Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/b64cd3-bdf9-4f39-9393-e1c448170efa/1/od0z45E3bAVvOySWtLTGUP6IHLg.mft
File:                     od0z45E3bAVvOySWtLTGUP6IHLg.mft (raw, json)
Hash identifier:          NBu1GUjwcJ9lYs4g/JqyDvcdkJe/sViM39k9Bm6IdFo=
Subject key identifier:   2A:84:D4:D3:72:7E:5A:1D:0E:95:3B:5A:2D:4F:6A:EF:29:7A:6C:8A
Authority key identifier: A1:DD:33:E3:91:37:6C:05:6F:3B:24:96:B4:B4:C6:50:FE:88:1C:B8
Certificate issuer:       /CN=a1dd33e391376c056f3b2496b4b4c650fe881cb8
Certificate serial:       09C3EEFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/od0z45E3bAVvOySWtLTGUP6IHLg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/b64cd3-bdf9-4f39-9393-e1c448170efa/1/od0z45E3bAVvOySWtLTGUP6IHLg.mft
Manifest number:          08DA
Signing time:             Mon 04 Apr 2022 05:14:25 +0000
Manifest this update:     Mon 04 Apr 2022 05:14:25 +0000
Manifest next update:     Tue 05 Apr 2022 05:14:25 +0000
Files and hashes:         1: J-dhGzsnJaev3JXdSyOUgusQ8Bc.roa (hash: eyzsPryX5s/B4XRu0iH9RPtmzub+4X8V9hheVcaCNdE=)
                          2: od0z45E3bAVvOySWtLTGUP6IHLg.crl (hash: z75odfVrWj9liHlgRVXMr97cA6EAU+Gf7fndMZU2TB0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 163835642 (0x9c3eefa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1dd33e391376c056f3b2496b4b4c650fe881cb8
        Validity
            Not Before: Apr  4 05:14:25 2022 GMT
            Not After : Apr  5 05:14:25 2022 GMT
        Subject: CN=2a84d4d3727e5a1d0e953b5a2d4f6aef297a6c8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:4e:7b:a7:2c:8d:17:5a:83:b6:1f:ca:28:ff:
                    59:41:8c:e1:1c:e3:1e:c6:22:b9:30:90:c2:0e:3b:
                    2a:56:41:8f:5d:13:a9:0d:94:ac:bf:48:ad:5c:02:
                    d9:ce:94:fe:03:82:c3:48:5a:2b:95:f9:4a:23:45:
                    71:06:58:1b:0e:d4:03:51:31:b5:67:af:0c:42:20:
                    fb:12:c2:6d:74:3a:f0:7c:17:8c:e6:97:14:a1:e5:
                    ff:c5:64:ad:f1:4c:cb:2c:e2:29:dd:03:27:81:da:
                    bd:35:b3:b9:eb:68:9d:92:e7:97:2c:18:ee:e8:b9:
                    87:7b:a7:51:1c:8d:1d:d7:71:0c:d3:4f:fe:d2:28:
                    76:7b:15:ca:56:ca:aa:6c:68:b3:07:91:ed:2a:ad:
                    1a:ee:9a:cd:13:bb:cc:7c:45:6a:2b:0e:8a:c2:38:
                    e4:95:df:d5:54:1b:3a:b0:b7:4b:42:e7:d7:1e:e6:
                    fa:e4:01:3b:0f:3d:32:af:77:ef:0b:7f:3b:19:0b:
                    ec:12:b4:1d:f6:63:4e:5c:55:83:42:cb:0a:11:ce:
                    39:05:7a:71:3d:63:7f:f3:4a:94:07:86:38:1f:2b:
                    2e:56:8a:c5:f1:fe:d4:09:0e:5c:71:6f:a0:2c:35:
                    12:1d:96:bd:d9:02:04:71:31:9a:39:2e:9e:9b:37:
                    52:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:84:D4:D3:72:7E:5A:1D:0E:95:3B:5A:2D:4F:6A:EF:29:7A:6C:8A
            X509v3 Authority Key Identifier:
                keyid:A1:DD:33:E3:91:37:6C:05:6F:3B:24:96:B4:B4:C6:50:FE:88:1C:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/od0z45E3bAVvOySWtLTGUP6IHLg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/b64cd3-bdf9-4f39-9393-e1c448170efa/1/od0z45E3bAVvOySWtLTGUP6IHLg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/b64cd3-bdf9-4f39-9393-e1c448170efa/1/od0z45E3bAVvOySWtLTGUP6IHLg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:7d:36:69:dc:db:ee:92:4b:fb:aa:9d:fd:6b:a7:b3:16:06:
         90:3f:14:a0:8a:3f:e3:ce:79:f3:0d:b5:dc:4a:e0:43:5e:6d:
         19:de:2d:15:1a:69:38:0a:6f:d8:0e:bf:5a:b4:12:e0:ae:cc:
         f4:72:ea:7f:3f:f2:79:1d:28:94:e8:00:81:a5:24:9f:9f:2f:
         54:0d:a4:a2:be:ec:81:52:a3:45:6a:db:1d:d0:8a:16:bd:eb:
         6a:c6:21:9e:4c:9c:a8:28:63:56:06:66:01:9b:fb:fe:3c:e3:
         76:0b:ad:8f:40:c6:a0:05:af:27:3e:63:f7:ab:29:25:53:19:
         fa:fc:b2:1d:6c:78:3c:97:98:3e:e5:ae:64:7b:2d:f8:09:61:
         5f:b8:6e:84:1f:cb:75:ed:23:0e:b2:10:f4:f4:6d:5f:58:c2:
         aa:d6:53:19:0a:cf:6f:b7:24:5e:b7:6a:d1:60:dd:85:25:5d:
         f0:9a:21:2e:34:d1:f5:98:96:6b:d9:ac:a7:82:64:0e:8f:12:
         26:94:dc:73:4b:85:c8:b4:a9:5a:79:19:2d:51:e5:39:1e:f9:
         be:97:c1:ad:98:c4:5d:e1:e9:14:b2:aa:1c:40:e1:bc:d9:85:
         43:89:2b:52:05:d7:cc:99:d5:a6:a7:05:d2:63:a5:6d:8c:c2:
         76:1b:6f:22
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgIECcPu+jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
MWRkMzNlMzkxMzc2YzA1NmYzYjI0OTZiNGI0YzY1MGZlODgxY2I4MB4XDTIyMDQw
NDA1MTQyNVoXDTIyMDQwNTA1MTQyNVowMzExMC8GA1UEAxMoMmE4NGQ0ZDM3Mjdl
NWExZDBlOTUzYjVhMmQ0ZjZhZWYyOTdhNmM4YTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIJOe6csjRdag7Yfyij/WUGM4RzjHsYiuTCQwg47KlZBj10T
qQ2UrL9IrVwC2c6U/gOCw0haK5X5SiNFcQZYGw7UA1ExtWevDEIg+xLCbXQ68HwX
jOaXFKHl/8VkrfFMyyziKd0DJ4HavTWzuetonZLnlywY7ui5h3unURyNHddxDNNP
/tIodnsVylbKqmxosweR7SqtGu6azRO7zHxFaisOisI45JXf1VQbOrC3S0Ln1x7m
+uQBOw89Mq937wt/OxkL7BK0HfZjTlxVg0LLChHOOQV6cT1jf/NKlAeGOB8rLlaK
xfH+1AkOXHFvoCw1Eh2WvdkCBHExmjkunps3UpcCAwEAAaOCAiIwggIeMB0GA1Ud
DgQWBBQqhNTTcn5aHQ6VO1otT2rvKXpsijAfBgNVHSMEGDAWgBSh3TPjkTdsBW87
JJa0tMZQ/ogcuDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L29kMHo0NUUzYkFWdk95U1d0TFRHVVA2SUhMZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWQvYjY0Y2QzLWJkZjktNGYzOS05MzkzLWUxYzQ0ODE3MGVmYS8x
L29kMHo0NUUzYkFWdk95U1d0TFRHVVA2SUhMZy5tZnQwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWQv
YjY0Y2QzLWJkZjktNGYzOS05MzkzLWUxYzQ0ODE3MGVmYS8xL29kMHo0NUUzYkFW
dk95U1d0TFRHVVA2SUhMZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/
BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAL19Nmnc2+6SS/uqnf1rp7MWBpA/
FKCKP+POefMNtdxK4ENebRneLRUaaTgKb9gOv1q0EuCuzPRy6n8/8nkdKJToAIGl
JJ+fL1QNpKK+7IFSo0Vq2x3Qiha962rGIZ5MnKgoY1YGZgGb+/4843YLrY9AxqAF
ryc+Y/erKSVTGfr8sh1seDyXmD7lrmR7LfgJYV+4boQfy3XtIw6yEPT0bV9YwqrW
UxkKz2+3JF63atFg3YUlXfCaIS400fWYlmvZrKeCZA6PEiaU3HNLhci0qVp5GS1R
5Tke+b6Xwa2YxF3h6RSyqhxA4bzZhUOJK1IF18yZ1aanBdJjpW2MwnYbbyI=
-----END CERTIFICATE-----