Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/kmaXye_alVy6Pm-JcNcumWvzwWU.mft
File:                     kmaXye_alVy6Pm-JcNcumWvzwWU.mft (raw, json)
Hash identifier:          6MaGlV4j6tZuHjSiETVmob2LsSjVxctWWhOLmXcncws=
Subject key identifier:   92:51:C2:8B:A1:83:02:E4:8D:5B:5F:40:5E:2D:75:33:53:85:C1:45
Authority key identifier: 92:66:97:C9:EF:DA:95:5C:BA:3E:6F:89:70:D7:2E:99:6B:F3:C1:65
Certificate issuer:       /CN=926697c9efda955cba3e6f8970d72e996bf3c165
Certificate serial:       0187013EF15507294703193A4B52E60B2BC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kmaXye_alVy6Pm-JcNcumWvzwWU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/kmaXye_alVy6Pm-JcNcumWvzwWU.mft
Manifest number:          0CF3
Signing time:             Mon 20 Mar 2023 22:58:34 +0000
Manifest this update:     Mon 20 Mar 2023 22:58:34 +0000
Manifest next update:     Tue 21 Mar 2023 22:58:34 +0000
Files and hashes:         1: 2bsJ1vau1naEAYIMi8zPF7x62-0.roa (hash: WjJhGFZ2sb0tk9sHrijROEg/4dmCw7Rtwtdz3XRmAp0=)
                          2: Nj7250tEVOw6TYelkLVVq12VBqI.roa (hash: 01iEU1grLI8nthLcaexV6Mmy0n4WnifMEByh3nYEusM=)
                          3: P1F8q64UgNmTHwvwwP_6_6BOxns.roa (hash: S0MQiKFNoV7imI0Vq8tuckkTViAYRtXQe7I2GqYl+iU=)
                          4: Pv8X3F1zPnpxxnBc5zXyerGYRJs.roa (hash: Ivls/nFiNxdDzsLDIQcZCvPxUvrC63TksV/NTdmGlHM=)
                          5: T6C7jI6g7H_vFEBzsE74xcoSUdU.roa (hash: gzCLPmiINggoyhYqcBdQYwCWFpnNgeV/cbE08OXVCbU=)
                          6: TmfXwvWF4_R0YlbOpvq6kgDGhw0.roa (hash: xV2nkP/XzFa3ZlaSaZkKkK0ZOGjITEnqmlr89kEd/Fs=)
                          7: U8Joxi8U3e1Usd5BP5t9YdRHq9g.roa (hash: uku7/+wyCrwgv9po1XRbDuPL9gV+ixJNp+Ghgnw851s=)
                          8: faVjT2bfGXvibZ9KGBnJmBdok7Y.roa (hash: RkinMIJfPxzXEN13+MuxpWx/rvRtWW7VnJzUdIXUwyc=)
                          9: kmaXye_alVy6Pm-JcNcumWvzwWU.crl (hash: hqaO1bUFzzjz3k4XECZmBl5EdPn0JpXk2rtFxAw1h5o=)
                          10: xOFta5JjDbeUQ7ALrdlifd1eVgw.roa (hash: cITw55lSfHF5QwXD8RD07pLUAc8NqlAnf3aeu0oLoqI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:01:3e:f1:55:07:29:47:03:19:3a:4b:52:e6:0b:2b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=926697c9efda955cba3e6f8970d72e996bf3c165
        Validity
            Not Before: Mar 20 22:58:34 2023 GMT
            Not After : Mar 21 22:58:34 2023 GMT
        Subject: CN=9251c28ba18302e48d5b5f405e2d75335385c145
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:11:bf:83:c8:b1:9b:4e:99:18:64:a8:4d:1f:
                    c1:13:6e:ab:63:f2:24:72:f6:b9:05:85:b1:28:c4:
                    30:80:2c:40:55:fe:d1:32:36:e8:05:e0:87:19:44:
                    50:ba:9d:cb:c5:46:5f:e2:ae:02:d8:7f:b6:4e:28:
                    79:89:4d:92:dd:3d:8e:93:be:f7:30:03:33:64:48:
                    a6:07:ae:d4:27:1a:41:65:c4:99:4c:13:ed:7e:eb:
                    bc:60:c3:44:7c:b0:60:40:20:05:2f:09:b1:cd:b5:
                    b6:e0:98:35:d9:ae:eb:56:d0:61:46:fb:d5:f8:12:
                    23:c2:36:2e:53:24:a5:8b:34:b4:dd:6b:b6:a9:a0:
                    05:dd:d1:38:83:9e:fc:23:9e:73:30:3e:0f:b5:fb:
                    7e:d2:6e:09:55:b2:13:28:dd:e3:ac:9b:56:c4:dd:
                    a2:ae:93:29:46:d2:ac:c2:3b:35:db:d6:62:b5:1a:
                    a9:fd:45:27:7a:90:82:d5:2f:9a:5e:97:e8:4d:c5:
                    cb:d0:cb:58:e2:4c:a0:c6:03:e5:e8:24:d7:3e:a2:
                    75:23:dc:b3:b1:56:89:72:91:5b:3c:03:4c:f6:2c:
                    f7:82:d0:05:1c:ae:7c:3d:d3:89:5d:ba:d5:d2:03:
                    29:e4:19:d3:eb:14:ae:9f:b1:a4:88:5d:e7:a7:21:
                    70:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:51:C2:8B:A1:83:02:E4:8D:5B:5F:40:5E:2D:75:33:53:85:C1:45
            X509v3 Authority Key Identifier:
                keyid:92:66:97:C9:EF:DA:95:5C:BA:3E:6F:89:70:D7:2E:99:6B:F3:C1:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmaXye_alVy6Pm-JcNcumWvzwWU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/kmaXye_alVy6Pm-JcNcumWvzwWU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/kmaXye_alVy6Pm-JcNcumWvzwWU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:13:30:86:ec:6c:92:06:29:fa:88:3e:a2:39:25:a6:33:5d:
         97:fc:9a:1c:86:da:0c:91:c8:54:f4:c9:bf:f6:03:ca:31:dc:
         82:9d:56:f9:cc:7f:f6:6f:c0:f4:32:f0:9e:5f:2d:f5:a4:48:
         43:66:c2:f4:70:57:9b:30:e5:6c:31:db:5a:cd:61:df:54:89:
         e9:8b:88:c1:ef:bf:02:a0:c9:c4:db:0f:d8:93:9e:00:9b:4a:
         42:91:c6:bd:4d:de:1a:8f:cf:df:54:1b:07:8d:71:02:4f:5c:
         20:02:33:f6:4c:8c:51:75:5c:6a:82:33:b7:2c:e7:be:da:78:
         b1:b8:c4:fe:6b:f1:a3:24:78:dc:c5:6f:14:20:5e:f3:30:5d:
         a4:fe:c4:dd:e5:9b:d0:cb:f5:1b:36:ba:ec:e9:f1:10:55:c6:
         74:cf:f7:f0:a4:38:e7:71:fb:c8:43:00:c5:f7:db:ec:58:5b:
         78:e1:cb:3f:4f:1e:52:8e:59:6b:46:22:44:28:55:e5:eb:be:
         c2:2c:e0:03:e8:65:d5:e0:d2:db:f4:c5:50:6b:64:39:e9:59:
         06:70:09:57:de:66:d4:e3:b2:6e:c6:de:61:99:81:6e:ee:4e:
         5d:77:74:cc:45:70:5b:f7:09:a4:52:fc:a3:ae:ce:b4:53:31:
         af:42:8a:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYcBPvFVBylHAxk6S1LmCyvAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyNjY5N2M5ZWZkYTk1NWNiYTNlNmY4OTcwZDcyZTk5NmJm
M2MxNjUwHhcNMjMwMzIwMjI1ODM0WhcNMjMwMzIxMjI1ODM0WjAzMTEwLwYDVQQD
Eyg5MjUxYzI4YmExODMwMmU0OGQ1YjVmNDA1ZTJkNzUzMzUzODVjMTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhG/g8ixm06ZGGSoTR/BE26rY/Ik
cva5BYWxKMQwgCxAVf7RMjboBeCHGURQup3LxUZf4q4C2H+2Tih5iU2S3T2Ok773
MAMzZEimB67UJxpBZcSZTBPtfuu8YMNEfLBgQCAFLwmxzbW24Jg12a7rVtBhRvvV
+BIjwjYuUySlizS03Wu2qaAF3dE4g578I55zMD4Ptft+0m4JVbITKN3jrJtWxN2i
rpMpRtKswjs129ZitRqp/UUnepCC1S+aXpfoTcXL0MtY4kygxgPl6CTXPqJ1I9yz
sVaJcpFbPANM9iz3gtAFHK58PdOJXbrV0gMp5BnT6xSun7GkiF3npyFwUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJJRwouhgwLkjVtfQF4tdTNThcFFMB8GA1UdIwQY
MBaAFJJml8nv2pVcuj5viXDXLplr88FlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva21hWHllX2FsVnk2UG0tSmNOY3VtV3Z6d1dVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8wYzRmYmQtZTA3Zi00ZjU5LWI4ZjQt
MmE0NzEzZWViZmYzLzEva21hWHllX2FsVnk2UG0tSmNOY3VtV3Z6d1dVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC8wYzRmYmQtZTA3Zi00ZjU5LWI4ZjQtMmE0NzEzZWViZmYz
LzEva21hWHllX2FsVnk2UG0tSmNOY3VtV3Z6d1dVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIBMwhuxs
kgYp+og+ojklpjNdl/yaHIbaDJHIVPTJv/YDyjHcgp1W+cx/9m/A9DLwnl8t9aRI
Q2bC9HBXmzDlbDHbWs1h31SJ6YuIwe+/AqDJxNsP2JOeAJtKQpHGvU3eGo/P31Qb
B41xAk9cIAIz9kyMUXVcaoIztyznvtp4sbjE/mvxoyR43MVvFCBe8zBdpP7E3eWb
0Mv1Gza67OnxEFXGdM/38KQ453H7yEMAxffb7FhbeOHLP08eUo5Za0YiRChV5eu+
wizgA+hl1eDS2/TFUGtkOelZBnAJV95m1OOybsbeYZmBbu5OXXd0zEVwW/cJpFL8
o67OtFMxr0KKCQ==
-----END CERTIFICATE-----