Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/3d7fc8-b4d6-4433-8d5c-2fdce854f10f/1/O8YZdJaXH0yjxeV20joA9iiPgvI.mft
File:                     O8YZdJaXH0yjxeV20joA9iiPgvI.mft (raw, json)
Hash identifier:          EN7Babv3iLpXhnKS0pyw3fSRLL5UB1o5hcRg+2I3qH0=
Subject key identifier:   65:FE:30:86:8B:7A:6D:DB:DE:65:B1:F7:6A:55:38:4D:52:DE:D6:F3
Authority key identifier: 3B:C6:19:74:96:97:1F:4C:A3:C5:E5:76:D2:3A:00:F6:28:8F:82:F2
Certificate issuer:       /CN=3bc6197496971f4ca3c5e576d23a00f6288f82f2
Certificate serial:       081F52EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O8YZdJaXH0yjxeV20joA9iiPgvI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/3d7fc8-b4d6-4433-8d5c-2fdce854f10f/1/O8YZdJaXH0yjxeV20joA9iiPgvI.mft
Manifest number:          17
Signing time:             Thu 14 Apr 2022 02:16:13 +0000
Manifest this update:     Thu 14 Apr 2022 02:16:13 +0000
Manifest next update:     Fri 15 Apr 2022 02:16:13 +0000
Files and hashes:         1: NAjTI2HWoA8kJQbyWYWVYfT6VLg.roa (hash: pGyJSRO/1iPVqex6xW2ZFMPepWH9SotybJh+L6S6WnQ=)
                          2: O8YZdJaXH0yjxeV20joA9iiPgvI.crl (hash: RCCdT8EuItpQjHkTwdoPdMBV+d2nOq6L74Rj7k5/xwk=)
                          3: w8kQsi5KWliFnv9Zoa9LkrqdshQ.roa (hash: FkftTw47EbIcBLTV/sEcwfXdDynXf7kPrr/KSZHTWw4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 136270570 (0x81f52ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3bc6197496971f4ca3c5e576d23a00f6288f82f2
        Validity
            Not Before: Apr 14 02:16:13 2022 GMT
            Not After : Apr 15 02:16:13 2022 GMT
        Subject: CN=65fe30868b7a6ddbde65b1f76a55384d52ded6f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:7e:f4:32:6a:d9:76:b7:b3:fb:26:51:87:0b:
                    52:a9:d0:da:b7:a3:d1:cf:0b:5b:de:c4:69:c9:20:
                    06:74:c4:05:0a:84:bc:75:e8:c5:e7:ec:f9:47:11:
                    b0:99:b6:8a:36:da:0b:2f:34:72:95:79:96:50:cb:
                    e3:a7:e1:31:9a:2b:8a:07:7e:16:26:39:9d:0b:bc:
                    82:d4:4a:74:62:8f:9f:28:59:da:69:23:51:5c:c0:
                    6b:13:08:a6:7b:50:a4:f8:4d:dd:10:3c:59:b5:ab:
                    6f:9f:05:7d:97:7b:4e:82:05:68:2c:90:4a:68:b8:
                    e9:33:ea:82:77:0b:5c:dc:de:5a:23:6d:fe:cf:f7:
                    46:4a:9a:64:35:4f:2f:23:42:d5:39:c6:06:c4:ea:
                    df:5a:4b:91:86:8d:68:f1:45:4b:87:7f:e6:e3:d4:
                    7c:2c:c5:3b:c9:06:67:a6:eb:2d:b0:2e:6c:e3:ff:
                    92:e7:e3:48:c3:bf:03:fe:b2:0d:a4:3a:f9:1a:e1:
                    21:c6:09:bd:b8:f6:fb:2b:8d:6d:36:bc:85:b9:ca:
                    91:e5:ea:89:0d:93:a8:16:0e:35:9d:a0:f5:ca:5d:
                    aa:80:7d:e8:14:34:85:13:41:63:5d:9a:29:a8:68:
                    25:5b:46:f3:4a:8c:6d:90:7f:38:fc:86:47:94:d4:
                    a9:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:FE:30:86:8B:7A:6D:DB:DE:65:B1:F7:6A:55:38:4D:52:DE:D6:F3
            X509v3 Authority Key Identifier:
                keyid:3B:C6:19:74:96:97:1F:4C:A3:C5:E5:76:D2:3A:00:F6:28:8F:82:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O8YZdJaXH0yjxeV20joA9iiPgvI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/3d7fc8-b4d6-4433-8d5c-2fdce854f10f/1/O8YZdJaXH0yjxeV20joA9iiPgvI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/3d7fc8-b4d6-4433-8d5c-2fdce854f10f/1/O8YZdJaXH0yjxeV20joA9iiPgvI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:78:77:e3:3f:10:1e:ca:e3:59:22:fc:b0:68:4d:f3:70:2e:
         23:65:b5:38:5f:ee:18:62:78:f9:9a:4c:cf:71:f5:66:ce:2c:
         68:0c:1a:66:6d:99:e5:22:2f:e7:20:07:d0:4d:79:99:af:ed:
         10:41:93:e7:08:9d:c7:7d:f5:4d:86:57:c3:65:d3:5d:b9:5e:
         1c:cf:8c:fc:0d:ab:ac:2d:3d:54:2a:26:f6:ea:6f:08:55:79:
         5f:48:bd:fe:54:14:d3:22:f3:ab:bf:65:e2:d6:f4:44:5d:0b:
         84:c7:59:2c:d1:84:14:4a:86:2c:ff:d7:6f:dd:0f:24:c7:93:
         bf:c2:31:2f:11:3c:5d:2e:9f:23:42:43:ae:2d:c3:23:e6:ac:
         df:11:61:af:6e:ce:81:c5:2d:b1:0e:33:5d:4a:8f:ff:0a:42:
         47:20:3e:e4:5c:23:ff:92:7f:89:d8:47:61:65:4f:9c:8f:e6:
         fc:bc:fb:08:8c:7d:4a:3a:6d:6e:45:eb:1c:d0:25:f2:bc:b8:
         1c:ba:32:aa:39:6d:8b:a9:70:8a:ac:27:2e:a9:97:f0:60:57:
         4c:37:17:49:24:7a:2a:33:e2:b1:68:6f:56:1f:04:27:d3:43:
         80:2c:b2:bc:61:bd:98:13:6d:81:72:bf:55:0d:5b:97:78:48:
         91:82:f6:fd
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgIECB9S6jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
YmM2MTk3NDk2OTcxZjRjYTNjNWU1NzZkMjNhMDBmNjI4OGY4MmYyMB4XDTIyMDQx
NDAyMTYxM1oXDTIyMDQxNTAyMTYxM1owMzExMC8GA1UEAxMoNjVmZTMwODY4Yjdh
NmRkYmRlNjViMWY3NmE1NTM4NGQ1MmRlZDZmMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIl+9DJq2Xa3s/smUYcLUqnQ2rej0c8LW97EackgBnTEBQqE
vHXoxefs+UcRsJm2ijbaCy80cpV5llDL46fhMZorigd+FiY5nQu8gtRKdGKPnyhZ
2mkjUVzAaxMIpntQpPhN3RA8WbWrb58FfZd7ToIFaCyQSmi46TPqgncLXNzeWiNt
/s/3RkqaZDVPLyNC1TnGBsTq31pLkYaNaPFFS4d/5uPUfCzFO8kGZ6brLbAubOP/
kufjSMO/A/6yDaQ6+RrhIcYJvbj2+yuNbTa8hbnKkeXqiQ2TqBYONZ2g9cpdqoB9
6BQ0hRNBY12aKahoJVtG80qMbZB/OPyGR5TUqfsCAwEAAaOCAiIwggIeMB0GA1Ud
DgQWBBRl/jCGi3pt295lsfdqVThNUt7W8zAfBgNVHSMEGDAWgBQ7xhl0lpcfTKPF
5XbSOgD2KI+C8jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L084WVpkSmFYSDB5anhlVjIwam9BOWlpUGd2SS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzIvM2Q3ZmM4LWI0ZDYtNDQzMy04ZDVjLTJmZGNlODU0ZjEwZi8x
L084WVpkSmFYSDB5anhlVjIwam9BOWlpUGd2SS5tZnQwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzIv
M2Q3ZmM4LWI0ZDYtNDQzMy04ZDVjLTJmZGNlODU0ZjEwZi8xL084WVpkSmFYSDB5
anhlVjIwam9BOWlpUGd2SS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/
BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBACd4d+M/EB7K41ki/LBoTfNwLiNl
tThf7hhiePmaTM9x9WbOLGgMGmZtmeUiL+cgB9BNeZmv7RBBk+cIncd99U2GV8Nl
0125XhzPjPwNq6wtPVQqJvbqbwhVeV9Ivf5UFNMi86u/ZeLW9ERdC4THWSzRhBRK
hiz/12/dDyTHk7/CMS8RPF0unyNCQ64twyPmrN8RYa9uzoHFLbEOM11Kj/8KQkcg
PuRcI/+Sf4nYR2FlT5yP5vy8+wiMfUo6bW5F6xzQJfK8uBy6Mqo5bYupcIqsJy6p
l/BgV0w3F0kkeioz4rFob1YfBCfTQ4AssrxhvZgTbYFyv1UNW5d4SJGC9v0=
-----END CERTIFICATE-----