Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/28e56f-cf1a-43e0-84c3-52da8be640f4/1/1-7Mw-sFMYhanT12TF1RLY_LBGNw.mft
File:                     1-7Mw-sFMYhanT12TF1RLY_LBGNw.mft (raw, json)
Hash identifier:          +05jKCsChq0c/jDQURblR7NElMXcu9nZov8Chj2jvys=
Subject key identifier:   B4:CF:9F:5A:17:40:DE:1F:9D:5E:4B:32:22:AC:0E:AC:EA:AB:3A:66
Authority key identifier: FB:B3:30:FA:C1:4C:62:16:A7:4F:5D:93:17:54:4B:63:F2:C1:18:DC
Certificate issuer:       /CN=fbb330fac14c6216a74f5d9317544b63f2c118dc
Certificate serial:       09F7BDC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-7Mw-sFMYhanT12TF1RLY_LBGNw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/28e56f-cf1a-43e0-84c3-52da8be640f4/1/1-7Mw-sFMYhanT12TF1RLY_LBGNw.mft
Manifest number:          09EB
Signing time:             Fri 01 Jul 2022 05:20:22 +0000
Manifest this update:     Fri 01 Jul 2022 05:20:22 +0000
Manifest next update:     Sat 02 Jul 2022 05:20:22 +0000
Files and hashes:         1: 1-7Mw-sFMYhanT12TF1RLY_LBGNw.crl (hash: 8g9EI17y8nw3T9RO9B3wZTy0KFLK6ijBZfVLyBnhkEE=)
                          2: ATqjTXf01wkrpxskthDuAseCHmI.roa (hash: 8GZJEbU/p1VYCYbt3UQ1QIJKXvo3BbUZ285uALY2ybo=)
                          3: OECXXKJbLtq-QtVDSD-UVjjPmuw.roa (hash: DMeqhQQ1w24KVfjACwwIY0AqZjYp+uQZyuHD/5BEBGA=)
                          4: ak06N8Y62kvYnNV62yDVIn5cbuc.roa (hash: R6Laj7JJ6IcZm8qCpBAEqbju4BCiNDo7FMwYadIR7G4=)
                          5: cPVWb4LL92siEsYV7jBjkL4W12k.roa (hash: jOlZgqw1XVz79k+E6wTV4pKAX5A0FGoF3/YgaZFT2sI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 167230917 (0x9f7bdc5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbb330fac14c6216a74f5d9317544b63f2c118dc
        Validity
            Not Before: Jul  1 05:20:22 2022 GMT
            Not After : Jul  2 05:20:22 2022 GMT
        Subject: CN=b4cf9f5a1740de1f9d5e4b3222ac0eaceaab3a66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:c0:09:32:9e:9a:7c:5e:c1:be:76:5c:34:f1:
                    18:06:83:77:7c:db:1c:d5:72:4b:a2:83:a4:14:dd:
                    6b:49:33:e8:ad:2c:3b:36:86:bf:37:f9:ec:f4:ae:
                    14:2c:46:48:e8:b0:2c:69:58:77:e3:2b:61:cb:63:
                    f9:a5:3c:d5:4a:d1:32:d1:40:16:ce:43:85:fc:d6:
                    59:ae:da:69:ec:6f:5c:52:10:63:75:65:4d:50:db:
                    60:db:69:dc:31:a3:37:00:bb:94:34:9b:ca:7d:78:
                    e6:63:56:e2:c6:d5:4b:88:75:1c:ec:d5:72:d3:fd:
                    9e:66:2d:18:58:5c:66:10:44:32:6f:7e:cf:85:78:
                    62:7a:f9:25:11:3d:8a:71:07:fe:7e:f7:f1:b2:44:
                    82:c1:d4:dc:58:83:10:56:26:d0:de:7b:c2:c4:55:
                    6b:f3:17:d7:c8:79:ab:df:d3:3a:26:1f:fb:ab:41:
                    9a:22:6d:c4:6f:5f:95:d7:25:d1:29:e6:92:9e:10:
                    a6:d9:c3:65:d0:e4:35:84:48:6f:1f:9f:d5:f3:5c:
                    e9:61:38:67:23:7f:a7:59:ab:99:04:7d:6f:4a:af:
                    b4:0b:5a:8f:a4:16:2f:2f:2b:4e:48:7c:be:98:f3:
                    12:93:6d:f6:ca:30:1b:21:75:ae:82:cb:41:73:35:
                    3a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:CF:9F:5A:17:40:DE:1F:9D:5E:4B:32:22:AC:0E:AC:EA:AB:3A:66
            X509v3 Authority Key Identifier:
                keyid:FB:B3:30:FA:C1:4C:62:16:A7:4F:5D:93:17:54:4B:63:F2:C1:18:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-7Mw-sFMYhanT12TF1RLY_LBGNw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/28e56f-cf1a-43e0-84c3-52da8be640f4/1/1-7Mw-sFMYhanT12TF1RLY_LBGNw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/28e56f-cf1a-43e0-84c3-52da8be640f4/1/1-7Mw-sFMYhanT12TF1RLY_LBGNw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:73:dc:44:d6:e9:70:37:38:d8:4a:e5:7a:9b:11:8e:61:10:
         7c:c9:32:cd:ec:a8:24:e7:1f:91:d9:f6:98:e1:00:a1:0a:a5:
         24:c2:59:cd:4c:08:34:90:b7:0c:c6:2b:e3:c4:de:4c:68:29:
         d0:f9:88:2a:ce:08:7b:72:c6:0a:2d:78:b5:94:f8:dc:30:a3:
         8b:a5:7e:db:57:7b:23:03:07:e7:15:52:82:ac:50:de:d0:3b:
         d0:4b:25:48:ac:da:62:80:69:b4:92:4a:0f:dd:dd:9e:b7:a0:
         5a:04:bb:d1:7e:d3:ff:da:7d:bb:38:86:fb:eb:d7:57:59:8f:
         d9:01:18:92:8d:76:ef:13:8a:a8:19:e3:33:e4:87:c9:2e:7a:
         bc:33:b0:d6:09:f1:77:76:c3:79:48:c0:97:74:67:29:9e:72:
         33:d0:17:94:e6:47:d9:76:9c:79:ff:4a:65:d8:d2:a5:0b:b1:
         07:07:d5:41:d8:97:d2:1c:f3:7e:75:07:00:fd:49:d6:90:20:
         a5:49:2f:d2:27:ee:32:03:a7:78:bc:39:73:ab:3a:48:dd:c9:
         10:6e:ff:ef:52:52:33:7d:76:b7:d0:48:75:11:bc:b1:2a:e6:
         14:bc:5d:ff:d5:9d:db:74:57:f6:bb:f5:40:7d:ff:db:1c:76:
         18:82:89:ac
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIECfe9xTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
YmIzMzBmYWMxNGM2MjE2YTc0ZjVkOTMxNzU0NGI2M2YyYzExOGRjMB4XDTIyMDcw
MTA1MjAyMloXDTIyMDcwMjA1MjAyMlowMzExMC8GA1UEAxMoYjRjZjlmNWExNzQw
ZGUxZjlkNWU0YjMyMjJhYzBlYWNlYWFiM2E2NjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAI/ACTKemnxewb52XDTxGAaDd3zbHNVyS6KDpBTda0kz6K0s
OzaGvzf57PSuFCxGSOiwLGlYd+MrYctj+aU81UrRMtFAFs5DhfzWWa7aaexvXFIQ
Y3VlTVDbYNtp3DGjNwC7lDSbyn145mNW4sbVS4h1HOzVctP9nmYtGFhcZhBEMm9+
z4V4Ynr5JRE9inEH/n738bJEgsHU3FiDEFYm0N57wsRVa/MX18h5q9/TOiYf+6tB
miJtxG9fldcl0Snmkp4QptnDZdDkNYRIbx+f1fNc6WE4ZyN/p1mrmQR9b0qvtAta
j6QWLy8rTkh8vpjzEpNt9sowGyF1roLLQXM1OkMCAwEAAaOCAiUwggIhMB0GA1Ud
DgQWBBS0z59aF0DeH51eSzIirA6s6qs6ZjAfBgNVHSMEGDAWgBT7szD6wUxiFqdP
XZMXVEtj8sEY3DAOBgNVHQ8BAf8EBAMCB4AwZQYIKwYBBQUHAQEEWTBXMFUGCCsG
AQUFBzAChklyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzEtN013LXNGTVloYW5UMTJURjFSTFlfTEJHTncuY2VyMIGOBggrBgEFBQcBCwSB
gTB/MH0GCCsGAQUFBzALhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzAyLzI4ZTU2Zi1jZjFhLTQzZTAtODRjMy01MmRhOGJlNjQwZjQv
MS8xLTdNdy1zRk1ZaGFuVDEyVEYxUkxZX0xCR053Lm1mdDCBggYDVR0fBHsweTB3
oHWgc4ZxcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC8w
Mi8yOGU1NmYtY2YxYS00M2UwLTg0YzMtNTJkYThiZTY0MGY0LzEvMS03TXctc0ZN
WWhhblQxMlRGMVJMWV9MQkdOdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI
AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBADVz3ETW6XA3ONhK5XqbEY5h
EHzJMs3sqCTnH5HZ9pjhAKEKpSTCWc1MCDSQtwzGK+PE3kxoKdD5iCrOCHtyxgot
eLWU+Nwwo4ulfttXeyMDB+cVUoKsUN7QO9BLJUis2mKAabSSSg/d3Z63oFoEu9F+
0//afbs4hvvr11dZj9kBGJKNdu8TiqgZ4zPkh8kuerwzsNYJ8Xd2w3lIwJd0Zyme
cjPQF5TmR9l2nHn/SmXY0qULsQcH1UHYl9Ic8351BwD9SdaQIKVJL9In7jIDp3i8
OXOrOkjdyRBu/+9SUjN9drfQSHURvLEq5hS8Xf/Vndt0V/a79UB9/9scdhiCiaw=
-----END CERTIFICATE-----