Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/8e739f-2079-401f-9e8d-0f4b717ab073/1/Q5Md5ukbQPSyuyASU-V6hnQRBaU.mft
File:                     Q5Md5ukbQPSyuyASU-V6hnQRBaU.mft (raw, json)
Hash identifier:          JEhy47AFntx+eJTlWwaBHe7fQDtHqvAomUWneAOnTn4=
Subject key identifier:   E6:74:24:7D:83:C5:25:D9:55:25:58:56:CD:EB:68:2D:66:E0:40:8E
Authority key identifier: 43:93:1D:E6:E9:1B:40:F4:B2:BB:20:12:53:E5:7A:86:74:11:05:A5
Certificate issuer:       /CN=43931de6e91b40f4b2bb201253e57a86741105a5
Certificate serial:       01845FAF1543A30780239C58DC6150488E38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q5Md5ukbQPSyuyASU-V6hnQRBaU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/8e739f-2079-401f-9e8d-0f4b717ab073/1/Q5Md5ukbQPSyuyASU-V6hnQRBaU.mft
Manifest number:          0729
Signing time:             Thu 10 Nov 2022 03:57:00 +0000
Manifest this update:     Thu 10 Nov 2022 03:57:00 +0000
Manifest next update:     Fri 11 Nov 2022 03:57:00 +0000
Files and hashes:         1: 5xvgg9F7cnmfhRdXpk6LedWUNHw.roa (hash: l7bYS8QU8+XVSOh5PtES+REVwGsvfm9kwxDxJJSYLEI=)
                          2: 84Va2ohEb6L5BXNaiPNkoenb990.roa (hash: HIlaFQ8XUboTLzKSnIHrW3NOJPsWyPAcDaJnHMWxr5I=)
                          3: OR4KC1-Ue2HCvsJeUUc8GNLPi4w.roa (hash: Fnk1q0IDw9gdQASHSIgBZsZmN2wiT35luTSspzcQzig=)
                          4: Q5Md5ukbQPSyuyASU-V6hnQRBaU.crl (hash: r1YytrlvfExxssyU1hzdgfaYCUkShEuGHaHSxyx4AEk=)
                          5: RYqDaC7wtVzjHgfE_qNuXBWpe5c.roa (hash: qmhbBIjOVB6kjV6QWf8qr62O5t8FE3uLNvX/f/6as0s=)
                          6: ZTs9KiNXG-0qi_3GJ2JfxSOhXEU.roa (hash: CSH36mUnU+XcpMWQ7lqezzJRYU0rFz9RhmZVgIldkIU=)
                          7: nODuzwZPw9hKfAQ3r6jKj-gMEDE.roa (hash: vstv48Cr2Hn4quDHfpEl0O2LgAc6Owb+lsH2ZTu/FbU=)
                          8: qDDgFbvtRluCiBANKFs61Tazg6s.roa (hash: lp4f0VE4MLnmjWc3ABq7poooRX8OdiOYYBypZY4GR8E=)
                          9: sNm36iIyO3FHqSjrP3pE6o0cfwU.roa (hash: xw6/DaL2UR20h4Onyp0g9GNNnZfnvBxXQzIr5//vX6M=)
                          10: tye5-4v-CSCQn5CEuI5VjYe3p0g.roa (hash: xpVZTWFc/7eloFfD+TfQ/pZWKv26O5V6R+W6EckiMng=)
                          11: uHv1UOzLwQBIZY5Mi-6_uprWyTE.roa (hash: +6UvYOTxBBe69S/TtKSdkOoj35lyVOhMjkVnZqcZDKw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:5f:af:15:43:a3:07:80:23:9c:58:dc:61:50:48:8e:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43931de6e91b40f4b2bb201253e57a86741105a5
        Validity
            Not Before: Nov 10 03:57:00 2022 GMT
            Not After : Nov 11 03:57:00 2022 GMT
        Subject: CN=e674247d83c525d955255856cdeb682d66e0408e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ad:4f:e8:52:f9:5f:e1:2b:51:01:e4:fa:64:
                    fd:4b:14:a9:0d:08:df:9b:c5:d6:24:10:9a:0b:92:
                    2d:63:0c:22:ad:5a:69:51:f9:aa:37:42:58:c2:0a:
                    5e:08:ed:ad:f8:30:98:7c:d1:1a:53:f4:e9:ab:eb:
                    23:a5:28:a9:ff:25:ad:74:81:a4:b5:b4:3d:f4:c5:
                    28:e7:1c:f0:ee:a6:df:52:19:e6:b4:ee:99:3f:82:
                    eb:6b:0d:dd:a2:98:36:2e:9c:5f:a9:79:a6:bc:59:
                    02:07:64:ce:01:0e:3f:72:1a:32:9f:4a:f2:b0:a3:
                    82:96:cc:94:4e:4f:54:3a:90:ca:36:8e:67:1c:3f:
                    77:45:8b:31:27:d4:30:c9:73:57:24:2d:33:32:f9:
                    43:18:3b:20:93:4e:1f:64:d5:d7:8f:0b:6b:ac:17:
                    75:4f:68:ab:92:5f:11:18:7b:84:91:25:fe:68:96:
                    8a:e0:fb:b4:53:68:e8:7e:7e:f3:54:12:f8:23:bf:
                    d4:9f:6a:f8:b4:7f:29:55:da:2b:5b:74:5e:1c:54:
                    a9:f6:30:8f:34:26:2a:87:87:2a:f7:a4:78:80:d5:
                    4a:7c:82:82:81:9d:87:04:28:28:53:7f:3d:4d:11:
                    b2:37:7d:67:63:3a:29:c7:45:6c:b3:46:76:53:f5:
                    ab:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:74:24:7D:83:C5:25:D9:55:25:58:56:CD:EB:68:2D:66:E0:40:8E
            X509v3 Authority Key Identifier:
                keyid:43:93:1D:E6:E9:1B:40:F4:B2:BB:20:12:53:E5:7A:86:74:11:05:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5Md5ukbQPSyuyASU-V6hnQRBaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/8e739f-2079-401f-9e8d-0f4b717ab073/1/Q5Md5ukbQPSyuyASU-V6hnQRBaU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/8e739f-2079-401f-9e8d-0f4b717ab073/1/Q5Md5ukbQPSyuyASU-V6hnQRBaU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:96:57:04:ab:f7:d9:b1:69:c1:48:23:09:34:83:9c:3c:32:
         ca:f4:05:10:9b:d0:a8:c5:f7:5b:d3:97:4c:e8:32:f6:5e:d8:
         b5:c5:d1:c3:49:07:a9:41:ce:34:16:1f:c2:0f:98:c0:2b:24:
         1b:98:be:6e:ea:34:2c:82:73:0e:ac:ef:ef:6e:d7:e3:22:e2:
         16:ba:6a:f7:29:c1:7b:69:8d:d1:98:87:1e:43:e2:a7:06:67:
         84:a2:13:bc:ad:17:ff:ce:9d:4a:d7:5e:37:83:f7:20:7e:c8:
         65:cb:b0:c3:46:f7:50:13:71:3f:72:25:15:ab:45:8d:e2:45:
         97:52:96:9d:6a:6e:72:b0:07:89:d4:67:e4:b0:e7:95:5e:58:
         47:a6:03:50:84:3d:3b:44:b4:ab:f0:f7:17:0d:3c:c7:dd:28:
         2a:6d:72:85:57:67:51:8a:01:c7:d2:1a:42:8f:b5:3c:95:b4:
         b1:0d:b1:18:58:9b:13:14:43:20:39:2a:68:e5:80:ff:92:e7:
         81:6b:bd:b3:01:39:9f:21:52:6a:fd:c4:16:cb:15:c0:2f:c3:
         72:4c:cd:df:c3:4d:ab:5d:af:77:20:ae:37:07:d2:04:e4:7d:
         0d:76:22:6e:22:cc:37:20:82:f8:f3:2a:c0:cd:07:8b:9a:44:
         b7:ae:41:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYRfrxVDoweAI5xY3GFQSI44MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzOTMxZGU2ZTkxYjQwZjRiMmJiMjAxMjUzZTU3YTg2NzQx
MTA1YTUwHhcNMjIxMTEwMDM1NzAwWhcNMjIxMTExMDM1NzAwWjAzMTEwLwYDVQQD
EyhlNjc0MjQ3ZDgzYzUyNWQ5NTUyNTU4NTZjZGViNjgyZDY2ZTA0MDhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm61P6FL5X+ErUQHk+mT9SxSpDQjf
m8XWJBCaC5ItYwwirVppUfmqN0JYwgpeCO2t+DCYfNEaU/Tpq+sjpSip/yWtdIGk
tbQ99MUo5xzw7qbfUhnmtO6ZP4Lraw3dopg2LpxfqXmmvFkCB2TOAQ4/choyn0ry
sKOClsyUTk9UOpDKNo5nHD93RYsxJ9QwyXNXJC0zMvlDGDsgk04fZNXXjwtrrBd1
T2irkl8RGHuEkSX+aJaK4Pu0U2jofn7zVBL4I7/Un2r4tH8pVdorW3ReHFSp9jCP
NCYqh4cq96R4gNVKfIKCgZ2HBCgoU389TRGyN31nYzopx0Vss0Z2U/WrrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOZ0JH2DxSXZVSVYVs3raC1m4ECOMB8GA1UdIwQY
MBaAFEOTHebpG0D0srsgElPleoZ0EQWlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTVNZDV1a2JRUFN5dXlBU1UtVjZoblFSQmFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC84ZTczOWYtMjA3OS00MDFmLTllOGQt
MGY0YjcxN2FiMDczLzEvUTVNZDV1a2JRUFN5dXlBU1UtVjZoblFSQmFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC84ZTczOWYtMjA3OS00MDFmLTllOGQtMGY0YjcxN2FiMDcz
LzEvUTVNZDV1a2JRUFN5dXlBU1UtVjZoblFSQmFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeZZXBKv3
2bFpwUgjCTSDnDwyyvQFEJvQqMX3W9OXTOgy9l7YtcXRw0kHqUHONBYfwg+YwCsk
G5i+buo0LIJzDqzv727X4yLiFrpq9ynBe2mN0ZiHHkPipwZnhKITvK0X/86dStde
N4P3IH7IZcuww0b3UBNxP3IlFatFjeJFl1KWnWpucrAHidRn5LDnlV5YR6YDUIQ9
O0S0q/D3Fw08x90oKm1yhVdnUYoBx9IaQo+1PJW0sQ2xGFibExRDIDkqaOWA/5Ln
gWu9swE5nyFSav3EFssVwC/DckzN38NNq12vdyCuNwfSBOR9DXYibiLMNyCC+PMq
wM0Hi5pEt65BHw==
-----END CERTIFICATE-----