Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/0c2a79-dcdf-4b14-84b4-b2b7a45586c4/1/LfdGMI-dl21bH_Y2MUDsfCw1vuo.mft
File:                     LfdGMI-dl21bH_Y2MUDsfCw1vuo.mft (raw, json)
Hash identifier:          yk4cYqQ/UXS7E4PNSN9Dmgq3OtVBR3yBpsH9WOvIwPs=
Subject key identifier:   00:E2:7B:6B:FF:80:D9:35:02:A1:CC:72:BF:54:A3:55:46:5A:E7:03
Authority key identifier: 2D:F7:46:30:8F:9D:97:6D:5B:1F:F6:36:31:40:EC:7C:2C:35:BE:EA
Certificate issuer:       /CN=2df746308f9d976d5b1ff6363140ec7c2c35beea
Certificate serial:       01870E1F440B5382E1C19543CC53C8A97378
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LfdGMI-dl21bH_Y2MUDsfCw1vuo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/0c2a79-dcdf-4b14-84b4-b2b7a45586c4/1/LfdGMI-dl21bH_Y2MUDsfCw1vuo.mft
Manifest number:          0CE5
Signing time:             Thu 23 Mar 2023 10:59:02 +0000
Manifest this update:     Thu 23 Mar 2023 10:59:02 +0000
Manifest next update:     Fri 24 Mar 2023 10:59:02 +0000
Files and hashes:         1: LfdGMI-dl21bH_Y2MUDsfCw1vuo.crl (hash: N0LqYe6qzL/xCsi+77TZHywpJyeilMFqOm63d1i/ugI=)
                          2: TkmTKJ1oEdaPTs7zNspqgZFtOYM.roa (hash: FqU9Kg1Z0Zr+VrAmGUy5zLSangaFJy2es74C/zlowFs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:0e:1f:44:0b:53:82:e1:c1:95:43:cc:53:c8:a9:73:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2df746308f9d976d5b1ff6363140ec7c2c35beea
        Validity
            Not Before: Mar 23 10:59:02 2023 GMT
            Not After : Mar 24 10:59:02 2023 GMT
        Subject: CN=00e27b6bff80d93502a1cc72bf54a355465ae703
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d9:db:10:ba:eb:cd:a9:3b:9f:ed:6c:7c:09:
                    a4:d0:76:5d:68:2c:bc:08:74:34:a7:77:14:be:8b:
                    fb:e5:56:4b:7e:24:d8:3d:16:51:b4:d3:c5:97:f2:
                    f5:e2:04:a0:f0:58:e7:45:7b:66:0a:c0:0a:a7:e6:
                    39:4c:c3:ca:34:33:58:6d:77:fa:8e:79:5b:99:9d:
                    26:a9:34:db:80:a5:ac:00:3f:9d:d1:50:c2:36:52:
                    5d:28:8f:64:1b:c0:8c:77:da:03:65:fa:cb:44:ba:
                    21:82:f5:40:09:6d:3b:d2:77:e3:ed:de:52:98:a9:
                    a8:96:a9:8e:9c:da:80:e0:16:b2:0e:11:dc:65:4f:
                    d7:76:34:d9:17:33:88:fe:fe:18:ef:f2:d6:3e:e4:
                    e5:5b:c3:45:2a:79:d3:b9:86:bc:22:71:b6:be:6d:
                    6f:7a:14:d4:6c:6f:76:41:bf:1d:e5:fb:34:07:bf:
                    b0:8b:b9:c3:f1:4c:ac:cc:5b:65:2a:5e:a4:4f:8e:
                    a2:4f:25:5e:6d:92:67:e7:16:42:3d:ab:42:0a:07:
                    f0:75:d5:3a:18:db:80:8d:c1:9b:c7:b3:3d:d2:73:
                    65:e1:66:b1:57:e8:c7:28:ae:0d:9f:e1:ad:92:08:
                    04:5e:39:d1:27:fe:d4:8a:c4:e6:cc:7e:a9:ac:72:
                    3a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:E2:7B:6B:FF:80:D9:35:02:A1:CC:72:BF:54:A3:55:46:5A:E7:03
            X509v3 Authority Key Identifier:
                keyid:2D:F7:46:30:8F:9D:97:6D:5B:1F:F6:36:31:40:EC:7C:2C:35:BE:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LfdGMI-dl21bH_Y2MUDsfCw1vuo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0c2a79-dcdf-4b14-84b4-b2b7a45586c4/1/LfdGMI-dl21bH_Y2MUDsfCw1vuo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0c2a79-dcdf-4b14-84b4-b2b7a45586c4/1/LfdGMI-dl21bH_Y2MUDsfCw1vuo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:04:d2:f9:85:c8:df:f8:ce:c3:5d:71:54:db:b7:f8:e7:42:
         a2:b5:e7:84:07:9e:5f:83:21:d7:cd:fc:d2:83:ed:40:6c:f8:
         3b:9e:33:cb:f7:fa:16:9b:d4:5d:ac:64:7f:40:ee:65:d7:41:
         08:c1:bd:9e:9a:85:e3:7b:26:8b:d9:06:13:60:85:de:ff:6d:
         ee:e0:29:62:8c:1d:e9:84:3c:63:b3:59:32:fa:a1:64:01:bb:
         18:28:8f:48:4e:b5:26:16:b8:8e:45:32:0e:04:0c:25:81:e9:
         a4:68:cd:3d:cc:6c:27:8c:fb:f1:90:b1:22:a7:0a:00:97:aa:
         84:95:f7:72:12:72:fe:0a:40:7d:74:a2:5d:37:d3:c8:5e:9c:
         26:35:d0:c8:06:ff:8f:f4:7c:55:53:01:86:2a:84:f8:16:31:
         b0:3f:7c:0c:d0:d7:96:92:f9:46:71:ce:1d:7a:12:98:69:0b:
         bc:f2:3a:37:a2:f0:d4:b7:ea:18:be:d1:1c:04:fe:9c:92:a5:
         50:45:7a:b8:08:22:6d:65:a4:10:7c:d1:11:2d:e5:43:31:29:
         cc:ec:71:54:51:0f:07:42:9c:df:3a:cd:2b:12:8f:21:45:af:
         40:ba:e7:c2:e9:41:a6:a4:1a:dc:57:ff:5e:67:61:14:d9:56:
         46:9c:09:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYcOH0QLU4LhwZVDzFPIqXN4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkZjc0NjMwOGY5ZDk3NmQ1YjFmZjYzNjMxNDBlYzdjMmMz
NWJlZWEwHhcNMjMwMzIzMTA1OTAyWhcNMjMwMzI0MTA1OTAyWjAzMTEwLwYDVQQD
EygwMGUyN2I2YmZmODBkOTM1MDJhMWNjNzJiZjU0YTM1NTQ2NWFlNzAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtnbELrrzak7n+1sfAmk0HZdaCy8
CHQ0p3cUvov75VZLfiTYPRZRtNPFl/L14gSg8FjnRXtmCsAKp+Y5TMPKNDNYbXf6
jnlbmZ0mqTTbgKWsAD+d0VDCNlJdKI9kG8CMd9oDZfrLRLohgvVACW070nfj7d5S
mKmolqmOnNqA4BayDhHcZU/XdjTZFzOI/v4Y7/LWPuTlW8NFKnnTuYa8InG2vm1v
ehTUbG92Qb8d5fs0B7+wi7nD8UyszFtlKl6kT46iTyVebZJn5xZCPatCCgfwddU6
GNuAjcGbx7M90nNl4WaxV+jHKK4Nn+GtkggEXjnRJ/7UisTmzH6prHI6rQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFADie2v/gNk1AqHMcr9Uo1VGWucDMB8GA1UdIwQY
MBaAFC33RjCPnZdtWx/2NjFA7HwsNb7qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGZkR01JLWRsMjFiSF9ZMk1VRHNmQ3cxdnVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8wYzJhNzktZGNkZi00YjE0LTg0YjQt
YjJiN2E0NTU4NmM0LzEvTGZkR01JLWRsMjFiSF9ZMk1VRHNmQ3cxdnVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS8wYzJhNzktZGNkZi00YjE0LTg0YjQtYjJiN2E0NTU4NmM0
LzEvTGZkR01JLWRsMjFiSF9ZMk1VRHNmQ3cxdnVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZATS+YXI
3/jOw11xVNu3+OdCorXnhAeeX4Mh18380oPtQGz4O54zy/f6FpvUXaxkf0DuZddB
CMG9npqF43smi9kGE2CF3v9t7uApYowd6YQ8Y7NZMvqhZAG7GCiPSE61Jha4jkUy
DgQMJYHppGjNPcxsJ4z78ZCxIqcKAJeqhJX3chJy/gpAfXSiXTfTyF6cJjXQyAb/
j/R8VVMBhiqE+BYxsD98DNDXlpL5RnHOHXoSmGkLvPI6N6Lw1LfqGL7RHAT+nJKl
UEV6uAgibWWkEHzRES3lQzEpzOxxVFEPB0Kc3zrNKxKPIUWvQLrnwulBpqQa3Ff/
XmdhFNlWRpwJkw==
-----END CERTIFICATE-----