Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b527cd-4721-4c94-bf08-7ff69c838eb6/1/mnO6j32Ye9GG29ZH6u6WIAMJdNc.mft
File:                     mnO6j32Ye9GG29ZH6u6WIAMJdNc.mft (raw, json)
Hash identifier:          OdDKUdQUGG+vUOtrGw7elc9oGPtQMVhS8ykP05EJ4tU=
Subject key identifier:   DC:50:27:86:0B:92:9F:F6:65:39:52:47:4D:71:4E:D0:0F:08:52:04
Authority key identifier: 9A:73:BA:8F:7D:98:7B:D1:86:DB:D6:47:EA:EE:96:20:03:09:74:D7
Certificate issuer:       /CN=9a73ba8f7d987bd186dbd647eaee9620030974d7
Certificate serial:       0185321CA15930ECF1A3D720C0D5806C6E8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mnO6j32Ye9GG29ZH6u6WIAMJdNc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/b527cd-4721-4c94-bf08-7ff69c838eb6/1/mnO6j32Ye9GG29ZH6u6WIAMJdNc.mft
Manifest number:          0A2D
Signing time:             Wed 21 Dec 2022 00:36:55 +0000
Manifest this update:     Wed 21 Dec 2022 00:36:55 +0000
Manifest next update:     Thu 22 Dec 2022 00:36:55 +0000
Files and hashes:         1: RDmY1TzjkUN3R8b8CVHwlS0YiH4.roa (hash: ou7T9/zs+2uGHwJhGW1i2ZYdb//qepF4YvWb4f4pdwQ=)
                          2: k3VDJx3biuReCkJaHOzHJPlXvqQ.roa (hash: MQP8WJ4cx5OJy+jDGht6+0a+5wfswwaeaW1NQovhLeU=)
                          3: mnO6j32Ye9GG29ZH6u6WIAMJdNc.crl (hash: K3TYGogpTXO01U/aQWuY5YRdZEScb4hPMGNcLW/QjYc=)
                          4: zDCL0Urbl8M4mPXFTXYLgALDDkQ.roa (hash: 7MIIvEkBpR/VNvLWlrMhKH+RcDrTphxI3SJASmBAgms=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:32:1c:a1:59:30:ec:f1:a3:d7:20:c0:d5:80:6c:6e:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a73ba8f7d987bd186dbd647eaee9620030974d7
        Validity
            Not Before: Dec 21 00:36:55 2022 GMT
            Not After : Dec 22 00:36:55 2022 GMT
        Subject: CN=dc5027860b929ff6653952474d714ed00f085204
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:21:75:20:8a:df:3b:04:f8:c9:55:f5:f4:0f:
                    8a:15:c4:7d:b4:91:5b:a3:62:52:5c:4a:19:86:fa:
                    b4:84:16:cd:e9:1f:7d:62:7b:a4:25:81:b2:86:88:
                    74:00:f6:9f:58:d0:fd:e6:f5:a4:2b:70:ac:7c:3b:
                    4a:eb:28:da:e9:d6:f7:e8:c4:7c:92:53:1f:18:5f:
                    d3:cc:f5:40:a9:1d:06:30:74:5f:11:09:1e:8d:82:
                    01:6a:9c:37:24:21:27:ad:3c:79:7e:16:64:88:bb:
                    d3:dd:81:da:1f:12:2d:ab:c6:56:74:26:51:49:ea:
                    82:7f:7a:1d:31:23:97:62:8c:16:9f:65:83:a0:61:
                    8d:d5:b8:6d:38:c7:5c:0a:32:bc:f5:0e:e8:a1:e7:
                    b9:21:2b:62:7b:1e:dd:0c:66:89:01:ea:dd:e4:2d:
                    65:11:a4:52:ec:f6:06:e1:f7:92:73:1c:67:1a:05:
                    dd:ec:ec:62:12:c4:97:d7:9a:c4:63:b3:05:bc:e7:
                    63:7f:22:54:45:d1:ad:73:e7:86:2c:57:69:f9:ab:
                    d2:17:2a:30:68:81:5f:b8:bd:33:78:e9:96:a9:67:
                    bc:77:8a:c3:ad:c9:2b:b5:75:62:e7:25:d3:3f:14:
                    a0:0f:27:7e:a7:26:8a:74:d5:a5:00:a6:4c:cd:a9:
                    89:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:50:27:86:0B:92:9F:F6:65:39:52:47:4D:71:4E:D0:0F:08:52:04
            X509v3 Authority Key Identifier:
                keyid:9A:73:BA:8F:7D:98:7B:D1:86:DB:D6:47:EA:EE:96:20:03:09:74:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnO6j32Ye9GG29ZH6u6WIAMJdNc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b527cd-4721-4c94-bf08-7ff69c838eb6/1/mnO6j32Ye9GG29ZH6u6WIAMJdNc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b527cd-4721-4c94-bf08-7ff69c838eb6/1/mnO6j32Ye9GG29ZH6u6WIAMJdNc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:52:d9:a9:23:37:8b:b2:ed:55:d5:f3:85:8f:5e:ec:70:ea:
         dc:d8:25:4d:1b:cb:d2:98:0f:bc:ea:98:9d:63:84:37:8b:6d:
         1f:c4:4d:0a:91:44:0c:cb:7e:31:08:6c:a0:38:b1:eb:23:0d:
         d7:fa:6f:28:d8:e4:8a:ae:ab:68:45:1b:11:9e:48:19:e8:03:
         66:7d:74:70:82:1f:a0:ca:dd:1a:13:9a:94:3f:b4:d1:dd:7d:
         9f:0b:ec:72:0e:bc:d5:bd:16:e4:50:2e:be:49:e4:82:1b:28:
         b9:42:5b:9b:7d:16:aa:7a:09:67:f2:e2:1c:bb:70:12:9e:c0:
         93:bf:22:42:32:b8:80:6a:ac:47:26:99:86:0a:04:06:d5:2f:
         7a:60:2c:93:29:37:2a:39:f8:43:c0:dd:fb:7b:c7:94:19:ae:
         f0:99:07:38:e9:0a:fa:ba:67:19:11:22:e9:c3:4a:f0:6a:47:
         6f:3a:7a:08:3d:78:3c:bd:1d:f3:c9:e3:9a:5a:f7:cc:e6:6e:
         c2:9b:52:d4:97:e0:7c:bd:07:b9:42:b9:57:b6:8e:0b:da:d1:
         61:d0:9a:9a:94:a1:fe:44:e7:16:2b:92:40:72:0f:86:c2:08:
         e7:91:66:d1:d0:bb:61:e0:42:ad:ed:19:8c:77:52:09:86:96:
         db:d5:5e:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYUyHKFZMOzxo9cgwNWAbG6MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhNzNiYThmN2Q5ODdiZDE4NmRiZDY0N2VhZWU5NjIwMDMw
OTc0ZDcwHhcNMjIxMjIxMDAzNjU1WhcNMjIxMjIyMDAzNjU1WjAzMTEwLwYDVQQD
EyhkYzUwMjc4NjBiOTI5ZmY2NjUzOTUyNDc0ZDcxNGVkMDBmMDg1MjA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniF1IIrfOwT4yVX19A+KFcR9tJFb
o2JSXEoZhvq0hBbN6R99YnukJYGyhoh0APafWND95vWkK3CsfDtK6yja6db36MR8
klMfGF/TzPVAqR0GMHRfEQkejYIBapw3JCEnrTx5fhZkiLvT3YHaHxItq8ZWdCZR
SeqCf3odMSOXYowWn2WDoGGN1bhtOMdcCjK89Q7ooee5IStiex7dDGaJAerd5C1l
EaRS7PYG4feScxxnGgXd7OxiEsSX15rEY7MFvOdjfyJURdGtc+eGLFdp+avSFyow
aIFfuL0zeOmWqWe8d4rDrckrtXVi5yXTPxSgDyd+pyaKdNWlAKZMzamJfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNxQJ4YLkp/2ZTlSR01xTtAPCFIEMB8GA1UdIwQY
MBaAFJpzuo99mHvRhtvWR+ruliADCXTXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbW5PNmozMlllOUdHMjlaSDZ1NldJQU1KZE5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9iNTI3Y2QtNDcyMS00Yzk0LWJmMDgt
N2ZmNjljODM4ZWI2LzEvbW5PNmozMlllOUdHMjlaSDZ1NldJQU1KZE5jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9iNTI3Y2QtNDcyMS00Yzk0LWJmMDgtN2ZmNjljODM4ZWI2
LzEvbW5PNmozMlllOUdHMjlaSDZ1NldJQU1KZE5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV1LZqSM3
i7LtVdXzhY9e7HDq3NglTRvL0pgPvOqYnWOEN4ttH8RNCpFEDMt+MQhsoDix6yMN
1/pvKNjkiq6raEUbEZ5IGegDZn10cIIfoMrdGhOalD+00d19nwvscg681b0W5FAu
vknkghsouUJbm30WqnoJZ/LiHLtwEp7Ak78iQjK4gGqsRyaZhgoEBtUvemAskyk3
Kjn4Q8Dd+3vHlBmu8JkHOOkK+rpnGREi6cNK8GpHbzp6CD14PL0d88njmlr3zOZu
wptS1JfgfL0HuUK5V7aOC9rRYdCampSh/kTnFiuSQHIPhsII55Fm0dC7YeBCre0Z
jHdSCYaW29Ve/g==
-----END CERTIFICATE-----