Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/504eee-65e2-4973-b994-c7ec0c919e97/1/w0S25LlPGUN700Mhfo5VJzlkY-s.mft
File:                     w0S25LlPGUN700Mhfo5VJzlkY-s.mft (raw, json)
Hash identifier:          okjajMiVQm8X//L33dij8nGcLj+2cgAzlfiucbgSJCI=
Subject key identifier:   F5:19:D3:1F:52:C8:A7:D8:9A:AF:EA:36:57:CC:23:89:3C:DA:88:0D
Authority key identifier: C3:44:B6:E4:B9:4F:19:43:7B:D3:43:21:7E:8E:55:27:39:64:63:EB
Certificate issuer:       /CN=c344b6e4b94f19437bd343217e8e5527396463eb
Certificate serial:       01853D13F195E70D0FFFB7EDC39582F550E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w0S25LlPGUN700Mhfo5VJzlkY-s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/504eee-65e2-4973-b994-c7ec0c919e97/1/w0S25LlPGUN700Mhfo5VJzlkY-s.mft
Manifest number:          0BDD
Signing time:             Fri 23 Dec 2022 03:43:15 +0000
Manifest this update:     Fri 23 Dec 2022 03:43:15 +0000
Manifest next update:     Sat 24 Dec 2022 03:43:15 +0000
Files and hashes:         1: w0S25LlPGUN700Mhfo5VJzlkY-s.crl (hash: 5URAch/I5ctJ1UNggLGWHWm5nyLRxMXuf/QAvSz39Lw=)
                          2: w_HMQt20Ivwo5dHc-CwAoWbnSZE.roa (hash: oCADkSjXjJJW7yevW43kbIyX060BpiKNRF1MAKBCfX8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:3d:13:f1:95:e7:0d:0f:ff:b7:ed:c3:95:82:f5:50:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c344b6e4b94f19437bd343217e8e5527396463eb
        Validity
            Not Before: Dec 23 03:43:15 2022 GMT
            Not After : Dec 24 03:43:15 2022 GMT
        Subject: CN=f519d31f52c8a7d89aafea3657cc23893cda880d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:63:8d:72:19:f5:50:42:35:1e:33:7b:15:38:
                    51:05:d2:eb:68:ac:62:b7:16:b1:e8:95:bd:24:d6:
                    0f:51:b8:bb:2d:71:05:1f:e9:1d:da:cb:e0:1d:eb:
                    5b:4b:97:7b:ac:08:72:89:80:57:77:5d:56:ba:87:
                    71:97:c0:84:2c:52:ea:04:ec:2a:87:2d:1a:eb:86:
                    62:1e:1d:7e:17:73:e9:06:e0:31:75:b3:2b:f9:3b:
                    04:c2:19:c6:75:cc:95:2a:fc:d5:ac:98:2c:8f:b4:
                    84:56:a3:f3:f1:2d:34:f9:2f:49:db:b5:b1:4f:28:
                    64:28:cc:fe:85:14:47:40:c9:4b:7b:23:e8:6b:64:
                    e0:fc:ae:9c:70:99:cf:d3:79:3c:ee:02:0c:f7:d6:
                    c0:0e:6a:61:48:94:fd:1e:13:13:c2:ad:fe:34:b9:
                    cb:7c:f2:c6:e5:c8:15:c4:eb:33:17:21:fa:d9:ed:
                    9f:db:3b:fd:29:21:b5:ed:7b:20:7d:b7:df:25:69:
                    cb:d1:e2:17:2c:2e:f9:5d:0a:1a:10:73:b2:1c:3a:
                    04:c8:55:c6:20:c3:4c:1c:e8:17:26:21:3a:8c:f2:
                    7d:e6:4f:ff:70:f8:56:9d:ee:32:51:1c:92:2f:da:
                    9d:cd:92:0c:d7:60:5a:68:11:5f:0b:92:73:0a:34:
                    30:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:19:D3:1F:52:C8:A7:D8:9A:AF:EA:36:57:CC:23:89:3C:DA:88:0D
            X509v3 Authority Key Identifier:
                keyid:C3:44:B6:E4:B9:4F:19:43:7B:D3:43:21:7E:8E:55:27:39:64:63:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w0S25LlPGUN700Mhfo5VJzlkY-s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/504eee-65e2-4973-b994-c7ec0c919e97/1/w0S25LlPGUN700Mhfo5VJzlkY-s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/504eee-65e2-4973-b994-c7ec0c919e97/1/w0S25LlPGUN700Mhfo5VJzlkY-s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:f8:7c:3e:62:25:48:25:28:ba:ea:1d:9a:08:b4:d4:7a:f0:
         17:d5:8f:8a:19:8d:5d:92:dc:1e:6d:72:53:f8:e2:a2:79:5d:
         b1:83:dc:65:4d:cf:a9:95:d9:5d:9d:ba:7a:6e:99:c0:03:d3:
         c2:c2:90:9f:d6:ff:ee:99:11:01:a7:b2:0c:bc:f0:15:93:28:
         5d:33:18:98:59:bf:23:f8:16:76:1e:7e:56:19:7f:c6:06:e9:
         e0:2e:15:11:80:dd:61:46:a4:e3:7a:fa:f9:42:6e:3c:b5:01:
         53:2f:4a:6f:ab:c2:e2:78:c7:43:34:bd:57:1a:d6:ea:ce:c8:
         c8:de:ed:94:ce:df:31:f4:10:5a:50:25:57:12:6a:38:44:f8:
         d7:95:bf:d4:de:ce:ef:bb:51:e5:e6:b2:e9:60:cf:96:c3:4c:
         a7:48:64:d3:ab:a5:c8:af:e5:25:19:9d:9d:99:91:00:eb:e5:
         12:bb:d0:7b:5b:88:d8:a4:f6:57:e0:6e:3f:32:f5:2f:b0:2f:
         32:d3:06:94:fe:9a:13:48:63:be:1f:71:21:20:db:e2:24:e1:
         e7:ac:12:29:a2:3c:8a:71:b2:8d:36:5a:7a:6e:d2:1e:af:8b:
         9b:99:7f:78:73:0a:4f:9e:87:2a:34:1c:3d:6e:8f:93:a1:ad:
         4b:53:2b:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYU9E/GV5w0P/7ftw5WC9VDnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzNDRiNmU0Yjk0ZjE5NDM3YmQzNDMyMTdlOGU1NTI3Mzk2
NDYzZWIwHhcNMjIxMjIzMDM0MzE1WhcNMjIxMjI0MDM0MzE1WjAzMTEwLwYDVQQD
EyhmNTE5ZDMxZjUyYzhhN2Q4OWFhZmVhMzY1N2NjMjM4OTNjZGE4ODBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2ONchn1UEI1HjN7FThRBdLraKxi
txax6JW9JNYPUbi7LXEFH+kd2svgHetbS5d7rAhyiYBXd11Wuodxl8CELFLqBOwq
hy0a64ZiHh1+F3PpBuAxdbMr+TsEwhnGdcyVKvzVrJgsj7SEVqPz8S00+S9J27Wx
TyhkKMz+hRRHQMlLeyPoa2Tg/K6ccJnP03k87gIM99bADmphSJT9HhMTwq3+NLnL
fPLG5cgVxOszFyH62e2f2zv9KSG17XsgfbffJWnL0eIXLC75XQoaEHOyHDoEyFXG
IMNMHOgXJiE6jPJ95k//cPhWne4yURySL9qdzZIM12BaaBFfC5JzCjQwlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPUZ0x9SyKfYmq/qNlfMI4k82ogNMB8GA1UdIwQY
MBaAFMNEtuS5TxlDe9NDIX6OVSc5ZGPrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzBTMjVMbFBHVU43MDBNaGZvNVZKemxrWS1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC81MDRlZWUtNjVlMi00OTczLWI5OTQt
YzdlYzBjOTE5ZTk3LzEvdzBTMjVMbFBHVU43MDBNaGZvNVZKemxrWS1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC81MDRlZWUtNjVlMi00OTczLWI5OTQtYzdlYzBjOTE5ZTk3
LzEvdzBTMjVMbFBHVU43MDBNaGZvNVZKemxrWS1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVPh8PmIl
SCUouuodmgi01HrwF9WPihmNXZLcHm1yU/jionldsYPcZU3PqZXZXZ26em6ZwAPT
wsKQn9b/7pkRAaeyDLzwFZMoXTMYmFm/I/gWdh5+Vhl/xgbp4C4VEYDdYUak43r6
+UJuPLUBUy9Kb6vC4njHQzS9VxrW6s7IyN7tlM7fMfQQWlAlVxJqOET415W/1N7O
77tR5eay6WDPlsNMp0hk06ulyK/lJRmdnZmRAOvlErvQe1uI2KT2V+BuPzL1L7Av
MtMGlP6aE0hjvh9xISDb4iTh56wSKaI8inGyjTZaem7SHq+Lm5l/eHMKT56HKjQc
PW6Pk6GtS1MrJQ==
-----END CERTIFICATE-----