Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/cf0488-498f-4554-976d-19aa8fb82da3/1/BHJeEGaaj3vuO7wQTa6CVwWYAG0.mft
File:                     BHJeEGaaj3vuO7wQTa6CVwWYAG0.mft (raw, json)
Hash identifier:          5ozi0WhHsv3iUz3miUtnI+3uZsBmdeNKCh+317r8nRQ=
Subject key identifier:   92:80:20:D7:C0:4D:AB:35:29:93:1F:81:9E:35:FD:1D:FD:00:C6:58
Authority key identifier: 04:72:5E:10:66:9A:8F:7B:EE:3B:BC:10:4D:AE:82:57:05:98:00:6D
Certificate issuer:       /CN=04725e10669a8f7bee3bbc104dae82570598006d
Certificate serial:       018BEC2D5F0BBBA330FC9EC87C87D79D856D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BHJeEGaaj3vuO7wQTa6CVwWYAG0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/cf0488-498f-4554-976d-19aa8fb82da3/1/BHJeEGaaj3vuO7wQTa6CVwWYAG0.mft
Manifest number:          08EF
Signing time:             Mon 20 Nov 2023 10:01:18 +0000
Manifest this update:     Mon 20 Nov 2023 10:01:18 +0000
Manifest next update:     Tue 21 Nov 2023 10:01:18 +0000
Files and hashes:         1: 4VOATe19UgrR0od34o1n8YHlL2w.roa (hash: QIZvg2t58p6EwDGlOnRN2SvfYhgaj/Fmn4DzkkTK2nA=)
                          2: BHJeEGaaj3vuO7wQTa6CVwWYAG0.crl (hash: 0sLT900/ZSZS69kaaLL4j6nbrd6hQdB5ujMtuCPUboQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:ec:2d:5f:0b:bb:a3:30:fc:9e:c8:7c:87:d7:9d:85:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04725e10669a8f7bee3bbc104dae82570598006d
        Validity
            Not Before: Nov 20 10:01:18 2023 GMT
            Not After : Nov 21 10:01:18 2023 GMT
        Subject: CN=928020d7c04dab3529931f819e35fd1dfd00c658
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:2b:c0:a5:9e:1c:d0:c2:b2:46:df:40:a8:6f:
                    68:cd:00:e0:42:32:1d:58:89:56:71:3a:4e:fe:17:
                    75:4c:bf:5d:db:8f:ac:aa:01:37:dd:70:9b:1b:44:
                    48:04:33:69:c9:0e:63:29:d6:24:bc:f9:78:b2:ee:
                    a6:bf:82:4d:40:b4:c2:14:5d:59:8c:ff:72:4b:3a:
                    a0:66:2a:6e:09:88:91:e7:97:1c:20:99:a8:10:5a:
                    16:14:0b:03:43:78:3b:2a:94:02:2b:a7:44:67:a7:
                    1e:2c:d3:6b:4f:8a:f1:48:49:a7:1c:5e:64:a7:3b:
                    45:0b:1d:71:50:a2:4e:e1:a2:2c:fd:e9:ad:36:a5:
                    f0:ae:3d:57:af:fb:96:85:07:60:d9:5c:24:c9:5d:
                    7e:6e:ac:25:c3:be:aa:7b:c2:fd:0b:6f:ed:a3:73:
                    fd:a6:1a:89:9c:63:12:6b:70:87:0f:db:43:ef:51:
                    9c:7d:81:6d:13:1e:b0:27:dc:be:9c:95:20:23:2b:
                    c2:ee:14:d0:9d:48:d3:c6:18:8d:94:9f:78:f4:98:
                    88:78:9a:17:bf:64:0c:9c:55:62:e5:0c:ad:cc:6a:
                    52:9c:60:5d:3c:15:34:d6:5d:f6:2a:71:ba:6f:62:
                    02:07:2b:f2:bc:38:f0:df:e6:7e:c2:03:9c:14:0c:
                    d0:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:80:20:D7:C0:4D:AB:35:29:93:1F:81:9E:35:FD:1D:FD:00:C6:58
            X509v3 Authority Key Identifier:
                keyid:04:72:5E:10:66:9A:8F:7B:EE:3B:BC:10:4D:AE:82:57:05:98:00:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BHJeEGaaj3vuO7wQTa6CVwWYAG0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/cf0488-498f-4554-976d-19aa8fb82da3/1/BHJeEGaaj3vuO7wQTa6CVwWYAG0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/cf0488-498f-4554-976d-19aa8fb82da3/1/BHJeEGaaj3vuO7wQTa6CVwWYAG0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:a8:95:98:fc:ef:7a:dd:53:3f:eb:e6:b4:47:22:8c:d4:d4:
         2d:e0:38:65:81:0d:fb:a0:94:66:d4:00:8a:9d:11:4e:ba:cf:
         c8:09:d5:04:93:1f:89:1e:e5:ad:50:bb:3d:e3:2b:6a:7e:3f:
         53:19:5c:ec:f7:1e:8d:b9:8e:c6:6b:ad:37:bd:03:07:32:68:
         5c:e2:ab:da:94:98:3e:37:07:a7:8a:87:1e:7f:56:ee:81:0a:
         10:7a:80:d9:f4:e4:e0:41:7d:b3:44:f6:ca:90:75:d8:9f:fa:
         c0:bc:04:94:28:16:59:16:68:6c:df:37:04:48:ba:9a:09:99:
         ec:60:b2:2a:24:3d:54:16:31:b4:b1:3d:94:8a:38:fa:c1:85:
         49:05:63:0a:b2:28:c4:8b:18:78:fc:97:39:22:34:5a:54:59:
         c5:65:fd:d8:29:a3:47:8c:b9:6e:d4:c3:13:1a:08:e5:a0:ee:
         e4:1a:67:00:13:84:49:9d:20:5f:b3:01:e5:6d:17:42:a4:28:
         68:59:e2:2a:bd:a8:c2:01:81:f0:a5:0e:11:e8:f7:c7:cf:57:
         71:f2:25:59:14:c4:0c:ae:17:24:8e:d8:02:42:29:4f:02:c0:
         1a:f0:b8:ed:2a:e9:c5:70:a2:e9:f7:20:09:1d:74:65:30:49:
         07:2c:c7:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYvsLV8Lu6Mw/J7IfIfXnYVtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0NzI1ZTEwNjY5YThmN2JlZTNiYmMxMDRkYWU4MjU3MDU5
ODAwNmQwHhcNMjMxMTIwMTAwMTE4WhcNMjMxMTIxMTAwMTE4WjAzMTEwLwYDVQQD
Eyg5MjgwMjBkN2MwNGRhYjM1Mjk5MzFmODE5ZTM1ZmQxZGZkMDBjNjU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgCvApZ4c0MKyRt9AqG9ozQDgQjId
WIlWcTpO/hd1TL9d24+sqgE33XCbG0RIBDNpyQ5jKdYkvPl4su6mv4JNQLTCFF1Z
jP9ySzqgZipuCYiR55ccIJmoEFoWFAsDQ3g7KpQCK6dEZ6ceLNNrT4rxSEmnHF5k
pztFCx1xUKJO4aIs/emtNqXwrj1Xr/uWhQdg2VwkyV1+bqwlw76qe8L9C2/to3P9
phqJnGMSa3CHD9tD71GcfYFtEx6wJ9y+nJUgIyvC7hTQnUjTxhiNlJ949JiIeJoX
v2QMnFVi5QytzGpSnGBdPBU01l32KnG6b2ICByvyvDjw3+Z+wgOcFAzQ4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJKAINfATas1KZMfgZ41/R39AMZYMB8GA1UdIwQY
MBaAFARyXhBmmo977ju8EE2uglcFmABtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkhKZUVHYWFqM3Z1Tzd3UVRhNkNWd1dZQUcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9jZjA0ODgtNDk4Zi00NTU0LTk3NmQt
MTlhYThmYjgyZGEzLzEvQkhKZUVHYWFqM3Z1Tzd3UVRhNkNWd1dZQUcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi9jZjA0ODgtNDk4Zi00NTU0LTk3NmQtMTlhYThmYjgyZGEz
LzEvQkhKZUVHYWFqM3Z1Tzd3UVRhNkNWd1dZQUcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs6iVmPzv
et1TP+vmtEcijNTULeA4ZYEN+6CUZtQAip0RTrrPyAnVBJMfiR7lrVC7PeMran4/
Uxlc7PcejbmOxmutN70DBzJoXOKr2pSYPjcHp4qHHn9W7oEKEHqA2fTk4EF9s0T2
ypB12J/6wLwElCgWWRZobN83BEi6mgmZ7GCyKiQ9VBYxtLE9lIo4+sGFSQVjCrIo
xIsYePyXOSI0WlRZxWX92CmjR4y5btTDExoI5aDu5BpnABOESZ0gX7MB5W0XQqQo
aFniKr2owgGB8KUOEej3x89XcfIlWRTEDK4XJI7YAkIpTwLAGvC47SrpxXCi6fcg
CR10ZTBJByzH+A==
-----END CERTIFICATE-----