Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/ee6b6f-c865-44e3-ae24-36ed0e3fcd59/1/WMygjMaLimQwCpK7OIV9aGe_eXc.mft
File:                     WMygjMaLimQwCpK7OIV9aGe_eXc.mft (raw, json)
Hash identifier:          zY4ms7v4g0jX08Q20jRVDnnu1vh0bXOQRnVrEbJtVqo=
Subject key identifier:   BA:E2:72:E2:E9:46:F2:AE:FC:4D:BE:18:20:1F:49:03:42:EA:6A:08
Authority key identifier: 58:CC:A0:8C:C6:8B:8A:64:30:0A:92:BB:38:85:7D:68:67:BF:79:77
Certificate issuer:       /CN=58cca08cc68b8a64300a92bb38857d6867bf7977
Certificate serial:       06ED3DAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WMygjMaLimQwCpK7OIV9aGe_eXc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/ee6b6f-c865-44e3-ae24-36ed0e3fcd59/1/WMygjMaLimQwCpK7OIV9aGe_eXc.mft
Manifest number:          08F8
Signing time:             Mon 13 Jun 2022 05:09:13 +0000
Manifest this update:     Mon 13 Jun 2022 05:09:13 +0000
Manifest next update:     Tue 14 Jun 2022 05:09:13 +0000
Files and hashes:         1: WMygjMaLimQwCpK7OIV9aGe_eXc.crl (hash: WJD373nT5MIFHBp8hnfV8jM6rOYEl4LAy8aUiqIibpc=)
                          2: lItTTRNsl3ZfT0yJ55_y-PWUu-c.roa (hash: rg1q9R4iKmg4Am6scD9n+OmogbN62UM19eGDjb4RjII=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116211118 (0x6ed3dae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58cca08cc68b8a64300a92bb38857d6867bf7977
        Validity
            Not Before: Jun 13 05:09:13 2022 GMT
            Not After : Jun 14 05:09:13 2022 GMT
        Subject: CN=bae272e2e946f2aefc4dbe18201f490342ea6a08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:79:d9:12:ce:2a:aa:aa:33:63:fe:36:22:8c:
                    14:ce:ac:a8:aa:85:07:f4:15:38:25:12:a5:04:0b:
                    80:a8:4b:c1:bd:9e:70:18:e5:ae:d9:24:7f:dd:66:
                    b2:4d:d3:cd:4f:2e:ec:5f:b4:96:9a:06:38:3c:fa:
                    6a:36:7d:05:8f:df:90:a6:f7:e8:ad:3a:00:32:1c:
                    a9:81:ec:ab:bd:09:6e:3a:be:5b:06:a0:24:df:a1:
                    f3:a2:76:48:6e:00:e2:cb:b0:43:1f:a6:87:4a:d2:
                    9a:64:e3:04:c9:4a:e2:06:39:8a:de:d7:b7:a8:c3:
                    3f:bf:aa:40:8f:2e:36:45:4b:d6:d1:29:c3:c8:1d:
                    86:5d:d9:45:f2:53:9f:57:5f:43:89:36:4b:eb:cb:
                    f5:9b:9f:10:f8:24:77:cd:f9:ce:ee:ac:d5:f6:23:
                    53:03:09:25:ec:5a:e4:eb:33:a9:11:33:4c:df:ad:
                    f4:20:94:40:89:c8:de:8a:77:a1:50:13:5c:b0:d4:
                    9f:10:77:5a:a1:3c:db:7d:1d:1a:c8:b4:ff:cb:d0:
                    64:ce:68:8b:77:28:33:6c:fd:98:01:2c:a0:b8:0b:
                    87:60:35:c7:20:06:e5:0f:17:a6:0f:f5:ca:d4:74:
                    da:80:eb:e9:94:92:9e:29:ec:0d:b7:14:20:09:c6:
                    75:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:E2:72:E2:E9:46:F2:AE:FC:4D:BE:18:20:1F:49:03:42:EA:6A:08
            X509v3 Authority Key Identifier:
                keyid:58:CC:A0:8C:C6:8B:8A:64:30:0A:92:BB:38:85:7D:68:67:BF:79:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WMygjMaLimQwCpK7OIV9aGe_eXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ee6b6f-c865-44e3-ae24-36ed0e3fcd59/1/WMygjMaLimQwCpK7OIV9aGe_eXc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ee6b6f-c865-44e3-ae24-36ed0e3fcd59/1/WMygjMaLimQwCpK7OIV9aGe_eXc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:99:15:d1:ad:0d:c7:48:a3:b4:96:03:30:f8:c3:36:68:83:
         7b:2e:5e:cb:65:42:8a:7e:23:14:f6:cb:1b:c6:1e:12:3b:b7:
         b9:51:d2:25:62:08:e6:a0:90:17:7a:ff:a7:52:ff:53:e5:b1:
         f4:d3:cb:d3:05:a6:0c:d7:a5:da:41:3d:fc:c4:10:0b:41:6a:
         72:d1:dd:f2:b3:21:a9:21:25:0d:f3:d4:bf:df:0e:36:ba:71:
         3c:f3:fa:39:71:95:75:b0:5b:57:88:91:cd:0e:cb:3d:47:5c:
         05:f9:ba:d4:3f:54:65:7a:b7:9a:bb:df:f8:ae:b5:4f:5c:d1:
         0e:78:d3:25:9b:34:57:03:2d:b3:df:25:0d:b9:a2:a4:46:e9:
         b0:fe:f3:dd:93:2b:2d:8d:05:f2:41:7f:66:ad:f9:e8:0e:f1:
         87:c3:a8:97:7f:d9:85:6b:73:15:f7:4d:03:12:14:57:8b:aa:
         cb:c5:fa:59:49:e8:a1:6b:67:56:14:37:e5:21:02:0b:8d:4c:
         bf:cf:ff:ba:f5:71:73:d6:c9:4a:bc:10:db:fa:0f:2b:17:29:
         63:0d:a0:3a:fe:98:ef:d0:2d:92:22:90:ec:7e:98:b7:3c:5d:
         4c:63:68:af:e1:21:2d:59:3b:2b:23:84:f9:61:7e:b4:39:52:
         40:a0:a4:6a
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgIEBu09rjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1
OGNjYTA4Y2M2OGI4YTY0MzAwYTkyYmIzODg1N2Q2ODY3YmY3OTc3MB4XDTIyMDYx
MzA1MDkxM1oXDTIyMDYxNDA1MDkxM1owMzExMC8GA1UEAxMoYmFlMjcyZTJlOTQ2
ZjJhZWZjNGRiZTE4MjAxZjQ5MDM0MmVhNmEwODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOR52RLOKqqqM2P+NiKMFM6sqKqFB/QVOCUSpQQLgKhLwb2e
cBjlrtkkf91msk3TzU8u7F+0lpoGODz6ajZ9BY/fkKb36K06ADIcqYHsq70Jbjq+
WwagJN+h86J2SG4A4suwQx+mh0rSmmTjBMlK4gY5it7Xt6jDP7+qQI8uNkVL1tEp
w8gdhl3ZRfJTn1dfQ4k2S+vL9ZufEPgkd835zu6s1fYjUwMJJexa5OszqREzTN+t
9CCUQInI3op3oVATXLDUnxB3WqE8230dGsi0/8vQZM5oi3coM2z9mAEsoLgLh2A1
xyAG5Q8Xpg/1ytR02oDr6ZSSninsDbcUIAnGdTMCAwEAAaOCAiIwggIeMB0GA1Ud
DgQWBBS64nLi6UbyrvxNvhggH0kDQupqCDAfBgNVHSMEGDAWgBRYzKCMxouKZDAK
krs4hX1oZ795dzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1dNeWdqTWFMaW1Rd0NwSzdPSVY5YUdlX2VYYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZGQvZWU2YjZmLWM4NjUtNDRlMy1hZTI0LTM2ZWQwZTNmY2Q1OS8x
L1dNeWdqTWFMaW1Rd0NwSzdPSVY5YUdlX2VYYy5tZnQwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGQv
ZWU2YjZmLWM4NjUtNDRlMy1hZTI0LTM2ZWQwZTNmY2Q1OS8xL1dNeWdqTWFMaW1R
d0NwSzdPSVY5YUdlX2VYYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/
BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAJmZFdGtDcdIo7SWAzD4wzZog3su
XstlQop+IxT2yxvGHhI7t7lR0iViCOagkBd6/6dS/1PlsfTTy9MFpgzXpdpBPfzE
EAtBanLR3fKzIakhJQ3z1L/fDja6cTzz+jlxlXWwW1eIkc0Oyz1HXAX5utQ/VGV6
t5q73/iutU9c0Q540yWbNFcDLbPfJQ25oqRG6bD+892TKy2NBfJBf2at+egO8YfD
qJd/2YVrcxX3TQMSFFeLqsvF+llJ6KFrZ1YUN+UhAguNTL/P/7r1cXPWyUq8ENv6
DysXKWMNoDr+mO/QLZIikOx+mLc8XUxjaK/hIS1ZOysjhPlhfrQ5UkCgpGo=
-----END CERTIFICATE-----