Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/e07c29-2c88-468e-9218-858513b006a9/1/JlyncJA3miGYXV_hM_FDuVaOwxE.mft
File:                     JlyncJA3miGYXV_hM_FDuVaOwxE.mft (raw, json)
Hash identifier:          gPFEOblyEqxcK3VMBc3EyFqLQOJSlmJZpGAvdesYzs0=
Subject key identifier:   22:78:BC:00:40:D5:02:08:F8:FF:0D:01:BF:3A:E9:5B:8E:15:8D:45
Authority key identifier: 26:5C:A7:70:90:37:9A:21:98:5D:5F:E1:33:F1:43:B9:56:8E:C3:11
Certificate issuer:       /CN=265ca77090379a21985d5fe133f143b9568ec311
Certificate serial:       018832A4BCE22EC5AAA20EE0A527E45A9BBD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JlyncJA3miGYXV_hM_FDuVaOwxE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/e07c29-2c88-468e-9218-858513b006a9/1/JlyncJA3miGYXV_hM_FDuVaOwxE.mft
Manifest number:          0789
Signing time:             Fri 19 May 2023 06:13:56 +0000
Manifest this update:     Fri 19 May 2023 06:13:56 +0000
Manifest next update:     Sat 20 May 2023 06:13:56 +0000
Files and hashes:         1: Dqs2Qs-vOUUaQ2T4g5qVjbkUyxY.roa (hash: zNsbYHsf78Kmj2GZY0LUqzZtG679bawzG695c/Cuzf0=)
                          2: JlyncJA3miGYXV_hM_FDuVaOwxE.crl (hash: gMbUAObbcK85RjPtisMERR1f0evpdRBBWb/7O2l6x4o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:32:a4:bc:e2:2e:c5:aa:a2:0e:e0:a5:27:e4:5a:9b:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=265ca77090379a21985d5fe133f143b9568ec311
        Validity
            Not Before: May 19 06:13:56 2023 GMT
            Not After : May 20 06:13:56 2023 GMT
        Subject: CN=2278bc0040d50208f8ff0d01bf3ae95b8e158d45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:a0:f9:43:5e:51:b6:09:c0:1c:61:6d:68:4e:
                    40:00:1f:db:83:b1:f6:a9:7b:48:9b:9a:da:7f:59:
                    06:38:7b:61:c8:4f:8c:40:01:35:62:87:e6:96:00:
                    ae:53:f3:5c:9f:d6:95:59:a9:8c:48:1a:e8:dd:0f:
                    bc:9f:cc:31:23:3f:57:80:ed:32:d8:bd:92:a1:b9:
                    75:7e:73:04:2b:b9:e1:ee:6f:27:94:fa:9b:03:17:
                    76:25:51:52:d5:e5:a0:6f:ca:7e:25:43:a4:ea:b7:
                    d8:83:1f:bd:4d:bd:60:2a:6a:d7:b3:16:6b:d3:c4:
                    36:da:4d:34:7e:0d:fc:a0:be:49:d0:44:79:9a:12:
                    ac:77:99:ff:2e:8e:bd:3f:54:c2:1d:e3:d7:ae:1c:
                    a2:b5:bb:ef:b3:73:cf:59:ac:a8:43:9c:9e:6d:81:
                    e1:0b:ed:64:8b:2b:6b:b2:60:5e:70:c0:83:32:a1:
                    b4:a3:14:78:77:f4:81:78:5d:35:3c:c0:e6:66:aa:
                    8b:d4:0f:e6:15:9a:3e:5d:24:ca:22:47:e4:95:a1:
                    75:3d:60:92:a8:c1:08:66:bc:69:95:ce:ac:44:86:
                    d3:f8:df:1c:ce:c2:15:cd:93:84:c1:93:ed:29:26:
                    ca:4d:d2:f4:86:0e:43:13:ed:4f:32:0d:71:76:d0:
                    0c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:78:BC:00:40:D5:02:08:F8:FF:0D:01:BF:3A:E9:5B:8E:15:8D:45
            X509v3 Authority Key Identifier:
                keyid:26:5C:A7:70:90:37:9A:21:98:5D:5F:E1:33:F1:43:B9:56:8E:C3:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JlyncJA3miGYXV_hM_FDuVaOwxE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/e07c29-2c88-468e-9218-858513b006a9/1/JlyncJA3miGYXV_hM_FDuVaOwxE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/e07c29-2c88-468e-9218-858513b006a9/1/JlyncJA3miGYXV_hM_FDuVaOwxE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:82:f7:6c:8a:81:33:6a:6a:24:4d:80:51:40:c0:3b:43:86:
         36:be:b3:04:a5:8b:31:e3:fb:ac:69:b1:b2:f7:2c:73:ed:6c:
         82:c7:86:93:22:ae:a3:2b:72:ed:22:c3:05:13:78:5a:80:78:
         e1:9c:ab:3a:e4:86:b8:ba:7c:62:be:4c:1c:52:1a:f6:03:79:
         78:b1:54:4b:a4:f3:3e:37:b5:40:96:75:1f:5c:5d:44:8c:57:
         54:89:12:bd:37:3b:bc:0b:a3:56:47:93:92:ac:d1:44:d1:d4:
         20:72:a8:f9:06:82:ee:2a:38:aa:9b:8d:eb:68:b2:df:1f:6f:
         1c:17:36:2d:17:93:dd:81:c4:74:14:57:29:79:f7:f7:ee:13:
         2c:e5:84:d6:6c:e9:2c:89:44:79:ff:48:d6:95:a3:4e:e2:0f:
         4b:dd:62:1d:ee:36:75:5a:9c:80:31:11:81:73:25:05:38:36:
         f9:b4:eb:f5:4b:e4:8b:1d:d1:26:88:52:48:de:53:40:39:91:
         1b:06:90:5b:4e:a4:89:c2:d4:b9:83:45:74:23:91:10:f1:7e:
         08:d6:29:35:be:f7:e4:54:b4:2a:91:04:31:0a:80:94:61:f0:
         cc:36:b4:a6:bc:94:88:e6:bf:9b:fa:eb:47:af:70:59:73:87:
         a7:96:dc:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYgypLziLsWqog7gpSfkWpu9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2NWNhNzcwOTAzNzlhMjE5ODVkNWZlMTMzZjE0M2I5NTY4
ZWMzMTEwHhcNMjMwNTE5MDYxMzU2WhcNMjMwNTIwMDYxMzU2WjAzMTEwLwYDVQQD
EygyMjc4YmMwMDQwZDUwMjA4ZjhmZjBkMDFiZjNhZTk1YjhlMTU4ZDQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9qD5Q15RtgnAHGFtaE5AAB/bg7H2
qXtIm5raf1kGOHthyE+MQAE1YofmlgCuU/Ncn9aVWamMSBro3Q+8n8wxIz9XgO0y
2L2Sobl1fnMEK7nh7m8nlPqbAxd2JVFS1eWgb8p+JUOk6rfYgx+9Tb1gKmrXsxZr
08Q22k00fg38oL5J0ER5mhKsd5n/Lo69P1TCHePXrhyitbvvs3PPWayoQ5yebYHh
C+1kiytrsmBecMCDMqG0oxR4d/SBeF01PMDmZqqL1A/mFZo+XSTKIkfklaF1PWCS
qMEIZrxplc6sRIbT+N8czsIVzZOEwZPtKSbKTdL0hg5DE+1PMg1xdtAMEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCJ4vABA1QII+P8NAb866VuOFY1FMB8GA1UdIwQY
MBaAFCZcp3CQN5ohmF1f4TPxQ7lWjsMRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmx5bmNKQTNtaUdZWFZfaE1fRkR1VmFPd3hFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lMDdjMjktMmM4OC00NjhlLTkyMTgt
ODU4NTEzYjAwNmE5LzEvSmx5bmNKQTNtaUdZWFZfaE1fRkR1VmFPd3hFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9lMDdjMjktMmM4OC00NjhlLTkyMTgtODU4NTEzYjAwNmE5
LzEvSmx5bmNKQTNtaUdZWFZfaE1fRkR1VmFPd3hFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWYL3bIqB
M2pqJE2AUUDAO0OGNr6zBKWLMeP7rGmxsvcsc+1sgseGkyKuoyty7SLDBRN4WoB4
4ZyrOuSGuLp8Yr5MHFIa9gN5eLFUS6TzPje1QJZ1H1xdRIxXVIkSvTc7vAujVkeT
kqzRRNHUIHKo+QaC7io4qpuN62iy3x9vHBc2LReT3YHEdBRXKXn39+4TLOWE1mzp
LIlEef9I1pWjTuIPS91iHe42dVqcgDERgXMlBTg2+bTr9Uvkix3RJohSSN5TQDmR
GwaQW06kicLUuYNFdCOREPF+CNYpNb735FS0KpEEMQqAlGHwzDa0pryUiOa/m/rr
R69wWXOHp5bctA==
-----END CERTIFICATE-----