Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/e0b657-618f-4636-b860-57e7a69f057f/1/IMzQqVAFIx8V15KU-VjvjT2zrpk.mft
File:                     IMzQqVAFIx8V15KU-VjvjT2zrpk.mft (raw, json)
Hash identifier:          tO1kLnbzBzHDJ6SnWjYfoMVx3Pf52RaIpzXgH5R9lmA=
Subject key identifier:   71:82:94:D2:F6:81:18:5F:99:11:A3:B6:53:8C:D7:E7:09:B5:25:13
Authority key identifier: 20:CC:D0:A9:50:05:23:1F:15:D7:92:94:F9:58:EF:8D:3D:B3:AE:99
Certificate issuer:       /CN=20ccd0a95005231f15d79294f958ef8d3db3ae99
Certificate serial:       0186A5EA50E9EBF44A6081F11CBFF1CF12CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IMzQqVAFIx8V15KU-VjvjT2zrpk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/e0b657-618f-4636-b860-57e7a69f057f/1/IMzQqVAFIx8V15KU-VjvjT2zrpk.mft
Manifest number:          0CAD
Signing time:             Fri 03 Mar 2023 05:20:42 +0000
Manifest this update:     Fri 03 Mar 2023 05:20:42 +0000
Manifest next update:     Sat 04 Mar 2023 05:20:42 +0000
Files and hashes:         1: IMzQqVAFIx8V15KU-VjvjT2zrpk.crl (hash: QgyMOD3KUYRnDyFdt1gucoBFjf5OGnFh3VW+aHMVzZE=)
                          2: f_In2yBlygzLrMQi38PStkItxZc.roa (hash: ALCLKQZf8EAlHpBi1ZWM29xOhwVnnEjrlq8pQt2iYSw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:a5:ea:50:e9:eb:f4:4a:60:81:f1:1c:bf:f1:cf:12:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20ccd0a95005231f15d79294f958ef8d3db3ae99
        Validity
            Not Before: Mar  3 05:20:42 2023 GMT
            Not After : Mar  4 05:20:42 2023 GMT
        Subject: CN=718294d2f681185f9911a3b6538cd7e709b52513
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3e:dd:d9:a3:15:d1:e9:4a:80:d2:2c:76:f5:
                    49:c3:d5:71:b9:1d:b1:db:b4:d8:c7:64:ac:e6:75:
                    76:06:fc:9e:08:9c:b6:50:01:b4:d6:46:41:4a:19:
                    dd:2d:f2:62:19:1d:da:13:df:6c:90:47:c4:ef:63:
                    4b:6e:9d:1e:fd:05:37:db:a4:22:d7:db:c9:19:92:
                    cb:7c:f2:7d:ff:56:d3:44:f8:c8:d8:ed:45:09:af:
                    ab:9e:bb:2a:99:bc:d3:10:9e:23:38:91:10:9b:ca:
                    7b:32:1d:0d:73:5d:a4:5b:a3:b7:67:af:c7:64:f4:
                    d1:e3:07:83:6e:ae:df:a4:50:36:1b:fa:ed:a2:4a:
                    39:2c:d8:df:02:07:8f:f1:6d:6b:ae:ba:b4:18:84:
                    6e:09:95:f7:fe:85:7a:10:56:13:7a:97:97:57:95:
                    4b:6b:63:33:d2:02:1d:87:0a:0d:3f:10:7f:ce:90:
                    fe:e8:07:b9:b9:4d:bc:23:5b:22:9b:4d:bb:ad:6f:
                    71:52:28:e0:92:19:0b:24:ca:c6:20:c9:d7:4f:b4:
                    c2:97:33:0f:da:ae:f6:3d:31:40:3e:96:75:93:0f:
                    c1:9c:7f:aa:49:66:37:88:90:1c:67:f6:af:77:1f:
                    98:d1:ab:7a:cf:0d:b9:b4:51:41:d7:8e:ff:d5:76:
                    0e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:82:94:D2:F6:81:18:5F:99:11:A3:B6:53:8C:D7:E7:09:B5:25:13
            X509v3 Authority Key Identifier:
                keyid:20:CC:D0:A9:50:05:23:1F:15:D7:92:94:F9:58:EF:8D:3D:B3:AE:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMzQqVAFIx8V15KU-VjvjT2zrpk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e0b657-618f-4636-b860-57e7a69f057f/1/IMzQqVAFIx8V15KU-VjvjT2zrpk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e0b657-618f-4636-b860-57e7a69f057f/1/IMzQqVAFIx8V15KU-VjvjT2zrpk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:ce:6f:ab:d2:b3:e7:a0:0f:ac:a5:c2:ed:d2:47:e4:b1:79:
         01:e6:68:f0:11:ff:1b:b3:c6:e0:a0:31:58:14:bf:42:fb:f1:
         58:d0:ce:4a:35:39:33:cb:4f:f3:2c:7c:35:cb:f0:b8:ce:a9:
         ef:3e:f6:61:27:11:b1:d0:48:82:13:6e:10:9d:84:c1:84:07:
         72:f6:b3:bd:f7:61:37:d0:2a:2f:08:7b:82:84:41:e5:28:ee:
         75:08:02:ef:27:a7:cd:da:b9:6c:d8:f2:b9:4b:a8:fe:70:e2:
         95:40:36:a5:51:b6:d3:5d:56:2d:01:4a:b9:2d:14:6e:71:33:
         39:e8:8a:25:fb:cb:c3:98:c3:1d:6f:93:35:2e:5e:d6:ad:cb:
         f4:89:ed:85:b3:72:82:08:8a:6f:9f:16:36:df:59:fe:42:8c:
         f0:75:52:b2:82:f0:5d:e0:b4:30:91:91:59:15:0c:6d:73:01:
         b1:af:83:4c:c6:ed:21:9a:cb:07:71:3f:f6:8a:1b:ef:e1:05:
         68:58:1a:4c:91:bb:ec:c5:59:43:a4:74:3e:2b:11:c6:21:27:
         e9:52:94:7a:8b:18:10:12:32:65:81:5c:87:ad:74:7f:5c:90:
         5c:18:6d:44:84:98:96:d7:0f:e9:f2:1f:03:e1:3b:60:0d:5f:
         08:b2:22:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYal6lDp6/RKYIHxHL/xzxLMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwY2NkMGE5NTAwNTIzMWYxNWQ3OTI5NGY5NThlZjhkM2Ri
M2FlOTkwHhcNMjMwMzAzMDUyMDQyWhcNMjMwMzA0MDUyMDQyWjAzMTEwLwYDVQQD
Eyg3MTgyOTRkMmY2ODExODVmOTkxMWEzYjY1MzhjZDdlNzA5YjUyNTEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwT7d2aMV0elKgNIsdvVJw9VxuR2x
27TYx2Ss5nV2BvyeCJy2UAG01kZBShndLfJiGR3aE99skEfE72NLbp0e/QU326Qi
19vJGZLLfPJ9/1bTRPjI2O1FCa+rnrsqmbzTEJ4jOJEQm8p7Mh0Nc12kW6O3Z6/H
ZPTR4weDbq7fpFA2G/rtoko5LNjfAgeP8W1rrrq0GIRuCZX3/oV6EFYTepeXV5VL
a2Mz0gIdhwoNPxB/zpD+6Ae5uU28I1sim027rW9xUijgkhkLJMrGIMnXT7TClzMP
2q72PTFAPpZ1kw/BnH+qSWY3iJAcZ/avdx+Y0at6zw25tFFB147/1XYOPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHGClNL2gRhfmRGjtlOM1+cJtSUTMB8GA1UdIwQY
MBaAFCDM0KlQBSMfFdeSlPlY7409s66ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSU16UXFWQUZJeDhWMTVLVS1WanZqVDJ6cnBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9lMGI2NTctNjE4Zi00NjM2LWI4NjAt
NTdlN2E2OWYwNTdmLzEvSU16UXFWQUZJeDhWMTVLVS1WanZqVDJ6cnBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC9lMGI2NTctNjE4Zi00NjM2LWI4NjAtNTdlN2E2OWYwNTdm
LzEvSU16UXFWQUZJeDhWMTVLVS1WanZqVDJ6cnBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXM5vq9Kz
56APrKXC7dJH5LF5AeZo8BH/G7PG4KAxWBS/QvvxWNDOSjU5M8tP8yx8NcvwuM6p
7z72YScRsdBIghNuEJ2EwYQHcvazvfdhN9AqLwh7goRB5SjudQgC7yenzdq5bNjy
uUuo/nDilUA2pVG2011WLQFKuS0UbnEzOeiKJfvLw5jDHW+TNS5e1q3L9InthbNy
ggiKb58WNt9Z/kKM8HVSsoLwXeC0MJGRWRUMbXMBsa+DTMbtIZrLB3E/9oob7+EF
aFgaTJG77MVZQ6R0PisRxiEn6VKUeosYEBIyZYFch610f1yQXBhtRISYltcP6fIf
A+E7YA1fCLIiuA==
-----END CERTIFICATE-----