Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/f10a59-1938-4e46-8d0c-7981f550b094/1/h1pNhS1vLlnpN62_ESj8JLDUCQA.mft
File:                     h1pNhS1vLlnpN62_ESj8JLDUCQA.mft (raw, json)
Hash identifier:          ZZwaX+cuifnla1aTqQyGpSuN8oxy03UY7tuu2S88+ZE=
Subject key identifier:   F1:FD:25:DD:2F:10:DD:C3:E2:78:98:C0:78:52:C9:B2:52:BB:13:3B
Authority key identifier: 87:5A:4D:85:2D:6F:2E:59:E9:37:AD:BF:11:28:FC:24:B0:D4:09:00
Certificate issuer:       /CN=875a4d852d6f2e59e937adbf1128fc24b0d40900
Certificate serial:       018BC6D7308DC96E7B6F4AECA748DDE3A941
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h1pNhS1vLlnpN62_ESj8JLDUCQA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/f10a59-1938-4e46-8d0c-7981f550b094/1/h1pNhS1vLlnpN62_ESj8JLDUCQA.mft
Manifest number:          0971
Signing time:             Mon 13 Nov 2023 04:01:13 +0000
Manifest this update:     Mon 13 Nov 2023 04:01:13 +0000
Manifest next update:     Tue 14 Nov 2023 04:01:13 +0000
Files and hashes:         1: Gi4RYcCzqTN031KxrrwyRSAgSkE.roa (hash: 8J+4ii/ARXmTMoYc2eo0khb11mURJjPVVhj/+j0l8XA=)
                          2: h1pNhS1vLlnpN62_ESj8JLDUCQA.crl (hash: Du/+38KBkzU3BGchNrJk4Az1cakHZSgg+/UWAdb/9E4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:c6:d7:30:8d:c9:6e:7b:6f:4a:ec:a7:48:dd:e3:a9:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=875a4d852d6f2e59e937adbf1128fc24b0d40900
        Validity
            Not Before: Nov 13 04:01:13 2023 GMT
            Not After : Nov 14 04:01:13 2023 GMT
        Subject: CN=f1fd25dd2f10ddc3e27898c07852c9b252bb133b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:de:56:49:f7:a7:25:e1:3d:c9:ac:9c:d0:c2:
                    29:f3:c2:55:25:e4:24:96:0f:b3:bc:63:d5:72:c1:
                    7f:35:b1:35:93:3e:b8:4e:9b:70:c6:76:e1:c1:ba:
                    b3:7b:2f:df:ad:ed:09:5d:1a:bc:d4:77:02:04:aa:
                    c0:be:76:38:11:3c:4d:3a:86:d0:1e:95:b7:d0:36:
                    7c:fd:34:2a:6d:e9:04:b1:80:70:a2:2a:9f:e3:7d:
                    3c:ef:85:63:be:78:46:c8:b1:e9:7c:ef:7a:b0:62:
                    94:0a:23:5b:05:63:d2:bc:ae:b0:e2:27:70:45:cb:
                    ec:dc:8c:2e:ef:72:1e:7a:3b:4f:12:e5:44:8c:88:
                    1f:36:92:73:b8:52:31:06:96:93:5e:27:3d:dc:29:
                    c5:5f:56:dd:cf:5a:87:c6:98:6e:e3:99:0f:a5:88:
                    cf:a0:94:a8:48:45:fe:88:77:02:1a:2e:eb:94:43:
                    90:f3:11:7f:ec:b5:93:55:10:90:ea:fe:3d:57:a8:
                    b4:de:57:e3:b2:29:59:f7:d4:a1:e9:1f:3d:fd:3d:
                    e2:48:5c:56:20:b4:2c:e2:4f:07:2d:a9:d2:f5:1f:
                    a3:6d:77:67:ec:42:92:59:b1:ad:cb:b5:1a:fa:0f:
                    7a:a5:85:8d:85:e5:24:44:62:bb:8c:a8:13:e1:d0:
                    ba:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:FD:25:DD:2F:10:DD:C3:E2:78:98:C0:78:52:C9:B2:52:BB:13:3B
            X509v3 Authority Key Identifier:
                keyid:87:5A:4D:85:2D:6F:2E:59:E9:37:AD:BF:11:28:FC:24:B0:D4:09:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h1pNhS1vLlnpN62_ESj8JLDUCQA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/f10a59-1938-4e46-8d0c-7981f550b094/1/h1pNhS1vLlnpN62_ESj8JLDUCQA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/f10a59-1938-4e46-8d0c-7981f550b094/1/h1pNhS1vLlnpN62_ESj8JLDUCQA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:6b:c8:56:70:a2:58:89:67:bb:ea:17:94:95:92:94:03:24:
         f1:62:0d:01:2c:e1:8a:42:06:a2:c6:69:96:28:6c:17:b0:a7:
         17:99:d7:c1:aa:27:b6:11:83:37:df:55:0a:32:2f:53:ae:fe:
         03:19:4a:9c:8e:46:04:a6:9e:6a:20:1c:6a:9c:e2:53:31:c8:
         13:e6:2e:01:3c:7c:0b:b0:a9:02:30:e7:94:30:5f:80:18:14:
         81:20:16:49:54:5d:de:79:f1:52:66:46:2f:47:ee:3f:50:1e:
         76:3d:fe:c1:96:53:f8:9d:d7:81:96:d6:4d:fd:a1:6d:71:0f:
         6c:6e:b2:18:61:c6:4d:52:0f:b1:4b:b1:11:b9:b6:35:19:10:
         39:89:9d:12:8f:3c:fa:eb:38:1c:97:94:b5:38:ae:c7:f9:27:
         25:c2:9d:c3:7b:aa:43:69:28:1b:00:aa:27:aa:00:08:8a:b2:
         55:5b:9c:2a:e3:f1:54:d5:79:b5:9b:0e:14:c2:ea:11:67:26:
         a3:0e:bc:b1:f0:3c:c6:9f:9d:04:cb:5f:a6:c3:55:ee:52:e9:
         91:cd:4c:42:ed:8f:a4:54:fa:46:4d:d9:59:23:5b:43:43:ca:
         08:5f:bc:f3:8b:1c:5b:af:d7:87:a6:ea:80:22:f1:b8:94:35:
         c5:03:4e:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYvG1zCNyW57b0rsp0jd46lBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3NWE0ZDg1MmQ2ZjJlNTllOTM3YWRiZjExMjhmYzI0YjBk
NDA5MDAwHhcNMjMxMTEzMDQwMTEzWhcNMjMxMTE0MDQwMTEzWjAzMTEwLwYDVQQD
EyhmMWZkMjVkZDJmMTBkZGMzZTI3ODk4YzA3ODUyYzliMjUyYmIxMzNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr95WSfenJeE9yayc0MIp88JVJeQk
lg+zvGPVcsF/NbE1kz64Tptwxnbhwbqzey/fre0JXRq81HcCBKrAvnY4ETxNOobQ
HpW30DZ8/TQqbekEsYBwoiqf430874VjvnhGyLHpfO96sGKUCiNbBWPSvK6w4idw
Rcvs3Iwu73IeejtPEuVEjIgfNpJzuFIxBpaTXic93CnFX1bdz1qHxphu45kPpYjP
oJSoSEX+iHcCGi7rlEOQ8xF/7LWTVRCQ6v49V6i03lfjsilZ99Sh6R89/T3iSFxW
ILQs4k8HLanS9R+jbXdn7EKSWbGty7Ua+g96pYWNheUkRGK7jKgT4dC6pwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPH9Jd0vEN3D4niYwHhSybJSuxM7MB8GA1UdIwQY
MBaAFIdaTYUtby5Z6TetvxEo/CSw1AkAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDFwTmhTMXZMbG5wTjYyX0VTajhKTERVQ1FBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9mMTBhNTktMTkzOC00ZTQ2LThkMGMt
Nzk4MWY1NTBiMDk0LzEvaDFwTmhTMXZMbG5wTjYyX0VTajhKTERVQ1FBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy9mMTBhNTktMTkzOC00ZTQ2LThkMGMtNzk4MWY1NTBiMDk0
LzEvaDFwTmhTMXZMbG5wTjYyX0VTajhKTERVQ1FBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApmvIVnCi
WIlnu+oXlJWSlAMk8WINASzhikIGosZplihsF7CnF5nXwaonthGDN99VCjIvU67+
AxlKnI5GBKaeaiAcapziUzHIE+YuATx8C7CpAjDnlDBfgBgUgSAWSVRd3nnxUmZG
L0fuP1Aedj3+wZZT+J3XgZbWTf2hbXEPbG6yGGHGTVIPsUuxEbm2NRkQOYmdEo88
+us4HJeUtTiux/knJcKdw3uqQ2koGwCqJ6oACIqyVVucKuPxVNV5tZsOFMLqEWcm
ow68sfA8xp+dBMtfpsNV7lLpkc1MQu2PpFT6Rk3ZWSNbQ0PKCF+884scW6/Xh6bq
gCLxuJQ1xQNOGw==
-----END CERTIFICATE-----