Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/SURoDCDRrwHxabGKycd9mHcTPN4.mft
File:                     SURoDCDRrwHxabGKycd9mHcTPN4.mft (raw, json)
Hash identifier:          gZn7P2ShyuZvrRMOs2pPrq9jP7GGborb5hpEzVvDrVA=
Subject key identifier:   C5:5E:0D:F9:D7:73:15:39:BE:9D:E4:36:84:06:6B:D7:E4:CE:E8:26
Authority key identifier: 49:44:68:0C:20:D1:AF:01:F1:69:B1:8A:C9:C7:7D:98:77:13:3C:DE
Certificate issuer:       /CN=4944680c20d1af01f169b18ac9c77d9877133cde
Certificate serial:       018A3A066C15E059A06E68B52D3A5860AA39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SURoDCDRrwHxabGKycd9mHcTPN4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/SURoDCDRrwHxabGKycd9mHcTPN4.mft
Manifest number:          0AB2
Signing time:             Mon 28 Aug 2023 02:43:33 +0000
Manifest this update:     Mon 28 Aug 2023 02:43:33 +0000
Manifest next update:     Tue 29 Aug 2023 02:43:33 +0000
Files and hashes:         1: 1-8nNscULR1_FBxeSnH9z1bXHxCs.roa (hash: mR5mQc4yHyKv6cp0R8OjpdwrhjYegEYQJInJbYKatkA=)
                          2: D9HkXzF6ooBBelCH8c4pN0zJDVk.roa (hash: apAmedu/j4viQMRnlZMObS5GgMNCNoR6KmTtl8IycrU=)
                          3: JX86yjpODl4ZQhf35NpnnzMGVTI.roa (hash: ZAIMYkY4NeRzNRpqjDC7M72poTb95AOUClrkCOVNK3Q=)
                          4: MI_aO8WE9vDEvmuv3eoGa-NtW50.roa (hash: xsjjvDh2x7QJELzCBQfQ/YgIFGWDLzN1AkjpuraGN24=)
                          5: R-Tr1xBLPb496rBZX7bEHnW6Qls.roa (hash: kDN48v3mWX1DFAQcwic0IBKMzN0ZQ0YUr8VWS6rjO08=)
                          6: R0mCuWSlIuXzKaRqed5uN0tixXM.roa (hash: 3BYVv89ur6rvm+3Zw+j+NT/hvQpVqdl+Yxp1bOR93Yw=)
                          7: SURoDCDRrwHxabGKycd9mHcTPN4.crl (hash: 3bV2DAecgJv+bVjIOy8Yfen0gEHq9wjuHWtZkCqIiV8=)
                          8: Z88-O1THuqfACTtrj0uuwImQ2Zg.roa (hash: 4tuoOIU+piFFQxaEkp9DF5Ir+XpvV1nYJHybbIIzs2s=)
                          9: bEGypvvFdieuB8MqDpxKdXJ8kNg.roa (hash: vSAOldwQyc84PWNS680u4tBdhTXM4itlLyrOuf9QGwY=)
                          10: eMSY11n3t1cpIgspVlN_5UFWOJY.roa (hash: 9kbz61DIdndY+DyedCvlbi63ah/wfsAhOLSReMrezZw=)
                          11: vqXcFcSrah-OlXyV29MyFDSaR-4.roa (hash: Yqv5CmKeBVgRdiw8gMQ0w/U2GHklcp0/P/NihDqX+Js=)
                          12: xb5TYE60RGecYX3WDQQfOG7Spho.roa (hash: NPbhVAzvM1TMMaaoZehntSOoXLbsSqoAHI756jksQDA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:3a:06:6c:15:e0:59:a0:6e:68:b5:2d:3a:58:60:aa:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4944680c20d1af01f169b18ac9c77d9877133cde
        Validity
            Not Before: Aug 28 02:43:33 2023 GMT
            Not After : Aug 29 02:43:33 2023 GMT
        Subject: CN=c55e0df9d7731539be9de43684066bd7e4cee826
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:2e:47:a4:4f:89:dd:b9:50:79:a9:96:8b:21:
                    b4:f5:ed:3b:e5:cc:be:17:04:db:fb:49:27:13:92:
                    67:b0:29:0d:7b:1c:b8:2d:17:88:08:37:d7:bf:9e:
                    bb:e1:e9:9b:5d:2b:bb:51:dd:e4:5b:cd:cc:99:75:
                    50:83:14:c6:30:ba:41:b4:15:25:bb:c7:3f:b5:7b:
                    c8:28:e9:f9:82:2e:1c:35:11:d1:e5:0b:45:47:6a:
                    b9:94:f3:ed:66:81:b1:88:14:10:69:88:07:bc:1b:
                    0c:30:a5:61:c4:79:e0:7e:23:f7:15:e6:30:4b:8d:
                    a6:9a:55:fe:68:a2:f7:27:60:9c:86:75:0a:bc:82:
                    1e:f8:33:ec:fa:7b:e0:d2:1d:0d:6e:01:b4:2e:08:
                    be:35:bb:62:d1:af:95:b7:0d:c8:5d:94:3e:4d:ce:
                    af:66:64:f8:b5:28:e6:fb:ed:8e:26:e5:1c:5b:a2:
                    2d:e8:a6:ef:56:ad:13:b8:da:db:36:9a:45:b9:4c:
                    63:6e:0d:0e:5b:72:c0:2d:38:72:0e:31:c5:64:84:
                    71:e5:80:62:26:e3:5f:f6:b2:5d:3d:20:ca:fb:18:
                    f7:a3:ea:1b:6e:1e:e0:cb:e8:eb:3c:fa:8f:2a:8f:
                    20:f7:4e:04:11:e9:2b:4f:84:c3:c3:9e:ed:14:c0:
                    2e:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:5E:0D:F9:D7:73:15:39:BE:9D:E4:36:84:06:6B:D7:E4:CE:E8:26
            X509v3 Authority Key Identifier:
                keyid:49:44:68:0C:20:D1:AF:01:F1:69:B1:8A:C9:C7:7D:98:77:13:3C:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SURoDCDRrwHxabGKycd9mHcTPN4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/SURoDCDRrwHxabGKycd9mHcTPN4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7dee09-cd2e-4030-ab92-ebdcc02fbae9/1/SURoDCDRrwHxabGKycd9mHcTPN4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:ea:47:08:f9:ba:be:b7:89:40:0d:37:20:67:e4:59:5b:82:
         a2:6f:d1:6e:e1:60:68:ec:65:7d:fc:59:69:26:29:dc:7b:c2:
         7d:66:0f:c6:78:01:38:74:a1:df:00:f2:e6:e1:80:06:4d:94:
         89:8f:6e:fe:b8:73:ab:a1:4a:5c:fb:a1:26:e7:ca:21:51:42:
         c2:f9:88:25:c6:28:c2:fd:d4:dc:9c:f6:d8:ff:74:e0:d3:41:
         71:1b:00:46:88:5d:97:e8:54:38:18:b3:59:6b:c0:53:20:7e:
         34:b0:44:ec:87:04:55:f2:97:28:5a:f8:37:5e:c8:84:e5:33:
         ef:71:06:46:2b:07:4e:db:d6:26:e8:eb:9a:68:7e:59:6d:5c:
         4f:eb:f4:52:3d:13:b8:77:b2:df:3e:64:e2:0d:14:0e:c4:9b:
         d5:af:87:13:fa:ee:c8:06:f1:75:01:4a:9f:cd:5c:1a:aa:d9:
         3d:ab:da:cd:a2:98:88:9d:ce:30:a7:b7:9b:69:b7:e0:17:27:
         ab:27:1c:d8:7f:d9:ce:9b:b3:06:06:08:62:03:91:86:95:38:
         f7:ae:3c:2f:f6:fe:c2:54:52:b9:c1:e1:32:49:56:9a:87:f4:
         5e:09:f2:40:40:fd:bf:77:e0:03:3d:f5:ff:58:89:5a:28:23:
         e5:3b:06:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYo6BmwV4Fmgbmi1LTpYYKo5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5NDQ2ODBjMjBkMWFmMDFmMTY5YjE4YWM5Yzc3ZDk4Nzcx
MzNjZGUwHhcNMjMwODI4MDI0MzMzWhcNMjMwODI5MDI0MzMzWjAzMTEwLwYDVQQD
EyhjNTVlMGRmOWQ3NzMxNTM5YmU5ZGU0MzY4NDA2NmJkN2U0Y2VlODI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmi5HpE+J3blQeamWiyG09e075cy+
FwTb+0knE5JnsCkNexy4LReICDfXv5674embXSu7Ud3kW83MmXVQgxTGMLpBtBUl
u8c/tXvIKOn5gi4cNRHR5QtFR2q5lPPtZoGxiBQQaYgHvBsMMKVhxHngfiP3FeYw
S42mmlX+aKL3J2CchnUKvIIe+DPs+nvg0h0NbgG0Lgi+Nbti0a+Vtw3IXZQ+Tc6v
ZmT4tSjm++2OJuUcW6It6KbvVq0TuNrbNppFuUxjbg0OW3LALThyDjHFZIRx5YBi
JuNf9rJdPSDK+xj3o+obbh7gy+jrPPqPKo8g904EEekrT4TDw57tFMAukQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMVeDfnXcxU5vp3kNoQGa9fkzugmMB8GA1UdIwQY
MBaAFElEaAwg0a8B8WmxisnHfZh3EzzeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1VSb0RDRFJyd0h4YWJHS3ljZDltSGNUUE40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi83ZGVlMDktY2QyZS00MDMwLWFiOTIt
ZWJkY2MwMmZiYWU5LzEvU1VSb0RDRFJyd0h4YWJHS3ljZDltSGNUUE40Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi83ZGVlMDktY2QyZS00MDMwLWFiOTItZWJkY2MwMmZiYWU5
LzEvU1VSb0RDRFJyd0h4YWJHS3ljZDltSGNUUE40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMepHCPm6
vreJQA03IGfkWVuCom/RbuFgaOxlffxZaSYp3HvCfWYPxngBOHSh3wDy5uGABk2U
iY9u/rhzq6FKXPuhJufKIVFCwvmIJcYowv3U3Jz22P904NNBcRsARohdl+hUOBiz
WWvAUyB+NLBE7IcEVfKXKFr4N17IhOUz73EGRisHTtvWJujrmmh+WW1cT+v0Uj0T
uHey3z5k4g0UDsSb1a+HE/ruyAbxdQFKn81cGqrZPavazaKYiJ3OMKe3m2m34Bcn
qycc2H/ZzpuzBgYIYgORhpU49648L/b+wlRSucHhMklWmof0XgnyQED9v3fgAz31
/1iJWigj5TsGDw==
-----END CERTIFICATE-----