Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/8081ec-4703-41e5-bae9-341279689f92/1/IwzMLSHlrodwNa7ZOBtKPLppFho.mft
File:                     IwzMLSHlrodwNa7ZOBtKPLppFho.mft (raw, json)
Hash identifier:          C7AcisQ9CCAjuWwWdsBuDh23g7LxPOQjFwiS6W1NhVI=
Subject key identifier:   9D:13:34:57:F8:18:05:74:A9:72:BC:F7:55:BA:E4:FB:1A:98:54:0B
Authority key identifier: 23:0C:CC:2D:21:E5:AE:87:70:35:AE:D9:38:1B:4A:3C:BA:69:16:1A
Certificate issuer:       /CN=230ccc2d21e5ae877035aed9381b4a3cba69161a
Certificate serial:       018682CB861625D37CF476A3AC3B66E87BD2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IwzMLSHlrodwNa7ZOBtKPLppFho.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/8081ec-4703-41e5-bae9-341279689f92/1/IwzMLSHlrodwNa7ZOBtKPLppFho.mft
Manifest number:          0118
Signing time:             Fri 24 Feb 2023 09:40:21 +0000
Manifest this update:     Fri 24 Feb 2023 09:40:21 +0000
Manifest next update:     Sat 25 Feb 2023 09:40:21 +0000
Files and hashes:         1: IwzMLSHlrodwNa7ZOBtKPLppFho.crl (hash: tO4ycM2aMATJWGMVixuveOPq3EfpWOH8cZWOA1ByZQo=)
                          2: erly45_bhhW4Cnh-NvDYf6E7XJo.roa (hash: ZCq12EiQzypJwgilxp4kq/E/PLM0oVKokE1EGuG3nDs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:82:cb:86:16:25:d3:7c:f4:76:a3:ac:3b:66:e8:7b:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=230ccc2d21e5ae877035aed9381b4a3cba69161a
        Validity
            Not Before: Feb 24 09:40:21 2023 GMT
            Not After : Feb 25 09:40:21 2023 GMT
        Subject: CN=9d133457f8180574a972bcf755bae4fb1a98540b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:66:d2:9a:3a:68:a6:a5:9c:4a:d5:74:c6:9e:
                    2b:0c:93:64:ff:dd:4c:e4:2e:30:20:dc:76:0f:35:
                    af:c4:a7:6e:44:86:cf:5a:03:d1:b1:fd:fd:3d:66:
                    77:21:29:90:63:71:08:df:3d:b5:bf:55:25:0e:ec:
                    93:e0:36:53:d1:7b:ab:24:dc:58:4d:b6:b2:9e:b7:
                    2f:48:38:7a:dc:9e:0e:d2:62:6c:dd:24:73:48:ba:
                    19:2f:50:3b:6b:71:78:46:e3:69:89:a5:a6:d8:52:
                    77:b7:b5:10:ca:a5:b4:fa:2a:21:87:11:d6:94:1c:
                    69:70:9e:12:df:09:fd:c8:40:e2:21:f2:e6:3e:a7:
                    92:c9:80:fd:76:7b:63:64:42:bb:66:9d:23:32:f2:
                    84:5f:04:a8:85:8d:41:99:1d:4c:46:2e:41:de:83:
                    df:36:55:18:52:7e:c5:4f:36:90:82:4d:4b:98:08:
                    7c:29:01:f4:d4:a2:71:36:14:a6:a7:b0:bd:63:24:
                    bd:5e:a8:a7:8c:ff:4d:72:7e:14:27:0b:dd:9c:92:
                    92:d3:66:12:94:56:e7:d0:07:7f:5d:27:35:4b:e5:
                    b9:e1:4c:36:7f:9c:92:2b:8a:f4:46:b0:f7:e8:31:
                    e9:d7:c0:f1:6f:2c:25:c7:36:1f:89:31:b3:82:ae:
                    2c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:13:34:57:F8:18:05:74:A9:72:BC:F7:55:BA:E4:FB:1A:98:54:0B
            X509v3 Authority Key Identifier:
                keyid:23:0C:CC:2D:21:E5:AE:87:70:35:AE:D9:38:1B:4A:3C:BA:69:16:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwzMLSHlrodwNa7ZOBtKPLppFho.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/8081ec-4703-41e5-bae9-341279689f92/1/IwzMLSHlrodwNa7ZOBtKPLppFho.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/8081ec-4703-41e5-bae9-341279689f92/1/IwzMLSHlrodwNa7ZOBtKPLppFho.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:d7:b3:f7:6a:a9:78:a4:b6:2d:14:3e:59:be:9a:db:27:dd:
         34:72:da:e9:c2:77:fa:5d:97:61:6e:e1:d3:35:94:d9:ac:73:
         3d:b5:38:0d:48:f8:73:4d:91:ab:f1:93:ef:44:b2:d3:2e:27:
         fb:49:49:b1:a6:b6:28:35:f1:c4:fb:71:b8:09:c1:f1:03:97:
         bc:a2:a0:d2:e2:ad:ab:30:0e:a1:75:74:84:dc:c6:1d:23:5e:
         06:3e:46:9f:ae:95:9f:ec:8b:b2:9d:82:e9:8f:ef:de:db:19:
         0c:8a:eb:bb:42:6e:03:6e:4d:27:50:78:f7:48:57:28:a4:7a:
         9a:97:ed:c8:bc:ec:d2:ce:af:28:c9:2e:f4:6d:47:76:d7:fe:
         76:f2:43:d5:6f:8b:b0:f3:d2:a1:f6:83:c8:da:b3:68:18:68:
         aa:d8:f5:76:49:67:31:f9:63:11:d0:6c:77:80:2c:23:14:f8:
         4a:f3:41:88:22:67:fc:53:6b:1d:c8:96:24:0b:91:89:07:0f:
         eb:00:8d:df:ef:b1:cd:2b:dc:65:95:ef:e2:9b:72:1f:f9:97:
         50:38:72:22:f7:2f:ff:e5:b8:83:85:9f:39:b0:12:73:b5:1d:
         4b:e9:18:59:6b:7b:9b:83:63:74:de:d2:7e:bb:cf:80:73:ae:
         cf:dc:88:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYaCy4YWJdN89HajrDtm6HvSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzMGNjYzJkMjFlNWFlODc3MDM1YWVkOTM4MWI0YTNjYmE2
OTE2MWEwHhcNMjMwMjI0MDk0MDIxWhcNMjMwMjI1MDk0MDIxWjAzMTEwLwYDVQQD
Eyg5ZDEzMzQ1N2Y4MTgwNTc0YTk3MmJjZjc1NWJhZTRmYjFhOTg1NDBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2bSmjpopqWcStV0xp4rDJNk/91M
5C4wINx2DzWvxKduRIbPWgPRsf39PWZ3ISmQY3EI3z21v1UlDuyT4DZT0XurJNxY
TbaynrcvSDh63J4O0mJs3SRzSLoZL1A7a3F4RuNpiaWm2FJ3t7UQyqW0+iohhxHW
lBxpcJ4S3wn9yEDiIfLmPqeSyYD9dntjZEK7Zp0jMvKEXwSohY1BmR1MRi5B3oPf
NlUYUn7FTzaQgk1LmAh8KQH01KJxNhSmp7C9YyS9XqinjP9Ncn4UJwvdnJKS02YS
lFbn0Ad/XSc1S+W54Uw2f5ySK4r0RrD36DHp18DxbywlxzYfiTGzgq4sZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ0TNFf4GAV0qXK891W65PsamFQLMB8GA1UdIwQY
MBaAFCMMzC0h5a6HcDWu2TgbSjy6aRYaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXd6TUxTSGxyb2R3TmE3Wk9CdEtQTHBwRmhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS84MDgxZWMtNDcwMy00MWU1LWJhZTkt
MzQxMjc5Njg5ZjkyLzEvSXd6TUxTSGxyb2R3TmE3Wk9CdEtQTHBwRmhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS84MDgxZWMtNDcwMy00MWU1LWJhZTktMzQxMjc5Njg5Zjky
LzEvSXd6TUxTSGxyb2R3TmE3Wk9CdEtQTHBwRmhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAENez92qp
eKS2LRQ+Wb6a2yfdNHLa6cJ3+l2XYW7h0zWU2axzPbU4DUj4c02Rq/GT70Sy0y4n
+0lJsaa2KDXxxPtxuAnB8QOXvKKg0uKtqzAOoXV0hNzGHSNeBj5Gn66Vn+yLsp2C
6Y/v3tsZDIrru0JuA25NJ1B490hXKKR6mpftyLzs0s6vKMku9G1Hdtf+dvJD1W+L
sPPSofaDyNqzaBhoqtj1dklnMfljEdBsd4AsIxT4SvNBiCJn/FNrHciWJAuRiQcP
6wCN3++xzSvcZZXv4ptyH/mXUDhyIvcv/+W4g4WfObASc7UdS+kYWWt7m4NjdN7S
frvPgHOuz9yIvw==
-----END CERTIFICATE-----