Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/454d35-a80c-4ddb-966d-a0fdf6f2e72d/1/j7F0Jud3RaaIe24sihENrbcZS8c.mft
File:                     j7F0Jud3RaaIe24sihENrbcZS8c.mft (raw, json)
Hash identifier:          pZKnHOmv9R9qtl38IoF8WQFtmedl8CYenNLKkGW0hfg=
Subject key identifier:   47:7C:70:9B:67:18:61:20:9A:38:03:37:23:D2:11:6E:47:BE:FF:FE
Authority key identifier: 8F:B1:74:26:E7:77:45:A6:88:7B:6E:2C:8A:11:0D:AD:B7:19:4B:C7
Certificate issuer:       /CN=8fb17426e77745a6887b6e2c8a110dadb7194bc7
Certificate serial:       018B1CE5DE72F7B52449EF13838C3E9C5E62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j7F0Jud3RaaIe24sihENrbcZS8c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/454d35-a80c-4ddb-966d-a0fdf6f2e72d/1/j7F0Jud3RaaIe24sihENrbcZS8c.mft
Manifest number:          0EC4
Signing time:             Wed 11 Oct 2023 04:01:48 +0000
Manifest this update:     Wed 11 Oct 2023 04:01:48 +0000
Manifest next update:     Thu 12 Oct 2023 04:01:48 +0000
Files and hashes:         1: 4tZgzewzCNyHfWkcGiARgf-2Q24.roa (hash: TPrXnEOQ+eTvTkhMetwAtP5AXbAXKtvNnWlfJXJ5qXM=)
                          2: 6QO3cTjjCR49mOoibLSrR6PgEFs.roa (hash: htto/CBuXDSNEZzS4hD+i4Ia1y5SxuT0EMlxTxYgXY0=)
                          3: 9UzD7Zz_VAKVM9tlCTr2QGNwhAU.roa (hash: kKUitmK7mo4afxAD+tn0ionGJcYJLt3+H4TdgVb0Qpc=)
                          4: QcxKffYW9L0mTv0Jq295IGFtAJg.roa (hash: pFWfUYdezJ2t7AHZ+5X/670ftk9lQIJoGvPFtNKSvUo=)
                          5: j7F0Jud3RaaIe24sihENrbcZS8c.crl (hash: QXvkU9ZomcZIqVOy7jmJESOHspXTp6QHwUGHyXzdSvc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:1c:e5:de:72:f7:b5:24:49:ef:13:83:8c:3e:9c:5e:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fb17426e77745a6887b6e2c8a110dadb7194bc7
        Validity
            Not Before: Oct 11 04:01:48 2023 GMT
            Not After : Oct 12 04:01:48 2023 GMT
        Subject: CN=477c709b671861209a38033723d2116e47befffe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:12:0b:9c:2c:28:c6:7b:9d:17:21:e5:12:b6:
                    74:b4:47:f0:e7:ae:ba:cc:23:24:71:26:91:51:11:
                    49:fe:ac:3c:f2:01:d0:6e:e9:b5:a4:94:d3:84:4a:
                    80:d3:27:74:11:99:5f:2a:d0:49:fb:b9:52:b9:aa:
                    e8:5c:f5:d1:0c:9c:25:a8:bc:66:21:49:9c:81:14:
                    10:86:b7:ab:3b:2a:b7:a1:b3:de:b6:f5:d9:56:ad:
                    6f:88:d9:f4:be:ce:9b:21:99:c0:46:36:53:34:0a:
                    cf:65:78:3d:7d:0a:a0:c6:63:a7:0e:f6:65:9d:ee:
                    ef:bb:90:12:38:1b:87:8f:4e:a2:3d:eb:7d:fa:57:
                    83:23:57:e4:d0:27:cb:7e:7f:a1:ae:d0:d2:69:53:
                    0d:bb:7d:16:1a:e7:f2:2b:f1:c9:ab:d4:68:da:37:
                    2b:5a:5f:32:ad:ac:a6:76:38:e2:a7:d1:51:41:ea:
                    e6:73:43:65:62:d2:b7:04:78:cc:37:28:4e:d5:5c:
                    58:20:a1:8f:73:b1:f5:d6:ed:4e:a6:fb:95:3a:3b:
                    9c:6b:35:18:91:40:d9:38:95:c9:41:40:40:f8:70:
                    24:f9:c5:e2:89:3a:f3:71:69:21:c7:e7:a7:e2:5c:
                    33:fd:10:91:bd:76:03:40:bd:46:de:ea:b8:62:bc:
                    99:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:7C:70:9B:67:18:61:20:9A:38:03:37:23:D2:11:6E:47:BE:FF:FE
            X509v3 Authority Key Identifier:
                keyid:8F:B1:74:26:E7:77:45:A6:88:7B:6E:2C:8A:11:0D:AD:B7:19:4B:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7F0Jud3RaaIe24sihENrbcZS8c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/454d35-a80c-4ddb-966d-a0fdf6f2e72d/1/j7F0Jud3RaaIe24sihENrbcZS8c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/454d35-a80c-4ddb-966d-a0fdf6f2e72d/1/j7F0Jud3RaaIe24sihENrbcZS8c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:c0:7f:65:70:32:5e:f3:7c:ec:be:9f:8f:50:de:52:19:cb:
         77:0a:49:e8:97:b1:57:1e:82:52:40:22:92:a4:a5:23:a2:8d:
         12:2c:27:48:e8:06:26:52:ab:39:53:f1:4f:d9:64:70:6b:0a:
         cd:6d:3d:0c:bc:df:9d:8e:16:65:f1:b8:38:94:f7:52:0c:69:
         65:83:c3:5d:ec:1b:18:6a:41:fa:33:a5:96:cd:d6:3b:cd:39:
         0a:7f:d7:c6:8a:ce:0e:bd:89:f8:50:63:bf:50:c9:cf:9b:2c:
         2f:4a:aa:57:20:42:88:a8:5f:09:05:0e:bd:b3:25:90:01:8a:
         45:bd:32:50:3b:4d:33:f2:b3:2a:9c:4c:fb:8a:6d:b3:35:eb:
         0f:41:c3:6e:3b:86:9e:56:d0:8e:83:7b:d7:ca:e2:9f:df:ad:
         52:37:c2:9a:ef:75:ed:74:7b:eb:e5:85:f3:d5:c3:cb:f4:03:
         09:1a:c9:46:96:38:63:10:60:46:c6:89:a2:a2:63:4a:c2:49:
         7e:b5:c5:bc:82:60:50:05:4f:08:be:6c:26:44:7b:cc:4b:f7:
         17:90:9a:a3:70:9a:7f:f9:36:97:5f:53:b4:b1:e9:fd:91:84:
         24:f5:3e:31:0e:38:5a:8b:36:8b:79:1e:0c:97:04:a4:86:c1:
         e3:e1:24:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYsc5d5y97UkSe8Tg4w+nF5iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmYjE3NDI2ZTc3NzQ1YTY4ODdiNmUyYzhhMTEwZGFkYjcx
OTRiYzcwHhcNMjMxMDExMDQwMTQ4WhcNMjMxMDEyMDQwMTQ4WjAzMTEwLwYDVQQD
Eyg0NzdjNzA5YjY3MTg2MTIwOWEzODAzMzcyM2QyMTE2ZTQ3YmVmZmZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBILnCwoxnudFyHlErZ0tEfw5666
zCMkcSaRURFJ/qw88gHQbum1pJTThEqA0yd0EZlfKtBJ+7lSuaroXPXRDJwlqLxm
IUmcgRQQhrerOyq3obPetvXZVq1viNn0vs6bIZnARjZTNArPZXg9fQqgxmOnDvZl
ne7vu5ASOBuHj06iPet9+leDI1fk0CfLfn+hrtDSaVMNu30WGufyK/HJq9Ro2jcr
Wl8yraymdjjip9FRQermc0NlYtK3BHjMNyhO1VxYIKGPc7H11u1OpvuVOjucazUY
kUDZOJXJQUBA+HAk+cXiiTrzcWkhx+en4lwz/RCRvXYDQL1G3uq4YryZCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEd8cJtnGGEgmjgDNyPSEW5Hvv/+MB8GA1UdIwQY
MBaAFI+xdCbnd0WmiHtuLIoRDa23GUvHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajdGMEp1ZDNSYWFJZTI0c2loRU5yYmNaUzhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi80NTRkMzUtYTgwYy00ZGRiLTk2NmQt
YTBmZGY2ZjJlNzJkLzEvajdGMEp1ZDNSYWFJZTI0c2loRU5yYmNaUzhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi80NTRkMzUtYTgwYy00ZGRiLTk2NmQtYTBmZGY2ZjJlNzJk
LzEvajdGMEp1ZDNSYWFJZTI0c2loRU5yYmNaUzhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZsB/ZXAy
XvN87L6fj1DeUhnLdwpJ6JexVx6CUkAikqSlI6KNEiwnSOgGJlKrOVPxT9lkcGsK
zW09DLzfnY4WZfG4OJT3UgxpZYPDXewbGGpB+jOlls3WO805Cn/XxorODr2J+FBj
v1DJz5ssL0qqVyBCiKhfCQUOvbMlkAGKRb0yUDtNM/KzKpxM+4ptszXrD0HDbjuG
nlbQjoN718rin9+tUjfCmu917XR76+WF89XDy/QDCRrJRpY4YxBgRsaJoqJjSsJJ
frXFvIJgUAVPCL5sJkR7zEv3F5Cao3Caf/k2l19TtLHp/ZGEJPU+MQ44Wos2i3ke
DJcEpIbB4+EkSA==
-----END CERTIFICATE-----