Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/19c428-6f77-4fdd-b388-c14b72f0ebd9/1/G9e3R3j3FRNyDvfpj_Lm6AtvZJ4.mft
File:                     G9e3R3j3FRNyDvfpj_Lm6AtvZJ4.mft (raw, json)
Hash identifier:          7+ahhyGQVY87iW3uXKRpaYwQnok1z0g6t5q5d81PhZM=
Subject key identifier:   1E:37:7A:7F:54:2C:8B:89:82:88:0F:30:5D:97:BA:4C:AB:D5:C4:90
Authority key identifier: 1B:D7:B7:47:78:F7:15:13:72:0E:F7:E9:8F:F2:E6:E8:0B:6F:64:9E
Certificate issuer:       /CN=1bd7b74778f71513720ef7e98ff2e6e80b6f649e
Certificate serial:       018B27D6C2977A5649D48A1FD38C5B6A7527
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G9e3R3j3FRNyDvfpj_Lm6AtvZJ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/19c428-6f77-4fdd-b388-c14b72f0ebd9/1/G9e3R3j3FRNyDvfpj_Lm6AtvZJ4.mft
Manifest number:          0F38
Signing time:             Fri 13 Oct 2023 07:01:07 +0000
Manifest this update:     Fri 13 Oct 2023 07:01:07 +0000
Manifest next update:     Sat 14 Oct 2023 07:01:07 +0000
Files and hashes:         1: G9e3R3j3FRNyDvfpj_Lm6AtvZJ4.crl (hash: dIQhOPxO2F3LXKroB1igyH+na6zxGq0lAj7YQBh8Rbo=)
                          2: NZ-aT2i1LJmhxFU-513W6m13opc.roa (hash: nwQPniUFY9iApKaO8jGUWfBRgpdThoAlKVo7kFR3P9g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:27:d6:c2:97:7a:56:49:d4:8a:1f:d3:8c:5b:6a:75:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bd7b74778f71513720ef7e98ff2e6e80b6f649e
        Validity
            Not Before: Oct 13 07:01:07 2023 GMT
            Not After : Oct 14 07:01:07 2023 GMT
        Subject: CN=1e377a7f542c8b8982880f305d97ba4cabd5c490
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3f:c5:ce:39:17:c5:09:33:7c:0a:e8:a0:cf:
                    58:ba:bd:96:b3:28:65:2d:21:fd:d9:e8:8a:0c:4d:
                    bc:b2:bd:84:7f:00:0a:75:a9:f5:23:40:a3:89:dd:
                    6f:fa:7e:6a:14:de:7c:a5:d3:33:a1:81:28:d5:17:
                    5c:6d:74:6d:a7:d0:0e:b3:0c:1c:f6:e2:c8:03:2b:
                    61:2a:6e:2b:7d:de:af:27:9c:e2:93:3f:eb:34:5a:
                    3d:27:c3:ba:93:8f:7a:b1:92:3a:aa:4c:10:66:a4:
                    7c:3d:19:a4:83:55:70:9e:87:51:1a:9d:60:37:49:
                    55:af:a4:35:57:54:fb:3d:e0:8d:28:bc:8d:21:ad:
                    07:88:f2:99:4e:52:f0:66:4c:e3:93:f1:e2:67:13:
                    b1:4f:b6:07:66:a7:21:4f:da:d9:a0:ed:4b:7b:8e:
                    a9:92:09:83:e5:86:c5:f2:b6:bd:50:dc:ce:c1:01:
                    cc:1e:6e:ef:d7:e8:19:fe:ca:01:d9:1f:d5:d2:bd:
                    6b:1d:f9:d6:3f:3c:d1:29:0c:57:5d:12:dc:35:5f:
                    2e:47:9a:eb:6b:b8:1a:81:0d:b1:fa:08:d0:bb:f5:
                    2a:55:36:68:d7:6e:67:80:3f:8e:ab:58:47:de:50:
                    1b:b0:e0:89:a5:f4:0d:cb:27:0c:0a:fa:0c:5c:b1:
                    d9:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:37:7A:7F:54:2C:8B:89:82:88:0F:30:5D:97:BA:4C:AB:D5:C4:90
            X509v3 Authority Key Identifier:
                keyid:1B:D7:B7:47:78:F7:15:13:72:0E:F7:E9:8F:F2:E6:E8:0B:6F:64:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G9e3R3j3FRNyDvfpj_Lm6AtvZJ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/19c428-6f77-4fdd-b388-c14b72f0ebd9/1/G9e3R3j3FRNyDvfpj_Lm6AtvZJ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/19c428-6f77-4fdd-b388-c14b72f0ebd9/1/G9e3R3j3FRNyDvfpj_Lm6AtvZJ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:f7:68:08:15:37:b7:02:e4:e9:ec:81:1a:b7:1b:1f:55:7d:
         c9:e8:55:f6:e7:91:25:fc:f8:17:5a:20:de:96:f3:43:77:1d:
         81:cc:3e:5c:3d:92:37:e9:b3:43:ca:c3:33:7c:54:17:0c:a9:
         9f:14:e8:b7:f1:ad:98:96:d5:4c:27:da:65:f1:99:15:98:35:
         4d:29:9b:42:73:23:06:b7:08:15:6f:8d:d8:0b:1c:5f:c3:28:
         c4:85:79:6d:e2:5f:6b:b4:e4:24:72:5c:46:76:0d:9a:d7:92:
         e5:11:96:fb:ad:79:22:dd:33:3f:c1:ee:67:f4:1b:94:44:3e:
         60:07:a6:36:e9:f1:be:30:01:0f:ae:36:5b:32:61:28:16:f0:
         7b:b7:fc:84:82:78:23:e8:31:97:b8:cd:4b:c0:4a:44:57:c5:
         31:ac:cb:40:ff:54:53:82:b0:5f:89:44:28:78:a9:d3:71:2c:
         1b:fb:f4:1d:6f:64:6c:e9:47:9d:cc:62:2e:a9:1d:0f:e4:56:
         a3:08:c2:2a:83:58:cb:70:99:e3:86:20:db:a9:3f:35:33:2e:
         8d:d5:e3:f7:1d:12:1b:8b:c9:ea:3e:f8:fe:2e:a2:86:9f:25:
         00:ca:1d:ba:13:22:27:09:2f:41:9d:d6:a6:bd:be:e5:bb:33:
         8b:0f:b7:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYsn1sKXelZJ1Iof04xbanUnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiZDdiNzQ3NzhmNzE1MTM3MjBlZjdlOThmZjJlNmU4MGI2
ZjY0OWUwHhcNMjMxMDEzMDcwMTA3WhcNMjMxMDE0MDcwMTA3WjAzMTEwLwYDVQQD
EygxZTM3N2E3ZjU0MmM4Yjg5ODI4ODBmMzA1ZDk3YmE0Y2FiZDVjNDkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsz/FzjkXxQkzfArooM9Yur2Wsyhl
LSH92eiKDE28sr2EfwAKdan1I0Cjid1v+n5qFN58pdMzoYEo1RdcbXRtp9AOswwc
9uLIAythKm4rfd6vJ5zikz/rNFo9J8O6k496sZI6qkwQZqR8PRmkg1VwnodRGp1g
N0lVr6Q1V1T7PeCNKLyNIa0HiPKZTlLwZkzjk/HiZxOxT7YHZqchT9rZoO1Le46p
kgmD5YbF8ra9UNzOwQHMHm7v1+gZ/soB2R/V0r1rHfnWPzzRKQxXXRLcNV8uR5rr
a7gagQ2x+gjQu/UqVTZo125ngD+Oq1hH3lAbsOCJpfQNyycMCvoMXLHZ0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB43en9ULIuJgogPMF2Xukyr1cSQMB8GA1UdIwQY
MBaAFBvXt0d49xUTcg736Y/y5ugLb2SeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzllM1IzajNGUk55RHZmcGpfTG02QXR2Wko0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy8xOWM0MjgtNmY3Ny00ZmRkLWIzODgt
YzE0YjcyZjBlYmQ5LzEvRzllM1IzajNGUk55RHZmcGpfTG02QXR2Wko0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy8xOWM0MjgtNmY3Ny00ZmRkLWIzODgtYzE0YjcyZjBlYmQ5
LzEvRzllM1IzajNGUk55RHZmcGpfTG02QXR2Wko0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXvdoCBU3
twLk6eyBGrcbH1V9yehV9ueRJfz4F1og3pbzQ3cdgcw+XD2SN+mzQ8rDM3xUFwyp
nxTot/GtmJbVTCfaZfGZFZg1TSmbQnMjBrcIFW+N2AscX8MoxIV5beJfa7TkJHJc
RnYNmteS5RGW+615It0zP8HuZ/QblEQ+YAemNunxvjABD642WzJhKBbwe7f8hIJ4
I+gxl7jNS8BKRFfFMazLQP9UU4KwX4lEKHip03EsG/v0HW9kbOlHncxiLqkdD+RW
owjCKoNYy3CZ44Yg26k/NTMujdXj9x0SG4vJ6j74/i6ihp8lAModuhMiJwkvQZ3W
pr2+5bsziw+3KA==
-----END CERTIFICATE-----