Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/8e09fe-a5c0-497d-a5bb-c277b4cf7c67/1/RSSNwIhIXXjc-BramhjV_50vkGw.mft
File:                     RSSNwIhIXXjc-BramhjV_50vkGw.mft (raw, json)
Hash identifier:          CsUj00Gu5Xu2RKnspV7WPRv8+e1R+nINl+3cWcLqw3I=
Subject key identifier:   83:6F:17:7E:69:F4:E9:03:5E:6D:6C:B5:CD:07:3A:09:F5:A5:3C:80
Authority key identifier: 45:24:8D:C0:88:48:5D:78:DC:F8:1A:DA:9A:18:D5:FF:9D:2F:90:6C
Certificate issuer:       /CN=45248dc088485d78dcf81ada9a18d5ff9d2f906c
Certificate serial:       0189B534BC17810BB1C181B5D7B865C599B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RSSNwIhIXXjc-BramhjV_50vkGw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/8e09fe-a5c0-497d-a5bb-c277b4cf7c67/1/RSSNwIhIXXjc-BramhjV_50vkGw.mft
Manifest number:          0BAD
Signing time:             Wed 02 Aug 2023 07:44:39 +0000
Manifest this update:     Wed 02 Aug 2023 07:44:39 +0000
Manifest next update:     Thu 03 Aug 2023 07:44:39 +0000
Files and hashes:         1: PNFr0tzn5mVmgKWRX8v6WyWhFqY.roa (hash: IhiQ18JXnw9XRWnb1GuWhYZS+Gc1YZ7fxffoUKEWwG4=)
                          2: PrJSKd0Pg1MWeHQenk518dFfvqE.roa (hash: oluctWM8m0ueFkiO0W9tzYGrnRhqaXAvKVcwbYJApAc=)
                          3: RSSNwIhIXXjc-BramhjV_50vkGw.crl (hash: jsaE9+o/ExaWmCXfjAl6AKM7K0YF91DucY8TIycr81Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:b5:34:bc:17:81:0b:b1:c1:81:b5:d7:b8:65:c5:99:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45248dc088485d78dcf81ada9a18d5ff9d2f906c
        Validity
            Not Before: Aug  2 07:44:39 2023 GMT
            Not After : Aug  3 07:44:39 2023 GMT
        Subject: CN=836f177e69f4e9035e6d6cb5cd073a09f5a53c80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:23:89:8c:4f:74:3a:77:3b:18:74:0a:8e:ac:
                    49:ce:05:e3:ca:27:ea:cc:f4:0b:7f:a5:be:95:fc:
                    5e:43:8e:ba:ba:63:62:1b:d5:3b:e9:7a:f6:9e:c2:
                    60:2a:40:e0:9a:f3:2b:9f:22:7d:0d:22:3d:1a:11:
                    9d:b9:34:14:c3:16:56:0e:e5:52:f8:f5:6b:56:cf:
                    19:c4:1f:a7:6c:11:63:55:d5:a8:9d:3a:f4:9f:ca:
                    f5:a9:47:80:aa:32:90:c8:f2:d5:30:04:e2:9e:38:
                    e4:45:2b:58:79:5d:42:c7:0b:21:be:e8:20:79:d7:
                    a7:be:eb:01:16:43:ce:92:ea:e9:ac:12:5d:5a:90:
                    be:c5:ff:17:3f:29:b6:cb:c0:0a:b6:cd:73:f1:be:
                    95:66:8c:85:94:2f:c3:30:7e:87:60:db:f2:ad:de:
                    ca:79:64:90:47:0e:31:25:b3:ee:12:78:9a:a3:24:
                    4c:65:72:87:21:45:90:11:06:2a:65:60:c7:48:4c:
                    58:07:21:5a:cc:38:7a:5a:e7:a2:f3:58:e0:78:30:
                    2e:34:7b:45:17:ba:7c:4c:38:e4:4f:84:a2:ba:29:
                    52:5d:58:98:fc:a6:dc:db:7d:2d:5b:67:76:1c:db:
                    da:04:8f:90:86:c5:1d:42:4a:05:07:21:be:03:a6:
                    82:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:6F:17:7E:69:F4:E9:03:5E:6D:6C:B5:CD:07:3A:09:F5:A5:3C:80
            X509v3 Authority Key Identifier:
                keyid:45:24:8D:C0:88:48:5D:78:DC:F8:1A:DA:9A:18:D5:FF:9D:2F:90:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RSSNwIhIXXjc-BramhjV_50vkGw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/8e09fe-a5c0-497d-a5bb-c277b4cf7c67/1/RSSNwIhIXXjc-BramhjV_50vkGw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/8e09fe-a5c0-497d-a5bb-c277b4cf7c67/1/RSSNwIhIXXjc-BramhjV_50vkGw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:3c:56:b9:6f:f1:4f:d7:94:e7:9c:d9:57:b9:39:a2:d6:6d:
         b2:5c:cf:08:56:eb:0f:80:55:27:d1:41:e1:e7:7e:3f:cf:5a:
         13:b1:4f:49:06:74:d7:2f:11:66:0e:e8:9c:7a:3c:10:b6:5c:
         62:54:80:0f:ce:77:b8:82:1d:3b:9d:f1:fd:59:07:a4:27:de:
         4e:b6:da:b1:94:44:7d:22:d2:4b:9f:31:b4:82:4a:79:dc:a4:
         a2:2b:b0:69:ea:55:d6:67:95:00:c9:68:86:cd:6f:9f:8f:2b:
         4a:30:9d:49:0c:30:18:c2:ea:e9:3e:6c:1b:dd:97:58:74:1a:
         94:1c:97:00:a0:5f:c1:27:7c:85:ed:ad:43:52:fb:92:b4:29:
         d9:5c:c2:36:20:7b:9a:17:01:3f:b8:a8:d2:71:7f:c3:7c:ab:
         b3:df:d5:9c:21:47:e1:f5:8d:0b:5a:d7:1b:19:1e:c2:ce:1b:
         62:f5:2e:e0:42:ca:c2:9f:1c:4e:7b:4e:5a:fc:ba:42:73:d6:
         9b:b0:61:39:8b:ec:22:98:4a:b0:c7:b4:24:95:61:a5:f6:94:
         88:8d:cc:5b:80:73:6c:c4:a9:e1:8f:f8:bf:ed:f8:ea:cc:6b:
         9c:6c:38:4d:62:78:39:98:64:e8:52:e8:84:6a:30:6d:c6:7f:
         dd:0c:4c:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYm1NLwXgQuxwYG117hlxZm5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1MjQ4ZGMwODg0ODVkNzhkY2Y4MWFkYTlhMThkNWZmOWQy
ZjkwNmMwHhcNMjMwODAyMDc0NDM5WhcNMjMwODAzMDc0NDM5WjAzMTEwLwYDVQQD
Eyg4MzZmMTc3ZTY5ZjRlOTAzNWU2ZDZjYjVjZDA3M2EwOWY1YTUzYzgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSOJjE90Onc7GHQKjqxJzgXjyifq
zPQLf6W+lfxeQ466umNiG9U76Xr2nsJgKkDgmvMrnyJ9DSI9GhGduTQUwxZWDuVS
+PVrVs8ZxB+nbBFjVdWonTr0n8r1qUeAqjKQyPLVMATinjjkRStYeV1Cxwshvugg
edenvusBFkPOkurprBJdWpC+xf8XPym2y8AKts1z8b6VZoyFlC/DMH6HYNvyrd7K
eWSQRw4xJbPuEniaoyRMZXKHIUWQEQYqZWDHSExYByFazDh6Wuei81jgeDAuNHtF
F7p8TDjkT4SiuilSXViY/Kbc230tW2d2HNvaBI+QhsUdQkoFByG+A6aCFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFINvF35p9OkDXm1stc0HOgn1pTyAMB8GA1UdIwQY
MBaAFEUkjcCISF143Pga2poY1f+dL5BsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlNTTndJaElYWGpjLUJyYW1oalZfNTB2a0d3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC84ZTA5ZmUtYTVjMC00OTdkLWE1YmIt
YzI3N2I0Y2Y3YzY3LzEvUlNTTndJaElYWGpjLUJyYW1oalZfNTB2a0d3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC84ZTA5ZmUtYTVjMC00OTdkLWE1YmItYzI3N2I0Y2Y3YzY3
LzEvUlNTTndJaElYWGpjLUJyYW1oalZfNTB2a0d3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASTxWuW/x
T9eU55zZV7k5otZtslzPCFbrD4BVJ9FB4ed+P89aE7FPSQZ01y8RZg7onHo8ELZc
YlSAD853uIIdO53x/VkHpCfeTrbasZREfSLSS58xtIJKedykoiuwaepV1meVAMlo
hs1vn48rSjCdSQwwGMLq6T5sG92XWHQalByXAKBfwSd8he2tQ1L7krQp2VzCNiB7
mhcBP7io0nF/w3yrs9/VnCFH4fWNC1rXGxkews4bYvUu4ELKwp8cTntOWvy6QnPW
m7BhOYvsIphKsMe0JJVhpfaUiI3MW4BzbMSp4Y/4v+346sxrnGw4TWJ4OZhk6FLo
hGowbcZ/3QxMRw==
-----END CERTIFICATE-----