Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6e26ea-a0f2-4387-ac9e-b4d117798d41/1/RB-9MENGoUQj5c5cr8aVOj4kWyM.mft
File:                     RB-9MENGoUQj5c5cr8aVOj4kWyM.mft (raw, json)
Hash identifier:          D2ewMwXwTNjLUtAvuNqcyFYzUjpTVkjx6t9l4NJVsjY=
Subject key identifier:   8E:33:1C:EF:0C:3B:F7:7D:8A:BE:01:BE:AA:6F:EA:50:C8:2B:13:05
Authority key identifier: 44:1F:BD:30:43:46:A1:44:23:E5:CE:5C:AF:C6:95:3A:3E:24:5B:23
Certificate issuer:       /CN=441fbd304346a14423e5ce5cafc6953a3e245b23
Certificate serial:       018BC6694D9D4FEBFB47F0C056A75C7871B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RB-9MENGoUQj5c5cr8aVOj4kWyM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/6e26ea-a0f2-4387-ac9e-b4d117798d41/1/RB-9MENGoUQj5c5cr8aVOj4kWyM.mft
Manifest number:          08D6
Signing time:             Mon 13 Nov 2023 02:01:11 +0000
Manifest this update:     Mon 13 Nov 2023 02:01:11 +0000
Manifest next update:     Tue 14 Nov 2023 02:01:11 +0000
Files and hashes:         1: RB-9MENGoUQj5c5cr8aVOj4kWyM.crl (hash: QbWs+ZBHOpnQkCzkDLH1+hZ16Dh413t+33xYMdcXys4=)
                          2: pTK-AOE9ZomRkYS2t8erD1XRJHg.roa (hash: 7SdkP85yC2Ncd5gd0ZSTBt2qs1PlO+jDAKmhPuX65r0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:c6:69:4d:9d:4f:eb:fb:47:f0:c0:56:a7:5c:78:71:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=441fbd304346a14423e5ce5cafc6953a3e245b23
        Validity
            Not Before: Nov 13 02:01:11 2023 GMT
            Not After : Nov 14 02:01:11 2023 GMT
        Subject: CN=8e331cef0c3bf77d8abe01beaa6fea50c82b1305
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:78:1a:ad:49:b1:59:fe:c1:54:ff:39:2b:bf:
                    17:fd:33:02:67:15:17:58:03:6d:80:c9:33:73:45:
                    b1:03:28:c0:28:c6:de:00:a9:18:47:b5:b4:92:6f:
                    27:62:f1:2e:56:c0:31:bc:4c:26:6c:42:ca:4b:4a:
                    b3:76:84:f0:9a:bc:a5:5f:6f:c1:c2:71:e1:09:5e:
                    bc:06:46:73:ed:9b:91:ca:97:27:7e:4c:c9:52:f4:
                    d5:7a:be:b4:55:0b:d1:3a:f9:07:0a:53:ac:c0:ae:
                    97:86:46:71:71:31:44:76:83:c7:b2:fc:94:6c:ff:
                    4e:d2:41:ef:3a:6b:72:d9:25:cc:8b:40:58:e9:3d:
                    7c:a0:53:7d:98:13:dd:6e:b2:0a:09:4b:62:00:d1:
                    48:0e:b1:b2:10:09:21:92:1c:63:56:0e:11:4a:21:
                    c6:6f:3b:bd:e1:d9:4e:60:79:3f:ca:16:78:55:78:
                    a5:fb:87:78:0b:9c:55:42:b4:b0:3b:94:dc:34:bb:
                    79:d8:08:dc:2a:21:ef:25:3c:23:e9:82:87:27:90:
                    0b:40:f5:f2:6a:46:aa:90:cb:86:f8:e1:50:c1:17:
                    e4:11:18:83:fb:cd:f2:4b:50:02:e2:c3:fb:c0:9a:
                    6d:2a:c8:13:5f:80:59:07:5b:1e:f1:54:9d:10:d8:
                    9d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:33:1C:EF:0C:3B:F7:7D:8A:BE:01:BE:AA:6F:EA:50:C8:2B:13:05
            X509v3 Authority Key Identifier:
                keyid:44:1F:BD:30:43:46:A1:44:23:E5:CE:5C:AF:C6:95:3A:3E:24:5B:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RB-9MENGoUQj5c5cr8aVOj4kWyM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6e26ea-a0f2-4387-ac9e-b4d117798d41/1/RB-9MENGoUQj5c5cr8aVOj4kWyM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6e26ea-a0f2-4387-ac9e-b4d117798d41/1/RB-9MENGoUQj5c5cr8aVOj4kWyM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:7b:29:45:8e:ce:6f:42:69:08:6e:15:f7:08:01:64:57:90:
         2c:dc:66:ca:5f:aa:6f:7e:82:26:19:ca:d5:b9:56:3c:7e:7c:
         a1:40:12:55:80:ae:fd:6e:d0:fc:ce:5e:96:bf:0a:e2:7a:6e:
         40:07:8c:0a:9e:ff:b9:e8:fb:59:61:ff:b1:b8:d9:9b:a1:2c:
         af:3a:ce:85:0b:4c:e0:a0:87:53:c3:0e:3c:5b:62:13:42:60:
         22:bf:87:89:cd:43:81:90:e0:0a:46:f8:51:d6:c2:09:33:9c:
         00:30:35:9c:b7:48:6e:74:9d:95:86:89:9b:f2:33:2c:7a:de:
         33:29:02:8d:f7:0b:85:cf:f4:49:41:90:6d:16:21:9f:6b:eb:
         3f:7e:07:c2:b1:73:4c:f8:22:a7:2e:2c:54:6a:6a:19:1c:b5:
         42:9c:1e:66:20:69:61:66:5b:3e:5c:de:87:48:fe:a5:7d:f5:
         6b:83:ab:a0:e4:9a:c8:bd:d1:24:58:0d:47:5b:6f:e3:15:9b:
         ec:1b:a2:5d:70:32:ba:6f:ff:84:d6:da:b0:3b:d3:e8:13:ce:
         00:b4:7b:c8:31:b2:4e:f4:14:b0:5c:64:8c:c8:c0:13:41:43:
         66:ec:f5:cf:22:45:59:dc:60:d2:59:b4:60:ba:93:67:4b:93:
         99:03:4c:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYvGaU2dT+v7R/DAVqdceHGyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0MWZiZDMwNDM0NmExNDQyM2U1Y2U1Y2FmYzY5NTNhM2Uy
NDViMjMwHhcNMjMxMTEzMDIwMTExWhcNMjMxMTE0MDIwMTExWjAzMTEwLwYDVQQD
Eyg4ZTMzMWNlZjBjM2JmNzdkOGFiZTAxYmVhYTZmZWE1MGM4MmIxMzA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3garUmxWf7BVP85K78X/TMCZxUX
WANtgMkzc0WxAyjAKMbeAKkYR7W0km8nYvEuVsAxvEwmbELKS0qzdoTwmrylX2/B
wnHhCV68BkZz7ZuRypcnfkzJUvTVer60VQvROvkHClOswK6XhkZxcTFEdoPHsvyU
bP9O0kHvOmty2SXMi0BY6T18oFN9mBPdbrIKCUtiANFIDrGyEAkhkhxjVg4RSiHG
bzu94dlOYHk/yhZ4VXil+4d4C5xVQrSwO5TcNLt52AjcKiHvJTwj6YKHJ5ALQPXy
akaqkMuG+OFQwRfkERiD+83yS1AC4sP7wJptKsgTX4BZB1se8VSdENidvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI4zHO8MO/d9ir4Bvqpv6lDIKxMFMB8GA1UdIwQY
MBaAFEQfvTBDRqFEI+XOXK/GlTo+JFsjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkItOU1FTkdvVVFqNWM1Y3I4YVZPajRrV3lNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi82ZTI2ZWEtYTBmMi00Mzg3LWFjOWUt
YjRkMTE3Nzk4ZDQxLzEvUkItOU1FTkdvVVFqNWM1Y3I4YVZPajRrV3lNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi82ZTI2ZWEtYTBmMi00Mzg3LWFjOWUtYjRkMTE3Nzk4ZDQx
LzEvUkItOU1FTkdvVVFqNWM1Y3I4YVZPajRrV3lNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASXspRY7O
b0JpCG4V9wgBZFeQLNxmyl+qb36CJhnK1blWPH58oUASVYCu/W7Q/M5elr8K4npu
QAeMCp7/uej7WWH/sbjZm6EsrzrOhQtM4KCHU8MOPFtiE0JgIr+Hic1DgZDgCkb4
UdbCCTOcADA1nLdIbnSdlYaJm/IzLHreMykCjfcLhc/0SUGQbRYhn2vrP34HwrFz
TPgipy4sVGpqGRy1QpweZiBpYWZbPlzeh0j+pX31a4OroOSayL3RJFgNR1tv4xWb
7BuiXXAyum//hNbasDvT6BPOALR7yDGyTvQUsFxkjMjAE0FDZuz1zyJFWdxg0lm0
YLqTZ0uTmQNMpw==
-----END CERTIFICATE-----