Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/a5c6ec-9f81-4322-8239-ef434b1fac0e/1/IdtpsQS6fH-RLNclkWv0fdi7A2c.mft
File:                     IdtpsQS6fH-RLNclkWv0fdi7A2c.mft (raw, json)
Hash identifier:          BR8RNJuNLX3PslZlR+ZyF6YxxNSz579N2kGhzv7AN9A=
Subject key identifier:   F3:70:3F:57:A8:EF:1E:FB:42:39:94:E0:8E:91:3A:A9:5F:DF:83:62
Authority key identifier: 21:DB:69:B1:04:BA:7C:7F:91:2C:D7:25:91:6B:F4:7D:D8:BB:03:67
Certificate issuer:       /CN=21db69b104ba7c7f912cd725916bf47dd8bb0367
Certificate serial:       018C86742AB047B8308AA0BAB7507DFB8734
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IdtpsQS6fH-RLNclkWv0fdi7A2c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/a5c6ec-9f81-4322-8239-ef434b1fac0e/1/IdtpsQS6fH-RLNclkWv0fdi7A2c.mft
Manifest number:          0D9F
Signing time:             Wed 20 Dec 2023 09:00:09 +0000
Manifest this update:     Wed 20 Dec 2023 09:00:09 +0000
Manifest next update:     Thu 21 Dec 2023 09:00:09 +0000
Files and hashes:         1: IdtpsQS6fH-RLNclkWv0fdi7A2c.crl (hash: yIWHr+EFC+aEDi4ME4MUODcPEFxKKcGyz+lKvp37WfQ=)
                          2: LhCjXU4A02Zg0sfaMXOa5cIcz8k.roa (hash: QncnVqtprq5fxAOTOKpAlLGkMp4z7g9Bz8g1uEvGhls=)
                          3: _okiIV1aB-es0C6UMFAFgVyCBuM.roa (hash: uCYvrJ0QNcnuf1TlVbrRKLeOuBIwV8WXL1SWnUDknRg=)
                          4: kE_PpCrjwDOZAF9k6ZCubNmqZyw.roa (hash: AHQXxubV1+6GsGxD/0CdWROxj9MzTc7DJB8oGPtEU1U=)
                          5: s1IoJwdQZOW7XBTz6p8iQaG4ucs.roa (hash: 252NQ5PwpBTX70BFCG6aUrgUL8yZ5XSBQson9fVknGY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:86:74:2a:b0:47:b8:30:8a:a0:ba:b7:50:7d:fb:87:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21db69b104ba7c7f912cd725916bf47dd8bb0367
        Validity
            Not Before: Dec 20 09:00:09 2023 GMT
            Not After : Dec 21 09:00:09 2023 GMT
        Subject: CN=f3703f57a8ef1efb423994e08e913aa95fdf8362
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:13:df:65:a8:18:d1:a2:b3:25:74:b3:8b:d0:
                    22:62:d4:fe:be:3e:d5:72:6f:47:ba:89:18:23:67:
                    ea:9d:c9:a1:78:cc:10:98:e7:9e:02:81:22:2d:ff:
                    3c:43:5b:4a:ad:ba:4e:25:f2:8a:90:f1:13:aa:4a:
                    d1:65:41:44:55:77:cf:89:df:2a:9c:af:55:2b:33:
                    f3:3d:ac:5b:27:a4:d2:47:a3:6f:8c:2d:38:2b:ff:
                    bb:38:09:ec:b4:e0:eb:8f:a2:ed:d0:2c:18:e6:41:
                    35:1c:7c:f3:17:1e:3b:6d:7f:e2:99:26:50:b9:31:
                    95:a7:91:c6:cf:11:64:1d:5e:47:14:96:d2:2f:3a:
                    9b:6d:e9:eb:2e:27:55:8a:fe:bd:7f:f6:09:48:8f:
                    60:ba:ee:72:75:72:b6:9b:c0:c7:2c:94:07:91:a8:
                    af:6c:41:0d:6e:a4:7d:00:7d:de:7b:bf:83:36:bc:
                    47:60:05:06:b8:a0:af:28:8d:0e:d4:f4:6e:26:69:
                    00:fd:91:9e:bd:8f:e1:9b:6c:6f:f6:81:ad:9e:5f:
                    4f:ec:4b:4b:ac:ba:39:b0:24:b7:20:42:67:aa:0e:
                    b6:ec:b1:90:68:7d:7a:8f:5e:71:9e:5a:c6:f1:70:
                    ce:f7:e2:6d:a6:49:9a:92:98:af:75:1f:b3:ef:45:
                    aa:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:70:3F:57:A8:EF:1E:FB:42:39:94:E0:8E:91:3A:A9:5F:DF:83:62
            X509v3 Authority Key Identifier:
                keyid:21:DB:69:B1:04:BA:7C:7F:91:2C:D7:25:91:6B:F4:7D:D8:BB:03:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IdtpsQS6fH-RLNclkWv0fdi7A2c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a5c6ec-9f81-4322-8239-ef434b1fac0e/1/IdtpsQS6fH-RLNclkWv0fdi7A2c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a5c6ec-9f81-4322-8239-ef434b1fac0e/1/IdtpsQS6fH-RLNclkWv0fdi7A2c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e5:82:e1:c5:2e:29:1c:ab:a5:07:f8:5a:38:a2:50:53:91:ea:
         39:2d:03:f2:73:f0:62:38:50:c5:cb:72:ef:71:a2:a6:79:5f:
         04:69:2f:44:37:1c:43:cc:c8:4c:e9:f9:a9:89:ff:c3:83:dc:
         e8:8e:84:d1:1b:fd:c5:11:0f:44:5b:72:3a:c7:5e:fd:d5:8a:
         2a:44:0c:bf:22:88:cd:a6:2a:5b:a2:af:27:b1:82:60:b4:81:
         22:87:95:ba:e3:ed:07:15:5f:0e:75:a8:cb:34:66:42:5e:f0:
         d7:6e:ad:d3:66:4b:d2:06:1a:8b:97:e9:0b:2c:30:18:ab:4f:
         4c:e4:0f:00:a8:96:24:b0:b2:ac:7e:6c:b0:7f:28:0b:68:01:
         43:bf:ae:9c:bc:d1:b5:e4:53:ce:a2:0f:be:6a:eb:94:0c:4e:
         54:a0:bf:6e:20:3c:25:24:ec:83:29:ee:4e:3d:26:98:9d:e6:
         f3:c4:c4:0e:f8:ce:0e:75:51:bd:10:e1:6b:da:0d:87:5b:aa:
         40:b7:0b:70:e4:24:20:f9:8d:ba:01:49:3b:12:a0:81:e8:76:
         7e:11:04:bf:01:c9:67:10:d9:6f:90:3a:1a:fe:dd:c9:af:0f:
         00:3c:9a:0f:13:ef:c2:ee:ac:57:3c:f5:0d:d8:10:ad:f3:44:
         2e:88:d7:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYyGdCqwR7gwiqC6t1B9+4c0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxZGI2OWIxMDRiYTdjN2Y5MTJjZDcyNTkxNmJmNDdkZDhi
YjAzNjcwHhcNMjMxMjIwMDkwMDA5WhcNMjMxMjIxMDkwMDA5WjAzMTEwLwYDVQQD
EyhmMzcwM2Y1N2E4ZWYxZWZiNDIzOTk0ZTA4ZTkxM2FhOTVmZGY4MzYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhPfZagY0aKzJXSzi9AiYtT+vj7V
cm9HuokYI2fqncmheMwQmOeeAoEiLf88Q1tKrbpOJfKKkPETqkrRZUFEVXfPid8q
nK9VKzPzPaxbJ6TSR6NvjC04K/+7OAnstODrj6Lt0CwY5kE1HHzzFx47bX/imSZQ
uTGVp5HGzxFkHV5HFJbSLzqbbenrLidViv69f/YJSI9guu5ydXK2m8DHLJQHkaiv
bEENbqR9AH3ee7+DNrxHYAUGuKCvKI0O1PRuJmkA/ZGevY/hm2xv9oGtnl9P7EtL
rLo5sCS3IEJnqg627LGQaH16j15xnlrG8XDO9+JtpkmakpivdR+z70Wq+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPNwP1eo7x77QjmU4I6ROqlf34NiMB8GA1UdIwQY
MBaAFCHbabEEunx/kSzXJZFr9H3YuwNnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWR0cHNRUzZmSC1STE5jbGtXdjBmZGk3QTJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9hNWM2ZWMtOWY4MS00MzIyLTgyMzkt
ZWY0MzRiMWZhYzBlLzEvSWR0cHNRUzZmSC1STE5jbGtXdjBmZGk3QTJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9hNWM2ZWMtOWY4MS00MzIyLTgyMzktZWY0MzRiMWZhYzBl
LzEvSWR0cHNRUzZmSC1STE5jbGtXdjBmZGk3QTJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA5YLhxS4p
HKulB/haOKJQU5HqOS0D8nPwYjhQxcty73GipnlfBGkvRDccQ8zITOn5qYn/w4Pc
6I6E0Rv9xREPRFtyOsde/dWKKkQMvyKIzaYqW6KvJ7GCYLSBIoeVuuPtBxVfDnWo
yzRmQl7w126t02ZL0gYai5fpCywwGKtPTOQPAKiWJLCyrH5ssH8oC2gBQ7+unLzR
teRTzqIPvmrrlAxOVKC/biA8JSTsgynuTj0mmJ3m88TEDvjODnVRvRDha9oNh1uq
QLcLcOQkIPmNugFJOxKggeh2fhEEvwHJZxDZb5A6Gv7dya8PADyaDxPvwu6sVzz1
DdgQrfNELojXpA==
-----END CERTIFICATE-----