Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/52257e-9e43-4a29-8538-2a7139a6d3cf/1/TPC6YVG4CCQ_EvHotUT08WQDPvY.mft
File:                     TPC6YVG4CCQ_EvHotUT08WQDPvY.mft (raw, json)
Hash identifier:          +zfjVv2/d42YZMNI/dVm+PN4GtUgXqGxPiGmMz6E6cQ=
Subject key identifier:   DF:3F:C3:FC:D9:E5:D5:8F:17:82:EB:86:E0:AE:3D:73:D9:31:DE:3E
Authority key identifier: 4C:F0:BA:61:51:B8:08:24:3F:12:F1:E8:B5:44:F4:F1:64:03:3E:F6
Certificate issuer:       /CN=4cf0ba6151b808243f12f1e8b544f4f164033ef6
Certificate serial:       018C570903227114BC918BF3332B6C12C669
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TPC6YVG4CCQ_EvHotUT08WQDPvY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/52257e-9e43-4a29-8538-2a7139a6d3cf/1/TPC6YVG4CCQ_EvHotUT08WQDPvY.mft
Manifest number:          0867
Signing time:             Mon 11 Dec 2023 04:00:57 +0000
Manifest this update:     Mon 11 Dec 2023 04:00:57 +0000
Manifest next update:     Tue 12 Dec 2023 04:00:57 +0000
Files and hashes:         1: TPC6YVG4CCQ_EvHotUT08WQDPvY.crl (hash: kTCNzbke/SoTcgekaJzWPrDvmNZ/ea5FcfLwxZZ99xE=)
                          2: jC5rB-sgHMDtcYD1oozrXYhynNM.roa (hash: aeys8mxifks5Q7HF2OVSeHvR+El5+rSbaKJ8qq9S83c=)
                          3: tSZbE4HpVPQw1rgph6iXtg9KEJU.roa (hash: zXDSQ+AhMcK0aZENhL9xuZ1YPhTAmh529ZWB1Zxfqgw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:57:09:03:22:71:14:bc:91:8b:f3:33:2b:6c:12:c6:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cf0ba6151b808243f12f1e8b544f4f164033ef6
        Validity
            Not Before: Dec 11 04:00:57 2023 GMT
            Not After : Dec 12 04:00:57 2023 GMT
        Subject: CN=df3fc3fcd9e5d58f1782eb86e0ae3d73d931de3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:3d:33:08:8f:dc:d4:3a:b2:35:78:1c:af:b7:
                    e8:6a:e3:b7:47:35:ff:ea:f4:cd:03:13:d1:da:85:
                    60:b2:87:65:ed:7f:93:8b:b6:3e:d3:78:d2:48:26:
                    ba:c4:ce:79:af:2b:1f:a4:56:02:21:09:a6:20:84:
                    c7:b8:14:b9:e0:6e:7d:32:b2:3b:35:e1:73:e8:cb:
                    1d:1a:b2:33:4c:eb:e7:53:91:7f:6b:6f:b0:38:ce:
                    f3:47:59:02:05:2c:af:23:d9:f7:55:2d:79:30:ff:
                    d5:2e:b7:74:1b:14:d5:33:b6:40:a0:17:c4:74:29:
                    0d:c9:66:7f:d9:3d:90:42:d8:4b:ff:8f:b3:a7:94:
                    83:c2:e9:44:19:0a:dd:8d:a5:4b:8f:a7:b4:9b:27:
                    30:eb:a2:b7:f1:b6:1b:fa:41:0e:93:b5:34:bb:72:
                    d7:1a:71:5c:f6:fc:c8:76:5c:2b:56:32:70:4f:bd:
                    c9:bb:0d:71:4c:31:32:4a:53:01:82:5e:ec:65:ce:
                    50:59:16:b7:a6:62:36:4e:92:f5:01:7b:a0:90:4b:
                    d7:ec:64:77:72:95:ad:2b:65:d6:8f:e5:c8:13:b3:
                    af:49:16:be:2f:da:60:7d:43:ce:c3:17:46:31:56:
                    66:71:8e:47:0f:ec:3a:49:7c:56:ad:a1:3e:2f:5f:
                    0a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:3F:C3:FC:D9:E5:D5:8F:17:82:EB:86:E0:AE:3D:73:D9:31:DE:3E
            X509v3 Authority Key Identifier:
                keyid:4C:F0:BA:61:51:B8:08:24:3F:12:F1:E8:B5:44:F4:F1:64:03:3E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPC6YVG4CCQ_EvHotUT08WQDPvY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/52257e-9e43-4a29-8538-2a7139a6d3cf/1/TPC6YVG4CCQ_EvHotUT08WQDPvY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/52257e-9e43-4a29-8538-2a7139a6d3cf/1/TPC6YVG4CCQ_EvHotUT08WQDPvY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:28:ee:2c:7b:e2:26:81:1c:cf:8c:74:05:29:f9:1d:6a:27:
         77:a1:54:5e:a5:2c:7a:40:19:ee:86:9f:d4:9c:2c:82:94:d7:
         a6:41:93:f8:9a:f3:aa:42:5f:4d:c9:c9:71:7b:23:8f:ad:b6:
         4c:d3:32:6c:c5:8e:01:cd:a3:9f:4e:ce:9d:2a:65:cd:2c:f5:
         7a:fe:e1:50:99:0f:60:ae:54:31:6d:6b:6d:e1:0e:42:5f:b8:
         d7:80:1a:8b:e1:ee:d5:7f:f9:0a:8c:cd:c4:7f:d9:85:f7:79:
         f3:02:39:c0:ed:5c:0a:35:e3:3a:7a:11:43:9e:13:e9:98:05:
         6f:98:37:df:bd:5c:eb:88:d8:9d:8e:8e:37:74:ea:17:57:8b:
         5f:10:cb:f1:89:fe:26:0b:ba:04:b5:d1:0f:f2:ad:22:1d:12:
         ce:5b:13:7e:bc:f0:6c:19:51:65:be:bd:b5:61:77:fa:1b:10:
         8f:5c:fa:03:fb:6d:c5:de:96:0c:92:03:d3:0f:d3:d3:9c:1b:
         8e:d9:b9:69:36:5c:46:f2:52:0b:2c:dd:81:01:ec:0a:4e:a9:
         58:33:e6:7f:f0:12:05:46:18:81:61:60:76:c7:1c:bb:1f:33:
         9e:c8:da:5b:01:87:d2:3e:6e:38:91:4d:3c:e9:96:bd:f2:c2:
         8d:f4:c6:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYxXCQMicRS8kYvzMytsEsZpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjZjBiYTYxNTFiODA4MjQzZjEyZjFlOGI1NDRmNGYxNjQw
MzNlZjYwHhcNMjMxMjExMDQwMDU3WhcNMjMxMjEyMDQwMDU3WjAzMTEwLwYDVQQD
EyhkZjNmYzNmY2Q5ZTVkNThmMTc4MmViODZlMGFlM2Q3M2Q5MzFkZTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzT0zCI/c1DqyNXgcr7foauO3RzX/
6vTNAxPR2oVgsodl7X+Ti7Y+03jSSCa6xM55rysfpFYCIQmmIITHuBS54G59MrI7
NeFz6MsdGrIzTOvnU5F/a2+wOM7zR1kCBSyvI9n3VS15MP/VLrd0GxTVM7ZAoBfE
dCkNyWZ/2T2QQthL/4+zp5SDwulEGQrdjaVLj6e0mycw66K38bYb+kEOk7U0u3LX
GnFc9vzIdlwrVjJwT73Juw1xTDEySlMBgl7sZc5QWRa3pmI2TpL1AXugkEvX7GR3
cpWtK2XWj+XIE7OvSRa+L9pgfUPOwxdGMVZmcY5HD+w6SXxWraE+L18KnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN8/w/zZ5dWPF4LrhuCuPXPZMd4+MB8GA1UdIwQY
MBaAFEzwumFRuAgkPxLx6LVE9PFkAz72MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFBDNllWRzRDQ1FfRXZIb3RVVDA4V1FEUHZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi81MjI1N2UtOWU0My00YTI5LTg1Mzgt
MmE3MTM5YTZkM2NmLzEvVFBDNllWRzRDQ1FfRXZIb3RVVDA4V1FEUHZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi81MjI1N2UtOWU0My00YTI5LTg1MzgtMmE3MTM5YTZkM2Nm
LzEvVFBDNllWRzRDQ1FfRXZIb3RVVDA4V1FEUHZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaCjuLHvi
JoEcz4x0BSn5HWond6FUXqUsekAZ7oaf1JwsgpTXpkGT+JrzqkJfTcnJcXsjj622
TNMybMWOAc2jn07OnSplzSz1ev7hUJkPYK5UMW1rbeEOQl+414Aai+Hu1X/5CozN
xH/Zhfd58wI5wO1cCjXjOnoRQ54T6ZgFb5g3371c64jYnY6ON3TqF1eLXxDL8Yn+
Jgu6BLXRD/KtIh0SzlsTfrzwbBlRZb69tWF3+hsQj1z6A/ttxd6WDJID0w/T05wb
jtm5aTZcRvJSCyzdgQHsCk6pWDPmf/ASBUYYgWFgdsccux8znsjaWwGH0j5uOJFN
POmWvfLCjfTGWA==
-----END CERTIFICATE-----