Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/467a5f-fadb-4d5e-82f1-45d42d4be187/1/E19DjE_M-xjg4u0_yN2e6fNHybk.mft
File:                     E19DjE_M-xjg4u0_yN2e6fNHybk.mft (raw, json)
Hash identifier:          xNDCR6csda8RfWCmYx++/34DJ7+acMO7+c3/OyGVQtM=
Subject key identifier:   CE:09:77:C8:89:34:D5:47:4D:B6:67:2A:6D:46:8D:94:62:3E:A5:4E
Authority key identifier: 13:5F:43:8C:4F:CC:FB:18:E0:E2:ED:3F:C8:DD:9E:E9:F3:47:C9:B9
Certificate issuer:       /CN=135f438c4fccfb18e0e2ed3fc8dd9ee9f347c9b9
Certificate serial:       018BEA3E21B5C25B752E37420D3F33D10683
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E19DjE_M-xjg4u0_yN2e6fNHybk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/467a5f-fadb-4d5e-82f1-45d42d4be187/1/E19DjE_M-xjg4u0_yN2e6fNHybk.mft
Manifest number:          0858
Signing time:             Mon 20 Nov 2023 01:00:22 +0000
Manifest this update:     Mon 20 Nov 2023 01:00:22 +0000
Manifest next update:     Tue 21 Nov 2023 01:00:22 +0000
Files and hashes:         1: 6vjUfaDeJKMGs1BI6HpjM2JaoVc.roa (hash: AhyrtCKoFR7CdoFN6P6gqRX2dibEm3cKuHF6n36Vfxk=)
                          2: E19DjE_M-xjg4u0_yN2e6fNHybk.crl (hash: t5ksTxn3ZiRZkd3CdAbgRhg2AFOV5O+ule6YLz+7ONE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:ea:3e:21:b5:c2:5b:75:2e:37:42:0d:3f:33:d1:06:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=135f438c4fccfb18e0e2ed3fc8dd9ee9f347c9b9
        Validity
            Not Before: Nov 20 01:00:22 2023 GMT
            Not After : Nov 21 01:00:22 2023 GMT
        Subject: CN=ce0977c88934d5474db6672a6d468d94623ea54e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:dc:3f:05:de:c1:e4:12:7b:55:34:bc:d6:c2:
                    d3:a0:0e:fd:36:27:39:29:4c:63:54:7f:4e:7e:e1:
                    41:aa:3b:94:d0:09:4f:61:fd:df:76:60:10:ec:8f:
                    fc:6e:e8:57:09:28:19:55:5b:6a:a0:56:04:9c:75:
                    a8:78:56:8f:e4:81:4f:4f:76:9f:cf:b3:7f:6c:80:
                    f5:6f:81:f5:79:c6:43:2f:fe:53:c5:f0:6a:e7:20:
                    af:c7:ee:b9:7d:51:61:c6:49:be:22:e9:be:69:f5:
                    b6:d4:1b:ac:c0:a9:29:a1:1e:a5:d5:95:c1:8e:01:
                    ae:f8:d3:51:27:58:e1:79:5c:2d:f1:d1:ea:8d:c0:
                    83:39:22:a1:f9:56:a5:d0:3c:27:a0:e6:3f:db:aa:
                    c4:9d:13:37:af:14:db:cb:1b:57:e1:17:a7:59:0e:
                    71:4d:43:d3:1f:59:fc:e4:bd:f5:2e:ac:f2:ed:47:
                    4b:52:68:84:a8:00:80:ea:91:3d:3c:04:dc:6c:52:
                    9a:4c:20:2c:37:55:3c:5e:37:38:82:ba:31:6c:95:
                    41:25:54:bc:bf:ff:56:b8:21:23:2b:76:58:22:c9:
                    46:d9:53:a2:d1:3b:cd:28:5b:c2:4b:66:bd:8c:22:
                    69:66:1e:13:ca:2e:a9:b4:09:94:c1:1a:ad:4e:42:
                    0c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:09:77:C8:89:34:D5:47:4D:B6:67:2A:6D:46:8D:94:62:3E:A5:4E
            X509v3 Authority Key Identifier:
                keyid:13:5F:43:8C:4F:CC:FB:18:E0:E2:ED:3F:C8:DD:9E:E9:F3:47:C9:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E19DjE_M-xjg4u0_yN2e6fNHybk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/467a5f-fadb-4d5e-82f1-45d42d4be187/1/E19DjE_M-xjg4u0_yN2e6fNHybk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/467a5f-fadb-4d5e-82f1-45d42d4be187/1/E19DjE_M-xjg4u0_yN2e6fNHybk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:19:a5:36:28:7c:2e:a3:3a:49:d8:e0:da:b1:07:15:d2:f6:
         55:5d:46:75:e0:2c:d6:e6:45:39:bc:f8:e1:05:a5:c9:ee:57:
         67:e5:ad:5d:69:a4:47:50:96:53:a6:6c:70:5a:89:1a:e6:6f:
         ca:25:12:03:f6:a6:62:0e:22:96:b8:a7:b1:79:f9:05:94:84:
         1c:8f:22:d8:03:be:5f:24:44:6d:e4:e0:6c:5b:39:61:36:a3:
         e4:4f:a9:bd:28:e7:e9:8b:36:ae:99:9e:ed:65:64:5f:c6:23:
         5a:5f:62:05:7e:0a:39:ae:13:0a:cd:47:ba:d4:a8:c7:76:88:
         c4:43:62:4c:3f:1a:43:8d:33:0c:54:f9:50:05:22:42:ad:75:
         03:9d:53:ca:b6:93:50:08:32:5b:96:8d:1b:d1:da:ba:1a:b7:
         35:40:81:78:f3:05:ca:a5:ad:e5:e8:e7:99:0a:7b:f1:a8:9a:
         c8:55:77:0f:f0:ef:60:9f:a7:57:04:36:4e:34:a6:1a:7c:62:
         15:c3:dc:b8:2a:09:fe:1a:ef:a7:ec:1e:c5:9c:c5:32:3f:15:
         03:8b:12:6d:73:65:4d:cc:86:43:88:d1:79:56:6b:6a:b1:b5:
         65:30:38:1e:86:20:40:15:ec:8c:b8:25:e1:0e:c1:f2:5b:94:
         01:d8:67:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYvqPiG1wlt1LjdCDT8z0QaDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzNWY0MzhjNGZjY2ZiMThlMGUyZWQzZmM4ZGQ5ZWU5ZjM0
N2M5YjkwHhcNMjMxMTIwMDEwMDIyWhcNMjMxMTIxMDEwMDIyWjAzMTEwLwYDVQQD
EyhjZTA5NzdjODg5MzRkNTQ3NGRiNjY3MmE2ZDQ2OGQ5NDYyM2VhNTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktw/Bd7B5BJ7VTS81sLToA79Nic5
KUxjVH9OfuFBqjuU0AlPYf3fdmAQ7I/8buhXCSgZVVtqoFYEnHWoeFaP5IFPT3af
z7N/bID1b4H1ecZDL/5TxfBq5yCvx+65fVFhxkm+Ium+afW21BuswKkpoR6l1ZXB
jgGu+NNRJ1jheVwt8dHqjcCDOSKh+Val0DwnoOY/26rEnRM3rxTbyxtX4RenWQ5x
TUPTH1n85L31Lqzy7UdLUmiEqACA6pE9PATcbFKaTCAsN1U8Xjc4groxbJVBJVS8
v/9WuCEjK3ZYIslG2VOi0TvNKFvCS2a9jCJpZh4Tyi6ptAmUwRqtTkIMywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM4Jd8iJNNVHTbZnKm1GjZRiPqVOMB8GA1UdIwQY
MBaAFBNfQ4xPzPsY4OLtP8jdnunzR8m5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTE5RGpFX00teGpnNHUwX3lOMmU2Zk5IeWJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS80NjdhNWYtZmFkYi00ZDVlLTgyZjEt
NDVkNDJkNGJlMTg3LzEvRTE5RGpFX00teGpnNHUwX3lOMmU2Zk5IeWJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS80NjdhNWYtZmFkYi00ZDVlLTgyZjEtNDVkNDJkNGJlMTg3
LzEvRTE5RGpFX00teGpnNHUwX3lOMmU2Zk5IeWJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHRmlNih8
LqM6Sdjg2rEHFdL2VV1GdeAs1uZFObz44QWlye5XZ+WtXWmkR1CWU6ZscFqJGuZv
yiUSA/amYg4ilrinsXn5BZSEHI8i2AO+XyREbeTgbFs5YTaj5E+pvSjn6Ys2rpme
7WVkX8YjWl9iBX4KOa4TCs1HutSox3aIxENiTD8aQ40zDFT5UAUiQq11A51TyraT
UAgyW5aNG9Hauhq3NUCBePMFyqWt5ejnmQp78aiayFV3D/DvYJ+nVwQ2TjSmGnxi
FcPcuCoJ/hrvp+wexZzFMj8VA4sSbXNlTcyGQ4jReVZrarG1ZTA4HoYgQBXsjLgl
4Q7B8luUAdhnqA==
-----END CERTIFICATE-----