Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/15d1be-0353-4e2b-b8a9-e1b90d5665fc/1/f3qIdSdIU7BwfDZQEVL4kFiM2yE.mft
File:                     f3qIdSdIU7BwfDZQEVL4kFiM2yE.mft (raw, json)
Hash identifier:          pywFvQoGvRSKSGaWe/0CO3xARUNZfcL2cj9WeJPuOsU=
Subject key identifier:   FC:2F:98:CC:9E:9A:CD:91:BC:B0:5F:06:C9:09:FC:41:57:81:72:6D
Authority key identifier: 7F:7A:88:75:27:48:53:B0:70:7C:36:50:11:52:F8:90:58:8C:DB:21
Certificate issuer:       /CN=7f7a8875274853b0707c36501152f890588cdb21
Certificate serial:       018A3A2E4A70817FED9F525010B3BBF2C421
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f3qIdSdIU7BwfDZQEVL4kFiM2yE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/15d1be-0353-4e2b-b8a9-e1b90d5665fc/1/f3qIdSdIU7BwfDZQEVL4kFiM2yE.mft
Manifest number:          0875
Signing time:             Mon 28 Aug 2023 03:27:06 +0000
Manifest this update:     Mon 28 Aug 2023 03:27:06 +0000
Manifest next update:     Tue 29 Aug 2023 03:27:06 +0000
Files and hashes:         1: f3qIdSdIU7BwfDZQEVL4kFiM2yE.crl (hash: Apkzoza2XTfW5H3Ry8wZDaRrEfKVFV+U6qtO5jTucuc=)
                          2: pRlm3YoYESLrSA0RevjGqC34EsY.roa (hash: Jel2iT8sAA/AOGckfUbkstqUn614Ew6uUuQUHQSKYAM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:3a:2e:4a:70:81:7f:ed:9f:52:50:10:b3:bb:f2:c4:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f7a8875274853b0707c36501152f890588cdb21
        Validity
            Not Before: Aug 28 03:27:06 2023 GMT
            Not After : Aug 29 03:27:06 2023 GMT
        Subject: CN=fc2f98cc9e9acd91bcb05f06c909fc415781726d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:52:77:3d:ab:b7:36:26:42:83:76:59:74:16:
                    9a:b0:60:88:75:5b:33:c9:74:26:2d:e5:ca:f1:f6:
                    45:76:73:73:dd:c5:0e:0f:d4:17:60:67:f6:a9:01:
                    d5:33:cf:df:04:58:85:b2:6d:06:f5:3b:a3:e6:8c:
                    74:16:e5:b8:47:ac:d3:ce:8b:ff:c5:a5:c3:13:6a:
                    a5:f0:5a:4d:82:d6:bd:83:0b:82:4f:78:b2:c2:9e:
                    88:95:3a:f8:86:8f:c7:a3:c8:55:ce:fc:91:57:7b:
                    e3:92:d2:cb:03:f2:11:e7:5d:e1:c8:c6:7d:8d:76:
                    00:0a:ec:87:5a:bd:cc:8c:07:82:cd:5f:c8:1e:fd:
                    fb:fa:51:37:52:85:49:c6:93:d5:54:5d:62:e5:4e:
                    cc:52:b6:a3:04:99:4f:13:07:08:b0:21:16:10:42:
                    2b:56:41:0b:f9:c8:30:9f:6c:03:31:8d:d2:4d:84:
                    8b:59:0f:62:d5:75:c2:58:f5:f0:52:d7:26:17:86:
                    e4:f9:31:3c:17:6d:1f:de:56:e5:2c:db:ff:bc:5c:
                    3e:56:10:b9:93:08:18:24:5d:2b:69:b5:32:99:7f:
                    a8:4a:f1:86:3d:5e:55:15:84:85:2e:0c:14:5e:5d:
                    cc:5c:cb:df:a3:37:d1:e2:9f:8e:50:9c:c5:08:7a:
                    40:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:2F:98:CC:9E:9A:CD:91:BC:B0:5F:06:C9:09:FC:41:57:81:72:6D
            X509v3 Authority Key Identifier:
                keyid:7F:7A:88:75:27:48:53:B0:70:7C:36:50:11:52:F8:90:58:8C:DB:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3qIdSdIU7BwfDZQEVL4kFiM2yE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/15d1be-0353-4e2b-b8a9-e1b90d5665fc/1/f3qIdSdIU7BwfDZQEVL4kFiM2yE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/15d1be-0353-4e2b-b8a9-e1b90d5665fc/1/f3qIdSdIU7BwfDZQEVL4kFiM2yE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:fb:b0:2b:e4:74:c4:b7:e9:7f:9a:b4:9b:16:b9:50:09:05:
         a3:69:72:aa:ed:26:52:d8:90:a6:09:2f:0a:a1:4d:d9:f1:fe:
         06:bc:02:d9:b3:e1:8b:91:19:71:0f:f0:c5:1a:e3:ff:08:50:
         4f:35:d4:a5:47:c4:c0:5c:f6:c3:f3:8d:46:f5:fa:5a:b1:db:
         cd:54:fb:12:43:81:ba:f5:26:0d:6e:b5:8f:d2:60:14:06:b5:
         ff:6f:8a:eb:a0:88:f8:8f:34:c1:7b:09:3f:02:52:28:79:04:
         12:80:d7:7d:a8:c1:6c:37:46:d7:32:3a:d3:c7:51:7b:f2:b5:
         27:bc:43:2c:ad:59:52:d9:31:7c:c5:08:39:de:19:44:ae:29:
         55:36:fa:78:af:80:60:87:b9:8c:8f:42:72:bb:13:ab:3c:b7:
         bf:18:d0:af:c0:ee:4c:29:4a:22:33:46:ee:2b:46:d2:94:6d:
         c0:a0:7f:43:ff:9d:99:02:52:46:cc:c6:8b:a1:f8:cc:bd:0f:
         b9:d4:dd:96:1b:16:f4:85:45:f7:be:f0:69:7b:97:68:f4:13:
         7b:34:d4:d1:65:ea:8c:09:c0:43:35:15:fa:e3:8d:66:26:58:
         22:1a:67:e5:c6:c6:b2:62:ab:45:c8:c5:b0:dc:65:b0:86:5e:
         0b:a8:57:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYo6LkpwgX/tn1JQELO78sQhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmN2E4ODc1Mjc0ODUzYjA3MDdjMzY1MDExNTJmODkwNTg4
Y2RiMjEwHhcNMjMwODI4MDMyNzA2WhcNMjMwODI5MDMyNzA2WjAzMTEwLwYDVQQD
EyhmYzJmOThjYzllOWFjZDkxYmNiMDVmMDZjOTA5ZmM0MTU3ODE3MjZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1J3Pau3NiZCg3ZZdBaasGCIdVsz
yXQmLeXK8fZFdnNz3cUOD9QXYGf2qQHVM8/fBFiFsm0G9Tuj5ox0FuW4R6zTzov/
xaXDE2ql8FpNgta9gwuCT3iywp6IlTr4ho/Ho8hVzvyRV3vjktLLA/IR513hyMZ9
jXYACuyHWr3MjAeCzV/IHv37+lE3UoVJxpPVVF1i5U7MUrajBJlPEwcIsCEWEEIr
VkEL+cgwn2wDMY3STYSLWQ9i1XXCWPXwUtcmF4bk+TE8F20f3lblLNv/vFw+VhC5
kwgYJF0rabUymX+oSvGGPV5VFYSFLgwUXl3MXMvfozfR4p+OUJzFCHpAuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPwvmMyems2RvLBfBskJ/EFXgXJtMB8GA1UdIwQY
MBaAFH96iHUnSFOwcHw2UBFS+JBYjNshMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZjNxSWRTZElVN0J3ZkRaUUVWTDRrRmlNMnlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS8xNWQxYmUtMDM1My00ZTJiLWI4YTkt
ZTFiOTBkNTY2NWZjLzEvZjNxSWRTZElVN0J3ZkRaUUVWTDRrRmlNMnlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS8xNWQxYmUtMDM1My00ZTJiLWI4YTktZTFiOTBkNTY2NWZj
LzEvZjNxSWRTZElVN0J3ZkRaUUVWTDRrRmlNMnlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmvuwK+R0
xLfpf5q0mxa5UAkFo2lyqu0mUtiQpgkvCqFN2fH+BrwC2bPhi5EZcQ/wxRrj/whQ
TzXUpUfEwFz2w/ONRvX6WrHbzVT7EkOBuvUmDW61j9JgFAa1/2+K66CI+I80wXsJ
PwJSKHkEEoDXfajBbDdG1zI608dRe/K1J7xDLK1ZUtkxfMUIOd4ZRK4pVTb6eK+A
YIe5jI9CcrsTqzy3vxjQr8DuTClKIjNG7itG0pRtwKB/Q/+dmQJSRszGi6H4zL0P
udTdlhsW9IVF977waXuXaPQTezTU0WXqjAnAQzUV+uONZiZYIhpn5cbGsmKrRcjF
sNxlsIZeC6hXdw==
-----END CERTIFICATE-----