Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/f71b97-3ae3-449a-b9d7-f90abf687a55/1/4l6WavL2twDwqlp0LoP8YYY2FOA.mft
File:                     4l6WavL2twDwqlp0LoP8YYY2FOA.mft (raw, json)
Hash identifier:          5iCSIM3ogATBfQ2OaZS9sevx92w0k19G/TQ5sOSjj1Y=
Subject key identifier:   3F:30:71:FA:EE:CC:80:08:1C:E7:BA:62:6B:DC:8C:B4:6B:B2:BD:73
Authority key identifier: E2:5E:96:6A:F2:F6:B7:00:F0:AA:5A:74:2E:83:FC:61:86:36:14:E0
Certificate issuer:       /CN=e25e966af2f6b700f0aa5a742e83fc61863614e0
Certificate serial:       018315AB18A588B2D72B87405343CD8B9895
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4l6WavL2twDwqlp0LoP8YYY2FOA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/f71b97-3ae3-449a-b9d7-f90abf687a55/1/4l6WavL2twDwqlp0LoP8YYY2FOA.mft
Manifest number:          0737
Signing time:             Wed 07 Sep 2022 01:57:57 +0000
Manifest this update:     Wed 07 Sep 2022 01:57:57 +0000
Manifest next update:     Thu 08 Sep 2022 01:57:57 +0000
Files and hashes:         1: 4l6WavL2twDwqlp0LoP8YYY2FOA.crl (hash: 1Fy4On+RgqXjn0g5IL1uNy92CrR1x+ERZOw/01obRuk=)
                          2: t0Mgu2fTlN6-5aKoeVYwRR5MLXY.roa (hash: ldH69ryaH+slvZkKflEDeIEhYK3WCcQWyOu+sl3tJ7g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:15:ab:18:a5:88:b2:d7:2b:87:40:53:43:cd:8b:98:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e25e966af2f6b700f0aa5a742e83fc61863614e0
        Validity
            Not Before: Sep  7 01:57:57 2022 GMT
            Not After : Sep  8 01:57:57 2022 GMT
        Subject: CN=3f3071faeecc80081ce7ba626bdc8cb46bb2bd73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ca:04:c7:d4:81:93:b0:d7:da:57:21:65:77:
                    3a:90:b4:c1:7d:ba:d3:e2:41:53:45:72:2f:d1:7d:
                    f6:c1:9f:65:fc:95:e3:ba:aa:e0:56:81:40:bb:df:
                    d1:a9:b3:7a:a9:3d:8f:3f:48:4c:df:4f:91:2f:49:
                    58:b5:6b:4c:68:75:29:90:f8:9c:e2:52:ac:5a:25:
                    61:00:fa:81:9c:8d:21:4f:6c:43:89:ac:e6:e6:21:
                    bf:eb:c8:1a:1d:e2:5c:ef:18:b5:df:2d:c9:c3:9e:
                    9b:9a:41:69:09:94:ad:3a:bd:16:bf:49:6c:29:7d:
                    b3:30:99:5f:b1:c2:ae:b6:b9:f1:db:27:19:bb:d1:
                    9c:b1:be:56:09:4c:af:09:55:a3:95:ac:07:be:f3:
                    ca:03:39:57:f5:91:df:b4:29:67:d4:a9:9b:a3:40:
                    2c:31:98:fd:e5:20:91:86:c0:5c:42:58:b6:7c:22:
                    c2:a8:52:ba:9b:d1:26:fd:b2:e0:cc:fb:6d:5c:1a:
                    7d:07:7c:a8:ca:c0:d3:13:98:74:24:c8:19:cc:b9:
                    36:f4:b0:d1:56:a1:45:79:f1:f8:c3:3a:66:db:e6:
                    7a:9a:8e:37:ae:13:c8:f3:9a:47:ea:59:fe:9c:fa:
                    3b:e5:ef:84:86:28:34:c8:8f:2e:bd:c6:f4:8b:6c:
                    16:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:30:71:FA:EE:CC:80:08:1C:E7:BA:62:6B:DC:8C:B4:6B:B2:BD:73
            X509v3 Authority Key Identifier:
                keyid:E2:5E:96:6A:F2:F6:B7:00:F0:AA:5A:74:2E:83:FC:61:86:36:14:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4l6WavL2twDwqlp0LoP8YYY2FOA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f71b97-3ae3-449a-b9d7-f90abf687a55/1/4l6WavL2twDwqlp0LoP8YYY2FOA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f71b97-3ae3-449a-b9d7-f90abf687a55/1/4l6WavL2twDwqlp0LoP8YYY2FOA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:47:57:74:55:1e:92:61:cc:18:a5:a6:83:50:ea:51:b5:30:
         92:07:89:bb:8e:95:bf:a2:96:84:3f:8c:d5:17:82:12:ab:f3:
         9b:11:f3:f0:d6:79:52:1f:3a:20:4b:56:26:ad:a7:ff:51:f1:
         94:c5:03:61:0c:0f:d5:29:c4:66:6f:0c:1d:d4:9e:7d:00:21:
         21:5f:f5:45:fc:bc:4e:f5:93:72:56:ba:c0:67:26:b2:f5:24:
         b4:49:11:95:8c:dd:99:9e:58:53:86:6c:6c:ac:cc:b9:b4:99:
         eb:e1:81:b0:10:6f:e4:49:6a:3b:8f:7a:c0:d5:67:fe:a0:ea:
         8c:0b:5a:87:c8:53:98:04:56:70:a3:59:5d:66:bb:fc:e1:40:
         3b:88:0e:30:cc:ac:46:fa:47:f3:73:b1:d4:99:5d:0f:19:f3:
         94:d0:bc:d9:d4:ce:1d:c5:18:a9:2c:2d:c3:8c:54:de:c6:1a:
         eb:80:9f:2f:81:b0:1f:34:81:62:4e:ad:eb:e9:ab:fc:96:e1:
         6e:b2:bc:7e:bd:aa:a2:e1:16:8d:bd:cc:d8:f6:fa:ea:85:25:
         0d:76:a6:1c:3e:43:2c:7b:5d:a6:95:cd:77:b4:05:bd:e9:8d:
         63:d1:d4:2d:8b:14:73:40:cd:42:f5:c2:37:b7:97:39:7e:ec:
         20:43:6e:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYMVqxiliLLXK4dAU0PNi5iVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyNWU5NjZhZjJmNmI3MDBmMGFhNWE3NDJlODNmYzYxODYz
NjE0ZTAwHhcNMjIwOTA3MDE1NzU3WhcNMjIwOTA4MDE1NzU3WjAzMTEwLwYDVQQD
EygzZjMwNzFmYWVlY2M4MDA4MWNlN2JhNjI2YmRjOGNiNDZiYjJiZDczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8oEx9SBk7DX2lchZXc6kLTBfbrT
4kFTRXIv0X32wZ9l/JXjuqrgVoFAu9/RqbN6qT2PP0hM30+RL0lYtWtMaHUpkPic
4lKsWiVhAPqBnI0hT2xDiazm5iG/68gaHeJc7xi13y3Jw56bmkFpCZStOr0Wv0ls
KX2zMJlfscKutrnx2ycZu9Gcsb5WCUyvCVWjlawHvvPKAzlX9ZHftCln1Kmbo0As
MZj95SCRhsBcQli2fCLCqFK6m9Em/bLgzPttXBp9B3yoysDTE5h0JMgZzLk29LDR
VqFFefH4wzpm2+Z6mo43rhPI85pH6ln+nPo75e+Ehig0yI8uvcb0i2wWqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD8wcfruzIAIHOe6YmvcjLRrsr1zMB8GA1UdIwQY
MBaAFOJelmry9rcA8KpadC6D/GGGNhTgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGw2V2F2TDJ0d0R3cWxwMExvUDhZWVkyRk9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9mNzFiOTctM2FlMy00NDlhLWI5ZDct
ZjkwYWJmNjg3YTU1LzEvNGw2V2F2TDJ0d0R3cWxwMExvUDhZWVkyRk9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9mNzFiOTctM2FlMy00NDlhLWI5ZDctZjkwYWJmNjg3YTU1
LzEvNGw2V2F2TDJ0d0R3cWxwMExvUDhZWVkyRk9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUkdXdFUe
kmHMGKWmg1DqUbUwkgeJu46Vv6KWhD+M1ReCEqvzmxHz8NZ5Uh86IEtWJq2n/1Hx
lMUDYQwP1SnEZm8MHdSefQAhIV/1Rfy8TvWTcla6wGcmsvUktEkRlYzdmZ5YU4Zs
bKzMubSZ6+GBsBBv5ElqO496wNVn/qDqjAtah8hTmARWcKNZXWa7/OFAO4gOMMys
RvpH83Ox1JldDxnzlNC82dTOHcUYqSwtw4xU3sYa64CfL4GwHzSBYk6t6+mr/Jbh
brK8fr2qouEWjb3M2Pb66oUlDXamHD5DLHtdppXNd7QFvemNY9HULYsUc0DNQvXC
N7eXOX7sIENu4g==
-----END CERTIFICATE-----