Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f542c0-89a4-4d31-b0b5-e592a9ebe604/1/YEDQtuhAI7hvi5PzEFC_UeFsgb8.mft
File:                     YEDQtuhAI7hvi5PzEFC_UeFsgb8.mft (raw, json)
Hash identifier:          PTHC4ws3mK5mAeGF2UmmFQAhTJJ4m6GHt/xcrnS2DvY=
Subject key identifier:   AF:23:82:07:C0:9D:B4:FA:15:64:DF:E4:53:5D:B4:F5:F8:E2:65:A8
Authority key identifier: 60:40:D0:B6:E8:40:23:B8:6F:8B:93:F3:10:50:BF:51:E1:6C:81:BF
Certificate issuer:       /CN=6040d0b6e84023b86f8b93f31050bf51e16c81bf
Certificate serial:       029D6ED6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YEDQtuhAI7hvi5PzEFC_UeFsgb8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/f542c0-89a4-4d31-b0b5-e592a9ebe604/1/YEDQtuhAI7hvi5PzEFC_UeFsgb8.mft
Manifest number:          0340
Signing time:             Mon 28 Mar 2022 03:43:13 +0000
Manifest this update:     Mon 28 Mar 2022 03:43:13 +0000
Manifest next update:     Tue 29 Mar 2022 03:43:13 +0000
Files and hashes:         1: QREPZhrxHZArrNxKJUNEwf6wevk.roa (hash: 6xoeiu7d/f15lloj9PlL0WFqneUL7aEBh6X57W+vsbE=)
                          2: YEDQtuhAI7hvi5PzEFC_UeFsgb8.crl (hash: v2Py/Tp6CiAUFC6BkyJTE89aeSqSG0buKBTdMrD05N4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 43871958 (0x29d6ed6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6040d0b6e84023b86f8b93f31050bf51e16c81bf
        Validity
            Not Before: Mar 28 03:43:13 2022 GMT
            Not After : Mar 29 03:43:13 2022 GMT
        Subject: CN=af238207c09db4fa1564dfe4535db4f5f8e265a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:04:fe:c8:2e:45:78:7f:e9:66:11:02:0d:1a:
                    b5:8d:c8:77:bc:6c:34:b5:a7:f9:7f:b1:ff:1b:81:
                    94:3e:28:1f:65:68:67:e7:ce:4d:fd:0b:f6:e2:a8:
                    dc:c5:6d:13:d2:f6:21:68:41:da:52:5a:f2:9e:1c:
                    27:bb:0b:db:ea:1a:90:63:96:5f:c8:52:14:37:b7:
                    83:0e:6f:40:3b:15:7f:d0:36:19:8d:56:f9:ed:d1:
                    73:02:c8:bb:98:23:a9:8d:15:a3:30:52:df:18:50:
                    bb:c8:84:34:02:ce:ff:2f:66:30:f4:6d:86:72:98:
                    1d:4d:45:78:7d:b5:60:f0:25:21:0d:ad:73:c2:b6:
                    8f:0b:30:57:63:ee:aa:7e:d3:d1:d9:69:0a:48:16:
                    ca:c0:06:9c:e5:54:bb:39:56:bf:ba:0f:69:27:f4:
                    c6:43:fb:95:14:8d:e9:4b:87:4c:8a:f5:0e:f1:48:
                    f5:b4:03:e5:00:e5:8a:0f:8d:ec:26:7d:24:6e:1b:
                    be:ed:c6:79:c7:07:53:e2:7f:37:71:e1:63:97:31:
                    7d:90:b2:f9:02:dc:13:eb:80:d4:ef:3d:f0:56:59:
                    b3:17:c5:de:e5:13:f5:87:dc:ba:81:9d:59:4c:2b:
                    f0:a3:1d:6d:d3:b8:4c:ae:ce:2d:f4:f6:fd:05:0d:
                    e4:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:23:82:07:C0:9D:B4:FA:15:64:DF:E4:53:5D:B4:F5:F8:E2:65:A8
            X509v3 Authority Key Identifier:
                keyid:60:40:D0:B6:E8:40:23:B8:6F:8B:93:F3:10:50:BF:51:E1:6C:81:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YEDQtuhAI7hvi5PzEFC_UeFsgb8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f542c0-89a4-4d31-b0b5-e592a9ebe604/1/YEDQtuhAI7hvi5PzEFC_UeFsgb8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f542c0-89a4-4d31-b0b5-e592a9ebe604/1/YEDQtuhAI7hvi5PzEFC_UeFsgb8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:b1:ea:a7:84:e3:d9:90:51:60:1d:44:8a:31:59:ca:81:26:
         eb:b5:d5:93:01:f9:7e:b3:3c:c8:f8:4c:78:e7:cb:a3:be:48:
         bb:0a:7a:0f:f1:f2:04:69:a6:6f:42:22:09:55:00:ae:26:d6:
         88:bc:25:57:97:09:2a:d5:eb:63:74:55:3b:07:e4:22:4a:4e:
         20:1f:1f:a8:2b:dc:16:0a:da:fd:97:14:ca:a4:d9:42:38:65:
         dd:ac:7b:4f:9b:56:92:3e:65:e8:b2:94:7e:86:3e:c1:2b:71:
         e0:05:5a:19:e5:5b:2d:b3:81:30:8f:d2:19:c7:39:13:8f:9e:
         44:b6:01:d5:7a:86:b3:38:fb:95:94:b5:e9:89:49:5c:1a:32:
         56:86:89:01:1f:1f:e0:91:67:f3:52:b8:5b:22:2c:e1:7b:b9:
         82:47:17:cb:0c:f3:15:81:1b:de:60:52:6f:e4:12:22:44:49:
         14:76:05:b4:ae:da:e7:a9:b7:89:89:2a:ab:bc:af:a4:31:09:
         e3:bc:f6:da:85:84:8c:74:22:df:ed:a3:bf:4a:87:57:06:d9:
         73:b8:d3:f0:15:13:e4:78:58:4e:20:6e:1e:38:d1:49:8d:99:
         bb:c8:49:41:3f:bc:20:27:2f:8c:d5:d6:41:c3:79:be:ad:b7:
         6b:42:f6:65
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgIEAp1u1jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
MDQwZDBiNmU4NDAyM2I4NmY4YjkzZjMxMDUwYmY1MWUxNmM4MWJmMB4XDTIyMDMy
ODAzNDMxM1oXDTIyMDMyOTAzNDMxM1owMzExMC8GA1UEAxMoYWYyMzgyMDdjMDlk
YjRmYTE1NjRkZmU0NTM1ZGI0ZjVmOGUyNjVhODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANEE/sguRXh/6WYRAg0atY3Id7xsNLWn+X+x/xuBlD4oH2Vo
Z+fOTf0L9uKo3MVtE9L2IWhB2lJa8p4cJ7sL2+oakGOWX8hSFDe3gw5vQDsVf9A2
GY1W+e3RcwLIu5gjqY0VozBS3xhQu8iENALO/y9mMPRthnKYHU1FeH21YPAlIQ2t
c8K2jwswV2Puqn7T0dlpCkgWysAGnOVUuzlWv7oPaSf0xkP7lRSN6UuHTIr1DvFI
9bQD5QDlig+N7CZ9JG4bvu3GeccHU+J/N3HhY5cxfZCy+QLcE+uA1O898FZZsxfF
3uUT9YfcuoGdWUwr8KMdbdO4TK7OLfT2/QUN5FsCAwEAAaOCAiIwggIeMB0GA1Ud
DgQWBBSvI4IHwJ20+hVk3+RTXbT1+OJlqDAfBgNVHSMEGDAWgBRgQNC26EAjuG+L
k/MQUL9R4WyBvzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1lFRFF0dWhBSTdodmk1UHpFRkNfVWVGc2diOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvY2MvZjU0MmMwLTg5YTQtNGQzMS1iMGI1LWU1OTJhOWViZTYwNC8x
L1lFRFF0dWhBSTdodmk1UHpFRkNfVWVGc2diOC5tZnQwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2Mv
ZjU0MmMwLTg5YTQtNGQzMS1iMGI1LWU1OTJhOWViZTYwNC8xL1lFRFF0dWhBSTdo
dmk1UHpFRkNfVWVGc2diOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/
BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAM+x6qeE49mQUWAdRIoxWcqBJuu1
1ZMB+X6zPMj4THjny6O+SLsKeg/x8gRppm9CIglVAK4m1oi8JVeXCSrV62N0VTsH
5CJKTiAfH6gr3BYK2v2XFMqk2UI4Zd2se0+bVpI+ZeiylH6GPsErceAFWhnlWy2z
gTCP0hnHOROPnkS2AdV6hrM4+5WUtemJSVwaMlaGiQEfH+CRZ/NSuFsiLOF7uYJH
F8sM8xWBG95gUm/kEiJESRR2BbSu2uept4mJKqu8r6QxCeO89tqFhIx0It/to79K
h1cG2XO40/AVE+R4WE4gbh440UmNmbvISUE/vCAnL4zV1kHDeb6tt2tC9mU=
-----END CERTIFICATE-----