Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/74fcba-715e-4974-86fd-657789fa036e/1/FkNUOk8mFydLYEGZCJRN19IIS-Q.mft
File:                     FkNUOk8mFydLYEGZCJRN19IIS-Q.mft (raw, json)
Hash identifier:          F8Z+mUn4ICYtPUMYTPNvRuRrJDVKyBnJ8kIpSYSN+R0=
Subject key identifier:   0E:C9:7F:93:7A:1E:F5:E6:A9:9B:73:F5:6F:3C:BF:73:D7:4A:E9:5F
Authority key identifier: 16:43:54:3A:4F:26:17:27:4B:60:41:99:08:94:4D:D7:D2:08:4B:E4
Certificate issuer:       /CN=1643543a4f2617274b60419908944dd7d2084be4
Certificate serial:       0183C50A9912E1D60A4F19D67A08A5DA9B2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FkNUOk8mFydLYEGZCJRN19IIS-Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/74fcba-715e-4974-86fd-657789fa036e/1/FkNUOk8mFydLYEGZCJRN19IIS-Q.mft
Manifest number:          03A6
Signing time:             Tue 11 Oct 2022 03:15:49 +0000
Manifest this update:     Tue 11 Oct 2022 03:15:49 +0000
Manifest next update:     Wed 12 Oct 2022 03:15:49 +0000
Files and hashes:         1: FkNUOk8mFydLYEGZCJRN19IIS-Q.crl (hash: fYERjmiOaIk/W6IomhmrhlANcmwZUgxpYJ5VWKNZsaU=)
                          2: pTIz2ZmQ-V5z-3xzwRTKvtoKcRU.roa (hash: BFP0Yf7C1An5pGLA1DTBQbxa168vV0If5zcW8Dzpy6E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:c5:0a:99:12:e1:d6:0a:4f:19:d6:7a:08:a5:da:9b:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1643543a4f2617274b60419908944dd7d2084be4
        Validity
            Not Before: Oct 11 03:15:49 2022 GMT
            Not After : Oct 12 03:15:49 2022 GMT
        Subject: CN=0ec97f937a1ef5e6a99b73f56f3cbf73d74ae95f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c4:16:a7:a6:cb:d7:8f:93:d3:f4:90:c9:83:
                    56:5b:39:1e:dc:ff:7b:ae:ca:f7:d2:89:cd:94:fe:
                    89:56:10:6d:4b:ba:59:23:bd:69:f2:77:27:c1:d2:
                    29:dd:bf:1d:ce:49:19:b6:78:ad:67:d3:ff:29:ac:
                    34:c7:f7:7d:d8:31:3c:92:bc:e9:01:94:4e:93:3e:
                    41:6f:55:9a:f5:39:3a:7b:28:f5:ea:d3:ba:68:df:
                    b2:74:69:03:c7:1e:e3:8c:d5:83:03:30:06:0c:88:
                    18:1e:29:a8:77:fc:47:99:03:c5:6e:22:c1:e2:16:
                    41:c2:73:09:5c:45:ff:94:cf:46:30:cc:27:89:7b:
                    bb:91:bc:4a:20:9c:99:d9:2a:6e:be:e8:ea:9a:5e:
                    55:95:c9:86:4d:e3:60:bd:9f:1c:67:25:8f:aa:ee:
                    a7:50:28:32:b5:e1:32:e5:b7:e3:a6:75:be:c4:b8:
                    58:63:34:7e:07:f6:61:7f:b1:6d:1e:6a:b1:3d:ae:
                    35:b5:57:ce:3a:fb:02:0e:44:72:e5:ed:3a:39:a7:
                    db:4d:5f:33:42:1c:11:5f:45:57:7c:98:e0:8a:6b:
                    b0:ec:27:e5:06:c4:70:c3:bf:7f:ac:71:64:4c:23:
                    f8:de:b6:6d:aa:61:31:77:b3:95:0e:d5:8d:2a:3e:
                    e6:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:C9:7F:93:7A:1E:F5:E6:A9:9B:73:F5:6F:3C:BF:73:D7:4A:E9:5F
            X509v3 Authority Key Identifier:
                keyid:16:43:54:3A:4F:26:17:27:4B:60:41:99:08:94:4D:D7:D2:08:4B:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FkNUOk8mFydLYEGZCJRN19IIS-Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/74fcba-715e-4974-86fd-657789fa036e/1/FkNUOk8mFydLYEGZCJRN19IIS-Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/74fcba-715e-4974-86fd-657789fa036e/1/FkNUOk8mFydLYEGZCJRN19IIS-Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:ca:d9:4a:eb:b6:33:3f:3c:16:d9:9e:c7:57:a3:2d:06:2f:
         3d:c8:08:ec:27:29:c8:f3:b5:8f:f6:32:53:d9:ac:6d:3d:fb:
         c4:7b:e9:69:d0:cd:cf:8c:29:c7:fc:a2:5c:d3:e9:02:e3:2f:
         aa:b0:34:3f:c1:2c:1f:60:ee:97:12:c4:5b:16:29:74:f1:60:
         70:0b:49:cf:cc:4b:eb:0e:66:eb:7e:4c:4c:49:36:cc:4b:ba:
         8f:fb:df:3c:a5:3d:bc:e3:3b:40:21:c8:a4:4a:c0:d5:a0:67:
         e7:40:b9:eb:03:cc:69:8e:a0:e5:f2:25:8f:d6:f7:83:ac:72:
         87:28:e5:cc:46:32:8c:1e:f9:38:ed:e3:38:87:d8:63:bb:ac:
         89:7a:d7:44:8c:6b:fc:d8:45:bb:46:fd:92:f9:78:e7:73:98:
         9e:2a:a5:94:f9:6f:df:66:15:47:af:cd:7b:55:6c:49:aa:9a:
         c2:63:67:4a:fa:2f:40:e6:f1:a6:20:ae:69:6a:ed:7b:d2:65:
         87:68:6e:8c:e9:08:7c:e4:70:8b:ad:91:b9:19:ec:7f:53:f0:
         48:17:4c:c3:ec:23:2f:58:6c:94:dc:68:05:59:5f:47:7c:45:
         da:00:b5:dc:f7:b8:6c:74:1b:fb:ea:b2:3b:fa:ba:74:bc:71:
         2f:ad:f9:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYPFCpkS4dYKTxnWegil2psvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2NDM1NDNhNGYyNjE3Mjc0YjYwNDE5OTA4OTQ0ZGQ3ZDIw
ODRiZTQwHhcNMjIxMDExMDMxNTQ5WhcNMjIxMDEyMDMxNTQ5WjAzMTEwLwYDVQQD
EygwZWM5N2Y5MzdhMWVmNWU2YTk5YjczZjU2ZjNjYmY3M2Q3NGFlOTVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcQWp6bL14+T0/SQyYNWWzke3P97
rsr30onNlP6JVhBtS7pZI71p8ncnwdIp3b8dzkkZtnitZ9P/Kaw0x/d92DE8krzp
AZROkz5Bb1Wa9Tk6eyj16tO6aN+ydGkDxx7jjNWDAzAGDIgYHimod/xHmQPFbiLB
4hZBwnMJXEX/lM9GMMwniXu7kbxKIJyZ2Spuvujqml5VlcmGTeNgvZ8cZyWPqu6n
UCgyteEy5bfjpnW+xLhYYzR+B/Zhf7FtHmqxPa41tVfOOvsCDkRy5e06OafbTV8z
QhwRX0VXfJjgimuw7CflBsRww79/rHFkTCP43rZtqmExd7OVDtWNKj7mDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA7Jf5N6HvXmqZtz9W88v3PXSulfMB8GA1UdIwQY
MBaAFBZDVDpPJhcnS2BBmQiUTdfSCEvkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmtOVU9rOG1GeWRMWUVHWkNKUk4xOUlJUy1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC83NGZjYmEtNzE1ZS00OTc0LTg2ZmQt
NjU3Nzg5ZmEwMzZlLzEvRmtOVU9rOG1GeWRMWUVHWkNKUk4xOUlJUy1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC83NGZjYmEtNzE1ZS00OTc0LTg2ZmQtNjU3Nzg5ZmEwMzZl
LzEvRmtOVU9rOG1GeWRMWUVHWkNKUk4xOUlJUy1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhcrZSuu2
Mz88Ftmex1ejLQYvPcgI7CcpyPO1j/YyU9msbT37xHvpadDNz4wpx/yiXNPpAuMv
qrA0P8EsH2DulxLEWxYpdPFgcAtJz8xL6w5m635MTEk2zEu6j/vfPKU9vOM7QCHI
pErA1aBn50C56wPMaY6g5fIlj9b3g6xyhyjlzEYyjB75OO3jOIfYY7usiXrXRIxr
/NhFu0b9kvl453OYniqllPlv32YVR6/Ne1VsSaqawmNnSvovQObxpiCuaWrte9Jl
h2hujOkIfORwi62RuRnsf1PwSBdMw+wjL1hslNxoBVlfR3xF2gC13Pe4bHQb++qy
O/q6dLxxL635Fg==
-----END CERTIFICATE-----