Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/9b928a-999b-455c-a04c-2645b0a831cc/1/Im53EL41gupsdgsAn2cB8tJ1eC4.mft
File:                     Im53EL41gupsdgsAn2cB8tJ1eC4.mft (raw, json)
Hash identifier:          otbltbV2evagdFRvn3joWdQj92jOeSW8yzDpqx4RQHo=
Subject key identifier:   62:62:A0:CD:8D:14:D0:5C:89:DE:3F:D8:FA:F8:07:FD:70:D6:26:FE
Authority key identifier: 22:6E:77:10:BE:35:82:EA:6C:76:0B:00:9F:67:01:F2:D2:75:78:2E
Certificate issuer:       /CN=226e7710be3582ea6c760b009f6701f2d275782e
Certificate serial:       7F9FBE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Im53EL41gupsdgsAn2cB8tJ1eC4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/9b928a-999b-455c-a04c-2645b0a831cc/1/Im53EL41gupsdgsAn2cB8tJ1eC4.mft
Manifest number:          A3
Signing time:             Tue 26 Apr 2022 08:10:57 +0000
Manifest this update:     Tue 26 Apr 2022 08:10:57 +0000
Manifest next update:     Wed 27 Apr 2022 08:10:57 +0000
Files and hashes:         1: 1JH9q8IR7XlazYfXg9PGxxiW_pY.roa (hash: yFJ4aGArtc9h9en2lbrdL6qEXAYrGCwA5YOCs4WGPPQ=)
                          2: Im53EL41gupsdgsAn2cB8tJ1eC4.crl (hash: 5B6fa4wRTI7E/eRX6vZ9iyQ6kIUDuItH81SK/wI1kwo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8363966 (0x7f9fbe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=226e7710be3582ea6c760b009f6701f2d275782e
        Validity
            Not Before: Apr 26 08:10:57 2022 GMT
            Not After : Apr 27 08:10:57 2022 GMT
        Subject: CN=6262a0cd8d14d05c89de3fd8faf807fd70d626fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:a2:b2:6c:1a:1a:e8:3a:94:b3:07:ff:d0:fc:
                    23:ca:3c:d0:72:b5:13:b9:0b:b5:f9:d6:8a:ee:d5:
                    42:90:70:fe:28:84:73:91:b7:fe:22:0a:06:2c:21:
                    24:8b:b7:5c:21:99:08:11:ef:bd:97:33:b3:a7:f0:
                    ee:f9:44:0e:e9:6e:1a:1c:f7:65:9d:d4:dd:29:4e:
                    e7:d8:69:45:9a:4b:99:fb:c4:b1:08:84:32:fa:de:
                    f3:22:5c:ec:54:9c:1f:2b:3e:8f:86:1f:64:80:7d:
                    d8:01:c8:71:93:cc:d8:e8:00:aa:14:59:30:e6:6c:
                    93:09:6b:1c:ab:29:50:0f:d0:b5:31:fa:c4:a7:1d:
                    3c:94:17:8e:ca:ea:47:c3:74:9c:94:9f:ef:0f:9d:
                    d6:6b:36:50:e0:ce:57:0c:f5:d4:da:d8:ae:a2:74:
                    c3:9b:c3:20:f7:17:07:db:77:37:71:c5:71:08:fa:
                    25:7f:d6:6a:f9:3b:54:72:2b:2d:57:1e:b9:dd:18:
                    60:fd:b3:bf:14:1c:6a:61:c8:fd:e9:ef:65:77:54:
                    09:2b:ba:8d:2a:f3:3a:32:de:0d:67:3b:e8:b6:9a:
                    ca:48:f9:5e:e7:31:e0:92:80:0d:ca:40:15:2b:0f:
                    9f:31:c0:cc:28:9f:8e:7b:fe:7c:a9:57:6e:d6:3e:
                    83:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:62:A0:CD:8D:14:D0:5C:89:DE:3F:D8:FA:F8:07:FD:70:D6:26:FE
            X509v3 Authority Key Identifier:
                keyid:22:6E:77:10:BE:35:82:EA:6C:76:0B:00:9F:67:01:F2:D2:75:78:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Im53EL41gupsdgsAn2cB8tJ1eC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9b928a-999b-455c-a04c-2645b0a831cc/1/Im53EL41gupsdgsAn2cB8tJ1eC4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9b928a-999b-455c-a04c-2645b0a831cc/1/Im53EL41gupsdgsAn2cB8tJ1eC4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:00:2a:b1:8c:7a:4f:41:d6:98:15:cb:a7:54:4c:85:2b:62:
         37:a1:08:bc:78:25:56:05:36:91:96:3b:33:73:03:f6:56:b5:
         a2:2e:5d:63:fd:bd:06:49:d3:9d:39:af:37:ab:b4:f8:b1:23:
         11:52:91:75:7a:29:72:0d:46:33:05:58:58:3e:2b:d7:8b:cc:
         6f:8f:09:6c:19:48:d5:4c:a0:e6:75:2e:97:4c:96:2e:0c:fc:
         5d:59:95:c2:cc:ce:ba:6e:3a:03:78:f1:b9:e7:74:c6:51:14:
         ad:dc:73:7e:ff:f6:5f:53:d4:1a:c6:ac:a7:88:bb:21:1f:e6:
         c8:ef:fd:bb:25:ac:86:b9:8a:ae:7d:ed:42:89:16:e2:72:2c:
         c0:47:c5:39:1d:fc:66:97:ee:52:bc:f9:ab:27:50:27:10:07:
         fa:72:b3:27:51:fb:b4:5c:a9:94:9c:d0:70:9d:05:e4:a4:b0:
         a8:18:7a:3e:71:30:c2:d3:31:73:e1:db:01:ad:6e:ca:6b:57:
         33:5a:d4:21:0e:b9:83:5b:fe:8d:e0:56:e2:f1:5b:c7:1d:29:
         ab:54:74:48:cf:a1:1f:56:80:65:29:ab:4d:ef:c2:29:15:65:
         b3:f7:9e:5c:90:ef:e8:b6:bf:10:2b:52:49:8a:84:df:17:25:
         ec:30:d6:df
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIDf5++MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDIy
NmU3NzEwYmUzNTgyZWE2Yzc2MGIwMDlmNjcwMWYyZDI3NTc4MmUwHhcNMjIwNDI2
MDgxMDU3WhcNMjIwNDI3MDgxMDU3WjAzMTEwLwYDVQQDEyg2MjYyYTBjZDhkMTRk
MDVjODlkZTNmZDhmYWY4MDdmZDcwZDYyNmZlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAlqKybBoa6DqUswf/0PwjyjzQcrUTuQu1+daK7tVCkHD+KIRz
kbf+IgoGLCEki7dcIZkIEe+9lzOzp/Du+UQO6W4aHPdlndTdKU7n2GlFmkuZ+8Sx
CIQy+t7zIlzsVJwfKz6Phh9kgH3YAchxk8zY6ACqFFkw5myTCWscqylQD9C1MfrE
px08lBeOyupHw3SclJ/vD53WazZQ4M5XDPXU2tiuonTDm8Mg9xcH23c3ccVxCPol
f9Zq+TtUcistVx653Rhg/bO/FBxqYcj96e9ld1QJK7qNKvM6Mt4NZzvotprKSPle
5zHgkoANykAVKw+fMcDMKJ+Oe/58qVdu1j6D7wIDAQABo4ICIjCCAh4wHQYDVR0O
BBYEFGJioM2NFNBcid4/2Pr4B/1w1ib+MB8GA1UdIwQYMBaAFCJudxC+NYLqbHYL
AJ9nAfLSdXguMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
SW01M0VMNDFndXBzZGdzQW4yY0I4dEoxZUM0LmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC84ZC85YjkyOGEtOTk5Yi00NTVjLWEwNGMtMjY0NWIwYTgzMWNjLzEv
SW01M0VMNDFndXBzZGdzQW4yY0I4dEoxZUM0Lm1mdDCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC85
YjkyOGEtOTk5Yi00NTVjLWEwNGMtMjY0NWIwYTgzMWNjLzEvSW01M0VMNDFndXBz
ZGdzQW4yY0I4dEoxZUM0LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8E
BjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZwAqsYx6T0HWmBXLp1RMhStiN6EI
vHglVgU2kZY7M3MD9la1oi5dY/29BknTnTmvN6u0+LEjEVKRdXopcg1GMwVYWD4r
14vMb48JbBlI1Uyg5nUul0yWLgz8XVmVwszOum46A3jxued0xlEUrdxzfv/2X1PU
Gsasp4i7IR/myO/9uyWshrmKrn3tQokW4nIswEfFOR38ZpfuUrz5qydQJxAH+nKz
J1H7tFyplJzQcJ0F5KSwqBh6PnEwwtMxc+HbAa1uymtXM1rUIQ65g1v+jeBW4vFb
xx0pq1R0SM+hH1aAZSmrTe/CKRVls/eeXJDv6La/ECtSSYqE3xcl7DDW3w==
-----END CERTIFICATE-----