Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/74faec-fdc4-4a56-8931-b9b229a40826/1/oGGJs4Tat7mwgm0DFPpmw_8tW4Y.mft
File:                     oGGJs4Tat7mwgm0DFPpmw_8tW4Y.mft (raw, json)
Hash identifier:          I9Xa6swkP5BbUQqpsZV7SVr8HKO6c8xaAVrwyrX5qy0=
Subject key identifier:   8F:8D:E6:32:E5:F8:53:4E:5D:0C:F9:27:A3:6C:01:3A:97:29:C5:5E
Authority key identifier: A0:61:89:B3:84:DA:B7:B9:B0:82:6D:03:14:FA:66:C3:FF:2D:5B:86
Certificate issuer:       /CN=a06189b384dab7b9b0826d0314fa66c3ff2d5b86
Certificate serial:       018CA96F1A326D5ABD84AF29A42684A436AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oGGJs4Tat7mwgm0DFPpmw_8tW4Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/74faec-fdc4-4a56-8931-b9b229a40826/1/oGGJs4Tat7mwgm0DFPpmw_8tW4Y.mft
Manifest number:          09EC
Signing time:             Wed 27 Dec 2023 04:01:19 +0000
Manifest this update:     Wed 27 Dec 2023 04:01:19 +0000
Manifest next update:     Thu 28 Dec 2023 04:01:19 +0000
Files and hashes:         1: PyRUiRIS2vLgDmWSJQ0AafAgAzs.roa (hash: xI4UF71pbPpzk7+WWZ2EFRpny0dNFkVv5z8myuft+9A=)
                          2: oGGJs4Tat7mwgm0DFPpmw_8tW4Y.crl (hash: sB1w0y8JkjDd1dv3AF6BhTvm/1cs9JnHWVrr4dMNae8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:a9:6f:1a:32:6d:5a:bd:84:af:29:a4:26:84:a4:36:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a06189b384dab7b9b0826d0314fa66c3ff2d5b86
        Validity
            Not Before: Dec 27 04:01:19 2023 GMT
            Not After : Dec 28 04:01:19 2023 GMT
        Subject: CN=8f8de632e5f8534e5d0cf927a36c013a9729c55e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f5:fb:cc:5f:99:bb:dc:0f:39:4b:f5:ea:10:
                    e9:7d:1e:1e:4d:66:61:21:55:c7:40:3a:76:e8:05:
                    6e:e0:f0:7e:cc:52:19:23:14:ad:08:7b:24:d7:ef:
                    93:f2:e7:88:53:38:6e:37:c1:03:a0:db:ad:55:f9:
                    67:f9:63:ef:ff:e1:c8:4e:9b:ce:51:89:93:e1:20:
                    d9:b9:eb:eb:ad:5e:c0:b0:b1:53:09:10:4a:d7:fa:
                    8e:c2:0a:ac:6e:a2:b2:78:c4:36:82:d0:bd:30:d3:
                    a7:50:38:9e:5e:a6:c0:a7:75:63:99:7b:b8:79:2a:
                    a5:d3:15:fa:9e:e1:d4:0c:d2:29:10:19:c7:b4:1c:
                    e0:ff:ba:1b:b3:7d:18:7e:75:ed:bd:49:69:ac:a5:
                    ab:6d:18:78:7f:50:e8:40:57:1b:c1:2a:1f:e7:7f:
                    8f:8f:1e:3b:8e:cb:13:c4:d0:0b:14:b6:30:d4:91:
                    56:a2:b0:87:d8:3d:a3:f8:c1:76:2e:2b:5f:12:3b:
                    8d:4a:9d:7c:c9:93:9b:b6:22:fa:72:9d:16:cb:c7:
                    3e:8d:06:d5:78:cf:7a:96:31:6c:74:e8:3d:f4:44:
                    0b:d6:c5:e8:0b:e3:00:39:9c:b4:4c:08:82:0d:c4:
                    30:47:5e:91:63:da:2c:97:39:4f:01:55:f8:e2:e5:
                    59:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:8D:E6:32:E5:F8:53:4E:5D:0C:F9:27:A3:6C:01:3A:97:29:C5:5E
            X509v3 Authority Key Identifier:
                keyid:A0:61:89:B3:84:DA:B7:B9:B0:82:6D:03:14:FA:66:C3:FF:2D:5B:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oGGJs4Tat7mwgm0DFPpmw_8tW4Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/74faec-fdc4-4a56-8931-b9b229a40826/1/oGGJs4Tat7mwgm0DFPpmw_8tW4Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/74faec-fdc4-4a56-8931-b9b229a40826/1/oGGJs4Tat7mwgm0DFPpmw_8tW4Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:b8:aa:1f:04:65:6b:76:0e:69:d3:fb:da:5b:28:6a:5c:8b:
         c7:99:23:08:a0:c2:ab:f0:9f:95:80:28:a5:6b:b2:17:27:f2:
         99:86:af:1a:ed:c2:bc:7f:11:41:9c:6a:b0:34:c8:d8:54:3e:
         8c:16:b3:96:62:5d:70:78:5f:c6:d6:20:a1:fc:81:32:a2:5b:
         70:13:b5:14:cb:db:08:e1:8a:38:9c:56:d9:96:ae:af:62:eb:
         85:b3:5a:cb:ad:d7:94:4d:05:5a:53:82:08:f0:77:3c:96:5c:
         a5:87:ee:26:e9:1b:fe:a3:03:5a:c0:67:12:23:44:ff:2a:ec:
         7d:75:50:77:b5:fd:5c:f5:55:7a:0c:fe:ec:0b:2f:27:ff:87:
         3f:3e:39:9d:31:7d:cd:74:7b:55:ce:9a:d0:1c:16:67:7b:e2:
         4a:3d:74:1e:01:45:25:d1:2f:36:07:a0:08:1c:d2:08:72:5b:
         84:48:32:5f:99:05:f3:77:26:9c:69:9d:79:fa:8f:df:a2:9a:
         d8:d0:dc:aa:cf:0d:c7:9d:5f:1c:f7:d5:53:20:ff:34:a4:46:
         62:08:01:6c:f0:b9:83:04:b0:5f:3e:c0:41:6b:46:8b:db:b8:
         a6:11:4c:33:07:e6:b4:c1:45:91:4d:34:4a:64:29:30:90:ac:
         d2:0a:a3:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYypbxoybVq9hK8ppCaEpDauMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwNjE4OWIzODRkYWI3YjliMDgyNmQwMzE0ZmE2NmMzZmYy
ZDViODYwHhcNMjMxMjI3MDQwMTE5WhcNMjMxMjI4MDQwMTE5WjAzMTEwLwYDVQQD
Eyg4ZjhkZTYzMmU1Zjg1MzRlNWQwY2Y5MjdhMzZjMDEzYTk3MjljNTVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvX7zF+Zu9wPOUv16hDpfR4eTWZh
IVXHQDp26AVu4PB+zFIZIxStCHsk1++T8ueIUzhuN8EDoNutVfln+WPv/+HITpvO
UYmT4SDZuevrrV7AsLFTCRBK1/qOwgqsbqKyeMQ2gtC9MNOnUDieXqbAp3VjmXu4
eSql0xX6nuHUDNIpEBnHtBzg/7obs30YfnXtvUlprKWrbRh4f1DoQFcbwSof53+P
jx47jssTxNALFLYw1JFWorCH2D2j+MF2LitfEjuNSp18yZObtiL6cp0Wy8c+jQbV
eM96ljFsdOg99EQL1sXoC+MAOZy0TAiCDcQwR16RY9oslzlPAVX44uVZCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI+N5jLl+FNOXQz5J6NsATqXKcVeMB8GA1UdIwQY
MBaAFKBhibOE2re5sIJtAxT6ZsP/LVuGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0dHSnM0VGF0N213Z20wREZQcG13Xzh0VzRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My83NGZhZWMtZmRjNC00YTU2LTg5MzEt
YjliMjI5YTQwODI2LzEvb0dHSnM0VGF0N213Z20wREZQcG13Xzh0VzRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My83NGZhZWMtZmRjNC00YTU2LTg5MzEtYjliMjI5YTQwODI2
LzEvb0dHSnM0VGF0N213Z20wREZQcG13Xzh0VzRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQLiqHwRl
a3YOadP72lsoalyLx5kjCKDCq/CflYAopWuyFyfymYavGu3CvH8RQZxqsDTI2FQ+
jBazlmJdcHhfxtYgofyBMqJbcBO1FMvbCOGKOJxW2Zaur2LrhbNay63XlE0FWlOC
CPB3PJZcpYfuJukb/qMDWsBnEiNE/yrsfXVQd7X9XPVVegz+7AsvJ/+HPz45nTF9
zXR7Vc6a0BwWZ3viSj10HgFFJdEvNgegCBzSCHJbhEgyX5kF83cmnGmdefqP36Ka
2NDcqs8Nx51fHPfVUyD/NKRGYggBbPC5gwSwXz7AQWtGi9u4phFMMwfmtMFFkU00
SmQpMJCs0gqjoA==
-----END CERTIFICATE-----