Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/7d1e01-a24b-4e1e-a981-c6d81cf4e000/1/7m4K75qFToiA4fDkbQe5S-X2ueo.mft
File:                     7m4K75qFToiA4fDkbQe5S-X2ueo.mft (raw, json)
Hash identifier:          8BksaVoqOftLJyoxCj1/KJQ+iyP3VqVn8Pg0G3tizJE=
Subject key identifier:   F9:09:EF:80:30:49:64:70:CF:D9:86:56:4B:A8:96:4A:73:53:77:E2
Authority key identifier: EE:6E:0A:EF:9A:85:4E:88:80:E1:F0:E4:6D:07:B9:4B:E5:F6:B9:EA
Certificate issuer:       /CN=ee6e0aef9a854e8880e1f0e46d07b94be5f6b9ea
Certificate serial:       018C90C290D6E7A85BFD2CE340F7EC7D6911
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7m4K75qFToiA4fDkbQe5S-X2ueo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/7d1e01-a24b-4e1e-a981-c6d81cf4e000/1/7m4K75qFToiA4fDkbQe5S-X2ueo.mft
Manifest number:          0BE5
Signing time:             Fri 22 Dec 2023 09:01:59 +0000
Manifest this update:     Fri 22 Dec 2023 09:01:59 +0000
Manifest next update:     Sat 23 Dec 2023 09:01:59 +0000
Files and hashes:         1: 7m4K75qFToiA4fDkbQe5S-X2ueo.crl (hash: /w6a7HsVvy4fEwBOjloLm737j37Ki7rRQVWd7vsyMBM=)
                          2: LAoEKhh3QdV5Y9vAd-SHxRz9QbM.roa (hash: 9n/67vL5oEzQr0e0QpRPNiUeFthS39iPOINayeok1Qo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:90:c2:90:d6:e7:a8:5b:fd:2c:e3:40:f7:ec:7d:69:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee6e0aef9a854e8880e1f0e46d07b94be5f6b9ea
        Validity
            Not Before: Dec 22 09:01:59 2023 GMT
            Not After : Dec 23 09:01:59 2023 GMT
        Subject: CN=f909ef8030496470cfd986564ba8964a735377e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:c1:9c:66:10:92:5b:ea:17:85:4d:60:14:c5:
                    41:74:b5:8d:ca:b6:3d:b6:0b:98:ba:a8:12:8f:92:
                    8d:a3:2f:9d:ea:9a:24:e3:33:3f:b6:3f:7c:83:b4:
                    30:13:9e:eb:c8:89:b4:cc:13:d9:1a:21:d3:d3:68:
                    e1:d0:ba:5e:3f:27:3b:c5:dd:c0:f1:30:a6:0a:3f:
                    e0:ba:75:8f:0d:7a:62:72:9f:50:ec:77:f7:20:3c:
                    90:51:13:55:5d:4e:ba:1d:da:6f:24:d2:68:55:b7:
                    9e:6a:83:5d:31:e4:ef:00:f7:5a:8d:19:e5:7d:b5:
                    d1:c7:00:86:22:45:34:6a:6f:6c:f0:a2:71:c6:f6:
                    0d:49:d9:70:f9:d8:20:9a:a3:e0:58:40:2d:06:da:
                    2e:c7:89:b5:ed:8a:e6:2a:a8:95:54:db:e3:c6:f6:
                    2f:fe:58:d9:c0:96:5e:9f:b8:8b:cf:a3:51:a4:15:
                    ba:52:07:6b:8c:1b:e9:c0:c5:f0:72:50:8a:bb:87:
                    20:e9:d8:60:32:0a:66:fd:4c:03:f6:37:03:e3:ed:
                    9f:a5:11:85:7b:74:4a:3d:2c:7b:31:69:76:b6:da:
                    01:81:7f:af:21:dc:17:d0:b4:8f:54:25:be:76:d7:
                    ec:c1:83:48:3c:2b:97:4a:0a:0b:a1:36:dd:ce:47:
                    43:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:09:EF:80:30:49:64:70:CF:D9:86:56:4B:A8:96:4A:73:53:77:E2
            X509v3 Authority Key Identifier:
                keyid:EE:6E:0A:EF:9A:85:4E:88:80:E1:F0:E4:6D:07:B9:4B:E5:F6:B9:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7m4K75qFToiA4fDkbQe5S-X2ueo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/7d1e01-a24b-4e1e-a981-c6d81cf4e000/1/7m4K75qFToiA4fDkbQe5S-X2ueo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/7d1e01-a24b-4e1e-a981-c6d81cf4e000/1/7m4K75qFToiA4fDkbQe5S-X2ueo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:25:11:ae:80:9a:2e:cb:f7:9f:68:06:43:df:c6:de:d4:22:
         7b:a3:8a:c9:e7:32:3a:3c:8e:50:38:45:c3:c1:13:2f:bd:d7:
         4e:89:a1:42:e1:1b:c5:24:2b:c0:74:9c:c7:23:09:0b:03:27:
         f5:ae:a1:18:7b:1f:8d:f7:67:1b:95:bb:74:50:da:77:76:e9:
         78:a7:61:44:84:c9:41:cd:b4:e0:7b:3d:a5:f1:be:9c:27:6b:
         f6:30:14:6e:20:05:df:19:39:3b:b7:28:cb:4a:e1:ae:f7:7b:
         6f:67:96:45:76:42:65:a2:6e:75:6f:e1:72:ae:f4:7e:d5:4b:
         79:ff:d2:6f:99:3d:33:e9:29:ce:d9:2e:b4:5e:7b:b8:78:5d:
         12:7e:ba:d8:9b:5e:f8:ad:94:88:d7:53:d8:95:0b:9f:dd:c7:
         fa:eb:3c:f9:b2:cc:5b:a5:a8:dc:0e:cd:80:d2:ff:e7:eb:67:
         01:eb:6d:ec:9c:87:0d:a0:64:ce:24:5a:f2:b8:b9:81:e4:33:
         92:20:9b:7c:28:41:e8:b5:88:d9:ca:16:fe:ac:c3:27:62:e3:
         02:31:a8:12:42:e9:86:c4:d8:24:3f:0d:07:96:a0:84:39:ea:
         aa:81:c4:1c:98:5f:39:9b:6c:18:49:85:bd:10:3c:48:26:c1:
         7a:9b:38:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYyQwpDW56hb/SzjQPfsfWkRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlNmUwYWVmOWE4NTRlODg4MGUxZjBlNDZkMDdiOTRiZTVm
NmI5ZWEwHhcNMjMxMjIyMDkwMTU5WhcNMjMxMjIzMDkwMTU5WjAzMTEwLwYDVQQD
EyhmOTA5ZWY4MDMwNDk2NDcwY2ZkOTg2NTY0YmE4OTY0YTczNTM3N2UyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2sGcZhCSW+oXhU1gFMVBdLWNyrY9
tguYuqgSj5KNoy+d6pok4zM/tj98g7QwE57ryIm0zBPZGiHT02jh0LpePyc7xd3A
8TCmCj/gunWPDXpicp9Q7Hf3IDyQURNVXU66HdpvJNJoVbeeaoNdMeTvAPdajRnl
fbXRxwCGIkU0am9s8KJxxvYNSdlw+dggmqPgWEAtBtoux4m17YrmKqiVVNvjxvYv
/ljZwJZen7iLz6NRpBW6UgdrjBvpwMXwclCKu4cg6dhgMgpm/UwD9jcD4+2fpRGF
e3RKPSx7MWl2ttoBgX+vIdwX0LSPVCW+dtfswYNIPCuXSgoLoTbdzkdDMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPkJ74AwSWRwz9mGVkuolkpzU3fiMB8GA1UdIwQY
MBaAFO5uCu+ahU6IgOHw5G0HuUvl9rnqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN200Szc1cUZUb2lBNGZEa2JRZTVTLVgydWVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS83ZDFlMDEtYTI0Yi00ZTFlLWE5ODEt
YzZkODFjZjRlMDAwLzEvN200Szc1cUZUb2lBNGZEa2JRZTVTLVgydWVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS83ZDFlMDEtYTI0Yi00ZTFlLWE5ODEtYzZkODFjZjRlMDAw
LzEvN200Szc1cUZUb2lBNGZEa2JRZTVTLVgydWVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjCURroCa
Lsv3n2gGQ9/G3tQie6OKyecyOjyOUDhFw8ETL73XTomhQuEbxSQrwHScxyMJCwMn
9a6hGHsfjfdnG5W7dFDad3bpeKdhRITJQc204Hs9pfG+nCdr9jAUbiAF3xk5O7co
y0rhrvd7b2eWRXZCZaJudW/hcq70ftVLef/Sb5k9M+kpztkutF57uHhdEn662Jte
+K2UiNdT2JULn93H+us8+bLMW6Wo3A7NgNL/5+tnAett7JyHDaBkziRa8ri5geQz
kiCbfChB6LWI2coW/qzDJ2LjAjGoEkLphsTYJD8NB5aghDnqqoHEHJhfOZtsGEmF
vRA8SCbBeps4Dw==
-----END CERTIFICATE-----