Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/003de2-cf9c-4803-ad56-ca6a44f9902b/1/c3xMLNTMjWAlOau-kxtX-5c18F0.mft
File:                     c3xMLNTMjWAlOau-kxtX-5c18F0.mft (raw, json)
Hash identifier:          Rojwg7L/8YxmCSj98obX3rX6eosyVQfSLj9SiYuJy5E=
Subject key identifier:   04:6A:FA:9E:3E:B3:5A:4F:B3:9D:F4:C1:5A:56:3D:FA:21:F5:DC:F3
Authority key identifier: 73:7C:4C:2C:D4:CC:8D:60:25:39:AB:BE:93:1B:57:FB:97:35:F0:5D
Certificate issuer:       /CN=737c4c2cd4cc8d602539abbe931b57fb9735f05d
Certificate serial:       018849364C994478CAAEC59628E4204AB447
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c3xMLNTMjWAlOau-kxtX-5c18F0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/003de2-cf9c-4803-ad56-ca6a44f9902b/1/c3xMLNTMjWAlOau-kxtX-5c18F0.mft
Manifest number:          0589
Signing time:             Tue 23 May 2023 15:24:35 +0000
Manifest this update:     Tue 23 May 2023 15:24:35 +0000
Manifest next update:     Wed 24 May 2023 15:24:35 +0000
Files and hashes:         1: DI15uXMK0NpR7e8tDVA8Q7LBN-U.roa (hash: 5S2ji3rtTu2/x/DBgZaRHk0GQxpstC/8f1YxL0+0hnA=)
                          2: c3xMLNTMjWAlOau-kxtX-5c18F0.crl (hash: +VI1LJdtSeXNvKpaS+p9gWns/5leFod2a45t013asas=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:49:36:4c:99:44:78:ca:ae:c5:96:28:e4:20:4a:b4:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=737c4c2cd4cc8d602539abbe931b57fb9735f05d
        Validity
            Not Before: May 23 15:24:35 2023 GMT
            Not After : May 24 15:24:35 2023 GMT
        Subject: CN=046afa9e3eb35a4fb39df4c15a563dfa21f5dcf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:da:d7:4b:30:1f:af:9a:6e:e4:28:8f:de:4b:
                    27:d1:3d:06:ae:1c:24:77:b6:3e:97:ba:e8:ac:a3:
                    fe:e0:a3:23:a8:77:25:5e:36:98:16:d3:6f:fe:15:
                    6f:5a:9a:9c:89:4a:cd:f9:43:91:de:f1:7f:c2:f5:
                    fc:22:6b:bf:4d:ce:69:fa:66:92:7a:c0:e6:a8:ba:
                    dc:bd:78:10:e0:f8:76:b7:df:86:5b:9b:44:db:ad:
                    27:5e:c9:71:77:08:87:49:86:ed:cd:df:a0:64:9d:
                    dc:c9:44:07:b9:eb:51:6c:cf:0e:fb:51:31:7f:54:
                    6c:8b:3f:35:2a:cc:81:af:d2:ce:bf:4a:e0:72:ec:
                    1b:c9:90:e3:3c:a8:0f:a5:f6:a6:29:60:24:69:02:
                    16:af:24:49:2e:e7:f8:2a:cc:12:0b:47:d0:74:bd:
                    c5:04:46:d0:e7:6a:93:fe:02:4d:f3:97:ec:22:7a:
                    a7:e0:b4:04:bd:28:89:74:61:09:9c:55:5b:1a:d6:
                    72:a0:77:cd:80:83:07:a8:9c:20:45:e9:3b:94:3a:
                    ab:66:a6:b2:2e:57:09:c9:af:73:a8:79:2e:f5:63:
                    c1:59:30:4c:83:73:ae:c7:38:bb:ec:f6:c9:cc:b0:
                    1f:aa:46:84:eb:03:fd:4c:cc:28:72:5d:e0:02:5d:
                    81:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:6A:FA:9E:3E:B3:5A:4F:B3:9D:F4:C1:5A:56:3D:FA:21:F5:DC:F3
            X509v3 Authority Key Identifier:
                keyid:73:7C:4C:2C:D4:CC:8D:60:25:39:AB:BE:93:1B:57:FB:97:35:F0:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3xMLNTMjWAlOau-kxtX-5c18F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/003de2-cf9c-4803-ad56-ca6a44f9902b/1/c3xMLNTMjWAlOau-kxtX-5c18F0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/003de2-cf9c-4803-ad56-ca6a44f9902b/1/c3xMLNTMjWAlOau-kxtX-5c18F0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:ea:1a:75:f3:b1:ee:65:ef:95:0b:4e:92:ae:2b:33:70:3a:
         46:bd:ad:33:51:32:2a:19:46:5c:04:6b:81:dd:5c:8c:e2:bc:
         65:89:41:5f:c0:d1:66:a0:9f:94:56:e8:aa:c0:fe:ba:14:fe:
         a3:06:7a:47:aa:2a:7d:29:59:09:25:82:fd:fe:39:26:89:5e:
         7d:b2:6d:87:5c:7d:98:ed:48:af:25:7c:d3:1e:05:56:f6:62:
         6b:bf:6d:54:8c:a7:e4:e7:e8:5d:5d:0f:d9:96:5c:d2:72:12:
         78:be:24:dd:cd:6a:e4:41:43:d6:e7:85:dc:4c:72:56:c0:12:
         8b:e5:e2:ed:d3:52:a9:f8:b3:a6:d7:d5:9a:23:a7:ae:a6:e4:
         fc:83:8f:8d:42:36:18:4b:cc:cc:e9:b8:62:61:24:47:d7:76:
         9c:ae:9a:c0:76:5b:c4:68:cf:98:8b:e3:67:4f:3f:a3:5e:d8:
         16:35:2a:b1:cf:7c:35:55:99:3d:0d:5e:d3:98:10:d7:0b:4e:
         38:51:7e:54:50:ac:d3:e4:20:c9:0e:7a:9e:e0:a5:c3:d2:c8:
         72:4e:6f:b3:53:c4:39:b1:4b:5f:03:b3:e0:03:16:c6:b2:ed:
         e0:fc:31:ed:53:a0:76:28:39:3f:a8:65:5d:70:aa:30:c2:cc:
         fe:e8:f4:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYhJNkyZRHjKrsWWKOQgSrRHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczN2M0YzJjZDRjYzhkNjAyNTM5YWJiZTkzMWI1N2ZiOTcz
NWYwNWQwHhcNMjMwNTIzMTUyNDM1WhcNMjMwNTI0MTUyNDM1WjAzMTEwLwYDVQQD
EygwNDZhZmE5ZTNlYjM1YTRmYjM5ZGY0YzE1YTU2M2RmYTIxZjVkY2YzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4NrXSzAfr5pu5CiP3ksn0T0Grhwk
d7Y+l7rorKP+4KMjqHclXjaYFtNv/hVvWpqciUrN+UOR3vF/wvX8Imu/Tc5p+maS
esDmqLrcvXgQ4Ph2t9+GW5tE260nXslxdwiHSYbtzd+gZJ3cyUQHuetRbM8O+1Ex
f1Rsiz81KsyBr9LOv0rgcuwbyZDjPKgPpfamKWAkaQIWryRJLuf4KswSC0fQdL3F
BEbQ52qT/gJN85fsInqn4LQEvSiJdGEJnFVbGtZyoHfNgIMHqJwgRek7lDqrZqay
LlcJya9zqHku9WPBWTBMg3Ouxzi77PbJzLAfqkaE6wP9TMwocl3gAl2BYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFARq+p4+s1pPs530wVpWPfoh9dzzMB8GA1UdIwQY
MBaAFHN8TCzUzI1gJTmrvpMbV/uXNfBdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzN4TUxOVE1qV0FsT2F1LWt4dFgtNWMxOEYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy8wMDNkZTItY2Y5Yy00ODAzLWFkNTYt
Y2E2YTQ0Zjk5MDJiLzEvYzN4TUxOVE1qV0FsT2F1LWt4dFgtNWMxOEYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy8wMDNkZTItY2Y5Yy00ODAzLWFkNTYtY2E2YTQ0Zjk5MDJi
LzEvYzN4TUxOVE1qV0FsT2F1LWt4dFgtNWMxOEYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADOoadfOx
7mXvlQtOkq4rM3A6Rr2tM1EyKhlGXARrgd1cjOK8ZYlBX8DRZqCflFboqsD+uhT+
owZ6R6oqfSlZCSWC/f45JolefbJth1x9mO1IryV80x4FVvZia79tVIyn5OfoXV0P
2ZZc0nISeL4k3c1q5EFD1ueF3ExyVsASi+Xi7dNSqfizptfVmiOnrqbk/IOPjUI2
GEvMzOm4YmEkR9d2nK6awHZbxGjPmIvjZ08/o17YFjUqsc98NVWZPQ1e05gQ1wtO
OFF+VFCs0+QgyQ56nuClw9LIck5vs1PEObFLXwOz4AMWxrLt4Pwx7VOgdig5P6hl
XXCqMMLM/uj0ug==
-----END CERTIFICATE-----