Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/9afc88-70ef-4a44-a760-1c2885e73ece/1/6HAk2c9qiYtLqbKaRhEK_0GX2RM.mft
File:                     6HAk2c9qiYtLqbKaRhEK_0GX2RM.mft (raw, json)
Hash identifier:          YxBKV7t1xXebgugfyue/VDor/Hlolxl8EXlkc0SiJHE=
Subject key identifier:   8C:DE:AD:25:69:54:F3:3D:52:56:C8:89:19:39:06:40:45:51:19:B5
Authority key identifier: E8:70:24:D9:CF:6A:89:8B:4B:A9:B2:9A:46:11:0A:FF:41:97:D9:13
Certificate issuer:       /CN=e87024d9cf6a898b4ba9b29a46110aff4197d913
Certificate serial:       018C144D1F02F0D38A98912B70F5EEC87831
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6HAk2c9qiYtLqbKaRhEK_0GX2RM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/9afc88-70ef-4a44-a760-1c2885e73ece/1/6HAk2c9qiYtLqbKaRhEK_0GX2RM.mft
Manifest number:          0F6C
Signing time:             Tue 28 Nov 2023 05:00:47 +0000
Manifest this update:     Tue 28 Nov 2023 05:00:47 +0000
Manifest next update:     Wed 29 Nov 2023 05:00:47 +0000
Files and hashes:         1: 6HAk2c9qiYtLqbKaRhEK_0GX2RM.crl (hash: Ce9DKVz0Lw3ZGTfOMvc+8SH+kOBXnC3+BU5ZGmh/YRE=)
                          2: hdtz_H_fHbely6kVCO0R813Ryuo.roa (hash: u3XYexaFyAjszbaB8f817tnHB4/IbmM2vSjPiwp9fFA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:14:4d:1f:02:f0:d3:8a:98:91:2b:70:f5:ee:c8:78:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e87024d9cf6a898b4ba9b29a46110aff4197d913
        Validity
            Not Before: Nov 28 05:00:47 2023 GMT
            Not After : Nov 29 05:00:47 2023 GMT
        Subject: CN=8cdead256954f33d5256c88919390640455119b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fe:b1:c2:3d:3e:c0:5c:8d:11:f3:3e:ad:62:
                    5c:6d:0c:55:8a:ef:5a:1d:e4:ad:07:4d:47:c7:5c:
                    76:fc:81:51:09:f0:d3:1e:ed:e8:b4:84:25:e3:88:
                    7c:a6:5c:21:41:17:03:77:75:92:57:84:28:d9:cd:
                    db:fa:f4:0f:e2:29:9d:3d:4a:b2:19:61:97:9b:ed:
                    16:7e:d7:3a:26:a8:c1:31:6b:a9:49:92:59:03:0e:
                    3b:e2:52:df:0f:aa:d8:54:9d:37:f4:f7:9c:c0:15:
                    ba:a0:e4:a6:7d:a0:a6:01:e6:23:54:c9:8f:c2:4c:
                    a2:f1:cd:e2:6d:6a:2f:7f:1a:77:38:d2:2d:12:6c:
                    2f:b0:92:8b:0c:ab:14:1c:8a:da:40:30:59:43:57:
                    24:8f:00:47:c0:87:d5:28:c9:11:8b:cf:42:43:f1:
                    ab:da:fc:3b:71:b0:13:cb:23:d4:02:18:12:0b:c4:
                    6c:0c:f6:72:14:17:00:6b:25:66:13:67:93:bb:f5:
                    c2:4a:01:70:c7:31:57:08:dd:bd:6e:69:29:ce:a4:
                    dc:32:f7:b3:d0:10:89:11:57:86:f4:fe:25:70:a5:
                    54:8c:2a:86:06:a7:a5:bf:97:5a:b3:97:a8:fa:00:
                    af:cd:4b:a7:89:d3:f5:6d:98:da:b6:84:65:a3:c5:
                    55:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:DE:AD:25:69:54:F3:3D:52:56:C8:89:19:39:06:40:45:51:19:B5
            X509v3 Authority Key Identifier:
                keyid:E8:70:24:D9:CF:6A:89:8B:4B:A9:B2:9A:46:11:0A:FF:41:97:D9:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6HAk2c9qiYtLqbKaRhEK_0GX2RM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9afc88-70ef-4a44-a760-1c2885e73ece/1/6HAk2c9qiYtLqbKaRhEK_0GX2RM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9afc88-70ef-4a44-a760-1c2885e73ece/1/6HAk2c9qiYtLqbKaRhEK_0GX2RM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:84:3d:c5:b1:d1:8b:75:c7:7f:f7:f3:0b:0d:3c:57:51:3c:
         ea:f0:5a:ec:fb:85:59:00:c0:ed:33:47:b7:a4:b8:d1:fc:0f:
         ff:e5:52:8e:65:37:48:2b:77:1a:6a:0c:d8:f4:ae:f0:62:f4:
         51:bb:dc:f3:36:4e:92:a9:63:59:6d:5d:05:0f:dd:73:79:c5:
         91:78:eb:17:2d:9d:76:4f:73:57:8e:8d:eb:22:ff:92:67:2b:
         b6:98:b3:af:2d:9b:f8:26:b9:98:27:de:1b:2b:c0:f6:a4:fe:
         a2:ce:74:db:61:0a:5c:f7:41:bb:fb:d1:22:80:ac:d6:ac:f1:
         51:d2:a9:2d:d6:34:a6:d0:aa:c7:fb:5b:43:61:63:17:dd:9b:
         82:58:10:a7:aa:02:c3:22:bc:1d:d2:23:3d:0e:6e:04:6d:e6:
         fb:dc:a1:e7:ac:72:04:e6:c0:fa:26:10:c6:a4:4e:10:df:03:
         c9:c7:77:ea:bc:ed:46:07:c6:69:f6:f7:2e:24:6a:0f:bd:fc:
         d2:bb:30:e2:4e:64:ea:57:05:e3:f0:ee:f2:c3:2b:07:f7:8b:
         ac:00:9d:a3:9b:e9:5c:85:79:36:fe:b8:c0:29:5b:c8:97:6a:
         d2:e9:9b:93:c9:c6:ec:d8:ed:c6:64:2e:2a:1e:d3:e0:5d:9e:
         e4:84:81:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYwUTR8C8NOKmJErcPXuyHgxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4NzAyNGQ5Y2Y2YTg5OGI0YmE5YjI5YTQ2MTEwYWZmNDE5
N2Q5MTMwHhcNMjMxMTI4MDUwMDQ3WhcNMjMxMTI5MDUwMDQ3WjAzMTEwLwYDVQQD
Eyg4Y2RlYWQyNTY5NTRmMzNkNTI1NmM4ODkxOTM5MDY0MDQ1NTExOWI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/6xwj0+wFyNEfM+rWJcbQxViu9a
HeStB01Hx1x2/IFRCfDTHu3otIQl44h8plwhQRcDd3WSV4Qo2c3b+vQP4imdPUqy
GWGXm+0Wftc6JqjBMWupSZJZAw474lLfD6rYVJ039PecwBW6oOSmfaCmAeYjVMmP
wkyi8c3ibWovfxp3ONItEmwvsJKLDKsUHIraQDBZQ1ckjwBHwIfVKMkRi89CQ/Gr
2vw7cbATyyPUAhgSC8RsDPZyFBcAayVmE2eTu/XCSgFwxzFXCN29bmkpzqTcMvez
0BCJEVeG9P4lcKVUjCqGBqelv5das5eo+gCvzUunidP1bZjatoRlo8VVgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIzerSVpVPM9UlbIiRk5BkBFURm1MB8GA1UdIwQY
MBaAFOhwJNnPaomLS6mymkYRCv9Bl9kTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkhBazJjOXFpWXRMcWJLYVJoRUtfMEdYMlJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy85YWZjODgtNzBlZi00YTQ0LWE3NjAt
MWMyODg1ZTczZWNlLzEvNkhBazJjOXFpWXRMcWJLYVJoRUtfMEdYMlJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy85YWZjODgtNzBlZi00YTQ0LWE3NjAtMWMyODg1ZTczZWNl
LzEvNkhBazJjOXFpWXRMcWJLYVJoRUtfMEdYMlJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACIQ9xbHR
i3XHf/fzCw08V1E86vBa7PuFWQDA7TNHt6S40fwP/+VSjmU3SCt3GmoM2PSu8GL0
Ubvc8zZOkqljWW1dBQ/dc3nFkXjrFy2ddk9zV46N6yL/kmcrtpizry2b+Ca5mCfe
GyvA9qT+os5022EKXPdBu/vRIoCs1qzxUdKpLdY0ptCqx/tbQ2FjF92bglgQp6oC
wyK8HdIjPQ5uBG3m+9yh56xyBObA+iYQxqROEN8Dycd36rztRgfGafb3LiRqD738
0rsw4k5k6lcF4/Du8sMrB/eLrACdo5vpXIV5Nv64wClbyJdq0umbk8nG7NjtxmQu
Kh7T4F2e5ISBWw==
-----END CERTIFICATE-----