Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/3547ff-202c-492f-9699-b27c80107861/1/lHucnRwb68omBTI5RsgJiHvpCHE.mft
File:                     lHucnRwb68omBTI5RsgJiHvpCHE.mft (raw, json)
Hash identifier:          90Owyz91toZzR9Z0ZXxL1hUMMZ05pnqUOI32YwBXKbs=
Subject key identifier:   57:B1:D2:8C:0C:4D:B1:16:B4:EA:9C:51:6A:FF:74:5A:4C:F4:3E:5E
Authority key identifier: 94:7B:9C:9D:1C:1B:EB:CA:26:05:32:39:46:C8:09:88:7B:E9:08:71
Certificate issuer:       /CN=947b9c9d1c1bebca2605323946c809887be90871
Certificate serial:       0184BE01373D184B932E6D0B7781CE3A43D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lHucnRwb68omBTI5RsgJiHvpCHE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/3547ff-202c-492f-9699-b27c80107861/1/lHucnRwb68omBTI5RsgJiHvpCHE.mft
Manifest number:          076A
Signing time:             Mon 28 Nov 2022 11:31:01 +0000
Manifest this update:     Mon 28 Nov 2022 11:31:01 +0000
Manifest next update:     Tue 29 Nov 2022 11:31:01 +0000
Files and hashes:         1: Xexkr9ER5xECkERyEHLzkSej43U.roa (hash: sVhi67eobs1XfmF4q9loQE5orHqrnoaPDVwvOiSqc/4=)
                          2: Yg7AoniB2BFfkokrTbKGwIDJpog.roa (hash: aRsY+3Hox1Z3k8zHScj/7pzbj4/Q+bL3/j8b4SLxipY=)
                          3: bY-MRU6qyd1zxlWzVkPhYnBaGRc.roa (hash: m7D+RleoPBthlNeKRU6QIjD+POHPpvodg5Aamer8rck=)
                          4: lHucnRwb68omBTI5RsgJiHvpCHE.crl (hash: bdOLxsfFSAlYvHNZQdMY3dxOPQJqRPGEZK35d6xOW2c=)
                          5: pKjTVwvpcHT1y6V7eIaB-vfgNas.roa (hash: Lwq97Ar1zVnQw9mDtnd+5mxNpcm3QKmBdtRQhPoLyJk=)
                          6: td613IGQZWY9_piyyhYxmHiTUXk.roa (hash: G6XZndYGwN1BTYq8oxxrJnY+/O+CB3hMkusegUctfkg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:be:01:37:3d:18:4b:93:2e:6d:0b:77:81:ce:3a:43:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=947b9c9d1c1bebca2605323946c809887be90871
        Validity
            Not Before: Nov 28 11:31:01 2022 GMT
            Not After : Nov 29 11:31:01 2022 GMT
        Subject: CN=57b1d28c0c4db116b4ea9c516aff745a4cf43e5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a1:3c:84:3d:f4:1a:83:c2:db:ed:62:b6:d7:
                    bc:93:4c:a0:53:7f:56:8c:66:de:49:a7:89:fc:78:
                    7e:39:1a:68:ac:7e:65:d3:26:f7:53:8d:fd:2e:cd:
                    5b:bf:6f:71:4f:08:78:17:49:0d:8a:08:bc:bc:d5:
                    5a:4c:b2:2c:89:de:ea:a4:99:ec:2c:80:9c:96:81:
                    cb:16:58:55:17:e3:19:e9:d7:a1:63:18:53:5b:5d:
                    a1:48:75:a1:0d:dd:9e:95:c0:f5:90:ac:1e:03:a2:
                    cc:f8:7f:28:65:ea:5a:ad:ab:f4:cc:6f:6e:34:33:
                    9b:7b:5a:10:fd:6c:9c:ca:0a:81:23:77:12:0f:0e:
                    97:0e:ff:5d:1f:c0:48:be:d6:d0:6c:ba:8c:76:e6:
                    bb:ff:9f:2f:e0:e7:46:dd:32:66:e6:75:a3:a5:00:
                    df:c6:ea:4f:27:cd:8a:e4:33:b3:de:f2:3c:98:9f:
                    38:d6:47:76:c2:81:52:8f:77:34:b8:43:d8:8c:ef:
                    9b:c4:b9:09:21:1d:48:3a:bf:98:d1:42:e8:74:1b:
                    1f:62:6b:17:46:1a:97:28:5f:80:1e:83:cf:fe:92:
                    3c:60:88:ec:a0:4a:40:7d:5d:21:e9:e1:33:99:f3:
                    b1:8d:98:37:e9:b8:1f:52:17:7d:70:f6:74:69:73:
                    4b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:B1:D2:8C:0C:4D:B1:16:B4:EA:9C:51:6A:FF:74:5A:4C:F4:3E:5E
            X509v3 Authority Key Identifier:
                keyid:94:7B:9C:9D:1C:1B:EB:CA:26:05:32:39:46:C8:09:88:7B:E9:08:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lHucnRwb68omBTI5RsgJiHvpCHE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3547ff-202c-492f-9699-b27c80107861/1/lHucnRwb68omBTI5RsgJiHvpCHE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3547ff-202c-492f-9699-b27c80107861/1/lHucnRwb68omBTI5RsgJiHvpCHE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:f7:2c:98:d7:5f:6f:90:e8:7c:8d:a9:f9:3f:9e:4d:0c:02:
         09:4e:d4:1e:bf:d3:3c:68:b3:08:e6:22:4c:7e:c9:73:e6:95:
         8d:12:97:3c:fe:2b:83:6d:4b:b0:f4:93:df:cb:b5:0f:c8:12:
         3a:ce:38:bc:df:58:06:af:1c:52:ec:a7:8f:54:88:98:88:2b:
         f5:44:d1:85:2b:e4:bb:ad:51:a5:e2:0b:3e:e1:f5:db:17:04:
         42:92:e4:3d:18:c4:1e:94:a9:01:85:99:4b:90:6b:b3:e7:3b:
         fb:5d:01:90:0a:d2:db:05:cf:09:56:dc:0e:87:53:b5:54:7c:
         2a:87:c4:16:ab:77:00:02:d8:6c:57:a4:f0:11:45:d1:30:08:
         02:f0:01:19:52:1c:25:ad:f6:1b:9d:a4:38:03:52:fa:1a:f2:
         44:c4:ca:e5:0b:f6:3d:da:9b:a4:b3:8b:f6:07:d4:60:22:f0:
         ef:bf:73:3a:ef:c4:e3:18:50:f9:cc:ac:c4:c6:39:65:b9:8a:
         a1:75:37:db:cf:f8:a3:6d:14:53:b3:0a:70:2a:a3:bd:ca:c3:
         b3:d9:40:56:2e:21:2b:31:60:cf:71:bb:d7:b2:a7:96:b9:b4:
         95:89:28:af:fd:03:ee:0f:bb:ff:10:ac:e6:76:e0:14:76:64:
         f6:c1:70:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYS+ATc9GEuTLm0Ld4HOOkPSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0N2I5YzlkMWMxYmViY2EyNjA1MzIzOTQ2YzgwOTg4N2Jl
OTA4NzEwHhcNMjIxMTI4MTEzMTAxWhcNMjIxMTI5MTEzMTAxWjAzMTEwLwYDVQQD
Eyg1N2IxZDI4YzBjNGRiMTE2YjRlYTljNTE2YWZmNzQ1YTRjZjQzZTVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKE8hD30GoPC2+1itte8k0ygU39W
jGbeSaeJ/Hh+ORporH5l0yb3U439Ls1bv29xTwh4F0kNigi8vNVaTLIsid7qpJns
LICcloHLFlhVF+MZ6dehYxhTW12hSHWhDd2elcD1kKweA6LM+H8oZeparav0zG9u
NDObe1oQ/WycygqBI3cSDw6XDv9dH8BIvtbQbLqMdua7/58v4OdG3TJm5nWjpQDf
xupPJ82K5DOz3vI8mJ841kd2woFSj3c0uEPYjO+bxLkJIR1IOr+Y0ULodBsfYmsX
RhqXKF+AHoPP/pI8YIjsoEpAfV0h6eEzmfOxjZg36bgfUhd9cPZ0aXNLHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFex0owMTbEWtOqcUWr/dFpM9D5eMB8GA1UdIwQY
MBaAFJR7nJ0cG+vKJgUyOUbICYh76QhxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEh1Y25Sd2I2OG9tQlRJNVJzZ0ppSHZwQ0hFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8zNTQ3ZmYtMjAyYy00OTJmLTk2OTkt
YjI3YzgwMTA3ODYxLzEvbEh1Y25Sd2I2OG9tQlRJNVJzZ0ppSHZwQ0hFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS8zNTQ3ZmYtMjAyYy00OTJmLTk2OTktYjI3YzgwMTA3ODYx
LzEvbEh1Y25Sd2I2OG9tQlRJNVJzZ0ppSHZwQ0hFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACfcsmNdf
b5DofI2p+T+eTQwCCU7UHr/TPGizCOYiTH7Jc+aVjRKXPP4rg21LsPST38u1D8gS
Os44vN9YBq8cUuynj1SImIgr9UTRhSvku61RpeILPuH12xcEQpLkPRjEHpSpAYWZ
S5Brs+c7+10BkArS2wXPCVbcDodTtVR8KofEFqt3AALYbFek8BFF0TAIAvABGVIc
Ja32G52kOANS+hryRMTK5Qv2PdqbpLOL9gfUYCLw779zOu/E4xhQ+cysxMY5ZbmK
oXU328/4o20UU7MKcCqjvcrDs9lAVi4hKzFgz3G717Knlrm0lYkor/0D7g+7/xCs
5nbgFHZk9sFw3w==
-----END CERTIFICATE-----