Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/bc4619-4b05-4753-90b2-11b69f784a7a/1/OiZRAw-jxf-7NIjx8V2Z3Ds7uus.mft
File:                     OiZRAw-jxf-7NIjx8V2Z3Ds7uus.mft (raw, json)
Hash identifier:          dBxU4Gbh+WYWsnRxPcUcmEZ+fIqspM2m7m72lSFO4qc=
Subject key identifier:   10:C7:66:0E:52:DE:2B:66:46:24:C6:8E:EC:A8:18:C3:81:0F:A7:A8
Authority key identifier: 3A:26:51:03:0F:A3:C5:FF:BB:34:88:F1:F1:5D:99:DC:3B:3B:BA:EB
Certificate issuer:       /CN=3a2651030fa3c5ffbb3488f1f15d99dc3b3bbaeb
Certificate serial:       018534BEF989AFC5C179E3DB97D2623F98D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OiZRAw-jxf-7NIjx8V2Z3Ds7uus.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/bc4619-4b05-4753-90b2-11b69f784a7a/1/OiZRAw-jxf-7NIjx8V2Z3Ds7uus.mft
Manifest number:          042F
Signing time:             Wed 21 Dec 2022 12:53:28 +0000
Manifest this update:     Wed 21 Dec 2022 12:53:28 +0000
Manifest next update:     Thu 22 Dec 2022 12:53:28 +0000
Files and hashes:         1: 2U3ax4AB34-GGHrlK33LpqBxYpk.roa (hash: 9czPaevaAXBQb3/vPiF5q7rCEGrJdomlv4G7sN8ZJgA=)
                          2: OiZRAw-jxf-7NIjx8V2Z3Ds7uus.crl (hash: opzyhPUL7Cv+X93kN2361+sXcbjFNMuj+l8jBIATZzk=)
                          3: b6LaYP5-t1nGF8r0WlWhQiLG4Nw.roa (hash: cN6dmc2GAzmEak1RMGK7WLxVWie13KGS4rL5Jb8mUJY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:34:be:f9:89:af:c5:c1:79:e3:db:97:d2:62:3f:98:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a2651030fa3c5ffbb3488f1f15d99dc3b3bbaeb
        Validity
            Not Before: Dec 21 12:53:28 2022 GMT
            Not After : Dec 22 12:53:28 2022 GMT
        Subject: CN=10c7660e52de2b664624c68eeca818c3810fa7a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0e:2e:75:1a:31:51:ce:45:af:cb:52:16:8e:
                    a4:a8:04:6c:0c:1e:f4:76:79:a0:a7:3d:e1:70:b2:
                    52:6b:06:60:42:3b:03:be:2b:f9:65:f2:78:c1:a0:
                    68:cd:ba:c9:bd:2b:8d:30:6d:28:ac:e4:e8:fa:a1:
                    25:67:63:95:a8:15:95:8d:9a:fe:5e:fd:7e:8d:37:
                    bf:70:8c:86:13:99:9c:b7:c8:f1:54:28:cc:a4:5b:
                    d2:87:10:e5:c4:ae:28:98:12:12:30:87:2f:d4:99:
                    ce:b9:42:10:09:9f:05:e2:de:fb:52:15:97:e1:0d:
                    64:81:4e:05:ea:95:10:99:dc:c7:5f:d5:98:df:a0:
                    f3:d1:ba:d8:57:72:6a:8d:93:c1:7b:81:d6:6d:26:
                    0c:d9:45:3e:1f:1a:3e:ed:f6:9a:65:a5:98:ea:da:
                    07:53:40:8c:32:0c:07:14:a9:01:0e:29:6f:99:ca:
                    14:f5:68:ab:5f:da:a6:bd:95:eb:97:b5:d7:d1:42:
                    3b:f2:4a:7f:dc:d5:42:41:61:ec:96:03:9d:b7:2a:
                    7e:c4:20:07:77:63:6a:51:4b:e5:c6:f8:b3:02:6d:
                    12:a4:64:f5:42:20:fb:27:22:f2:53:94:e7:1e:4d:
                    39:79:01:c9:06:ff:e1:f7:42:32:69:39:d0:c8:b9:
                    b8:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:C7:66:0E:52:DE:2B:66:46:24:C6:8E:EC:A8:18:C3:81:0F:A7:A8
            X509v3 Authority Key Identifier:
                keyid:3A:26:51:03:0F:A3:C5:FF:BB:34:88:F1:F1:5D:99:DC:3B:3B:BA:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OiZRAw-jxf-7NIjx8V2Z3Ds7uus.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/bc4619-4b05-4753-90b2-11b69f784a7a/1/OiZRAw-jxf-7NIjx8V2Z3Ds7uus.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/bc4619-4b05-4753-90b2-11b69f784a7a/1/OiZRAw-jxf-7NIjx8V2Z3Ds7uus.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:f0:71:72:e9:3c:0e:46:9e:60:dc:e1:70:65:7a:0f:d3:f9:
         c7:17:ef:81:ad:60:6b:94:5c:c6:ca:34:71:8a:88:6d:63:da:
         a1:ff:23:0f:c7:63:d0:09:31:38:ea:39:5b:88:a3:f9:77:98:
         ca:04:99:d2:ed:31:6e:09:3d:25:80:b3:3a:6c:f8:b8:72:8b:
         86:56:52:89:14:97:3d:36:41:21:c1:92:a6:b4:31:db:1a:69:
         31:a2:21:9b:b1:e9:d8:22:0a:05:39:b1:cc:06:7c:fa:a3:2b:
         85:da:3b:43:31:c6:9a:99:00:0a:bb:ab:8b:a6:ca:96:ad:01:
         3f:db:d1:7c:3d:cd:2e:91:35:32:ae:22:b3:29:3e:df:8d:3e:
         fc:2d:64:39:c8:fe:f8:c2:e2:c0:2e:ee:7b:42:39:9d:36:92:
         55:18:52:7e:22:bd:dd:64:c0:5c:1f:93:a9:c1:14:ff:6e:3e:
         28:61:4b:15:d4:9e:83:80:9a:fb:5d:93:75:4a:bd:78:fc:ca:
         bc:3f:51:e3:b9:f6:4c:f7:6c:86:79:76:47:32:3c:99:2e:87:
         1b:f2:6a:fe:28:fd:5f:27:79:13:1b:c3:3b:2f:0f:9e:c1:0f:
         7b:3d:f5:2c:3f:a0:ca:3b:e5:c6:bd:39:3e:0c:ca:03:4c:3c:
         ed:3e:0d:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYU0vvmJr8XBeePbl9JiP5jXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhMjY1MTAzMGZhM2M1ZmZiYjM0ODhmMWYxNWQ5OWRjM2Iz
YmJhZWIwHhcNMjIxMjIxMTI1MzI4WhcNMjIxMjIyMTI1MzI4WjAzMTEwLwYDVQQD
EygxMGM3NjYwZTUyZGUyYjY2NDYyNGM2OGVlY2E4MThjMzgxMGZhN2E4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQ4udRoxUc5Fr8tSFo6kqARsDB70
dnmgpz3hcLJSawZgQjsDviv5ZfJ4waBozbrJvSuNMG0orOTo+qElZ2OVqBWVjZr+
Xv1+jTe/cIyGE5mct8jxVCjMpFvShxDlxK4omBISMIcv1JnOuUIQCZ8F4t77UhWX
4Q1kgU4F6pUQmdzHX9WY36Dz0brYV3JqjZPBe4HWbSYM2UU+Hxo+7faaZaWY6toH
U0CMMgwHFKkBDilvmcoU9WirX9qmvZXrl7XX0UI78kp/3NVCQWHslgOdtyp+xCAH
d2NqUUvlxvizAm0SpGT1QiD7JyLyU5TnHk05eQHJBv/h90IyaTnQyLm4hQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBDHZg5S3itmRiTGjuyoGMOBD6eoMB8GA1UdIwQY
MBaAFDomUQMPo8X/uzSI8fFdmdw7O7rrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2laUkF3LWp4Zi03TklqeDhWMlozRHM3dXVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9iYzQ2MTktNGIwNS00NzUzLTkwYjIt
MTFiNjlmNzg0YTdhLzEvT2laUkF3LWp4Zi03TklqeDhWMlozRHM3dXVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9iYzQ2MTktNGIwNS00NzUzLTkwYjItMTFiNjlmNzg0YTdh
LzEvT2laUkF3LWp4Zi03TklqeDhWMlozRHM3dXVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH/Bxcuk8
DkaeYNzhcGV6D9P5xxfvga1ga5Rcxso0cYqIbWPaof8jD8dj0AkxOOo5W4ij+XeY
ygSZ0u0xbgk9JYCzOmz4uHKLhlZSiRSXPTZBIcGSprQx2xppMaIhm7Hp2CIKBTmx
zAZ8+qMrhdo7QzHGmpkACruri6bKlq0BP9vRfD3NLpE1Mq4isyk+340+/C1kOcj+
+MLiwC7ue0I5nTaSVRhSfiK93WTAXB+TqcEU/24+KGFLFdSeg4Ca+12TdUq9ePzK
vD9R47n2TPdshnl2RzI8mS6HG/Jq/ij9Xyd5ExvDOy8PnsEPez31LD+gyjvlxr05
PgzKA0w87T4N2w==
-----END CERTIFICATE-----