Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/2e2587-d225-49d2-a563-318e00c6d3d0/1/dWUAjfiZWYx6LA-Ytw8jS_YXgBE.mft
File:                     dWUAjfiZWYx6LA-Ytw8jS_YXgBE.mft (raw, json)
Hash identifier:          2RVoYPcgJkQ3zqcM9DW/h3tE6UVm9ZJ8W4zXUtZnjAs=
Subject key identifier:   06:B2:3D:99:F0:9C:B4:8F:92:61:E9:4B:FF:0F:EB:9B:D1:C2:DE:92
Authority key identifier: 75:65:00:8D:F8:99:59:8C:7A:2C:0F:98:B7:0F:23:4B:F6:17:80:11
Certificate issuer:       /CN=7565008df899598c7a2c0f98b70f234bf6178011
Certificate serial:       018BC820949B5072353BC026129737EAA50D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dWUAjfiZWYx6LA-Ytw8jS_YXgBE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/2e2587-d225-49d2-a563-318e00c6d3d0/1/dWUAjfiZWYx6LA-Ytw8jS_YXgBE.mft
Manifest number:          073C
Signing time:             Mon 13 Nov 2023 10:01:00 +0000
Manifest this update:     Mon 13 Nov 2023 10:01:00 +0000
Manifest next update:     Tue 14 Nov 2023 10:01:00 +0000
Files and hashes:         1: 6-79eBIbULMVbHrPcNGj9dmUiu4.roa (hash: FrlQTe8kEWeXtyHj+b1yz3lKR+V9ndVE2LULVktlI9A=)
                          2: dWUAjfiZWYx6LA-Ytw8jS_YXgBE.crl (hash: swFEGIIguRzxT7pN8cv+UBqpMegv5AMujMFcBolqOdI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:c8:20:94:9b:50:72:35:3b:c0:26:12:97:37:ea:a5:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7565008df899598c7a2c0f98b70f234bf6178011
        Validity
            Not Before: Nov 13 10:01:00 2023 GMT
            Not After : Nov 14 10:01:00 2023 GMT
        Subject: CN=06b23d99f09cb48f9261e94bff0feb9bd1c2de92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:79:36:fe:54:a6:74:14:d7:ac:6c:51:9b:f1:
                    02:d3:02:d9:ca:67:f5:5c:5e:b3:a1:6e:3b:a9:a3:
                    ec:e2:47:fc:ea:1a:7b:14:99:c5:e6:dc:39:37:89:
                    b0:d6:93:5f:86:87:84:d8:ff:44:14:67:35:66:25:
                    1a:70:ce:8a:0c:59:f2:2a:02:50:ab:cc:1a:2b:42:
                    e2:fd:11:f9:18:88:07:61:fa:68:d7:5a:62:58:06:
                    59:ea:ec:61:0c:f1:0c:80:85:b0:b6:db:b4:69:69:
                    80:67:8e:0d:fc:fa:ff:3c:23:82:95:39:01:6c:5c:
                    e7:15:c2:c5:f2:d5:c6:7b:a9:61:b2:bb:f8:51:cd:
                    2e:18:91:7c:a8:19:99:44:14:8c:3c:3b:ba:78:8a:
                    b9:b6:73:af:11:e6:95:1f:e4:42:0a:72:34:5e:97:
                    10:df:eb:97:24:2c:d9:a6:74:e5:16:06:81:46:ce:
                    4a:9e:0c:dd:32:1d:d8:a8:74:be:4c:ad:6d:30:e1:
                    bb:d9:82:ea:37:bb:61:01:47:86:29:7a:ba:aa:dc:
                    83:73:b3:14:19:6a:a9:48:2b:04:a9:d8:c0:f3:e7:
                    c1:73:8e:c8:34:aa:5b:7b:13:c3:0a:b5:08:36:ae:
                    47:f3:c9:ce:0d:16:57:ea:0b:6f:b3:ea:44:46:64:
                    c2:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:B2:3D:99:F0:9C:B4:8F:92:61:E9:4B:FF:0F:EB:9B:D1:C2:DE:92
            X509v3 Authority Key Identifier:
                keyid:75:65:00:8D:F8:99:59:8C:7A:2C:0F:98:B7:0F:23:4B:F6:17:80:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dWUAjfiZWYx6LA-Ytw8jS_YXgBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/2e2587-d225-49d2-a563-318e00c6d3d0/1/dWUAjfiZWYx6LA-Ytw8jS_YXgBE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/2e2587-d225-49d2-a563-318e00c6d3d0/1/dWUAjfiZWYx6LA-Ytw8jS_YXgBE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:c8:e0:57:cb:f2:9b:a4:f4:49:0f:9b:34:e0:75:ee:00:62:
         c3:a2:b0:fd:94:81:4d:65:9f:e4:9c:8e:2e:a6:bb:b8:c9:7e:
         15:69:93:61:03:0d:45:56:25:91:d6:35:70:f3:9f:d9:24:b4:
         8e:d6:1e:1a:e4:1a:00:8d:30:bd:16:08:2f:60:fc:c3:e7:c1:
         9c:d7:0d:47:32:b7:90:ec:43:a1:88:2f:04:ca:c6:28:7d:70:
         72:61:90:de:6f:13:1d:bd:f4:ac:e0:1e:c2:49:32:4d:37:6e:
         a1:98:07:7c:64:2f:63:b1:99:7c:19:7e:f6:96:2a:d0:a2:71:
         d7:41:66:71:e7:1d:89:90:7c:59:ef:1d:4d:d7:59:8f:46:ec:
         a1:23:63:a0:ed:5b:39:6c:aa:f9:51:22:33:c3:79:43:12:3e:
         ad:28:25:86:b4:bd:ad:b7:3c:4d:1a:d5:39:a2:74:72:d1:bb:
         6c:7f:84:82:7a:a4:7a:c8:99:c6:b5:9f:5b:e6:81:e0:75:ba:
         10:0f:77:21:8d:f1:a0:8f:4a:ac:4e:ee:41:61:6b:15:dd:ff:
         d0:32:cb:20:ce:5a:b2:20:d8:73:2a:ce:e1:b8:aa:98:6f:59:
         70:1e:b6:b8:cc:22:d0:b0:a2:99:0b:e2:43:1c:55:78:ec:b0:
         cf:09:67:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYvIIJSbUHI1O8AmEpc36qUNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1NjUwMDhkZjg5OTU5OGM3YTJjMGY5OGI3MGYyMzRiZjYx
NzgwMTEwHhcNMjMxMTEzMTAwMTAwWhcNMjMxMTE0MTAwMTAwWjAzMTEwLwYDVQQD
EygwNmIyM2Q5OWYwOWNiNDhmOTI2MWU5NGJmZjBmZWI5YmQxYzJkZTkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonk2/lSmdBTXrGxRm/EC0wLZymf1
XF6zoW47qaPs4kf86hp7FJnF5tw5N4mw1pNfhoeE2P9EFGc1ZiUacM6KDFnyKgJQ
q8waK0Li/RH5GIgHYfpo11piWAZZ6uxhDPEMgIWwttu0aWmAZ44N/Pr/PCOClTkB
bFznFcLF8tXGe6lhsrv4Uc0uGJF8qBmZRBSMPDu6eIq5tnOvEeaVH+RCCnI0XpcQ
3+uXJCzZpnTlFgaBRs5KngzdMh3YqHS+TK1tMOG72YLqN7thAUeGKXq6qtyDc7MU
GWqpSCsEqdjA8+fBc47INKpbexPDCrUINq5H88nODRZX6gtvs+pERmTCSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAayPZnwnLSPkmHpS/8P65vRwt6SMB8GA1UdIwQY
MBaAFHVlAI34mVmMeiwPmLcPI0v2F4ARMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFdVQWpmaVpXWXg2TEEtWXR3OGpTX1lYZ0JFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8yZTI1ODctZDIyNS00OWQyLWE1NjMt
MzE4ZTAwYzZkM2QwLzEvZFdVQWpmaVpXWXg2TEEtWXR3OGpTX1lYZ0JFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi8yZTI1ODctZDIyNS00OWQyLWE1NjMtMzE4ZTAwYzZkM2Qw
LzEvZFdVQWpmaVpXWXg2TEEtWXR3OGpTX1lYZ0JFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwcjgV8vy
m6T0SQ+bNOB17gBiw6Kw/ZSBTWWf5JyOLqa7uMl+FWmTYQMNRVYlkdY1cPOf2SS0
jtYeGuQaAI0wvRYIL2D8w+fBnNcNRzK3kOxDoYgvBMrGKH1wcmGQ3m8THb30rOAe
wkkyTTduoZgHfGQvY7GZfBl+9pYq0KJx10FmcecdiZB8We8dTddZj0bsoSNjoO1b
OWyq+VEiM8N5QxI+rSglhrS9rbc8TRrVOaJ0ctG7bH+EgnqkesiZxrWfW+aB4HW6
EA93IY3xoI9KrE7uQWFrFd3/0DLLIM5asiDYcyrO4biqmG9ZcB62uMwi0LCimQvi
QxxVeOywzwln4w==
-----END CERTIFICATE-----