Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/766784-6ad0-4a93-8612-e9aba85f41d2/1/YbQpmFtZMqta82dLpstaJ8vXZtQ.mft
File:                     YbQpmFtZMqta82dLpstaJ8vXZtQ.mft (raw, json)
Hash identifier:          odkAXztFetApTYzHvHJ+DutVK4QV/si+bCUUztVjdGE=
Subject key identifier:   CD:09:02:4A:18:DC:CF:5E:31:7F:9E:B1:D8:D1:36:E4:04:0F:D6:94
Authority key identifier: 61:B4:29:98:5B:59:32:AB:5A:F3:67:4B:A6:CB:5A:27:CB:D7:66:D4
Certificate issuer:       /CN=61b429985b5932ab5af3674ba6cb5a27cbd766d4
Certificate serial:       0185561E3D67DCAECBAE42D337DFF70DF3EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YbQpmFtZMqta82dLpstaJ8vXZtQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/766784-6ad0-4a93-8612-e9aba85f41d2/1/YbQpmFtZMqta82dLpstaJ8vXZtQ.mft
Manifest number:          03AF
Signing time:             Wed 28 Dec 2022 00:25:00 +0000
Manifest this update:     Wed 28 Dec 2022 00:25:00 +0000
Manifest next update:     Thu 29 Dec 2022 00:25:00 +0000
Files and hashes:         1: XwjPnoUNC6BaqTK2Rji2dz9PuXg.roa (hash: 3oHwjmMOgTvQBELhNrlT3jBzuZyuJJgdkKO5kIfQfZM=)
                          2: YbQpmFtZMqta82dLpstaJ8vXZtQ.crl (hash: yfA6itwx4dvHYHEYJWBz/QIo4fPgSSivAAkBr/HsQ7U=)
                          3: pnDtlILOHOfAp9WyuARs92Luewk.roa (hash: MjtvcTN+D1xWd3mJjRhpDNx1UXdCGNLLadCKimMDhjM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:56:1e:3d:67:dc:ae:cb:ae:42:d3:37:df:f7:0d:f3:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61b429985b5932ab5af3674ba6cb5a27cbd766d4
        Validity
            Not Before: Dec 28 00:25:00 2022 GMT
            Not After : Dec 29 00:25:00 2022 GMT
        Subject: CN=cd09024a18dccf5e317f9eb1d8d136e4040fd694
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:cd:d5:99:f7:43:a0:43:99:ea:e7:4c:50:50:
                    47:e5:15:26:a1:e9:5c:4c:72:30:57:90:45:34:94:
                    ab:40:45:71:90:8b:6b:39:f1:ae:4c:1a:2e:a5:23:
                    2c:01:2d:4d:53:68:7b:f8:c9:18:e1:22:90:04:2f:
                    3a:a7:93:bb:53:7c:46:11:c8:c8:78:b9:c5:55:46:
                    f6:3f:51:f9:91:0c:3a:c9:1e:8f:e8:5e:08:3e:5f:
                    52:46:4c:93:75:03:7a:0a:31:37:74:a6:74:32:b1:
                    fd:60:15:3b:64:81:59:a7:43:81:a3:3a:d6:96:1d:
                    01:41:12:43:0d:e4:e1:b3:a8:71:4f:08:8e:e4:30:
                    df:27:b7:cc:c9:b9:d1:cd:f9:6f:c0:d9:cf:cf:81:
                    29:23:00:70:8c:f5:f1:fe:61:a5:9b:34:f9:07:47:
                    9e:2c:24:22:5b:1b:cb:ed:b9:f5:b1:e9:1a:60:75:
                    f1:70:cc:bc:b6:d2:c5:06:ce:f9:72:7f:d6:a9:87:
                    03:57:64:c4:33:2b:0c:68:29:b9:7d:d3:7d:aa:6a:
                    73:33:6d:aa:f8:71:b2:65:02:99:ee:6d:98:6b:65:
                    74:b2:d0:19:5f:45:ea:f7:be:bc:1c:53:93:2b:3d:
                    95:97:ff:b9:bc:7a:05:46:c5:72:8e:e7:c1:1d:8d:
                    e7:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:09:02:4A:18:DC:CF:5E:31:7F:9E:B1:D8:D1:36:E4:04:0F:D6:94
            X509v3 Authority Key Identifier:
                keyid:61:B4:29:98:5B:59:32:AB:5A:F3:67:4B:A6:CB:5A:27:CB:D7:66:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbQpmFtZMqta82dLpstaJ8vXZtQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/766784-6ad0-4a93-8612-e9aba85f41d2/1/YbQpmFtZMqta82dLpstaJ8vXZtQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/766784-6ad0-4a93-8612-e9aba85f41d2/1/YbQpmFtZMqta82dLpstaJ8vXZtQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:f5:70:80:2e:da:87:90:59:c5:3c:3c:ca:58:54:d3:a9:9f:
         71:24:28:07:8b:b7:9c:da:fb:30:7a:07:e4:b3:ac:90:f8:84:
         ce:e4:d5:72:a2:0e:89:e9:88:7c:56:e0:06:5e:8a:60:b8:54:
         65:15:13:cc:bd:67:44:ff:16:bf:a1:22:fe:d1:2f:2a:8d:11:
         10:8e:58:11:7f:f9:3a:c6:95:8d:30:78:9b:1f:50:b8:62:06:
         5e:bc:24:7c:b0:37:f2:b9:de:1a:d3:c3:a7:9b:8b:37:02:64:
         64:c2:97:5a:52:cd:3f:61:a0:fc:6e:81:a1:bc:75:fd:06:6d:
         bf:00:53:b6:43:e6:e9:29:ac:c1:64:9c:d7:f5:1c:a3:58:69:
         ae:4f:33:cf:98:05:ed:a5:2b:8e:23:ef:b8:e2:57:3c:f2:b7:
         e5:37:0d:bb:f6:f4:d2:b4:a3:26:ce:f8:28:23:36:fb:d5:87:
         06:e8:16:93:b0:2d:f8:d7:03:7c:34:3e:4d:27:03:03:ff:e7:
         44:3d:df:ec:0d:08:fa:e6:c8:1c:82:fb:51:3d:d4:3b:65:db:
         df:80:da:70:aa:b6:fb:12:a6:cf:90:03:ff:f7:e6:9b:43:43:
         db:4b:43:6e:ab:bc:40:96:2d:2c:f0:1d:9f:9d:14:48:44:de:
         4a:1c:14:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYVWHj1n3K7LrkLTN9/3DfPsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxYjQyOTk4NWI1OTMyYWI1YWYzNjc0YmE2Y2I1YTI3Y2Jk
NzY2ZDQwHhcNMjIxMjI4MDAyNTAwWhcNMjIxMjI5MDAyNTAwWjAzMTEwLwYDVQQD
EyhjZDA5MDI0YTE4ZGNjZjVlMzE3ZjllYjFkOGQxMzZlNDA0MGZkNjk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi83VmfdDoEOZ6udMUFBH5RUmoelc
THIwV5BFNJSrQEVxkItrOfGuTBoupSMsAS1NU2h7+MkY4SKQBC86p5O7U3xGEcjI
eLnFVUb2P1H5kQw6yR6P6F4IPl9SRkyTdQN6CjE3dKZ0MrH9YBU7ZIFZp0OBozrW
lh0BQRJDDeThs6hxTwiO5DDfJ7fMybnRzflvwNnPz4EpIwBwjPXx/mGlmzT5B0ee
LCQiWxvL7bn1sekaYHXxcMy8ttLFBs75cn/WqYcDV2TEMysMaCm5fdN9qmpzM22q
+HGyZQKZ7m2Ya2V0stAZX0Xq9768HFOTKz2Vl/+5vHoFRsVyjufBHY3n7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM0JAkoY3M9eMX+esdjRNuQED9aUMB8GA1UdIwQY
MBaAFGG0KZhbWTKrWvNnS6bLWifL12bUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWJRcG1GdFpNcXRhODJkTHBzdGFKOHZYWnRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC83NjY3ODQtNmFkMC00YTkzLTg2MTIt
ZTlhYmE4NWY0MWQyLzEvWWJRcG1GdFpNcXRhODJkTHBzdGFKOHZYWnRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC83NjY3ODQtNmFkMC00YTkzLTg2MTItZTlhYmE4NWY0MWQy
LzEvWWJRcG1GdFpNcXRhODJkTHBzdGFKOHZYWnRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsvVwgC7a
h5BZxTw8ylhU06mfcSQoB4u3nNr7MHoH5LOskPiEzuTVcqIOiemIfFbgBl6KYLhU
ZRUTzL1nRP8Wv6Ei/tEvKo0REI5YEX/5OsaVjTB4mx9QuGIGXrwkfLA38rneGtPD
p5uLNwJkZMKXWlLNP2Gg/G6Bobx1/QZtvwBTtkPm6SmswWSc1/Uco1hprk8zz5gF
7aUrjiPvuOJXPPK35TcNu/b00rSjJs74KCM2+9WHBugWk7At+NcDfDQ+TScDA//n
RD3f7A0I+ubIHIL7UT3UO2Xb34DacKq2+xKmz5AD//fmm0ND20tDbqu8QJYtLPAd
n50USETeShwUKw==
-----END CERTIFICATE-----