Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/4e20f1-5689-411c-9379-c159165de0c7/1/7cfLALPUFK-pfEguq1_cdqFjSz0.mft
File:                     7cfLALPUFK-pfEguq1_cdqFjSz0.mft (raw, json)
Hash identifier:          Bg+k29ZAUd/nubgPrb8c3Vbg68zlcdqZLmpHwhy45jI=
Subject key identifier:   47:3D:43:BE:F0:AE:3D:82:36:F8:0E:C8:C2:F9:BA:7A:22:A0:53:24
Authority key identifier: ED:C7:CB:00:B3:D4:14:AF:A9:7C:48:2E:AB:5F:DC:76:A1:63:4B:3D
Certificate issuer:       /CN=edc7cb00b3d414afa97c482eab5fdc76a1634b3d
Certificate serial:       018BA7F0F00A530A14FE18AD6A402CD8FC07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7cfLALPUFK-pfEguq1_cdqFjSz0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/4e20f1-5689-411c-9379-c159165de0c7/1/7cfLALPUFK-pfEguq1_cdqFjSz0.mft
Manifest number:          06CE
Signing time:             Tue 07 Nov 2023 04:01:06 +0000
Manifest this update:     Tue 07 Nov 2023 04:01:06 +0000
Manifest next update:     Wed 08 Nov 2023 04:01:06 +0000
Files and hashes:         1: 7cfLALPUFK-pfEguq1_cdqFjSz0.crl (hash: RiFLBqAaMHo4jbnP34ZQflaBw0q/hipd+YbWRu4KqHU=)
                          2: 96N11WGp8uymv_DUOR7NytPqLtU.roa (hash: GhlTGOTV6KPRQuSqqq+tW9U7dlLC4gVYG0qV7kPExsM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:a7:f0:f0:0a:53:0a:14:fe:18:ad:6a:40:2c:d8:fc:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edc7cb00b3d414afa97c482eab5fdc76a1634b3d
        Validity
            Not Before: Nov  7 04:01:06 2023 GMT
            Not After : Nov  8 04:01:06 2023 GMT
        Subject: CN=473d43bef0ae3d8236f80ec8c2f9ba7a22a05324
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:01:4e:0a:14:d5:91:96:89:08:e7:92:24:35:
                    48:b9:c2:bc:e4:53:d4:e8:a7:0d:e1:71:40:24:b2:
                    e7:c3:cc:53:94:c2:78:b7:b2:c6:18:f7:1d:30:72:
                    51:50:81:ca:8d:56:41:85:3f:4d:44:e6:b5:01:99:
                    a1:58:36:0b:54:c6:f4:e8:bd:15:99:82:e0:47:29:
                    8e:fe:a7:ec:20:e3:a1:9f:7d:b1:86:ae:c4:ed:13:
                    91:85:1a:95:27:3f:c4:82:07:aa:db:8b:52:3f:85:
                    d9:30:5c:16:58:ba:a9:4b:a0:77:85:85:82:cb:0f:
                    18:84:04:55:5c:1c:7b:8a:67:01:b2:e4:00:50:3b:
                    21:88:7d:c8:f7:b5:1a:7c:29:21:9f:f2:ff:a5:29:
                    56:4e:d5:59:37:98:ad:a9:22:65:68:0d:fe:ec:fc:
                    f8:b6:83:23:8f:95:61:e8:1e:5e:3b:a4:c5:bd:ed:
                    9d:3b:b9:d0:ba:5c:1c:6a:c0:ae:e3:2b:d5:d6:09:
                    70:28:e1:cc:f4:e3:6b:2c:77:a7:be:69:70:41:3f:
                    d8:d8:2a:be:52:be:b6:56:b6:5f:64:dd:b0:a2:0a:
                    35:f8:7a:04:9a:10:21:79:61:41:b7:ca:4f:cd:3d:
                    7b:8d:08:33:af:47:ad:33:19:15:5a:1d:f4:99:c5:
                    42:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:3D:43:BE:F0:AE:3D:82:36:F8:0E:C8:C2:F9:BA:7A:22:A0:53:24
            X509v3 Authority Key Identifier:
                keyid:ED:C7:CB:00:B3:D4:14:AF:A9:7C:48:2E:AB:5F:DC:76:A1:63:4B:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cfLALPUFK-pfEguq1_cdqFjSz0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/4e20f1-5689-411c-9379-c159165de0c7/1/7cfLALPUFK-pfEguq1_cdqFjSz0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/4e20f1-5689-411c-9379-c159165de0c7/1/7cfLALPUFK-pfEguq1_cdqFjSz0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:c9:77:fc:66:10:a2:d7:6c:e1:d9:1a:6a:d3:62:e2:04:1c:
         97:f6:da:0f:d2:72:97:33:28:8e:46:67:bf:4a:39:5e:ae:52:
         aa:fb:31:dd:e8:bf:4a:5a:56:f6:f3:c5:fe:78:63:39:4b:f8:
         5c:69:68:29:66:be:58:65:e9:bc:d0:03:8e:f6:d5:44:33:f7:
         d4:77:fd:c9:e9:d3:6a:13:d5:5d:e6:3a:53:ad:22:63:05:d7:
         18:eb:be:29:38:1c:29:96:5f:04:2f:16:24:c0:3e:0d:c6:4e:
         ec:f7:a6:c5:b9:1e:36:1b:22:98:51:2e:75:c2:a0:77:a8:26:
         09:2c:b2:0c:63:52:07:78:a2:72:0f:51:b4:96:ec:42:7d:c8:
         d3:d2:f4:9c:68:8a:1a:99:77:94:33:ed:85:53:85:f8:f3:62:
         9d:1b:42:d6:29:f4:1d:3e:73:6c:3a:dc:40:0e:c9:13:16:bd:
         48:56:25:5c:9b:37:5a:6a:da:c9:a0:9c:5e:37:45:26:7e:3d:
         8d:19:bf:13:77:25:55:fe:ca:16:5f:17:fa:20:3a:4e:7c:c5:
         6b:2b:4b:5c:d3:f5:e6:e6:19:22:53:c4:59:db:0d:ec:f5:01:
         b7:11:d6:be:21:40:74:01:77:82:35:03:fe:e8:ef:f4:a9:1b:
         fe:d9:43:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYun8PAKUwoU/hitakAs2PwHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkYzdjYjAwYjNkNDE0YWZhOTdjNDgyZWFiNWZkYzc2YTE2
MzRiM2QwHhcNMjMxMTA3MDQwMTA2WhcNMjMxMTA4MDQwMTA2WjAzMTEwLwYDVQQD
Eyg0NzNkNDNiZWYwYWUzZDgyMzZmODBlYzhjMmY5YmE3YTIyYTA1MzI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQFOChTVkZaJCOeSJDVIucK85FPU
6KcN4XFAJLLnw8xTlMJ4t7LGGPcdMHJRUIHKjVZBhT9NROa1AZmhWDYLVMb06L0V
mYLgRymO/qfsIOOhn32xhq7E7RORhRqVJz/Eggeq24tSP4XZMFwWWLqpS6B3hYWC
yw8YhARVXBx7imcBsuQAUDshiH3I97UafCkhn/L/pSlWTtVZN5itqSJlaA3+7Pz4
toMjj5Vh6B5eO6TFve2dO7nQulwcasCu4yvV1glwKOHM9ONrLHenvmlwQT/Y2Cq+
Ur62VrZfZN2wogo1+HoEmhAheWFBt8pPzT17jQgzr0etMxkVWh30mcVCGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEc9Q77wrj2CNvgOyML5unoioFMkMB8GA1UdIwQY
MBaAFO3HywCz1BSvqXxILqtf3HahY0s9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2NmTEFMUFVGSy1wZkVndXExX2NkcUZqU3owLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy80ZTIwZjEtNTY4OS00MTFjLTkzNzkt
YzE1OTE2NWRlMGM3LzEvN2NmTEFMUFVGSy1wZkVndXExX2NkcUZqU3owLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy80ZTIwZjEtNTY4OS00MTFjLTkzNzktYzE1OTE2NWRlMGM3
LzEvN2NmTEFMUFVGSy1wZkVndXExX2NkcUZqU3owLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA8l3/GYQ
otds4dkaatNi4gQcl/baD9JylzMojkZnv0o5Xq5Sqvsx3ei/SlpW9vPF/nhjOUv4
XGloKWa+WGXpvNADjvbVRDP31Hf9yenTahPVXeY6U60iYwXXGOu+KTgcKZZfBC8W
JMA+DcZO7PemxbkeNhsimFEudcKgd6gmCSyyDGNSB3iicg9RtJbsQn3I09L0nGiK
Gpl3lDPthVOF+PNinRtC1in0HT5zbDrcQA7JExa9SFYlXJs3WmrayaCcXjdFJn49
jRm/E3clVf7KFl8X+iA6TnzFaytLXNP15uYZIlPEWdsN7PUBtxHWviFAdAF3gjUD
/ujv9Kkb/tlD5Q==
-----END CERTIFICATE-----