Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/65ccd7-10b8-4af1-89a0-a28957f0206c/1/2y4HqEBiXEwCBjDH8BUyHEko_HE.mft
File:                     2y4HqEBiXEwCBjDH8BUyHEko_HE.mft (raw, json)
Hash identifier:          LtY5/jNjVPxQnJZ8T5/KBynE8hnUn6LDlFssCnCgDxA=
Subject key identifier:   C2:D9:AA:97:00:34:6B:1A:01:71:DE:B2:B8:D9:11:20:FB:E4:1C:54
Authority key identifier: DB:2E:07:A8:40:62:5C:4C:02:06:30:C7:F0:15:32:1C:49:28:FC:71
Certificate issuer:       /CN=db2e07a840625c4c020630c7f015321c4928fc71
Certificate serial:       02BB719B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2y4HqEBiXEwCBjDH8BUyHEko_HE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/65ccd7-10b8-4af1-89a0-a28957f0206c/1/2y4HqEBiXEwCBjDH8BUyHEko_HE.mft
Manifest number:          03AF
Signing time:             Tue 10 May 2022 07:02:51 +0000
Manifest this update:     Tue 10 May 2022 07:02:51 +0000
Manifest next update:     Wed 11 May 2022 07:02:51 +0000
Files and hashes:         1: 2y4HqEBiXEwCBjDH8BUyHEko_HE.crl (hash: sLU8+YySHX9/hqT3tPj8Tk7C4kUTLOzU1F84kBypTao=)
                          2: NqP3R5-4a7F6KiecpE5KDdZHR6w.roa (hash: daqs5Eci4XC0y2jkzH375i1pEApXgI3CgZumzW8SruY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 45838747 (0x2bb719b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db2e07a840625c4c020630c7f015321c4928fc71
        Validity
            Not Before: May 10 07:02:51 2022 GMT
            Not After : May 11 07:02:51 2022 GMT
        Subject: CN=c2d9aa9700346b1a0171deb2b8d91120fbe41c54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:21:57:e7:3a:65:00:a7:61:b0:f9:19:ca:d5:
                    02:41:d8:ec:6b:d5:b5:52:56:e0:47:78:c0:df:6d:
                    2f:6c:21:e3:c6:f3:3d:55:ac:d6:12:3b:33:df:f1:
                    1a:19:cf:59:0e:c5:e5:40:89:41:f3:4d:f8:7d:1b:
                    4b:b1:c0:f9:76:70:54:9f:90:7f:05:7f:82:c0:47:
                    1e:c9:b0:2a:06:1d:91:78:bd:01:c8:a9:69:84:de:
                    b0:8f:81:2b:5c:06:67:74:dc:d2:eb:1f:41:13:98:
                    f5:3c:e2:23:e9:f4:34:72:87:1a:0b:ce:64:71:14:
                    97:36:52:03:a0:5d:82:f0:02:9e:1a:71:a2:66:ab:
                    f8:89:9f:2f:06:00:79:f7:b8:fb:e3:34:a2:00:12:
                    e9:39:22:fc:41:20:0b:7c:f0:69:3d:7c:af:c1:aa:
                    28:6c:68:2f:26:a6:ad:f8:ed:25:06:d8:7f:c9:87:
                    b4:00:4c:40:64:c8:9e:80:98:c1:5a:dc:d2:bc:b0:
                    d7:9c:0e:a5:21:4e:7f:8d:da:0b:d5:03:41:8a:03:
                    aa:62:ce:ce:d9:46:aa:37:5f:c5:70:57:01:a0:c4:
                    e1:e3:a4:25:8c:81:45:42:59:7f:dc:9c:4b:78:40:
                    2e:09:4f:84:c8:2f:a3:55:8e:d7:b3:c8:30:f4:e8:
                    36:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:D9:AA:97:00:34:6B:1A:01:71:DE:B2:B8:D9:11:20:FB:E4:1C:54
            X509v3 Authority Key Identifier:
                keyid:DB:2E:07:A8:40:62:5C:4C:02:06:30:C7:F0:15:32:1C:49:28:FC:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2y4HqEBiXEwCBjDH8BUyHEko_HE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/65ccd7-10b8-4af1-89a0-a28957f0206c/1/2y4HqEBiXEwCBjDH8BUyHEko_HE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/65ccd7-10b8-4af1-89a0-a28957f0206c/1/2y4HqEBiXEwCBjDH8BUyHEko_HE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:96:f0:90:ae:44:f3:fe:45:fe:dd:c2:35:1e:ed:c0:00:e1:
         66:6f:db:c5:47:11:a4:2d:19:88:17:55:94:a4:51:1f:8e:f8:
         c5:fa:8b:24:c9:7b:bc:2b:4b:17:09:5e:bf:41:f7:a4:46:ee:
         f5:45:c2:54:92:dc:22:7c:96:f0:27:7e:f4:aa:39:e2:4f:7f:
         bb:2a:89:c4:18:cc:6d:3a:73:35:25:5c:89:26:51:a6:a0:db:
         3c:33:14:91:22:3f:5f:89:1c:c0:a8:2d:d8:02:c0:4b:cb:cc:
         e6:b9:6f:ba:9d:8c:dd:e3:fc:a9:12:8a:37:d0:b2:9c:97:bc:
         27:92:2f:86:58:a2:b1:ae:80:f7:d9:59:ae:4c:37:eb:fb:09:
         6c:7a:78:56:ab:47:84:68:01:53:23:3d:f1:67:02:70:b0:a7:
         be:47:8b:95:c4:b0:7d:66:41:b8:42:14:96:87:82:33:8f:de:
         17:40:28:90:69:d2:5d:08:dd:64:3c:c2:3c:49:38:2d:85:d2:
         5d:79:b1:04:dd:f1:b3:f4:51:31:f0:1f:8c:d0:22:0b:16:30:
         24:72:59:8d:05:59:17:df:3d:54:9f:d5:31:e0:4f:91:c1:ea:
         a9:ad:b7:30:5a:81:ef:c7:f4:d6:62:ed:74:ef:a4:64:c8:b1:
         8c:17:e7:68
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgIEArtxmzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
YjJlMDdhODQwNjI1YzRjMDIwNjMwYzdmMDE1MzIxYzQ5MjhmYzcxMB4XDTIyMDUx
MDA3MDI1MVoXDTIyMDUxMTA3MDI1MVowMzExMC8GA1UEAxMoYzJkOWFhOTcwMDM0
NmIxYTAxNzFkZWIyYjhkOTExMjBmYmU0MWM1NDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJ8hV+c6ZQCnYbD5GcrVAkHY7GvVtVJW4Ed4wN9tL2wh48bz
PVWs1hI7M9/xGhnPWQ7F5UCJQfNN+H0bS7HA+XZwVJ+QfwV/gsBHHsmwKgYdkXi9
AcipaYTesI+BK1wGZ3Tc0usfQROY9TziI+n0NHKHGgvOZHEUlzZSA6BdgvACnhpx
omar+ImfLwYAefe4++M0ogAS6Tki/EEgC3zwaT18r8GqKGxoLyamrfjtJQbYf8mH
tABMQGTInoCYwVrc0ryw15wOpSFOf43aC9UDQYoDqmLOztlGqjdfxXBXAaDE4eOk
JYyBRUJZf9ycS3hALglPhMgvo1WO17PIMPToNu8CAwEAAaOCAiIwggIeMB0GA1Ud
DgQWBBTC2aqXADRrGgFx3rK42REg++QcVDAfBgNVHSMEGDAWgBTbLgeoQGJcTAIG
MMfwFTIcSSj8cTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzJ5NEhxRUJpWEV3Q0JqREg4QlV5SEVrb19IRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDYvNjVjY2Q3LTEwYjgtNGFmMS04OWEwLWEyODk1N2YwMjA2Yy8x
LzJ5NEhxRUJpWEV3Q0JqREg4QlV5SEVrb19IRS5tZnQwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDYv
NjVjY2Q3LTEwYjgtNGFmMS04OWEwLWEyODk1N2YwMjA2Yy8xLzJ5NEhxRUJpWEV3
Q0JqREg4QlV5SEVrb19IRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/
BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAJiW8JCuRPP+Rf7dwjUe7cAA4WZv
28VHEaQtGYgXVZSkUR+O+MX6iyTJe7wrSxcJXr9B96RG7vVFwlSS3CJ8lvAnfvSq
OeJPf7sqicQYzG06czUlXIkmUaag2zwzFJEiP1+JHMCoLdgCwEvLzOa5b7qdjN3j
/KkSijfQspyXvCeSL4ZYorGugPfZWa5MN+v7CWx6eFarR4RoAVMjPfFnAnCwp75H
i5XEsH1mQbhCFJaHgjOP3hdAKJBp0l0I3WQ8wjxJOC2F0l15sQTd8bP0UTHwH4zQ
IgsWMCRyWY0FWRffPVSf1THgT5HB6qmttzBage/H9NZi7XTvpGTIsYwX52g=
-----END CERTIFICATE-----