Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/34f815-61c1-44eb-b964-4a85593529c8/1/gn120EQnBHH-36UhGFf3jRhU6Gg.mft
File:                     gn120EQnBHH-36UhGFf3jRhU6Gg.mft (raw, json)
Hash identifier:          yJutnNXKDchK6CMv3e2/oXSDRRnNkx4hcQML93KPFaA=
Subject key identifier:   08:87:6E:AF:58:B3:62:F7:3F:35:4D:D8:C8:22:D5:48:82:E0:D6:87
Authority key identifier: 82:7D:76:D0:44:27:04:71:FE:DF:A5:21:18:57:F7:8D:18:54:E8:68
Certificate issuer:       /CN=827d76d044270471fedfa5211857f78d1854e868
Certificate serial:       01899B856BDA343A72163CA43F693AE7AF3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gn120EQnBHH-36UhGFf3jRhU6Gg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/34f815-61c1-44eb-b964-4a85593529c8/1/gn120EQnBHH-36UhGFf3jRhU6Gg.mft
Manifest number:          0E5D
Signing time:             Fri 28 Jul 2023 08:02:39 +0000
Manifest this update:     Fri 28 Jul 2023 08:02:39 +0000
Manifest next update:     Sat 29 Jul 2023 08:02:39 +0000
Files and hashes:         1: YFo2wMWPT-rm8tk8LU-iqtw7Kao.roa (hash: +w9A8zRyh5TN3R84X2LKK8DCmjO/Z/rOT/MtdfSPTDw=)
                          2: gn120EQnBHH-36UhGFf3jRhU6Gg.crl (hash: +gSIFwrmdK6JkLDrlS1+OyNXJ666A/Div1X4qsUSmB8=)
                          3: sdOUPEBWpvoNMduV6syHt2k7GGw.roa (hash: o3OkXnRv9mwGioWb6gYeCg50H4+ZEHsGRDEYI0TovxU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:9b:85:6b:da:34:3a:72:16:3c:a4:3f:69:3a:e7:af:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=827d76d044270471fedfa5211857f78d1854e868
        Validity
            Not Before: Jul 28 08:02:39 2023 GMT
            Not After : Jul 29 08:02:39 2023 GMT
        Subject: CN=08876eaf58b362f73f354dd8c822d54882e0d687
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:f9:4b:dc:f2:ca:f1:19:91:44:01:50:75:23:
                    c4:db:08:3b:fc:df:c3:73:d6:d0:82:7a:0d:49:eb:
                    1d:cc:53:9e:28:3d:61:09:fc:22:0c:5d:05:b9:40:
                    54:22:0d:c3:9d:d8:3b:7f:24:df:87:5a:8f:04:55:
                    de:2c:20:30:ad:ba:e8:36:ba:41:f6:48:d2:59:4a:
                    88:8b:c2:c1:9a:bb:40:89:a9:a1:a2:b5:a5:c5:4b:
                    a7:fb:24:78:3c:88:6a:26:f0:03:1a:49:c3:f9:61:
                    51:28:bf:b7:5f:c7:e9:4d:04:52:fb:06:0d:14:77:
                    35:7f:74:11:92:54:c1:67:db:03:7e:c9:75:aa:95:
                    a5:bb:28:39:a1:30:80:7e:e7:ea:66:01:fd:70:15:
                    be:f1:82:0c:71:04:db:34:2c:78:d0:d9:a0:21:3e:
                    54:f3:31:fe:6c:c5:f6:23:4a:0d:97:6e:ca:64:e2:
                    ea:ae:3d:60:fd:65:fd:1f:b1:9c:ff:78:9d:ff:c4:
                    19:16:c8:07:e7:4b:97:1f:e2:2a:1a:da:e0:e5:27:
                    a9:a6:85:9a:64:51:7d:54:52:88:8c:26:20:fe:93:
                    98:89:4a:7b:d6:f4:e3:e4:93:05:38:d9:67:8b:27:
                    3c:f8:0c:68:1e:47:18:a4:52:39:67:d7:0b:b9:de:
                    75:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:87:6E:AF:58:B3:62:F7:3F:35:4D:D8:C8:22:D5:48:82:E0:D6:87
            X509v3 Authority Key Identifier:
                keyid:82:7D:76:D0:44:27:04:71:FE:DF:A5:21:18:57:F7:8D:18:54:E8:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gn120EQnBHH-36UhGFf3jRhU6Gg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/34f815-61c1-44eb-b964-4a85593529c8/1/gn120EQnBHH-36UhGFf3jRhU6Gg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/34f815-61c1-44eb-b964-4a85593529c8/1/gn120EQnBHH-36UhGFf3jRhU6Gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:b9:8f:fc:ad:32:e7:50:26:1f:fb:79:44:bf:8d:30:57:78:
         32:77:79:01:36:aa:1e:2d:e7:d1:b1:5e:c4:79:eb:ae:0a:97:
         cc:aa:c7:b5:93:55:c3:ce:0e:d0:ca:2b:44:a5:99:50:c2:a1:
         7e:57:cd:9e:95:b0:3b:d0:dc:e0:b9:31:2a:1f:7a:64:15:1b:
         7a:6c:97:82:62:a6:d3:bb:97:38:b0:bf:05:81:76:5d:1d:4a:
         56:b1:f5:b5:6e:e5:2d:f4:fc:bf:31:ba:fe:db:4c:54:66:89:
         88:3c:eb:60:e7:d2:1f:78:f9:47:63:a2:3b:33:a8:23:87:78:
         c8:2e:4b:19:d6:1e:d7:a9:fa:80:41:ec:ee:37:2d:4e:ff:5c:
         75:14:d4:5c:d7:91:90:f8:b0:69:a8:5f:c7:45:c6:8f:fd:aa:
         91:37:4b:e9:a0:74:07:82:e9:e4:81:10:25:22:81:08:ea:57:
         c7:4e:60:5a:3f:78:ce:b7:04:f2:d2:18:b8:d1:c2:aa:e3:f1:
         5f:cb:15:8b:9e:49:81:39:ba:e1:54:5a:2c:39:56:5e:57:50:
         46:2e:1e:b2:24:55:07:ff:8b:aa:53:b7:c5:b6:ba:c6:cf:c7:
         1b:77:d3:88:39:46:83:43:6d:db:81:19:7b:0c:c7:c2:c9:3a:
         47:86:b6:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYmbhWvaNDpyFjykP2k65688MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyN2Q3NmQwNDQyNzA0NzFmZWRmYTUyMTE4NTdmNzhkMTg1
NGU4NjgwHhcNMjMwNzI4MDgwMjM5WhcNMjMwNzI5MDgwMjM5WjAzMTEwLwYDVQQD
EygwODg3NmVhZjU4YjM2MmY3M2YzNTRkZDhjODIyZDU0ODgyZTBkNjg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9flL3PLK8RmRRAFQdSPE2wg7/N/D
c9bQgnoNSesdzFOeKD1hCfwiDF0FuUBUIg3Dndg7fyTfh1qPBFXeLCAwrbroNrpB
9kjSWUqIi8LBmrtAiamhorWlxUun+yR4PIhqJvADGknD+WFRKL+3X8fpTQRS+wYN
FHc1f3QRklTBZ9sDfsl1qpWluyg5oTCAfufqZgH9cBW+8YIMcQTbNCx40NmgIT5U
8zH+bMX2I0oNl27KZOLqrj1g/WX9H7Gc/3id/8QZFsgH50uXH+IqGtrg5SeppoWa
ZFF9VFKIjCYg/pOYiUp71vTj5JMFONlniyc8+AxoHkcYpFI5Z9cLud51owIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAiHbq9Ys2L3PzVN2Mgi1UiC4NaHMB8GA1UdIwQY
MBaAFIJ9dtBEJwRx/t+lIRhX940YVOhoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ24xMjBFUW5CSEgtMzZVaEdGZjNqUmhVNkdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC8zNGY4MTUtNjFjMS00NGViLWI5NjQt
NGE4NTU5MzUyOWM4LzEvZ24xMjBFUW5CSEgtMzZVaEdGZjNqUmhVNkdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC8zNGY4MTUtNjFjMS00NGViLWI5NjQtNGE4NTU5MzUyOWM4
LzEvZ24xMjBFUW5CSEgtMzZVaEdGZjNqUmhVNkdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAabmP/K0y
51AmH/t5RL+NMFd4Mnd5ATaqHi3n0bFexHnrrgqXzKrHtZNVw84O0MorRKWZUMKh
flfNnpWwO9Dc4LkxKh96ZBUbemyXgmKm07uXOLC/BYF2XR1KVrH1tW7lLfT8vzG6
/ttMVGaJiDzrYOfSH3j5R2OiOzOoI4d4yC5LGdYe16n6gEHs7jctTv9cdRTUXNeR
kPiwaahfx0XGj/2qkTdL6aB0B4Lp5IEQJSKBCOpXx05gWj94zrcE8tIYuNHCquPx
X8sVi55JgTm64VRaLDlWXldQRi4esiRVB/+LqlO3xba6xs/HG3fTiDlGg0Nt24EZ
ewzHwsk6R4a2rQ==
-----END CERTIFICATE-----