Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/af11db-19a5-4b8a-8eb7-fb75cd109585/1/UakaZfl7fBHKLk7ehj9RexlbSU8.mft
File:                     UakaZfl7fBHKLk7ehj9RexlbSU8.mft (raw, json)
Hash identifier:          q899uLccw5749/rwEP0i0C7SVGc1fDUrRRkd1KozHWQ=
Subject key identifier:   09:81:8D:FC:05:BF:BD:AF:6F:0F:F9:4E:9B:E9:12:1E:5E:A6:2F:C8
Authority key identifier: 51:A9:1A:65:F9:7B:7C:11:CA:2E:4E:DE:86:3F:51:7B:19:5B:49:4F
Certificate issuer:       /CN=51a91a65f97b7c11ca2e4ede863f517b195b494f
Certificate serial:       018CAF70E0D2B761F2A89564EDD9F0A32AC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UakaZfl7fBHKLk7ehj9RexlbSU8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/af11db-19a5-4b8a-8eb7-fb75cd109585/1/UakaZfl7fBHKLk7ehj9RexlbSU8.mft
Manifest number:          0808
Signing time:             Thu 28 Dec 2023 08:00:59 +0000
Manifest this update:     Thu 28 Dec 2023 08:00:59 +0000
Manifest next update:     Fri 29 Dec 2023 08:00:59 +0000
Files and hashes:         1: UakaZfl7fBHKLk7ehj9RexlbSU8.crl (hash: fuHx8zdyqzGOLLmhQDfQDoGpNZEz8/cVfJp1/SfzU98=)
                          2: fhw21TwdMV45YDsX3TLTXvTFOew.roa (hash: 1oaGkvYbYea7UgZf2WBqL4HQnIXMRpq2VVijwDNmEvI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:af:70:e0:d2:b7:61:f2:a8:95:64:ed:d9:f0:a3:2a:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51a91a65f97b7c11ca2e4ede863f517b195b494f
        Validity
            Not Before: Dec 28 08:00:59 2023 GMT
            Not After : Dec 29 08:00:59 2023 GMT
        Subject: CN=09818dfc05bfbdaf6f0ff94e9be9121e5ea62fc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:68:f4:ec:b9:13:f7:30:69:c4:a1:04:2f:55:
                    bc:b2:c3:f6:e0:2e:1e:27:cf:8f:c8:48:4c:7d:4c:
                    5c:e7:90:ce:f2:90:3b:0a:97:91:fb:04:09:b5:46:
                    2b:7d:0d:76:53:2b:99:9f:5c:da:f3:4b:d6:ad:d0:
                    f9:e6:7b:c8:b4:09:87:f4:2e:4c:ed:24:05:95:02:
                    45:05:c2:ca:32:77:01:73:59:f2:bd:5b:d0:a4:1d:
                    25:6b:12:7b:7f:0d:e6:7d:46:20:7a:c9:06:a4:a8:
                    5f:92:96:a6:ce:18:89:24:2b:be:15:9c:22:73:70:
                    ba:b1:c8:83:d7:29:48:e2:1f:1b:f5:2f:7a:19:a6:
                    cf:74:af:e9:39:d6:a5:37:6d:a1:22:54:cd:e2:8d:
                    bd:b3:09:53:83:4c:8e:af:55:6a:ee:52:f9:ab:79:
                    3c:b5:22:ed:b2:bd:f6:2b:f9:5d:88:fe:e3:bd:4d:
                    fc:eb:4b:28:48:ff:69:4f:2b:23:d9:53:e9:24:86:
                    ee:d7:18:54:1f:25:74:e9:af:be:7f:c6:39:a6:69:
                    1a:2c:ea:55:2e:6e:89:01:c0:36:1c:21:4d:7b:e8:
                    b9:5a:74:65:c4:a7:c1:c7:b5:e3:32:49:1e:e4:98:
                    1d:29:62:30:34:4a:b9:57:3a:2d:79:f3:69:70:a0:
                    38:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:81:8D:FC:05:BF:BD:AF:6F:0F:F9:4E:9B:E9:12:1E:5E:A6:2F:C8
            X509v3 Authority Key Identifier:
                keyid:51:A9:1A:65:F9:7B:7C:11:CA:2E:4E:DE:86:3F:51:7B:19:5B:49:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UakaZfl7fBHKLk7ehj9RexlbSU8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/af11db-19a5-4b8a-8eb7-fb75cd109585/1/UakaZfl7fBHKLk7ehj9RexlbSU8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/af11db-19a5-4b8a-8eb7-fb75cd109585/1/UakaZfl7fBHKLk7ehj9RexlbSU8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:22:2f:af:d4:1d:c3:f3:f5:95:3f:ae:59:09:1e:e9:ec:dc:
         c0:d3:fd:a9:a9:99:d7:11:d7:41:b9:0a:f4:aa:0f:18:bf:20:
         a1:bf:90:57:cb:88:09:78:0f:4c:ec:07:26:46:bb:03:61:af:
         c8:a2:f5:bf:90:26:c0:a8:1e:b2:2e:60:93:87:84:1f:cd:16:
         86:8f:51:70:f7:07:35:5b:40:33:4f:0e:0c:23:d3:98:b9:ce:
         0c:1f:7e:ed:e4:80:cc:3c:91:9a:4d:6d:27:c3:e0:51:ba:f9:
         80:e0:73:4b:69:c5:ca:c3:a8:f4:a2:66:28:93:68:92:9d:89:
         c1:46:6d:41:80:dd:51:22:34:dd:b6:de:41:72:cc:18:bf:bb:
         8a:94:15:5d:ad:3a:73:56:4d:14:62:de:6a:ec:1e:63:fd:c2:
         cb:90:b1:86:f9:c6:ca:27:e0:a1:e5:b7:86:ce:72:1e:07:91:
         af:5a:fa:05:05:9f:ae:c3:e9:12:68:3e:40:4c:f6:69:c3:3b:
         ad:f8:fe:ce:57:6e:61:3e:e5:9c:4a:0b:38:f4:2f:85:6c:c7:
         76:7d:ce:86:e1:1f:95:ce:a4:ad:1f:96:42:7d:1c:66:45:a1:
         a1:60:07:6e:9a:c5:ce:dc:59:11:4b:06:74:2a:32:c4:b7:20:
         ab:f6:08:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYyvcODSt2HyqJVk7dnwoyrDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxYTkxYTY1Zjk3YjdjMTFjYTJlNGVkZTg2M2Y1MTdiMTk1
YjQ5NGYwHhcNMjMxMjI4MDgwMDU5WhcNMjMxMjI5MDgwMDU5WjAzMTEwLwYDVQQD
EygwOTgxOGRmYzA1YmZiZGFmNmYwZmY5NGU5YmU5MTIxZTVlYTYyZmM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2j07LkT9zBpxKEEL1W8ssP24C4e
J8+PyEhMfUxc55DO8pA7CpeR+wQJtUYrfQ12UyuZn1za80vWrdD55nvItAmH9C5M
7SQFlQJFBcLKMncBc1nyvVvQpB0laxJ7fw3mfUYgeskGpKhfkpamzhiJJCu+FZwi
c3C6sciD1ylI4h8b9S96GabPdK/pOdalN22hIlTN4o29swlTg0yOr1Vq7lL5q3k8
tSLtsr32K/ldiP7jvU3860soSP9pTysj2VPpJIbu1xhUHyV06a++f8Y5pmkaLOpV
Lm6JAcA2HCFNe+i5WnRlxKfBx7XjMkke5JgdKWIwNEq5VzotefNpcKA4BQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAmBjfwFv72vbw/5TpvpEh5epi/IMB8GA1UdIwQY
MBaAFFGpGmX5e3wRyi5O3oY/UXsZW0lPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWFrYVpmbDdmQkhLTGs3ZWhqOVJleGxiU1U4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9hZjExZGItMTlhNS00YjhhLThlYjct
ZmI3NWNkMTA5NTg1LzEvVWFrYVpmbDdmQkhLTGs3ZWhqOVJleGxiU1U4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS9hZjExZGItMTlhNS00YjhhLThlYjctZmI3NWNkMTA5NTg1
LzEvVWFrYVpmbDdmQkhLTGs3ZWhqOVJleGxiU1U4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsSIvr9Qd
w/P1lT+uWQke6ezcwNP9qamZ1xHXQbkK9KoPGL8gob+QV8uICXgPTOwHJka7A2Gv
yKL1v5AmwKgesi5gk4eEH80Who9RcPcHNVtAM08ODCPTmLnODB9+7eSAzDyRmk1t
J8PgUbr5gOBzS2nFysOo9KJmKJNokp2JwUZtQYDdUSI03bbeQXLMGL+7ipQVXa06
c1ZNFGLeauweY/3Cy5CxhvnGyifgoeW3hs5yHgeRr1r6BQWfrsPpEmg+QEz2acM7
rfj+zlduYT7lnEoLOPQvhWzHdn3OhuEflc6krR+WQn0cZkWhoWAHbprFztxZEUsG
dCoyxLcgq/YIuw==
-----END CERTIFICATE-----