Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/609c8a-0bb3-4089-bd21-7bc724f8de63/1/9s3VxFyL2AyLrRC4UlMAz1C8tig.mft
File:                     9s3VxFyL2AyLrRC4UlMAz1C8tig.mft (raw, json)
Hash identifier:          Tl6xGeZpQsQzsNteK4mGu8IHhYd2mbjBBIGJQ05DgNU=
Subject key identifier:   C1:06:8F:24:86:0F:96:88:93:CD:60:F9:81:48:3B:00:29:04:FE:42
Authority key identifier: F6:CD:D5:C4:5C:8B:D8:0C:8B:AD:10:B8:52:53:00:CF:50:BC:B6:28
Certificate issuer:       /CN=f6cdd5c45c8bd80c8bad10b8525300cf50bcb628
Certificate serial:       01847DEDEACDCBCFD4F7918F5D2C3B6691E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9s3VxFyL2AyLrRC4UlMAz1C8tig.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/609c8a-0bb3-4089-bd21-7bc724f8de63/1/9s3VxFyL2AyLrRC4UlMAz1C8tig.mft
Manifest number:          0556
Signing time:             Wed 16 Nov 2022 00:54:14 +0000
Manifest this update:     Wed 16 Nov 2022 00:54:14 +0000
Manifest next update:     Thu 17 Nov 2022 00:54:14 +0000
Files and hashes:         1: 9s3VxFyL2AyLrRC4UlMAz1C8tig.crl (hash: 05SInESc0ZnU2L8Qbv4KBRE0DSlClBHHNI+KCdP+ke4=)
                          2: 9u84ZazVfiC8kZdtyxTf6Web9dU.roa (hash: TGNgZIDznB7grIPF7Glm3k1rWj+56ul7im7IKRbiS1k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:7d:ed:ea:cd:cb:cf:d4:f7:91:8f:5d:2c:3b:66:91:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6cdd5c45c8bd80c8bad10b8525300cf50bcb628
        Validity
            Not Before: Nov 16 00:54:14 2022 GMT
            Not After : Nov 17 00:54:14 2022 GMT
        Subject: CN=c1068f24860f968893cd60f981483b002904fe42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:61:4c:cf:82:87:0f:24:10:4a:35:20:c2:38:
                    73:b9:de:ff:a4:ae:1c:c3:99:7d:bf:ec:e4:a5:5d:
                    db:76:5a:7f:de:a9:ec:43:2c:72:f7:38:91:72:1b:
                    1e:80:be:8a:a9:cd:df:f0:56:23:64:f5:a0:67:31:
                    ba:55:b8:7f:8f:15:85:1b:65:bf:3b:5d:d2:fe:cd:
                    68:6e:d9:f2:4a:c9:fc:95:a2:95:56:55:0e:a2:ea:
                    82:a5:bb:0b:08:50:d3:8b:94:27:a8:03:13:da:85:
                    8f:96:cf:38:c3:c3:87:ed:c6:1f:da:cb:bf:3c:ec:
                    1e:81:f3:7c:b8:a7:a2:18:42:08:b7:ae:90:01:a3:
                    51:8f:2b:ff:07:36:86:27:83:e0:e0:29:e4:6d:24:
                    e4:dd:9a:ab:13:0b:7b:8f:91:3e:fc:5e:1e:8f:97:
                    e1:91:28:d2:8c:17:5f:55:a6:eb:1a:62:05:e0:c0:
                    35:2d:84:50:ad:20:82:02:c6:49:dd:f8:83:61:da:
                    2d:22:4e:e4:90:7f:48:02:aa:0c:2e:5c:f9:4b:51:
                    8b:08:5b:a9:6c:f4:fc:ea:87:75:63:42:b0:f5:59:
                    ff:c5:8f:c3:2c:d3:7c:f8:a4:cb:6a:2c:12:9c:99:
                    68:70:49:fe:37:49:b4:5c:60:5f:5d:a7:3d:fc:4e:
                    8e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:06:8F:24:86:0F:96:88:93:CD:60:F9:81:48:3B:00:29:04:FE:42
            X509v3 Authority Key Identifier:
                keyid:F6:CD:D5:C4:5C:8B:D8:0C:8B:AD:10:B8:52:53:00:CF:50:BC:B6:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9s3VxFyL2AyLrRC4UlMAz1C8tig.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/609c8a-0bb3-4089-bd21-7bc724f8de63/1/9s3VxFyL2AyLrRC4UlMAz1C8tig.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/609c8a-0bb3-4089-bd21-7bc724f8de63/1/9s3VxFyL2AyLrRC4UlMAz1C8tig.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:a5:27:ce:6f:12:90:9d:c9:26:87:3d:e2:36:e5:6c:74:62:
         35:0c:ac:f5:2c:90:77:90:93:82:a5:29:3b:82:42:21:54:2f:
         5b:8e:16:69:9b:a9:6a:ce:77:29:a3:11:76:45:e8:1d:e6:e6:
         a4:3d:ee:8c:87:a1:76:1e:45:40:28:67:7a:79:11:55:7e:da:
         e2:b9:30:ad:0f:85:63:3a:d8:66:19:72:27:b2:39:d1:55:b4:
         25:b3:a1:99:81:b4:da:41:8b:2e:a0:86:32:e4:d1:78:94:23:
         0f:21:b9:4e:f3:32:13:97:ef:99:de:e2:1b:4b:72:65:69:2d:
         54:1c:5b:a8:03:d2:01:0d:9b:f8:b5:d9:e0:95:79:f2:3d:4b:
         e0:3b:9c:17:be:32:32:25:fc:29:a3:98:72:d8:e6:85:20:a3:
         fe:90:a1:a7:9c:0d:0e:81:c5:14:21:92:b5:8c:ee:fb:42:8f:
         d8:bf:25:d1:34:c3:d2:93:94:b3:ae:5b:64:8e:d7:14:4e:36:
         e3:4d:0b:ad:c1:b4:f2:fc:1e:15:b3:c9:b6:9b:01:0e:93:e9:
         fe:23:00:9f:88:e4:5c:c8:04:94:b8:d3:df:1a:0a:95:9d:56:
         f3:2f:7d:d9:e4:d6:5f:04:a5:5e:72:9f:c0:a6:f1:34:ed:c5:
         4b:9d:1a:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYR97erNy8/U95GPXSw7ZpHnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2Y2RkNWM0NWM4YmQ4MGM4YmFkMTBiODUyNTMwMGNmNTBi
Y2I2MjgwHhcNMjIxMTE2MDA1NDE0WhcNMjIxMTE3MDA1NDE0WjAzMTEwLwYDVQQD
EyhjMTA2OGYyNDg2MGY5Njg4OTNjZDYwZjk4MTQ4M2IwMDI5MDRmZTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmFMz4KHDyQQSjUgwjhzud7/pK4c
w5l9v+zkpV3bdlp/3qnsQyxy9ziRchsegL6Kqc3f8FYjZPWgZzG6Vbh/jxWFG2W/
O13S/s1obtnySsn8laKVVlUOouqCpbsLCFDTi5QnqAMT2oWPls84w8OH7cYf2su/
POwegfN8uKeiGEIIt66QAaNRjyv/BzaGJ4Pg4CnkbSTk3ZqrEwt7j5E+/F4ej5fh
kSjSjBdfVabrGmIF4MA1LYRQrSCCAsZJ3fiDYdotIk7kkH9IAqoMLlz5S1GLCFup
bPT86od1Y0Kw9Vn/xY/DLNN8+KTLaiwSnJlocEn+N0m0XGBfXac9/E6OoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMEGjySGD5aIk81g+YFIOwApBP5CMB8GA1UdIwQY
MBaAFPbN1cRci9gMi60QuFJTAM9QvLYoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXMzVnhGeUwyQXlMclJDNFVsTUF6MUM4dGlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny82MDljOGEtMGJiMy00MDg5LWJkMjEt
N2JjNzI0ZjhkZTYzLzEvOXMzVnhGeUwyQXlMclJDNFVsTUF6MUM4dGlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny82MDljOGEtMGJiMy00MDg5LWJkMjEtN2JjNzI0ZjhkZTYz
LzEvOXMzVnhGeUwyQXlMclJDNFVsTUF6MUM4dGlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkqUnzm8S
kJ3JJoc94jblbHRiNQys9SyQd5CTgqUpO4JCIVQvW44WaZupas53KaMRdkXoHebm
pD3ujIehdh5FQChnenkRVX7a4rkwrQ+FYzrYZhlyJ7I50VW0JbOhmYG02kGLLqCG
MuTReJQjDyG5TvMyE5fvmd7iG0tyZWktVBxbqAPSAQ2b+LXZ4JV58j1L4DucF74y
MiX8KaOYctjmhSCj/pChp5wNDoHFFCGStYzu+0KP2L8l0TTD0pOUs65bZI7XFE42
400LrcG08vweFbPJtpsBDpPp/iMAn4jkXMgElLjT3xoKlZ1W8y992eTWXwSlXnKf
wKbxNO3FS50aDQ==
-----END CERTIFICATE-----