Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/d11f09-8f53-4a45-84e5-38f520ac7966/1/MT9J02KWoVZbhRB8Ka6jiSDfDfo.mft
File:                     MT9J02KWoVZbhRB8Ka6jiSDfDfo.mft (raw, json)
Hash identifier:          /BOuXfGO3DihzSpLsjgUle1DZslzuMof+Phw67YYf1k=
Subject key identifier:   9B:18:D3:99:DB:57:C1:F1:78:7B:AC:A5:84:2F:8A:2F:28:09:4D:F5
Authority key identifier: 31:3F:49:D3:62:96:A1:56:5B:85:10:7C:29:AE:A3:89:20:DF:0D:FA
Certificate issuer:       /CN=313f49d36296a1565b85107c29aea38920df0dfa
Certificate serial:       018CB49789C3A84611509DB437761E542A7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MT9J02KWoVZbhRB8Ka6jiSDfDfo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/d11f09-8f53-4a45-84e5-38f520ac7966/1/MT9J02KWoVZbhRB8Ka6jiSDfDfo.mft
Manifest number:          0E24
Signing time:             Fri 29 Dec 2023 08:01:19 +0000
Manifest this update:     Fri 29 Dec 2023 08:01:19 +0000
Manifest next update:     Sat 30 Dec 2023 08:01:19 +0000
Files and hashes:         1: MT9J02KWoVZbhRB8Ka6jiSDfDfo.crl (hash: LvqDvR+yZDHJCpEwqDoWgSKWpZz1yeh4PHYYx2UP8Dg=)
                          2: MzYoxEbR75ls_bfOelNdacEhZuo.roa (hash: bSFn6PZ2jpptEeSaSbx+nbDsrRn9EabvxxCJ/8+MEnA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:b4:97:89:c3:a8:46:11:50:9d:b4:37:76:1e:54:2a:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=313f49d36296a1565b85107c29aea38920df0dfa
        Validity
            Not Before: Dec 29 08:01:19 2023 GMT
            Not After : Dec 30 08:01:19 2023 GMT
        Subject: CN=9b18d399db57c1f1787baca5842f8a2f28094df5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:32:ff:11:35:88:a4:fa:26:39:92:96:36:7a:
                    3a:af:5d:32:6e:71:0b:ca:ff:ad:58:b3:44:59:ba:
                    56:1c:05:5b:ab:65:f2:1a:c3:9e:89:3b:6b:15:87:
                    0d:11:87:1e:a0:8d:28:66:e9:72:a7:23:2a:c1:58:
                    b3:2d:70:19:98:c5:77:3f:48:8e:3b:2e:69:b7:9e:
                    78:08:31:c2:8d:1f:3b:c7:76:09:c5:d8:75:67:9a:
                    11:bd:eb:15:c2:4f:4a:1a:47:9f:08:26:2f:ea:28:
                    f0:74:ee:8e:56:81:14:8c:eb:20:c6:19:96:9e:c6:
                    c4:5b:87:cd:5d:b9:30:88:0e:dd:46:05:1e:77:7f:
                    84:a2:53:6b:d7:f4:57:d1:2e:d0:85:41:b1:21:f5:
                    2f:cc:98:ef:5b:52:6c:bd:ce:56:ea:38:52:c2:23:
                    19:6c:98:22:6b:9e:76:5d:db:41:14:db:d4:fb:ae:
                    52:a0:04:3f:86:5f:11:ec:20:54:da:5a:08:38:bb:
                    3a:62:58:e4:9a:b0:ff:e6:ed:f0:4f:0c:2d:2c:8f:
                    65:58:e2:a8:f3:bb:56:fa:3d:92:71:2c:1f:72:59:
                    03:2d:d7:ee:bc:3b:96:76:1e:48:fe:e0:db:99:f9:
                    a8:80:fa:34:f7:a2:19:3c:24:53:1c:9e:b6:7e:40:
                    28:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:18:D3:99:DB:57:C1:F1:78:7B:AC:A5:84:2F:8A:2F:28:09:4D:F5
            X509v3 Authority Key Identifier:
                keyid:31:3F:49:D3:62:96:A1:56:5B:85:10:7C:29:AE:A3:89:20:DF:0D:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MT9J02KWoVZbhRB8Ka6jiSDfDfo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d11f09-8f53-4a45-84e5-38f520ac7966/1/MT9J02KWoVZbhRB8Ka6jiSDfDfo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d11f09-8f53-4a45-84e5-38f520ac7966/1/MT9J02KWoVZbhRB8Ka6jiSDfDfo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:7b:84:46:73:be:17:70:46:81:ce:ae:0b:5d:0c:a5:7e:4d:
         4d:96:23:e2:9c:09:86:e9:10:55:af:13:9c:b4:7c:1e:6c:b4:
         75:42:59:60:94:25:4d:db:ee:99:2b:44:66:51:f2:c7:27:6a:
         b4:9a:ae:95:8c:25:86:50:db:fb:0a:b3:5f:0f:d0:ad:32:eb:
         d1:e3:72:c7:b0:01:44:ef:03:76:21:5d:8a:85:ff:5a:ba:e3:
         1e:37:e0:d9:38:b4:cd:0b:d2:f4:fe:17:9a:a6:51:8e:ad:dd:
         a5:62:26:5c:c1:0f:e8:f2:48:f7:b1:9c:99:ca:c7:55:65:94:
         78:32:7d:be:04:b3:46:88:dd:7c:46:91:e8:2b:19:cb:7d:d7:
         2b:a2:46:a0:28:70:cc:fb:3c:e9:51:6c:78:2a:5f:ad:c0:31:
         4d:4c:05:53:0c:8a:18:08:7c:55:59:f9:75:15:65:93:77:0d:
         3f:88:0e:da:11:70:87:d6:6b:2f:31:1b:6d:c5:4e:2f:20:cf:
         99:23:a4:a8:6c:42:03:f1:0c:fc:47:39:cc:3c:87:38:47:61:
         97:c4:5d:98:a5:35:85:de:6f:52:23:6d:a6:f4:28:68:a6:19:
         f0:56:52:bd:4a:bd:53:5c:19:6e:4e:34:6b:0d:69:1b:4a:1f:
         4d:18:63:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYy0l4nDqEYRUJ20N3YeVCp+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxM2Y0OWQzNjI5NmExNTY1Yjg1MTA3YzI5YWVhMzg5MjBk
ZjBkZmEwHhcNMjMxMjI5MDgwMTE5WhcNMjMxMjMwMDgwMTE5WjAzMTEwLwYDVQQD
Eyg5YjE4ZDM5OWRiNTdjMWYxNzg3YmFjYTU4NDJmOGEyZjI4MDk0ZGY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijL/ETWIpPomOZKWNno6r10ybnEL
yv+tWLNEWbpWHAVbq2XyGsOeiTtrFYcNEYceoI0oZulypyMqwVizLXAZmMV3P0iO
Oy5pt554CDHCjR87x3YJxdh1Z5oRvesVwk9KGkefCCYv6ijwdO6OVoEUjOsgxhmW
nsbEW4fNXbkwiA7dRgUed3+EolNr1/RX0S7QhUGxIfUvzJjvW1Jsvc5W6jhSwiMZ
bJgia552XdtBFNvU+65SoAQ/hl8R7CBU2loIOLs6YljkmrD/5u3wTwwtLI9lWOKo
87tW+j2ScSwfclkDLdfuvDuWdh5I/uDbmfmogPo096IZPCRTHJ62fkAoZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJsY05nbV8HxeHuspYQvii8oCU31MB8GA1UdIwQY
MBaAFDE/SdNilqFWW4UQfCmuo4kg3w36MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVQ5SjAyS1dvVlpiaFJCOEthNmppU0RmRGZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9kMTFmMDktOGY1My00YTQ1LTg0ZTUt
MzhmNTIwYWM3OTY2LzEvTVQ5SjAyS1dvVlpiaFJCOEthNmppU0RmRGZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9kMTFmMDktOGY1My00YTQ1LTg0ZTUtMzhmNTIwYWM3OTY2
LzEvTVQ5SjAyS1dvVlpiaFJCOEthNmppU0RmRGZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALXuERnO+
F3BGgc6uC10MpX5NTZYj4pwJhukQVa8TnLR8Hmy0dUJZYJQlTdvumStEZlHyxydq
tJqulYwlhlDb+wqzXw/QrTLr0eNyx7ABRO8DdiFdioX/WrrjHjfg2Ti0zQvS9P4X
mqZRjq3dpWImXMEP6PJI97GcmcrHVWWUeDJ9vgSzRojdfEaR6CsZy33XK6JGoChw
zPs86VFseCpfrcAxTUwFUwyKGAh8VVn5dRVlk3cNP4gO2hFwh9ZrLzEbbcVOLyDP
mSOkqGxCA/EM/Ec5zDyHOEdhl8RdmKU1hd5vUiNtpvQoaKYZ8FZSvUq9U1wZbk40
aw1pG0ofTRhjNA==
-----END CERTIFICATE-----