Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/9ccdfc-98b9-4a89-8bff-06ac63567b9b/1/hkJSB_EVmhqjAlv7NbytTwQo54E.mft
File:                     hkJSB_EVmhqjAlv7NbytTwQo54E.mft (raw, json)
Hash identifier:          /7di3XfduNPj3P6t2KpBu7G30KEUTzxb5P1K/BcUt9I=
Subject key identifier:   2D:FF:F7:70:10:CD:95:6A:EF:CB:86:EE:8B:CD:52:19:4A:9E:94:78
Authority key identifier: 86:42:52:07:F1:15:9A:1A:A3:02:5B:FB:35:BC:AD:4F:04:28:E7:81
Certificate issuer:       /CN=86425207f1159a1aa3025bfb35bcad4f0428e781
Certificate serial:       01843CB3636C6BBF6E9F96A3BBBC68B9BD44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hkJSB_EVmhqjAlv7NbytTwQo54E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/9ccdfc-98b9-4a89-8bff-06ac63567b9b/1/hkJSB_EVmhqjAlv7NbytTwQo54E.mft
Manifest number:          0B4F
Signing time:             Thu 03 Nov 2022 08:54:59 +0000
Manifest this update:     Thu 03 Nov 2022 08:54:59 +0000
Manifest next update:     Fri 04 Nov 2022 08:54:59 +0000
Files and hashes:         1: DYB6_vFTAk_W94AsODjxl3J3t-E.roa (hash: sWx7U+CtDD2rSDzR/gVvnHXhq3dcnzMA64XfOaF91gw=)
                          2: hkJSB_EVmhqjAlv7NbytTwQo54E.crl (hash: 7/kp6GLrpS2eL2k9d30qKgldltH65qZ9jj+7KYQKht0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:3c:b3:63:6c:6b:bf:6e:9f:96:a3:bb:bc:68:b9:bd:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86425207f1159a1aa3025bfb35bcad4f0428e781
        Validity
            Not Before: Nov  3 08:54:59 2022 GMT
            Not After : Nov  4 08:54:59 2022 GMT
        Subject: CN=2dfff77010cd956aefcb86ee8bcd52194a9e9478
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:31:4d:c4:e0:24:be:06:bd:eb:22:6d:32:a2:
                    e8:5d:e9:52:43:0b:5b:11:df:44:3e:60:97:2d:3b:
                    b1:f4:dd:69:5a:a9:10:5d:31:8c:83:01:15:02:59:
                    63:0e:c1:96:64:9d:b2:30:92:23:ab:12:bf:dc:93:
                    f4:48:be:bb:a9:73:f2:1c:e0:a9:20:96:2f:5c:71:
                    d9:40:d1:98:b1:ae:4a:bb:1c:fc:d1:e0:a8:7d:06:
                    ac:ef:9b:a8:9f:9e:66:37:08:cb:1a:5d:84:bd:58:
                    1b:b6:4b:cd:42:08:10:d4:91:5f:d5:9f:ae:32:67:
                    bf:b8:a3:b4:e6:18:5f:f9:ac:60:97:7e:05:90:32:
                    b9:e6:da:61:16:66:8a:c7:1e:2e:63:6f:40:d6:61:
                    35:7e:fb:42:30:ea:7a:ec:fa:be:b3:13:f4:2e:32:
                    9b:f0:d8:99:e4:22:f9:80:87:c0:a2:fb:97:fb:e4:
                    88:fc:2a:2a:b0:ea:6c:ea:da:e2:aa:25:c9:6b:3c:
                    1e:54:99:dd:b8:74:97:92:cc:ed:44:51:83:94:93:
                    01:16:4d:86:74:8f:83:8a:7c:06:b9:64:39:3e:8c:
                    97:88:73:a6:14:da:93:e0:61:50:eb:ac:96:38:66:
                    6a:1e:27:66:7e:62:2b:aa:9c:f9:eb:18:aa:fe:9d:
                    09:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:FF:F7:70:10:CD:95:6A:EF:CB:86:EE:8B:CD:52:19:4A:9E:94:78
            X509v3 Authority Key Identifier:
                keyid:86:42:52:07:F1:15:9A:1A:A3:02:5B:FB:35:BC:AD:4F:04:28:E7:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hkJSB_EVmhqjAlv7NbytTwQo54E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/9ccdfc-98b9-4a89-8bff-06ac63567b9b/1/hkJSB_EVmhqjAlv7NbytTwQo54E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/9ccdfc-98b9-4a89-8bff-06ac63567b9b/1/hkJSB_EVmhqjAlv7NbytTwQo54E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:da:8a:f4:20:6c:3f:16:82:4c:7a:94:c6:da:2e:d2:fe:26:
         e0:d9:ed:ac:29:c9:71:30:f9:bb:56:06:a8:49:63:f2:da:a1:
         b9:e5:37:75:95:27:e4:5a:7a:e0:87:b6:59:97:d8:1e:dc:92:
         44:c5:f4:ca:66:e1:b7:95:a6:39:95:05:a4:63:35:07:a2:cf:
         df:1f:e6:c3:d0:d1:2a:82:f4:f1:c1:06:3a:f5:98:27:21:a0:
         68:f3:9e:a8:e6:90:0f:6f:23:a9:28:77:17:c8:af:f9:ab:d3:
         95:1a:ae:99:90:cb:1e:7e:ea:5c:c4:08:50:e0:0e:5e:ad:32:
         0d:8f:dd:1b:7e:49:99:2a:db:50:db:98:bd:c8:6b:ae:19:a8:
         a3:5e:d5:92:d9:98:ae:46:fa:a0:1e:63:1f:58:47:77:7b:90:
         38:eb:08:48:1f:57:ef:11:d1:f1:93:6b:80:55:7e:a7:2b:ed:
         a4:22:33:8d:cf:26:e5:59:73:09:bc:14:a1:61:71:18:16:45:
         dc:2c:bd:19:75:14:3f:b6:08:17:ad:06:b3:17:09:c0:1f:e6:
         e0:ab:96:2c:9f:cb:9c:b8:01:2e:68:0d:d3:df:f9:d4:3c:36:
         fe:f4:68:dc:fb:da:8d:77:5e:fd:a0:7a:ff:16:fc:eb:b1:9b:
         cd:d3:32:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYQ8s2Nsa79un5aju7xoub1EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2NDI1MjA3ZjExNTlhMWFhMzAyNWJmYjM1YmNhZDRmMDQy
OGU3ODEwHhcNMjIxMTAzMDg1NDU5WhcNMjIxMTA0MDg1NDU5WjAzMTEwLwYDVQQD
EygyZGZmZjc3MDEwY2Q5NTZhZWZjYjg2ZWU4YmNkNTIxOTRhOWU5NDc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTFNxOAkvga96yJtMqLoXelSQwtb
Ed9EPmCXLTux9N1pWqkQXTGMgwEVAlljDsGWZJ2yMJIjqxK/3JP0SL67qXPyHOCp
IJYvXHHZQNGYsa5Kuxz80eCofQas75uon55mNwjLGl2EvVgbtkvNQggQ1JFf1Z+u
Mme/uKO05hhf+axgl34FkDK55tphFmaKxx4uY29A1mE1fvtCMOp67Pq+sxP0LjKb
8NiZ5CL5gIfAovuX++SI/CoqsOps6triqiXJazweVJnduHSXksztRFGDlJMBFk2G
dI+DinwGuWQ5PoyXiHOmFNqT4GFQ66yWOGZqHidmfmIrqpz56xiq/p0JiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC3/93AQzZVq78uG7ovNUhlKnpR4MB8GA1UdIwQY
MBaAFIZCUgfxFZoaowJb+zW8rU8EKOeBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGtKU0JfRVZtaHFqQWx2N05ieXRUd1FvNTRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC85Y2NkZmMtOThiOS00YTg5LThiZmYt
MDZhYzYzNTY3YjliLzEvaGtKU0JfRVZtaHFqQWx2N05ieXRUd1FvNTRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC85Y2NkZmMtOThiOS00YTg5LThiZmYtMDZhYzYzNTY3Yjli
LzEvaGtKU0JfRVZtaHFqQWx2N05ieXRUd1FvNTRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbdqK9CBs
PxaCTHqUxtou0v4m4NntrCnJcTD5u1YGqElj8tqhueU3dZUn5Fp64Ie2WZfYHtyS
RMX0ymbht5WmOZUFpGM1B6LP3x/mw9DRKoL08cEGOvWYJyGgaPOeqOaQD28jqSh3
F8iv+avTlRqumZDLHn7qXMQIUOAOXq0yDY/dG35JmSrbUNuYvchrrhmoo17VktmY
rkb6oB5jH1hHd3uQOOsISB9X7xHR8ZNrgFV+pyvtpCIzjc8m5VlzCbwUoWFxGBZF
3Cy9GXUUP7YIF60GsxcJwB/m4KuWLJ/LnLgBLmgN09/51Dw2/vRo3PvajXde/aB6
/xb867GbzdMyiQ==
-----END CERTIFICATE-----