Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/79ff9c-69eb-4f8a-b7c9-b3217534f270/1/uN2X1VT8_Fnd_QYuJipLOWL-Z5Y.mft
File:                     uN2X1VT8_Fnd_QYuJipLOWL-Z5Y.mft (raw, json)
Hash identifier:          h4/koypIGuOLr44nBkQrx8+PAKZ/pzkLgEiqSBi0KQg=
Subject key identifier:   67:60:8D:BC:F7:53:30:56:CE:01:18:8E:25:73:19:EF:83:1C:CA:5F
Authority key identifier: B8:DD:97:D5:54:FC:FC:59:DD:FD:06:2E:26:2A:4B:39:62:FE:67:96
Certificate issuer:       /CN=b8dd97d554fcfc59ddfd062e262a4b3962fe6796
Certificate serial:       0184BCEDF4347F0D2827AAB8BF4F7E9B20B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uN2X1VT8_Fnd_QYuJipLOWL-Z5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/79ff9c-69eb-4f8a-b7c9-b3217534f270/1/uN2X1VT8_Fnd_QYuJipLOWL-Z5Y.mft
Manifest number:          07DE
Signing time:             Mon 28 Nov 2022 06:30:21 +0000
Manifest this update:     Mon 28 Nov 2022 06:30:21 +0000
Manifest next update:     Tue 29 Nov 2022 06:30:21 +0000
Files and hashes:         1: 1-qMONpva7KhNzGniRWGhD87OPu0.roa (hash: V/jNUY0beqF/gQId6aIsz9hXyio8CxdR+pQw5g9lb3Q=)
                          2: uN2X1VT8_Fnd_QYuJipLOWL-Z5Y.crl (hash: to+wty0+MrTrAA2gy6/gYYilagYol2dRhkRRouRiNSY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:bc:ed:f4:34:7f:0d:28:27:aa:b8:bf:4f:7e:9b:20:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8dd97d554fcfc59ddfd062e262a4b3962fe6796
        Validity
            Not Before: Nov 28 06:30:21 2022 GMT
            Not After : Nov 29 06:30:21 2022 GMT
        Subject: CN=67608dbcf7533056ce01188e257319ef831cca5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d8:e5:c3:68:bf:e4:5b:e1:c0:9f:d5:7d:da:
                    60:c2:af:4f:9b:03:b2:20:53:a6:1a:b3:47:06:0e:
                    57:70:62:18:1c:a8:8e:a8:9f:ae:97:07:9e:dc:4a:
                    6e:59:77:fb:76:e0:31:fa:9d:b3:09:27:85:18:55:
                    2d:1d:bd:ff:b1:83:2c:05:bf:4b:ca:f5:b9:68:fe:
                    53:97:bf:f9:6f:97:5a:8f:80:cd:3e:c3:07:7e:77:
                    a3:f0:6a:f4:1b:fe:19:84:1c:c7:1c:34:47:01:81:
                    c5:63:42:cd:45:53:dd:fa:63:e4:5d:aa:01:87:10:
                    21:3b:f7:a6:b9:73:c3:ba:59:66:24:bb:c4:c1:c2:
                    49:78:a8:6f:37:09:8b:42:b0:f4:b6:eb:ff:62:8d:
                    5a:94:8e:1f:83:77:95:68:e2:30:11:68:7e:31:ae:
                    28:71:3c:5d:3e:d6:c7:9b:f0:5b:c3:7a:bd:47:26:
                    74:12:87:ec:a9:ae:0f:58:fb:c4:ae:d9:2d:34:63:
                    ac:2f:3b:cd:6d:71:9d:fd:2a:eb:a0:f7:26:57:0e:
                    f0:71:c5:4d:f3:91:bc:0d:f7:78:90:76:e2:ed:1f:
                    05:36:92:2f:cd:4f:f6:0b:d2:e9:d6:25:04:47:25:
                    df:73:bf:c4:57:9b:87:e5:df:c5:87:c9:0f:0a:64:
                    72:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:60:8D:BC:F7:53:30:56:CE:01:18:8E:25:73:19:EF:83:1C:CA:5F
            X509v3 Authority Key Identifier:
                keyid:B8:DD:97:D5:54:FC:FC:59:DD:FD:06:2E:26:2A:4B:39:62:FE:67:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uN2X1VT8_Fnd_QYuJipLOWL-Z5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/79ff9c-69eb-4f8a-b7c9-b3217534f270/1/uN2X1VT8_Fnd_QYuJipLOWL-Z5Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/79ff9c-69eb-4f8a-b7c9-b3217534f270/1/uN2X1VT8_Fnd_QYuJipLOWL-Z5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:86:3c:83:d5:2e:9b:ff:0e:b4:ee:4f:1d:2a:b0:db:3f:9f:
         ea:e4:27:f1:e5:6e:93:19:5e:2e:11:c8:86:ab:87:db:4d:9c:
         41:91:11:ef:fd:f6:59:82:fb:63:73:1a:63:87:26:9b:1c:d4:
         09:55:ac:73:3c:a7:d2:9e:07:e1:fc:d6:ee:d8:a1:55:4b:4f:
         71:1e:a4:90:68:c7:e6:55:94:ce:6a:eb:87:25:47:87:e9:51:
         cf:80:da:99:47:b6:a8:a2:c3:e1:97:02:43:da:5d:d2:0a:e0:
         b5:eb:c6:88:f2:61:f6:13:ff:63:dc:d6:c3:ae:37:8e:8d:11:
         0e:cc:b2:9d:f0:92:a5:27:c2:78:2e:f4:17:c4:3b:24:ba:09:
         c5:b7:35:aa:d5:8c:5f:65:71:28:84:e5:8c:3b:97:42:41:52:
         5b:c9:5e:b3:fc:69:03:a5:c0:6a:ce:d8:4a:b1:66:46:b5:c3:
         0b:18:37:1f:ae:a3:dd:f3:9e:2d:b1:c0:dc:a1:a5:0f:05:0e:
         e7:b5:1c:e7:14:c2:d2:fa:76:fc:01:14:e9:9f:66:0a:d3:db:
         38:81:a2:26:40:99:91:14:d0:ad:88:57:46:ed:67:a3:4d:19:
         a9:c5:32:3e:56:ac:09:ff:fa:69:e4:ca:e3:3f:eb:71:a3:f0:
         9e:dc:fa:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYS87fQ0fw0oJ6q4v09+myC4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4ZGQ5N2Q1NTRmY2ZjNTlkZGZkMDYyZTI2MmE0YjM5NjJm
ZTY3OTYwHhcNMjIxMTI4MDYzMDIxWhcNMjIxMTI5MDYzMDIxWjAzMTEwLwYDVQQD
Eyg2NzYwOGRiY2Y3NTMzMDU2Y2UwMTE4OGUyNTczMTllZjgzMWNjYTVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtjlw2i/5FvhwJ/Vfdpgwq9PmwOy
IFOmGrNHBg5XcGIYHKiOqJ+ulwee3EpuWXf7duAx+p2zCSeFGFUtHb3/sYMsBb9L
yvW5aP5Tl7/5b5daj4DNPsMHfnej8Gr0G/4ZhBzHHDRHAYHFY0LNRVPd+mPkXaoB
hxAhO/emuXPDullmJLvEwcJJeKhvNwmLQrD0tuv/Yo1alI4fg3eVaOIwEWh+Ma4o
cTxdPtbHm/Bbw3q9RyZ0Eofsqa4PWPvErtktNGOsLzvNbXGd/SrroPcmVw7wccVN
85G8Dfd4kHbi7R8FNpIvzU/2C9Lp1iUERyXfc7/EV5uH5d/Fh8kPCmRyLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGdgjbz3UzBWzgEYjiVzGe+DHMpfMB8GA1UdIwQY
MBaAFLjdl9VU/PxZ3f0GLiYqSzli/meWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdU4yWDFWVDhfRm5kX1FZdUppcExPV0wtWjVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS83OWZmOWMtNjllYi00ZjhhLWI3Yzkt
YjMyMTc1MzRmMjcwLzEvdU4yWDFWVDhfRm5kX1FZdUppcExPV0wtWjVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS83OWZmOWMtNjllYi00ZjhhLWI3YzktYjMyMTc1MzRmMjcw
LzEvdU4yWDFWVDhfRm5kX1FZdUppcExPV0wtWjVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk4Y8g9Uu
m/8OtO5PHSqw2z+f6uQn8eVukxleLhHIhquH202cQZER7/32WYL7Y3MaY4cmmxzU
CVWsczyn0p4H4fzW7tihVUtPcR6kkGjH5lWUzmrrhyVHh+lRz4DamUe2qKLD4ZcC
Q9pd0grgtevGiPJh9hP/Y9zWw643jo0RDsyynfCSpSfCeC70F8Q7JLoJxbc1qtWM
X2VxKITljDuXQkFSW8les/xpA6XAas7YSrFmRrXDCxg3H66j3fOeLbHA3KGlDwUO
57Uc5xTC0vp2/AEU6Z9mCtPbOIGiJkCZkRTQrYhXRu1no00ZqcUyPlasCf/6aeTK
4z/rcaPwntz6jQ==
-----END CERTIFICATE-----