Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/ffec15-7525-4b11-9ced-aabe41da64d9/1/Y3OXW9Cz8yn_lU-VHP_n2GfCyjY.mft
File:                     Y3OXW9Cz8yn_lU-VHP_n2GfCyjY.mft (raw, json)
Hash identifier:          TM6jz/BQBKeHMOFZpBxzXCx5+Fq8ibIqqwJrQz0FinI=
Subject key identifier:   CD:D3:87:FA:90:EB:FF:A3:7F:F4:E2:3F:81:77:0D:47:B7:E9:96:66
Authority key identifier: 63:73:97:5B:D0:B3:F3:29:FF:95:4F:95:1C:FF:E7:D8:67:C2:CA:36
Certificate issuer:       /CN=6373975bd0b3f329ff954f951cffe7d867c2ca36
Certificate serial:       018BB840625965556793B225961E96FBAE21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y3OXW9Cz8yn_lU-VHP_n2GfCyjY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/ffec15-7525-4b11-9ced-aabe41da64d9/1/Y3OXW9Cz8yn_lU-VHP_n2GfCyjY.mft
Manifest number:          0677
Signing time:             Fri 10 Nov 2023 08:01:49 +0000
Manifest this update:     Fri 10 Nov 2023 08:01:49 +0000
Manifest next update:     Sat 11 Nov 2023 08:01:49 +0000
Files and hashes:         1: 9FQB9ME0MBjuO76c-4ALJhpOZ-c.roa (hash: aMRewkdwTZFufCy1XcKAhP8eKnSfM7dpEMIWZgmLaiQ=)
                          2: Ay6PRbnjpOimRCPYRWIs4NUloeY.roa (hash: R/vHbMXbUe+pIEuOb5eEXvbHc/DUtNd770/UIbxuOf4=)
                          3: Y3OXW9Cz8yn_lU-VHP_n2GfCyjY.crl (hash: 04bgye0yFd3uoCydQFtRVBzFw/b+DORm0oTY9bYGbdU=)
                          4: Yu8y200cnp2gHondH0ivkVKoKHE.roa (hash: udIcOZ73k+YCmK/N5fas4XzNzQEclGah9u/MC01lfos=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:b8:40:62:59:65:55:67:93:b2:25:96:1e:96:fb:ae:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6373975bd0b3f329ff954f951cffe7d867c2ca36
        Validity
            Not Before: Nov 10 08:01:49 2023 GMT
            Not After : Nov 11 08:01:49 2023 GMT
        Subject: CN=cdd387fa90ebffa37ff4e23f81770d47b7e99666
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:be:17:66:97:c3:c0:dd:83:89:c3:49:97:29:
                    a5:52:94:51:0c:85:7f:74:8b:26:60:09:10:c2:0d:
                    4a:80:f7:db:bd:73:7d:75:00:73:3f:2c:1d:db:05:
                    ba:37:fd:07:57:7a:7f:a4:cc:4e:ce:3a:6f:8d:14:
                    bd:62:03:0d:c6:b7:7a:5a:60:82:a9:7b:65:c6:79:
                    57:73:f0:c1:a2:8f:b0:36:ee:66:d6:7c:70:5d:1e:
                    f1:e3:cd:43:71:77:e8:c0:72:f0:d6:70:f6:3c:92:
                    52:7d:1f:02:42:02:75:96:47:7d:32:da:71:be:d8:
                    23:68:10:4a:91:75:ee:a3:03:1a:95:8d:13:b0:5b:
                    be:d2:70:cf:f1:3a:2f:89:07:ec:2d:02:e8:9c:fb:
                    dd:0c:98:1a:eb:a7:11:ba:03:53:a1:50:bd:7f:c1:
                    2e:91:cd:77:43:ca:e7:8b:68:83:68:c7:90:5e:b0:
                    72:62:22:ca:ae:e5:db:73:c1:2b:f6:7d:67:f2:5f:
                    44:b1:75:b7:db:27:89:76:0d:46:ea:32:7a:50:b5:
                    a9:8c:1c:ba:f2:fa:c8:56:94:96:69:d5:c4:34:3c:
                    48:22:ee:db:b0:91:db:bc:1c:27:08:08:56:a2:17:
                    bc:33:6c:7d:f3:0e:d7:42:cd:f4:c3:02:d0:32:0c:
                    90:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:D3:87:FA:90:EB:FF:A3:7F:F4:E2:3F:81:77:0D:47:B7:E9:96:66
            X509v3 Authority Key Identifier:
                keyid:63:73:97:5B:D0:B3:F3:29:FF:95:4F:95:1C:FF:E7:D8:67:C2:CA:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3OXW9Cz8yn_lU-VHP_n2GfCyjY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ffec15-7525-4b11-9ced-aabe41da64d9/1/Y3OXW9Cz8yn_lU-VHP_n2GfCyjY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ffec15-7525-4b11-9ced-aabe41da64d9/1/Y3OXW9Cz8yn_lU-VHP_n2GfCyjY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:4d:60:32:25:d9:00:78:8a:be:d1:09:45:64:a0:f2:dc:aa:
         93:50:6c:98:d9:30:54:d9:28:0e:27:a1:09:cf:40:8a:1f:55:
         af:dc:47:e9:ad:b8:6f:56:a7:d5:fc:b0:ab:ea:a7:80:16:03:
         8c:5a:44:ff:21:46:2d:fc:84:5b:00:e2:aa:c2:77:db:10:6b:
         a1:f7:50:55:36:1d:e2:bf:86:a1:b4:62:5d:3d:8f:b0:98:3a:
         83:c7:9e:f2:38:c5:f2:8f:ed:b2:81:69:ec:66:92:35:15:8e:
         9b:d9:87:18:71:01:b7:87:07:d8:18:6a:ff:f2:fb:fa:03:76:
         28:84:e1:53:1a:5b:2e:aa:85:83:5f:a0:db:c7:12:90:d0:3a:
         ea:07:28:d9:0c:9f:41:8e:e0:16:6f:10:08:8f:48:96:95:b5:
         6a:7a:3a:a3:49:9a:ce:f4:a7:8c:f2:a0:63:d3:56:8a:79:b3:
         ef:03:61:0e:24:74:2d:ae:d0:3a:03:98:34:b7:3c:d4:77:79:
         0f:12:4c:d2:45:0d:53:59:38:6d:f2:96:ff:a7:04:13:8b:74:
         60:f0:e7:93:eb:e6:ca:e9:4d:5f:5c:19:f7:9e:82:c4:3a:fe:
         b1:f6:16:e9:f9:bb:35:ef:cd:fa:43:3c:4f:5a:36:41:83:f3:
         a2:3c:7b:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYu4QGJZZVVnk7Illh6W+64hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzNzM5NzViZDBiM2YzMjlmZjk1NGY5NTFjZmZlN2Q4Njdj
MmNhMzYwHhcNMjMxMTEwMDgwMTQ5WhcNMjMxMTExMDgwMTQ5WjAzMTEwLwYDVQQD
EyhjZGQzODdmYTkwZWJmZmEzN2ZmNGUyM2Y4MTc3MGQ0N2I3ZTk5NjY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwL4XZpfDwN2DicNJlymlUpRRDIV/
dIsmYAkQwg1KgPfbvXN9dQBzPywd2wW6N/0HV3p/pMxOzjpvjRS9YgMNxrd6WmCC
qXtlxnlXc/DBoo+wNu5m1nxwXR7x481DcXfowHLw1nD2PJJSfR8CQgJ1lkd9Mtpx
vtgjaBBKkXXuowMalY0TsFu+0nDP8ToviQfsLQLonPvdDJga66cRugNToVC9f8Eu
kc13Q8rni2iDaMeQXrByYiLKruXbc8Er9n1n8l9EsXW32yeJdg1G6jJ6ULWpjBy6
8vrIVpSWadXENDxIIu7bsJHbvBwnCAhWohe8M2x98w7XQs30wwLQMgyQHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM3Th/qQ6/+jf/TiP4F3DUe36ZZmMB8GA1UdIwQY
MBaAFGNzl1vQs/Mp/5VPlRz/59hnwso2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTNPWFc5Q3o4eW5fbFUtVkhQX24yR2ZDeWpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9mZmVjMTUtNzUyNS00YjExLTljZWQt
YWFiZTQxZGE2NGQ5LzEvWTNPWFc5Q3o4eW5fbFUtVkhQX24yR2ZDeWpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy9mZmVjMTUtNzUyNS00YjExLTljZWQtYWFiZTQxZGE2NGQ5
LzEvWTNPWFc5Q3o4eW5fbFUtVkhQX24yR2ZDeWpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjU1gMiXZ
AHiKvtEJRWSg8tyqk1BsmNkwVNkoDiehCc9Aih9Vr9xH6a24b1an1fywq+qngBYD
jFpE/yFGLfyEWwDiqsJ32xBrofdQVTYd4r+GobRiXT2PsJg6g8ee8jjF8o/tsoFp
7GaSNRWOm9mHGHEBt4cH2Bhq//L7+gN2KIThUxpbLqqFg1+g28cSkNA66gco2Qyf
QY7gFm8QCI9IlpW1ano6o0mazvSnjPKgY9NWinmz7wNhDiR0La7QOgOYNLc81Hd5
DxJM0kUNU1k4bfKW/6cEE4t0YPDnk+vmyulNX1wZ956CxDr+sfYW6fm7Ne/N+kM8
T1o2QYPzojx71g==
-----END CERTIFICATE-----