Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/3abc7e-1861-455f-a733-aa99f4e5029c/1/kjeSUZC_6mXpL4KeT2f3-KRtL_U.mft
File:                     kjeSUZC_6mXpL4KeT2f3-KRtL_U.mft (raw, json)
Hash identifier:          WJpZVQNvHJMj1gqU/p0FBrsofAjPyqCrIzUZXb2F30w=
Subject key identifier:   8A:EB:AE:32:BA:2B:60:21:9B:BF:33:CE:9F:C8:2D:DB:F1:83:E5:9E
Authority key identifier: 92:37:92:51:90:BF:EA:65:E9:2F:82:9E:4F:67:F7:F8:A4:6D:2F:F5
Certificate issuer:       /CN=9237925190bfea65e92f829e4f67f7f8a46d2ff5
Certificate serial:       018909F471E8D79760FE054862D3D4CCCD4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kjeSUZC_6mXpL4KeT2f3-KRtL_U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/3abc7e-1861-455f-a733-aa99f4e5029c/1/kjeSUZC_6mXpL4KeT2f3-KRtL_U.mft
Manifest number:          068F
Signing time:             Fri 30 Jun 2023 01:39:21 +0000
Manifest this update:     Fri 30 Jun 2023 01:39:21 +0000
Manifest next update:     Sat 01 Jul 2023 01:39:21 +0000
Files and hashes:         1: 9BEiR56kAvjJSYvBWAEe9BSpE4c.roa (hash: qY4mS1/D3hiQYLmPodZVvPCQvdppwmHzAiPDsteLemE=)
                          2: kjeSUZC_6mXpL4KeT2f3-KRtL_U.crl (hash: P+Q3yoZ+PHT80HnDp4NzBQqk9QO7S+7WWCTESTd+cWk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:09:f4:71:e8:d7:97:60:fe:05:48:62:d3:d4:cc:cd:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9237925190bfea65e92f829e4f67f7f8a46d2ff5
        Validity
            Not Before: Jun 30 01:39:21 2023 GMT
            Not After : Jul  1 01:39:21 2023 GMT
        Subject: CN=8aebae32ba2b60219bbf33ce9fc82ddbf183e59e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d0:ad:e8:d9:8a:32:d1:40:44:db:08:9c:f0:
                    48:d6:81:c0:e8:b9:28:3f:16:48:80:6c:b4:97:68:
                    e4:85:cc:f7:dd:27:72:bd:8f:98:a3:90:0f:bd:34:
                    b3:1b:be:57:90:ce:86:c3:f0:4a:dc:10:37:00:c0:
                    c5:85:d2:88:0a:53:d4:26:48:e0:51:d8:38:0e:bb:
                    52:e2:2f:2d:89:1a:7f:8f:d0:76:10:1f:07:d8:b4:
                    5d:7b:f1:36:30:e1:0b:30:63:2c:46:32:e0:a1:68:
                    81:d4:da:33:3c:b0:b1:b0:3b:91:3f:47:8e:84:ba:
                    bc:fb:76:e4:8f:7c:48:88:bd:cc:09:8a:41:48:da:
                    94:f2:99:6c:e0:1e:41:a5:5f:6c:30:c5:b4:52:77:
                    42:a2:f2:98:47:62:57:fb:d7:d7:a3:61:8f:6d:92:
                    6e:12:a7:7e:81:b2:56:fa:ab:6f:62:b0:c4:51:b1:
                    9a:3c:11:75:6f:03:a0:dd:10:5f:f7:28:30:83:1a:
                    92:52:1a:70:2e:f6:aa:13:f8:55:b6:dd:6e:16:e9:
                    67:00:ef:97:3d:ef:fc:ae:1b:b8:51:69:f7:13:8e:
                    19:3b:98:2b:0f:df:05:97:e2:1e:1e:16:69:56:df:
                    98:28:4e:f2:3e:a8:5d:28:5c:5d:8d:5c:8b:3a:62:
                    e6:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:EB:AE:32:BA:2B:60:21:9B:BF:33:CE:9F:C8:2D:DB:F1:83:E5:9E
            X509v3 Authority Key Identifier:
                keyid:92:37:92:51:90:BF:EA:65:E9:2F:82:9E:4F:67:F7:F8:A4:6D:2F:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kjeSUZC_6mXpL4KeT2f3-KRtL_U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3abc7e-1861-455f-a733-aa99f4e5029c/1/kjeSUZC_6mXpL4KeT2f3-KRtL_U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3abc7e-1861-455f-a733-aa99f4e5029c/1/kjeSUZC_6mXpL4KeT2f3-KRtL_U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:15:bb:ff:f5:a2:fe:73:f5:50:00:5f:9f:4f:60:4f:bb:d6:
         f9:cf:08:80:c5:ff:59:0f:6b:d2:3b:a5:ed:1e:d3:b4:b1:3b:
         01:84:e4:7d:1b:6a:96:be:0a:12:e7:c9:50:e4:b3:3d:6f:fe:
         44:aa:7b:64:14:38:b9:b7:0e:c8:1f:a5:bf:dc:99:fb:63:13:
         55:48:d4:63:9f:ef:3b:51:ae:aa:d5:b9:77:1f:3a:14:d2:e6:
         ef:e8:7f:13:57:7e:78:e2:de:62:f3:ce:7d:3b:ec:de:8d:1a:
         55:56:86:5d:08:12:5c:cc:2c:3e:c9:1a:36:9f:16:6e:0e:5b:
         fc:2f:a6:15:6c:42:07:8a:a0:39:e2:a3:b6:df:99:d1:ce:aa:
         b4:38:59:4f:0c:34:06:ae:42:41:56:76:8e:c5:66:5a:2a:a8:
         54:e3:f7:f9:a9:6b:8c:ab:cd:b9:ac:11:3c:6c:02:48:5a:06:
         87:b9:90:3f:f0:dc:b4:7b:5d:3a:c4:ec:50:3b:41:48:d7:fa:
         8f:c4:db:95:1e:74:dd:4e:00:a2:12:58:39:05:33:3d:d1:8b:
         19:b4:52:02:4d:18:1c:1e:5e:b2:de:e1:e3:a2:81:4d:3d:35:
         bf:13:e4:d4:96:b4:22:9e:fd:d1:9e:90:52:63:87:50:33:6b:
         5a:88:f2:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYkJ9HHo15dg/gVIYtPUzM1OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyMzc5MjUxOTBiZmVhNjVlOTJmODI5ZTRmNjdmN2Y4YTQ2
ZDJmZjUwHhcNMjMwNjMwMDEzOTIxWhcNMjMwNzAxMDEzOTIxWjAzMTEwLwYDVQQD
Eyg4YWViYWUzMmJhMmI2MDIxOWJiZjMzY2U5ZmM4MmRkYmYxODNlNTllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtCt6NmKMtFARNsInPBI1oHA6Lko
PxZIgGy0l2jkhcz33SdyvY+Yo5APvTSzG75XkM6Gw/BK3BA3AMDFhdKIClPUJkjg
Udg4DrtS4i8tiRp/j9B2EB8H2LRde/E2MOELMGMsRjLgoWiB1NozPLCxsDuRP0eO
hLq8+3bkj3xIiL3MCYpBSNqU8pls4B5BpV9sMMW0UndCovKYR2JX+9fXo2GPbZJu
Eqd+gbJW+qtvYrDEUbGaPBF1bwOg3RBf9ygwgxqSUhpwLvaqE/hVtt1uFulnAO+X
Pe/8rhu4UWn3E44ZO5grD98Fl+IeHhZpVt+YKE7yPqhdKFxdjVyLOmLmdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIrrrjK6K2Ahm78zzp/ILdvxg+WeMB8GA1UdIwQY
MBaAFJI3klGQv+pl6S+Cnk9n9/ikbS/1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2plU1VaQ182bVhwTDRLZVQyZjMtS1J0TF9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8zYWJjN2UtMTg2MS00NTVmLWE3MzMt
YWE5OWY0ZTUwMjljLzEva2plU1VaQ182bVhwTDRLZVQyZjMtS1J0TF9VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy8zYWJjN2UtMTg2MS00NTVmLWE3MzMtYWE5OWY0ZTUwMjlj
LzEva2plU1VaQ182bVhwTDRLZVQyZjMtS1J0TF9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAARW7//Wi
/nP1UABfn09gT7vW+c8IgMX/WQ9r0jul7R7TtLE7AYTkfRtqlr4KEufJUOSzPW/+
RKp7ZBQ4ubcOyB+lv9yZ+2MTVUjUY5/vO1GuqtW5dx86FNLm7+h/E1d+eOLeYvPO
fTvs3o0aVVaGXQgSXMwsPskaNp8Wbg5b/C+mFWxCB4qgOeKjtt+Z0c6qtDhZTww0
Bq5CQVZ2jsVmWiqoVOP3+alrjKvNuawRPGwCSFoGh7mQP/DctHtdOsTsUDtBSNf6
j8TblR503U4AohJYOQUzPdGLGbRSAk0YHB5est7h46KBTT01vxPk1Ja0Ip790Z6Q
UmOHUDNrWojyjg==
-----END CERTIFICATE-----