Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5167d1-fbbd-4e07-b879-4bd1a58d2581/1/Nfi8CE0GmHV8gv1GHpm5fBQr-yI.mft
File:                     Nfi8CE0GmHV8gv1GHpm5fBQr-yI.mft (raw, json)
Hash identifier:          21SyZH/EYS/A0z+0zrHwypyuxaMLS20CSQGPnr9lO9k=
Subject key identifier:   43:5B:FC:B2:79:C3:36:0E:B1:80:B0:E8:D3:50:EC:5C:5E:D1:83:01
Authority key identifier: 35:F8:BC:08:4D:06:98:75:7C:82:FD:46:1E:99:B9:7C:14:2B:FB:22
Certificate issuer:       /CN=35f8bc084d0698757c82fd461e99b97c142bfb22
Certificate serial:       018504BBD05359B83032512850DAE75827CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nfi8CE0GmHV8gv1GHpm5fBQr-yI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/5167d1-fbbd-4e07-b879-4bd1a58d2581/1/Nfi8CE0GmHV8gv1GHpm5fBQr-yI.mft
Manifest number:          096B
Signing time:             Mon 12 Dec 2022 05:08:15 +0000
Manifest this update:     Mon 12 Dec 2022 05:08:15 +0000
Manifest next update:     Tue 13 Dec 2022 05:08:15 +0000
Files and hashes:         1: 7fbtb3nRfHCTT-befXJ4bImKv_E.roa (hash: Jh/NWQZQEiI4H2mfKnbWC3EoRx3bjU28L54d9OjDmRU=)
                          2: Nfi8CE0GmHV8gv1GHpm5fBQr-yI.crl (hash: y7VQDt8iNwcNs3EibnSpugxPQ8F9qKgcMbwcB5L51NY=)
                          3: OFzpJOHnD45PnjeIpRVrCw4sTz0.roa (hash: 8mp3Sw5MhTBOjLn7aNUc6XKGVPsSpxzh/11kndu3CQw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:04:bb:d0:53:59:b8:30:32:51:28:50:da:e7:58:27:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35f8bc084d0698757c82fd461e99b97c142bfb22
        Validity
            Not Before: Dec 12 05:08:15 2022 GMT
            Not After : Dec 13 05:08:15 2022 GMT
        Subject: CN=435bfcb279c3360eb180b0e8d350ec5c5ed18301
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:75:b7:18:7b:01:ee:3e:f6:2b:3b:ad:df:ef:
                    be:ae:9b:dd:06:3c:51:42:8f:3b:20:58:ee:e8:4c:
                    29:1a:0a:ec:a3:d1:0e:ae:5c:15:9a:9f:6e:d2:0a:
                    55:ba:1d:37:ec:6f:36:14:eb:0d:50:a7:2d:ea:e8:
                    e8:24:35:70:1f:8a:55:be:2b:94:70:f4:9a:b9:cb:
                    7d:ee:b1:f0:3a:f9:11:28:9d:79:7b:2b:1a:98:d7:
                    7e:04:2e:6f:8c:c0:e5:a2:d0:49:73:2c:2d:5d:9c:
                    85:9e:78:c0:79:ef:6a:68:30:7e:60:c3:79:0a:4b:
                    f3:85:8d:64:a4:41:a1:7f:6c:68:aa:97:d7:8b:e3:
                    fc:b6:00:d2:d8:c1:aa:c6:2e:b6:b8:f2:92:46:90:
                    90:db:3b:9e:c1:98:ad:b9:cb:da:c8:ea:5c:13:e6:
                    52:db:7a:e9:63:21:b9:98:af:d2:54:49:af:94:fa:
                    e9:19:39:90:05:46:55:26:69:9f:59:42:48:78:bd:
                    f5:fa:d9:cf:69:95:0b:79:28:be:69:c4:33:3f:f2:
                    8e:2f:73:6b:c3:81:7b:46:a2:5e:66:2d:4b:4f:7b:
                    5d:0c:6a:02:e3:d4:f3:cd:eb:43:8f:7e:c8:d8:cd:
                    17:70:36:2a:97:c4:0d:2d:70:31:d9:96:2a:23:2d:
                    e0:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:5B:FC:B2:79:C3:36:0E:B1:80:B0:E8:D3:50:EC:5C:5E:D1:83:01
            X509v3 Authority Key Identifier:
                keyid:35:F8:BC:08:4D:06:98:75:7C:82:FD:46:1E:99:B9:7C:14:2B:FB:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nfi8CE0GmHV8gv1GHpm5fBQr-yI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5167d1-fbbd-4e07-b879-4bd1a58d2581/1/Nfi8CE0GmHV8gv1GHpm5fBQr-yI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5167d1-fbbd-4e07-b879-4bd1a58d2581/1/Nfi8CE0GmHV8gv1GHpm5fBQr-yI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:6b:1e:66:6c:69:72:7e:dd:96:dd:cf:d0:12:77:ba:d0:83:
         14:8a:6a:84:a1:a8:dc:be:11:dd:76:d5:0a:50:18:fe:88:12:
         60:e8:cf:4c:96:a4:c9:9f:26:ce:54:b5:ed:18:55:da:b7:ff:
         ef:9c:9d:c5:a5:67:da:ab:d4:43:c0:5e:86:af:4e:d4:24:3a:
         df:84:bf:79:1f:d6:b1:b8:bb:64:26:fa:3c:9b:3d:6b:96:20:
         6f:14:9b:ab:07:c8:7e:1c:cb:b7:26:a2:cf:ad:88:4f:12:fd:
         f8:6b:e2:b6:d7:a4:61:54:74:e2:4c:a0:07:7d:3e:a2:27:61:
         9e:f3:b7:16:14:48:8a:78:fd:26:17:b9:07:d6:2f:8c:9e:a6:
         57:bd:f5:4e:83:8a:aa:4d:84:06:e0:ac:8c:64:4e:b1:ab:18:
         43:f8:3a:56:8f:06:4a:22:c9:c1:8a:78:59:d7:e4:7a:c6:d9:
         69:1f:2d:af:c2:92:5d:be:8e:0f:f2:f5:49:44:aa:1d:27:a5:
         71:a9:1d:d1:6d:bd:60:fd:7c:f2:4d:69:50:22:e5:ea:b7:3a:
         41:97:95:ba:27:4f:db:23:f6:95:93:a5:4e:aa:39:46:63:52:
         e3:6f:d4:92:54:9d:40:9b:5a:f3:3f:44:48:e8:75:f9:90:4d:
         30:14:20:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYUEu9BTWbgwMlEoUNrnWCfOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1ZjhiYzA4NGQwNjk4NzU3YzgyZmQ0NjFlOTliOTdjMTQy
YmZiMjIwHhcNMjIxMjEyMDUwODE1WhcNMjIxMjEzMDUwODE1WjAzMTEwLwYDVQQD
Eyg0MzViZmNiMjc5YzMzNjBlYjE4MGIwZThkMzUwZWM1YzVlZDE4MzAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHW3GHsB7j72Kzut3+++rpvdBjxR
Qo87IFju6EwpGgrso9EOrlwVmp9u0gpVuh037G82FOsNUKct6ujoJDVwH4pVviuU
cPSauct97rHwOvkRKJ15eysamNd+BC5vjMDlotBJcywtXZyFnnjAee9qaDB+YMN5
CkvzhY1kpEGhf2xoqpfXi+P8tgDS2MGqxi62uPKSRpCQ2zuewZitucvayOpcE+ZS
23rpYyG5mK/SVEmvlPrpGTmQBUZVJmmfWUJIeL31+tnPaZULeSi+acQzP/KOL3Nr
w4F7RqJeZi1LT3tdDGoC49TzzetDj37I2M0XcDYql8QNLXAx2ZYqIy3g1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFENb/LJ5wzYOsYCw6NNQ7Fxe0YMBMB8GA1UdIwQY
MBaAFDX4vAhNBph1fIL9Rh6ZuXwUK/siMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmZpOENFMEdtSFY4Z3YxR0hwbTVmQlFyLXlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy81MTY3ZDEtZmJiZC00ZTA3LWI4Nzkt
NGJkMWE1OGQyNTgxLzEvTmZpOENFMEdtSFY4Z3YxR0hwbTVmQlFyLXlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy81MTY3ZDEtZmJiZC00ZTA3LWI4NzktNGJkMWE1OGQyNTgx
LzEvTmZpOENFMEdtSFY4Z3YxR0hwbTVmQlFyLXlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOmseZmxp
cn7dlt3P0BJ3utCDFIpqhKGo3L4R3XbVClAY/ogSYOjPTJakyZ8mzlS17RhV2rf/
75ydxaVn2qvUQ8Behq9O1CQ634S/eR/Wsbi7ZCb6PJs9a5YgbxSbqwfIfhzLtyai
z62ITxL9+GvittekYVR04kygB30+oidhnvO3FhRIinj9Jhe5B9YvjJ6mV731ToOK
qk2EBuCsjGROsasYQ/g6Vo8GSiLJwYp4WdfkesbZaR8tr8KSXb6OD/L1SUSqHSel
cakd0W29YP188k1pUCLl6rc6QZeVuidP2yP2lZOlTqo5RmNS42/UklSdQJta8z9E
SOh1+ZBNMBQg/w==
-----END CERTIFICATE-----