Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/754749-393a-4560-9e51-dff2c371ab35/1/xJNKAEIo1JWAZWCfMYJPBzIYj4E.mft
File:                     xJNKAEIo1JWAZWCfMYJPBzIYj4E.mft (raw, json)
Hash identifier:          LyEBu/dQy0VV1cWBtGwk8IIPRFP9NuF5xt7X3DUXduc=
Subject key identifier:   2A:EE:74:AA:11:3A:7D:EE:62:6B:C3:50:78:7B:39:CD:5B:D7:CC:A5
Authority key identifier: C4:93:4A:00:42:28:D4:95:80:65:60:9F:31:82:4F:07:32:18:8F:81
Certificate issuer:       /CN=c4934a004228d4958065609f31824f0732188f81
Certificate serial:       01823DE376EAFF0ABE1DF359FF2605344BFC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xJNKAEIo1JWAZWCfMYJPBzIYj4E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/754749-393a-4560-9e51-dff2c371ab35/1/xJNKAEIo1JWAZWCfMYJPBzIYj4E.mft
Manifest number:          0523
Signing time:             Wed 27 Jul 2022 04:21:33 +0000
Manifest this update:     Wed 27 Jul 2022 04:21:33 +0000
Manifest next update:     Thu 28 Jul 2022 04:21:33 +0000
Files and hashes:         1: LuCyMxHP6B6LaUYE7yv8FxZp1kQ.roa (hash: oPBJcph5PCJpNv4Uo7fa4e+cqYqocAKss5DM9uWJBgE=)
                          2: pH3FR6zD4T1uEhgNbq6pLPYvdjw.roa (hash: GeNhRv0cGs2td1mNBx5MCzEff6l7S3PKIvE7kdPy8MY=)
                          3: xJNKAEIo1JWAZWCfMYJPBzIYj4E.crl (hash: 6az1IbxBicHw0J3CM3AcoXRJWJakiBhHQckyDeO02EU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:3d:e3:76:ea:ff:0a:be:1d:f3:59:ff:26:05:34:4b:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4934a004228d4958065609f31824f0732188f81
        Validity
            Not Before: Jul 27 04:21:33 2022 GMT
            Not After : Jul 28 04:21:33 2022 GMT
        Subject: CN=2aee74aa113a7dee626bc350787b39cd5bd7cca5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:4d:d8:3d:e9:f2:1c:00:55:76:81:44:76:45:
                    11:b6:82:88:3a:69:28:d6:ab:03:1f:03:51:7b:54:
                    50:04:af:82:b6:d9:cf:de:2b:de:6f:e6:0b:f5:a6:
                    c0:4d:47:32:d7:f2:f5:5a:58:d4:0e:cd:88:5b:75:
                    f4:05:6d:57:c5:22:fc:b4:e6:dc:f8:30:24:68:61:
                    41:d6:2e:5f:53:4d:bc:82:a2:c6:40:41:bc:e5:92:
                    2e:35:fc:d3:5f:52:f2:cc:db:24:49:78:28:9c:7a:
                    eb:4e:81:fc:79:d8:54:e8:41:7d:df:99:3e:8b:2e:
                    5e:39:ab:6f:b4:4b:6e:3c:fc:d4:a4:82:16:78:c5:
                    5c:c8:75:2b:11:30:7b:4a:be:cb:68:c7:22:b0:0a:
                    70:37:03:41:59:33:ce:c8:1b:a1:a9:fd:03:72:17:
                    3f:f2:97:28:3d:98:32:bd:65:91:83:e8:0b:1f:b1:
                    e6:78:e3:0c:fb:0b:35:0b:26:4b:c0:5a:bd:08:1b:
                    fe:07:d3:4f:2a:53:bd:0b:ca:2d:5e:d1:c4:dc:bd:
                    3a:a4:6a:30:29:5d:7a:19:b2:75:dc:e7:b8:87:64:
                    ec:4f:11:c0:84:90:a6:8c:38:2c:52:d9:31:8d:d7:
                    db:81:16:72:7a:9e:02:10:13:b3:0a:05:3d:7f:f6:
                    9a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:EE:74:AA:11:3A:7D:EE:62:6B:C3:50:78:7B:39:CD:5B:D7:CC:A5
            X509v3 Authority Key Identifier:
                keyid:C4:93:4A:00:42:28:D4:95:80:65:60:9F:31:82:4F:07:32:18:8F:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJNKAEIo1JWAZWCfMYJPBzIYj4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/754749-393a-4560-9e51-dff2c371ab35/1/xJNKAEIo1JWAZWCfMYJPBzIYj4E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/754749-393a-4560-9e51-dff2c371ab35/1/xJNKAEIo1JWAZWCfMYJPBzIYj4E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:f4:2d:2f:3d:12:5e:88:59:c8:29:2b:76:8c:a7:6b:c9:9d:
         04:ee:f7:79:31:6d:83:1f:84:43:4f:2c:18:48:1a:44:c9:23:
         4e:7b:e0:13:58:0f:06:de:73:89:f9:df:b8:ef:dc:05:1a:78:
         a8:09:84:e4:c5:ae:f7:cc:cb:06:8f:59:ac:54:29:6a:ea:9e:
         e0:60:c3:fd:18:fe:91:99:fd:d7:ff:fa:30:42:b5:a3:e0:8e:
         61:07:a9:52:7c:cc:13:6b:59:f5:02:ec:df:7d:c5:76:b6:75:
         11:50:d6:74:7b:33:b1:4b:18:dc:29:62:5b:4e:87:d0:fd:23:
         26:d9:0e:ab:48:ba:f3:16:63:83:d6:ef:f5:e0:a8:df:23:dd:
         62:f7:19:4b:60:ef:b5:f2:36:16:b9:3e:fb:bf:11:60:01:d3:
         a4:8a:56:fc:b1:8c:7b:3d:b6:99:67:61:54:2d:da:a8:6e:50:
         b1:53:8d:8d:e5:4e:5e:10:88:c4:ad:63:ab:f1:de:fe:37:86:
         4b:07:0d:5a:7d:a8:fd:39:c8:2a:bb:b3:c9:cb:2a:66:b9:31:
         06:a1:ff:8b:6b:0d:7b:bf:42:0c:cc:dc:be:20:2f:fd:cf:0d:
         19:c2:43:5e:c0:fb:d8:58:f5:45:73:d4:d5:41:5a:89:8d:d5:
         a3:b9:20:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYI943bq/wq+HfNZ/yYFNEv8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0OTM0YTAwNDIyOGQ0OTU4MDY1NjA5ZjMxODI0ZjA3MzIx
ODhmODEwHhcNMjIwNzI3MDQyMTMzWhcNMjIwNzI4MDQyMTMzWjAzMTEwLwYDVQQD
EygyYWVlNzRhYTExM2E3ZGVlNjI2YmMzNTA3ODdiMzljZDViZDdjY2E1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl03YPenyHABVdoFEdkURtoKIOmko
1qsDHwNRe1RQBK+CttnP3iveb+YL9abATUcy1/L1WljUDs2IW3X0BW1XxSL8tObc
+DAkaGFB1i5fU028gqLGQEG85ZIuNfzTX1LyzNskSXgonHrrToH8edhU6EF935k+
iy5eOatvtEtuPPzUpIIWeMVcyHUrETB7Sr7LaMcisApwNwNBWTPOyBuhqf0Dchc/
8pcoPZgyvWWRg+gLH7HmeOMM+ws1CyZLwFq9CBv+B9NPKlO9C8otXtHE3L06pGow
KV16GbJ13Oe4h2TsTxHAhJCmjDgsUtkxjdfbgRZyep4CEBOzCgU9f/aagwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCrudKoROn3uYmvDUHh7Oc1b18ylMB8GA1UdIwQY
MBaAFMSTSgBCKNSVgGVgnzGCTwcyGI+BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEpOS0FFSW8xSldBWldDZk1ZSlBCeklZajRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS83NTQ3NDktMzkzYS00NTYwLTllNTEt
ZGZmMmMzNzFhYjM1LzEveEpOS0FFSW8xSldBWldDZk1ZSlBCeklZajRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS83NTQ3NDktMzkzYS00NTYwLTllNTEtZGZmMmMzNzFhYjM1
LzEveEpOS0FFSW8xSldBWldDZk1ZSlBCeklZajRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXfQtLz0S
XohZyCkrdoyna8mdBO73eTFtgx+EQ08sGEgaRMkjTnvgE1gPBt5zifnfuO/cBRp4
qAmE5MWu98zLBo9ZrFQpauqe4GDD/Rj+kZn91//6MEK1o+COYQepUnzME2tZ9QLs
333FdrZ1EVDWdHszsUsY3CliW06H0P0jJtkOq0i68xZjg9bv9eCo3yPdYvcZS2Dv
tfI2Frk++78RYAHTpIpW/LGMez22mWdhVC3aqG5QsVONjeVOXhCIxK1jq/He/jeG
SwcNWn2o/TnIKruzycsqZrkxBqH/i2sNe79CDMzcviAv/c8NGcJDXsD72Fj1RXPU
1UFaiY3Vo7kgQQ==
-----END CERTIFICATE-----