Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/82013d-2c13-4ef5-9d2e-fb89bd2fdeeb/1/F0IftnkeBj7lHey2exzPERqDtLU.mft
File:                     F0IftnkeBj7lHey2exzPERqDtLU.mft (raw, json)
Hash identifier:          ZimnFXb1hDApWZslcf1WoCAwhEP7P/md5N6EDOymeIU=
Subject key identifier:   82:F7:6E:58:D7:CA:08:EB:EE:E7:9A:3E:0A:C8:53:2C:A2:C1:C5:D7
Authority key identifier: 17:42:1F:B6:79:1E:06:3E:E5:1D:EC:B6:7B:1C:CF:11:1A:83:B4:B5
Certificate issuer:       /CN=17421fb6791e063ee51decb67b1ccf111a83b4b5
Certificate serial:       018BD26D5A06251AE05325E92C2DBC9750D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F0IftnkeBj7lHey2exzPERqDtLU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/82013d-2c13-4ef5-9d2e-fb89bd2fdeeb/1/F0IftnkeBj7lHey2exzPERqDtLU.mft
Manifest number:          0851
Signing time:             Wed 15 Nov 2023 10:01:03 +0000
Manifest this update:     Wed 15 Nov 2023 10:01:03 +0000
Manifest next update:     Thu 16 Nov 2023 10:01:03 +0000
Files and hashes:         1: F0IftnkeBj7lHey2exzPERqDtLU.crl (hash: XRvFTXed7y6SkFUxvac5mxsRZaqgvpjyk0QIjha2FV4=)
                          2: V6kc3mWEj_PqcgNIug9ff5jkwkY.roa (hash: RoSkHvi75MSPtQC0O79SeIS7l+nYljxuIENFMYJAtHo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:d2:6d:5a:06:25:1a:e0:53:25:e9:2c:2d:bc:97:50:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17421fb6791e063ee51decb67b1ccf111a83b4b5
        Validity
            Not Before: Nov 15 10:01:03 2023 GMT
            Not After : Nov 16 10:01:03 2023 GMT
        Subject: CN=82f76e58d7ca08ebeee79a3e0ac8532ca2c1c5d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:6f:3b:01:80:35:15:97:bd:e7:45:0f:10:0a:
                    49:0c:51:1a:d7:79:f4:d1:ab:a9:ee:3b:ee:77:3d:
                    78:f0:d3:0b:42:f3:76:71:0a:65:c7:6e:06:60:41:
                    58:cd:8a:41:fe:49:16:13:ae:52:9b:69:58:0f:78:
                    83:43:96:3d:af:5a:1c:63:7d:ea:5c:4c:94:07:bb:
                    bf:fc:36:8f:34:e3:a5:a2:7d:73:20:17:27:68:60:
                    a0:99:bc:bd:86:cf:e2:d2:cf:69:70:a2:69:98:fb:
                    da:5e:bc:b7:fa:13:8f:5f:4b:18:47:15:a8:7e:96:
                    28:f1:21:dc:1f:31:10:05:e1:bf:87:10:13:b2:4f:
                    d2:2e:35:98:07:a0:4f:4c:42:47:77:9e:bb:0e:70:
                    3b:d0:0a:52:86:46:ed:ab:21:ce:06:3a:41:63:39:
                    87:17:fc:d0:49:4e:6d:59:d0:ed:b1:d4:08:f2:ac:
                    5c:8b:39:c1:42:88:1e:2d:d8:da:5e:da:3b:3d:23:
                    a2:4c:ac:4b:70:0c:69:af:8a:f2:51:bb:d5:af:c2:
                    7d:0f:09:62:47:93:28:a9:f2:8f:e8:7d:b3:ca:7f:
                    4f:ad:b2:8b:90:4e:ef:d5:17:fe:f7:91:0d:d2:aa:
                    ac:43:8d:5a:cd:cb:e9:0f:ce:6e:46:8b:0e:ec:e6:
                    df:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:F7:6E:58:D7:CA:08:EB:EE:E7:9A:3E:0A:C8:53:2C:A2:C1:C5:D7
            X509v3 Authority Key Identifier:
                keyid:17:42:1F:B6:79:1E:06:3E:E5:1D:EC:B6:7B:1C:CF:11:1A:83:B4:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F0IftnkeBj7lHey2exzPERqDtLU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/82013d-2c13-4ef5-9d2e-fb89bd2fdeeb/1/F0IftnkeBj7lHey2exzPERqDtLU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/82013d-2c13-4ef5-9d2e-fb89bd2fdeeb/1/F0IftnkeBj7lHey2exzPERqDtLU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:ef:7b:11:a6:3b:d9:7c:14:67:bd:cd:96:ce:99:24:ed:2d:
         2e:72:bc:7f:43:ad:13:51:dd:6e:ea:91:41:78:8e:cc:e1:6f:
         8b:89:cc:ed:6e:a3:e5:ec:4d:1e:f6:df:73:e2:84:92:42:1d:
         52:38:4e:01:77:3b:ba:9a:45:68:51:ef:74:26:e3:a2:fd:c7:
         e0:48:e0:be:e3:b4:2c:77:d6:68:ca:70:ef:1f:0d:90:fd:8b:
         43:5b:c9:3c:ed:2d:66:f2:d4:0d:14:08:55:3b:8f:76:65:e0:
         89:7e:3f:c2:7c:cf:36:49:2f:ec:ac:6a:e2:19:f8:4e:36:17:
         01:99:b9:49:b3:85:62:00:2d:4f:51:38:be:87:aa:3a:70:3e:
         3e:7a:8f:61:96:ff:a6:01:5c:96:d5:a6:5d:f9:41:2d:1e:a9:
         89:da:11:4e:64:f2:57:38:d2:f5:05:c1:3e:b0:20:d1:15:e8:
         49:38:2c:57:2a:a6:3e:fd:3f:83:96:b8:6a:81:44:12:4f:e3:
         d9:18:c7:7d:72:f7:10:d6:95:87:80:73:bc:49:dc:60:9a:1c:
         7e:6d:0b:3b:b1:ea:51:e4:78:01:53:af:60:94:3d:37:cc:d4:
         d7:8c:94:7f:f0:e6:dc:1c:6b:d4:68:ce:0d:91:07:9a:e8:b8:
         ac:c1:58:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYvSbVoGJRrgUyXpLC28l1DRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NDIxZmI2NzkxZTA2M2VlNTFkZWNiNjdiMWNjZjExMWE4
M2I0YjUwHhcNMjMxMTE1MTAwMTAzWhcNMjMxMTE2MTAwMTAzWjAzMTEwLwYDVQQD
Eyg4MmY3NmU1OGQ3Y2EwOGViZWVlNzlhM2UwYWM4NTMyY2EyYzFjNWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmW87AYA1FZe950UPEApJDFEa13n0
0aup7jvudz148NMLQvN2cQplx24GYEFYzYpB/kkWE65Sm2lYD3iDQ5Y9r1ocY33q
XEyUB7u//DaPNOOlon1zIBcnaGCgmby9hs/i0s9pcKJpmPvaXry3+hOPX0sYRxWo
fpYo8SHcHzEQBeG/hxATsk/SLjWYB6BPTEJHd567DnA70ApShkbtqyHOBjpBYzmH
F/zQSU5tWdDtsdQI8qxciznBQogeLdjaXto7PSOiTKxLcAxpr4ryUbvVr8J9Dwli
R5MoqfKP6H2zyn9PrbKLkE7v1Rf+95EN0qqsQ41azcvpD85uRosO7ObfhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIL3bljXygjr7ueaPgrIUyyiwcXXMB8GA1UdIwQY
MBaAFBdCH7Z5HgY+5R3stnsczxEag7S1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjBJZnRua2VCajdsSGV5MmV4elBFUnFEdExVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy84MjAxM2QtMmMxMy00ZWY1LTlkMmUt
ZmI4OWJkMmZkZWViLzEvRjBJZnRua2VCajdsSGV5MmV4elBFUnFEdExVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy84MjAxM2QtMmMxMy00ZWY1LTlkMmUtZmI4OWJkMmZkZWVi
LzEvRjBJZnRua2VCajdsSGV5MmV4elBFUnFEdExVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnO97EaY7
2XwUZ73Nls6ZJO0tLnK8f0OtE1HdbuqRQXiOzOFvi4nM7W6j5exNHvbfc+KEkkId
UjhOAXc7uppFaFHvdCbjov3H4EjgvuO0LHfWaMpw7x8NkP2LQ1vJPO0tZvLUDRQI
VTuPdmXgiX4/wnzPNkkv7Kxq4hn4TjYXAZm5SbOFYgAtT1E4voeqOnA+PnqPYZb/
pgFcltWmXflBLR6pidoRTmTyVzjS9QXBPrAg0RXoSTgsVyqmPv0/g5a4aoFEEk/j
2RjHfXL3ENaVh4BzvEncYJocfm0LO7HqUeR4AVOvYJQ9N8zU14yUf/Dm3Bxr1GjO
DZEHmui4rMFYcg==
-----END CERTIFICATE-----