Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/031f5b-1d98-4092-98eb-c7c14417fc62/1/d13S_EjsTBxRKVwFabXImrdJpeo.mft
File:                     d13S_EjsTBxRKVwFabXImrdJpeo.mft (raw, json)
Hash identifier:          VkJJnNEaaFugzlwBEC+YVhLShYFlI47w+2+7/HdJh18=
Subject key identifier:   E1:F6:DF:2D:DC:91:B7:DD:7E:D4:50:6C:07:5F:54:C2:83:A3:9D:77
Authority key identifier: 77:5D:D2:FC:48:EC:4C:1C:51:29:5C:05:69:B5:C8:9A:B7:49:A5:EA
Certificate issuer:       /CN=775dd2fc48ec4c1c51295c0569b5c89ab749a5ea
Certificate serial:       01840D6E43A02D9F989BD818CF6E825AC626
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d13S_EjsTBxRKVwFabXImrdJpeo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/031f5b-1d98-4092-98eb-c7c14417fc62/1/d13S_EjsTBxRKVwFabXImrdJpeo.mft
Manifest number:          0648
Signing time:             Tue 25 Oct 2022 04:37:20 +0000
Manifest this update:     Tue 25 Oct 2022 04:37:20 +0000
Manifest next update:     Wed 26 Oct 2022 04:37:20 +0000
Files and hashes:         1: d13S_EjsTBxRKVwFabXImrdJpeo.crl (hash: rqpjkclI0fNyimvnLN1ZXl0/2A6XT869BhYDmS/6C/U=)
                          2: gf6sEawstfvPLFa7L1cl7kPsLZY.roa (hash: o5VUTyx68AI6sftjGDN/UXV0z8508a2vaZhHMJX9bao=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:0d:6e:43:a0:2d:9f:98:9b:d8:18:cf:6e:82:5a:c6:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=775dd2fc48ec4c1c51295c0569b5c89ab749a5ea
        Validity
            Not Before: Oct 25 04:37:20 2022 GMT
            Not After : Oct 26 04:37:20 2022 GMT
        Subject: CN=e1f6df2ddc91b7dd7ed4506c075f54c283a39d77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:05:a9:bb:f8:1a:05:f1:07:dd:fd:53:64:51:
                    24:41:bb:f5:a6:05:81:80:6d:f6:28:a2:a3:89:a1:
                    2d:65:5f:43:bd:c2:63:41:f7:26:ed:ab:bf:08:9a:
                    94:54:0a:f1:b8:ca:ff:98:49:a3:85:bd:3e:64:0f:
                    10:2f:67:22:0e:e2:32:f6:78:94:c2:8a:2b:74:05:
                    94:81:ab:69:f9:a5:c1:75:11:46:ab:d3:56:2b:ae:
                    f5:cc:82:d6:76:f0:e9:5a:e5:4f:c2:64:e1:28:a6:
                    d1:9d:a9:8b:4a:7b:0f:09:ba:84:21:0c:44:25:90:
                    8c:76:49:d1:e2:09:86:be:a0:b9:83:c1:6f:bc:17:
                    90:51:a6:c9:ae:91:5d:89:38:a1:cc:f3:79:56:c2:
                    ca:7c:3c:de:33:13:84:4a:31:d0:2f:f2:fe:d8:1c:
                    0a:1d:5d:f5:79:15:3a:67:7f:23:ce:a4:89:f0:ba:
                    71:fa:c7:6f:7c:0c:a8:93:99:d6:73:7d:63:a4:d9:
                    a3:26:37:08:72:8a:80:36:b3:bd:1f:2d:8a:9d:06:
                    d5:b8:1a:63:74:2d:0c:c8:96:50:3d:bb:a4:d7:fc:
                    40:1f:42:7b:f2:34:30:77:62:b9:8f:4c:38:b7:9f:
                    56:b6:70:dc:e6:fa:95:ac:eb:88:64:a2:d4:33:3c:
                    09:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:F6:DF:2D:DC:91:B7:DD:7E:D4:50:6C:07:5F:54:C2:83:A3:9D:77
            X509v3 Authority Key Identifier:
                keyid:77:5D:D2:FC:48:EC:4C:1C:51:29:5C:05:69:B5:C8:9A:B7:49:A5:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d13S_EjsTBxRKVwFabXImrdJpeo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/031f5b-1d98-4092-98eb-c7c14417fc62/1/d13S_EjsTBxRKVwFabXImrdJpeo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/031f5b-1d98-4092-98eb-c7c14417fc62/1/d13S_EjsTBxRKVwFabXImrdJpeo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:17:8c:7a:97:cf:a1:d1:d6:a0:c3:f8:ed:d5:67:cb:3b:36:
         81:3d:8f:7e:c3:9b:98:15:70:6c:c2:57:64:80:2b:d4:cf:4d:
         3a:b2:99:ea:fe:d0:cf:57:97:89:40:e3:05:dc:12:43:b0:46:
         17:1e:fb:b0:f8:58:b5:39:c2:00:dd:7d:85:77:b8:53:f2:81:
         f5:af:5d:79:ca:32:57:be:89:fb:97:ee:ee:83:04:8d:4b:10:
         a5:59:59:13:24:e9:a5:16:ff:7d:4a:31:ab:68:6e:2f:57:2a:
         e1:c6:2e:5e:25:b5:b3:03:6c:61:b9:96:03:df:80:f7:f2:ef:
         79:02:87:e1:3c:e1:c0:21:a0:30:5a:f5:c1:00:e9:cb:5c:a0:
         28:6c:81:07:13:92:73:e5:d7:3d:90:30:a2:4e:88:ca:9f:08:
         f4:03:03:f2:bf:75:3f:c3:20:9d:8f:b2:d3:dd:b9:6e:21:c9:
         ba:11:ef:95:4a:cb:0c:d8:76:de:f2:fe:5e:e6:1e:2d:a3:bc:
         0a:66:99:be:10:69:01:71:cb:90:92:aa:59:ba:c3:30:c1:3f:
         a5:9f:df:e0:96:a3:35:71:12:b7:d1:c5:3e:b5:4c:7d:0f:da:
         26:3b:a0:89:fa:9b:ca:c3:32:f0:6c:0b:c0:6f:44:d3:26:97:
         d4:f0:3f:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYQNbkOgLZ+Ym9gYz26CWsYmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3NWRkMmZjNDhlYzRjMWM1MTI5NWMwNTY5YjVjODlhYjc0
OWE1ZWEwHhcNMjIxMDI1MDQzNzIwWhcNMjIxMDI2MDQzNzIwWjAzMTEwLwYDVQQD
EyhlMWY2ZGYyZGRjOTFiN2RkN2VkNDUwNmMwNzVmNTRjMjgzYTM5ZDc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQWpu/gaBfEH3f1TZFEkQbv1pgWB
gG32KKKjiaEtZV9DvcJjQfcm7au/CJqUVArxuMr/mEmjhb0+ZA8QL2ciDuIy9niU
woordAWUgatp+aXBdRFGq9NWK671zILWdvDpWuVPwmThKKbRnamLSnsPCbqEIQxE
JZCMdknR4gmGvqC5g8FvvBeQUabJrpFdiTihzPN5VsLKfDzeMxOESjHQL/L+2BwK
HV31eRU6Z38jzqSJ8Lpx+sdvfAyok5nWc31jpNmjJjcIcoqANrO9Hy2KnQbVuBpj
dC0MyJZQPbuk1/xAH0J78jQwd2K5j0w4t59WtnDc5vqVrOuIZKLUMzwJewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOH23y3ckbfdftRQbAdfVMKDo513MB8GA1UdIwQY
MBaAFHdd0vxI7EwcUSlcBWm1yJq3SaXqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDEzU19FanNUQnhSS1Z3RmFiWEltcmRKcGVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8wMzFmNWItMWQ5OC00MDkyLTk4ZWIt
YzdjMTQ0MTdmYzYyLzEvZDEzU19FanNUQnhSS1Z3RmFiWEltcmRKcGVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8wMzFmNWItMWQ5OC00MDkyLTk4ZWItYzdjMTQ0MTdmYzYy
LzEvZDEzU19FanNUQnhSS1Z3RmFiWEltcmRKcGVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACBeMepfP
odHWoMP47dVnyzs2gT2PfsObmBVwbMJXZIAr1M9NOrKZ6v7Qz1eXiUDjBdwSQ7BG
Fx77sPhYtTnCAN19hXe4U/KB9a9decoyV76J+5fu7oMEjUsQpVlZEyTppRb/fUox
q2huL1cq4cYuXiW1swNsYbmWA9+A9/LveQKH4TzhwCGgMFr1wQDpy1ygKGyBBxOS
c+XXPZAwok6Iyp8I9AMD8r91P8MgnY+y0925biHJuhHvlUrLDNh23vL+XuYeLaO8
CmaZvhBpAXHLkJKqWbrDMME/pZ/f4JajNXESt9HFPrVMfQ/aJjugifqbysMy8GwL
wG9E0yaX1PA/pg==
-----END CERTIFICATE-----