Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/e2a497-4db8-4c4a-858e-0fbe7cbbff1d/1/R8ZP9yMOiZJkhERdSshis-n6_k0.mft
File:                     R8ZP9yMOiZJkhERdSshis-n6_k0.mft (raw, json)
Hash identifier:          1lgHeqX/WPllYct3Iss51QntSpN6i2hzO+3ykul4KLc=
Subject key identifier:   A0:20:BE:1C:1E:E7:63:68:EC:C4:1E:56:6D:8F:DC:D5:45:A2:6B:73
Authority key identifier: 47:C6:4F:F7:23:0E:89:92:64:84:44:5D:4A:C8:62:B3:E9:FA:FE:4D
Certificate issuer:       /CN=47c64ff7230e89926484445d4ac862b3e9fafe4d
Certificate serial:       018B89788A9ADB3F97BF3EC7B2193370BA4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R8ZP9yMOiZJkhERdSshis-n6_k0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/e2a497-4db8-4c4a-858e-0fbe7cbbff1d/1/R8ZP9yMOiZJkhERdSshis-n6_k0.mft
Manifest number:          08CE
Signing time:             Wed 01 Nov 2023 06:01:00 +0000
Manifest this update:     Wed 01 Nov 2023 06:01:00 +0000
Manifest next update:     Thu 02 Nov 2023 06:01:00 +0000
Files and hashes:         1: R8ZP9yMOiZJkhERdSshis-n6_k0.crl (hash: zd+It5CEZVuOHEj7rPzyh6QwFJ6DkmaOUH4JOLLCmxo=)
                          2: oAdC-oR_fGI4RrWbBwvT0awb3Ko.roa (hash: 26ONaqGyT0I5Wt0n4fb2EXmGbSAVgtorelZVVAbify4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:89:78:8a:9a:db:3f:97:bf:3e:c7:b2:19:33:70:ba:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47c64ff7230e89926484445d4ac862b3e9fafe4d
        Validity
            Not Before: Nov  1 06:01:00 2023 GMT
            Not After : Nov  2 06:01:00 2023 GMT
        Subject: CN=a020be1c1ee76368ecc41e566d8fdcd545a26b73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:81:6b:b2:85:9d:67:96:23:29:74:dc:1e:ae:
                    de:b9:f1:e1:c9:69:08:89:0a:4c:f9:34:f1:85:f0:
                    3e:6e:db:aa:af:54:82:0e:a6:df:19:9d:e7:9f:c5:
                    cf:ad:31:3b:16:12:f0:0d:11:cc:86:0e:6d:fd:44:
                    65:2c:e5:e3:22:89:8a:ed:a5:a8:67:92:ae:59:18:
                    b9:66:9c:ec:90:5d:33:dc:43:e6:95:c1:24:52:62:
                    c5:48:69:81:5e:a9:e8:96:97:c8:70:22:2e:de:e7:
                    f3:14:50:97:a7:f3:94:08:26:7c:4f:62:8a:c5:68:
                    5a:0b:89:a4:4b:ea:9f:92:2f:40:27:bc:6a:22:a8:
                    f5:c7:69:e2:41:ab:fa:dd:7f:f8:e1:4e:4b:be:5d:
                    ab:43:d2:53:5c:4a:8c:31:ad:39:bd:47:98:31:cc:
                    8f:81:31:20:d7:b5:73:72:6b:b8:5b:b3:24:33:10:
                    8c:25:08:2f:2c:d6:a1:fc:de:c3:57:0d:bb:a3:e4:
                    00:75:9c:6d:2d:3a:2c:48:98:d7:ea:a2:e1:a6:ab:
                    b9:2c:0a:11:45:e8:d5:85:77:5e:46:d4:cf:26:81:
                    96:d3:ad:2e:29:85:2e:54:55:80:c5:2a:da:c8:68:
                    88:54:20:78:54:2d:50:da:34:18:74:5d:2c:18:4e:
                    1e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:20:BE:1C:1E:E7:63:68:EC:C4:1E:56:6D:8F:DC:D5:45:A2:6B:73
            X509v3 Authority Key Identifier:
                keyid:47:C6:4F:F7:23:0E:89:92:64:84:44:5D:4A:C8:62:B3:E9:FA:FE:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R8ZP9yMOiZJkhERdSshis-n6_k0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e2a497-4db8-4c4a-858e-0fbe7cbbff1d/1/R8ZP9yMOiZJkhERdSshis-n6_k0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e2a497-4db8-4c4a-858e-0fbe7cbbff1d/1/R8ZP9yMOiZJkhERdSshis-n6_k0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:a7:cd:b8:5e:98:22:44:cf:a8:2e:d4:1f:85:d7:b9:2a:fb:
         55:09:18:f1:39:0c:06:d1:3c:42:3c:ca:a4:e2:50:98:14:ec:
         52:b3:71:9d:a5:6d:d1:fa:20:fd:63:77:71:23:e0:7b:ef:d8:
         f1:8a:fa:d9:cc:63:2f:ce:42:82:48:62:c9:01:e4:fa:58:8e:
         1e:e6:52:dc:1d:8d:c7:f0:12:c7:fd:89:25:bf:17:86:10:f8:
         60:9a:87:30:7d:cb:c6:2e:37:32:ec:3f:34:f7:7d:37:da:16:
         9a:8b:da:f3:c4:ce:b4:e3:13:71:72:ca:bb:93:82:da:27:6b:
         e5:ef:51:28:b1:b8:9d:6c:85:06:f7:46:16:5c:20:d4:a7:b1:
         a9:22:03:8b:0a:18:08:9c:ae:58:57:c4:37:8e:38:9c:20:dc:
         51:a7:45:f2:cf:6c:09:d3:50:fa:bf:ff:39:0b:b3:37:d0:61:
         f3:f8:80:e8:88:95:ea:74:2a:7f:a9:fe:f1:1b:8c:fe:29:80:
         27:0b:60:d3:9f:ad:cc:09:5a:a3:ac:0e:a4:ca:cd:13:de:0e:
         4e:33:8e:67:cb:05:c6:f3:89:eb:46:90:71:ab:c7:16:e1:68:
         3a:39:4b:78:42:47:62:7d:56:11:28:37:59:55:26:4f:96:64:
         c9:20:72:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYuJeIqa2z+Xvz7HshkzcLpPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3YzY0ZmY3MjMwZTg5OTI2NDg0NDQ1ZDRhYzg2MmIzZTlm
YWZlNGQwHhcNMjMxMTAxMDYwMTAwWhcNMjMxMTAyMDYwMTAwWjAzMTEwLwYDVQQD
EyhhMDIwYmUxYzFlZTc2MzY4ZWNjNDFlNTY2ZDhmZGNkNTQ1YTI2YjczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4FrsoWdZ5YjKXTcHq7eufHhyWkI
iQpM+TTxhfA+btuqr1SCDqbfGZ3nn8XPrTE7FhLwDRHMhg5t/URlLOXjIomK7aWo
Z5KuWRi5ZpzskF0z3EPmlcEkUmLFSGmBXqnolpfIcCIu3ufzFFCXp/OUCCZ8T2KK
xWhaC4mkS+qfki9AJ7xqIqj1x2niQav63X/44U5Lvl2rQ9JTXEqMMa05vUeYMcyP
gTEg17Vzcmu4W7MkMxCMJQgvLNah/N7DVw27o+QAdZxtLTosSJjX6qLhpqu5LAoR
RejVhXdeRtTPJoGW060uKYUuVFWAxSrayGiIVCB4VC1Q2jQYdF0sGE4evQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKAgvhwe52No7MQeVm2P3NVFomtzMB8GA1UdIwQY
MBaAFEfGT/cjDomSZIREXUrIYrPp+v5NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjhaUDl5TU9pWkpraEVSZFNzaGlzLW42X2swLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9lMmE0OTctNGRiOC00YzRhLTg1OGUt
MGZiZTdjYmJmZjFkLzEvUjhaUDl5TU9pWkpraEVSZFNzaGlzLW42X2swLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9lMmE0OTctNGRiOC00YzRhLTg1OGUtMGZiZTdjYmJmZjFk
LzEvUjhaUDl5TU9pWkpraEVSZFNzaGlzLW42X2swLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoqfNuF6Y
IkTPqC7UH4XXuSr7VQkY8TkMBtE8QjzKpOJQmBTsUrNxnaVt0fog/WN3cSPge+/Y
8Yr62cxjL85CgkhiyQHk+liOHuZS3B2Nx/ASx/2JJb8XhhD4YJqHMH3Lxi43Muw/
NPd9N9oWmova88TOtOMTcXLKu5OC2idr5e9RKLG4nWyFBvdGFlwg1KexqSIDiwoY
CJyuWFfEN444nCDcUadF8s9sCdNQ+r//OQuzN9Bh8/iA6IiV6nQqf6n+8RuM/imA
Jwtg05+tzAlao6wOpMrNE94OTjOOZ8sFxvOJ60aQcavHFuFoOjlLeEJHYn1WESg3
WVUmT5ZkySByfQ==
-----END CERTIFICATE-----