK91
Qk4MnawpU5yZ+SUWBUMT5BJhzOII0GkNG0hz3rRNaZdLaojJLcb0006NsU/FU7Mg
1Fbcfjoj/rLugQjxNigRhp4g+tTysxMuqdlmHKfiEUH3bvCyLIfloP9v3URS/xfY
hvy7XqkOONWHb0d2QYqant2BBGBPWhQm6r5F50qtko3QYTJRM6KJXQH5j1Nzkxg2
LcdgDQ7pCCvZJykR11jeGmcToAfsF1GjtEz/qBH2D24lin3ADfcRB6ZwUq80VwTJ
eYvoHPRMvI4WNtMxwVt+rA+jH1/mK98PEugHGaMmbCrNp3RIboQk280V7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHbkkX5jghQWtJEcwWrPGWXfXHp9MB8GA1UdIwQY
MBaAFB9txxEC7OdWwdmsT8v8TyvYR3JMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDIzSEVRTHM1MWJCMmF4UHlfeFBLOWhIY2t3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85Y2NlZWYtYzFkYS00NjdiLWFmMjQt
NDk3OTdiODg5NDU0LzEvSDIzSEVRTHM1MWJCMmF4UHlfeFBLOWhIY2t3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC85Y2NlZWYtYzFkYS00NjdiLWFmMjQtNDk3OTdiODg5NDU0
LzEvSDIzSEVRTHM1MWJCMmF4UHlfeFBLOWhIY2t3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgVTZCZFu
LolrEIpyMXgjWXmIy1NEQF/j1rCQs8QDEtwSK7zZ+sidjf0icySr+7BclY0XZyRx
wCUNg4xCqRU2tGaTRJ2lGjZ3j9DKmHfl+WLS5raXIU7VPmeph6vbsbu3auaeSlb6
m7jKwISo9tzuAt3NV2z3YfcXDkBrUdg/5Enf4kK6DNthREkvrjLNwW30TFhHMV+U
JUbaQGZuWUcHgBMQLlSa5mV72u5Txn4DDQLlzTvo2ogYteZEumRz6ee0ckj36qm+
4wIBjNMraOE4pbJlXwS7yFZZSr1w/9XXZSOV5Xh3cfvpjaxag5XQtR3sFmuL6xIV
TsK1BbYkt5VIUA==
-----END CERTIFICATE-----