Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/efcf1d-319c-4519-aa11-b6d150c5ca5d/1/4yy8B-OEBOI0PYUaiKcGahvX7MM.mft
File:                     4yy8B-OEBOI0PYUaiKcGahvX7MM.mft (raw, json)
Hash identifier:          rtD0/gp5GYe424KgnLhXwtuNNN6GqwoytFkO2ZNnlRs=
Subject key identifier:   07:65:5E:51:9D:5D:98:87:98:A5:41:1D:B5:46:44:AB:21:E9:4C:8D
Authority key identifier: E3:2C:BC:07:E3:84:04:E2:34:3D:85:1A:88:A7:06:6A:1B:D7:EC:C3
Certificate issuer:       /CN=e32cbc07e38404e2343d851a88a7066a1bd7ecc3
Certificate serial:       1B91092A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4yy8B-OEBOI0PYUaiKcGahvX7MM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/efcf1d-319c-4519-aa11-b6d150c5ca5d/1/4yy8B-OEBOI0PYUaiKcGahvX7MM.mft
Manifest number:          091E
Signing time:             Thu 28 Apr 2022 06:00:46 +0000
Manifest this update:     Thu 28 Apr 2022 06:00:46 +0000
Manifest next update:     Fri 29 Apr 2022 06:00:46 +0000
Files and hashes:         1: 4yy8B-OEBOI0PYUaiKcGahvX7MM.crl (hash: R6bbOOiZC4vZM3M9Ekn1yj0jYcrj6gLwGjgjX4PNNAg=)
                          2: XUYeAVFYPwEEtfApwCH08OKCWMw.roa (hash: zW2bKG8jRHxapoS8hesUv/QmwuWDeHGIuawMwXioN7Q=)
                          3: dCjGPqLiw4X5B_vc8A6Mj0SIQqE.roa (hash: 8K/JXy/mzGmk0O3Ln1F0C1+6121a1o5bHdtKrbsy2Gs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 462489898 (0x1b91092a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e32cbc07e38404e2343d851a88a7066a1bd7ecc3
        Validity
            Not Before: Apr 28 06:00:46 2022 GMT
            Not After : Apr 29 06:00:46 2022 GMT
        Subject: CN=07655e519d5d988798a5411db54644ab21e94c8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:28:52:d1:c5:ad:09:ab:f4:44:b0:71:e0:ab:
                    63:13:14:f1:7c:b7:a6:84:23:62:66:32:a0:fe:2e:
                    01:a9:31:c6:37:d6:06:7a:e9:7b:48:da:88:80:eb:
                    64:83:e0:87:e0:23:42:96:0c:26:e9:14:4b:5c:7f:
                    94:dd:fe:c5:12:5a:49:b2:af:4c:c7:bf:1a:12:4b:
                    ea:1c:e7:f8:51:75:c9:99:84:98:3d:f0:db:21:e5:
                    98:76:bf:cf:b3:b8:16:6c:91:c6:08:32:8e:60:1d:
                    33:00:19:07:2d:4f:6e:90:47:8e:73:0c:a0:5b:fc:
                    cc:08:7f:d6:f9:6a:80:80:d1:dc:73:24:a0:ec:87:
                    e8:34:ec:d0:c1:c7:1e:f1:7f:ea:05:fc:37:34:06:
                    87:86:d8:c3:62:75:cd:1f:75:db:ac:36:42:39:a1:
                    cb:19:ad:f2:e1:94:fc:13:f3:08:43:e2:c4:ad:fb:
                    4a:ff:e8:85:8b:b9:ab:a3:36:2c:38:06:9b:32:f1:
                    a7:c3:bd:6f:b9:b5:71:81:4c:fb:cf:9d:c4:3a:fd:
                    b8:f6:68:f6:83:aa:b1:62:42:96:25:45:02:09:67:
                    11:df:d5:04:0a:0d:a1:67:ac:87:e0:f4:e8:93:02:
                    f6:92:5f:0b:13:d1:75:9e:02:f9:55:08:b6:02:df:
                    ad:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:65:5E:51:9D:5D:98:87:98:A5:41:1D:B5:46:44:AB:21:E9:4C:8D
            X509v3 Authority Key Identifier:
                keyid:E3:2C:BC:07:E3:84:04:E2:34:3D:85:1A:88:A7:06:6A:1B:D7:EC:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4yy8B-OEBOI0PYUaiKcGahvX7MM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/efcf1d-319c-4519-aa11-b6d150c5ca5d/1/4yy8B-OEBOI0PYUaiKcGahvX7MM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/efcf1d-319c-4519-aa11-b6d150c5ca5d/1/4yy8B-OEBOI0PYUaiKcGahvX7MM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:41:a7:8d:b1:3a:71:aa:f9:b3:0b:a0:d3:36:59:1d:d2:30:
         61:f3:a1:50:eb:ad:c5:65:3a:ac:0c:49:bf:48:32:66:52:84:
         c1:e1:3d:c4:41:73:3b:6d:28:d5:ae:3d:63:1b:a1:40:e2:8a:
         3b:74:59:79:50:f5:d0:7b:43:9a:65:10:a3:99:2f:54:b0:e8:
         13:bd:58:f3:ca:d5:08:09:60:4e:c4:18:0f:12:d3:15:e7:c9:
         22:64:02:ff:f6:22:6f:d4:10:f0:2f:76:4a:04:ea:a9:6c:ca:
         1e:07:90:a4:ba:38:e4:bb:18:3e:8b:85:c7:05:4d:ae:f1:6c:
         31:ec:95:77:96:03:57:d4:2e:41:aa:b2:d9:9f:7b:f8:66:da:
         08:57:92:a4:53:73:a7:c8:b5:1f:13:8d:34:8c:ca:d2:a8:0c:
         37:1e:5e:e7:82:95:3f:0f:70:bc:79:32:1b:84:a1:b3:0a:1d:
         61:21:1d:21:07:88:3c:4a:f6:2e:8c:a3:e7:79:e4:74:e4:5d:
         04:95:cb:50:80:cb:a7:b7:ab:b0:46:1f:b9:51:73:10:84:b4:
         0c:54:18:50:62:6c:ea:bd:dd:7e:e1:3c:f4:a6:04:8b:dc:78:
         71:dd:a1:cf:03:b0:4d:c4:07:49:ab:b4:84:9e:91:26:25:6e:
         bf:be:09:cb
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgIEG5EJKjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
MzJjYmMwN2UzODQwNGUyMzQzZDg1MWE4OGE3MDY2YTFiZDdlY2MzMB4XDTIyMDQy
ODA2MDA0NloXDTIyMDQyOTA2MDA0NlowMzExMC8GA1UEAxMoMDc2NTVlNTE5ZDVk
OTg4Nzk4YTU0MTFkYjU0NjQ0YWIyMWU5NGM4ZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIcoUtHFrQmr9ESwceCrYxMU8Xy3poQjYmYyoP4uAakxxjfW
Bnrpe0jaiIDrZIPgh+AjQpYMJukUS1x/lN3+xRJaSbKvTMe/GhJL6hzn+FF1yZmE
mD3w2yHlmHa/z7O4FmyRxggyjmAdMwAZBy1PbpBHjnMMoFv8zAh/1vlqgIDR3HMk
oOyH6DTs0MHHHvF/6gX8NzQGh4bYw2J1zR9126w2Qjmhyxmt8uGU/BPzCEPixK37
Sv/ohYu5q6M2LDgGmzLxp8O9b7m1cYFM+8+dxDr9uPZo9oOqsWJCliVFAglnEd/V
BAoNoWesh+D06JMC9pJfCxPRdZ4C+VUItgLfrZkCAwEAAaOCAiIwggIeMB0GA1Ud
DgQWBBQHZV5RnV2Yh5ilQR21RkSrIelMjTAfBgNVHSMEGDAWgBTjLLwH44QE4jQ9
hRqIpwZqG9fswzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzR5eThCLU9FQk9JMFBZVWFpS2NHYWh2WDdNTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMDMvZWZjZjFkLTMxOWMtNDUxOS1hYTExLWI2ZDE1MGM1Y2E1ZC8x
LzR5eThCLU9FQk9JMFBZVWFpS2NHYWh2WDdNTS5tZnQwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDMv
ZWZjZjFkLTMxOWMtNDUxOS1hYTExLWI2ZDE1MGM1Y2E1ZC8xLzR5eThCLU9FQk9J
MFBZVWFpS2NHYWh2WDdNTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/
BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAK5Bp42xOnGq+bMLoNM2WR3SMGHz
oVDrrcVlOqwMSb9IMmZShMHhPcRBczttKNWuPWMboUDiijt0WXlQ9dB7Q5plEKOZ
L1Sw6BO9WPPK1QgJYE7EGA8S0xXnySJkAv/2Im/UEPAvdkoE6qlsyh4HkKS6OOS7
GD6LhccFTa7xbDHslXeWA1fULkGqstmfe/hm2ghXkqRTc6fItR8TjTSMytKoDDce
XueClT8PcLx5MhuEobMKHWEhHSEHiDxK9i6Mo+d55HTkXQSVy1CAy6e3q7BGH7lR
cxCEtAxUGFBibOq93X7hPPSmBIvceHHdoc8DsE3EB0mrtISekSYlbr++Ccs=
-----END CERTIFICATE-----