Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/86722e-4c08-47b6-8405-7612f857085d/1/VYH7HjtZ1cZE0m-QqoL3CtKhwMg.mft
File:                     VYH7HjtZ1cZE0m-QqoL3CtKhwMg.mft (raw, json)
Hash identifier:          m315uda5MgMJlp9Sd2tA/w95nO3J6H0X6NsJQoguu2M=
Subject key identifier:   EF:78:AF:55:AF:49:45:B1:19:D4:EA:C9:0D:10:BD:40:C9:2F:CD:38
Authority key identifier: 55:81:FB:1E:3B:59:D5:C6:44:D2:6F:90:AA:82:F7:0A:D2:A1:C0:C8
Certificate issuer:       /CN=5581fb1e3b59d5c644d26f90aa82f70ad2a1c0c8
Certificate serial:       0187050957938EE783ABF0C17E664865FF68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VYH7HjtZ1cZE0m-QqoL3CtKhwMg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/86722e-4c08-47b6-8405-7612f857085d/1/VYH7HjtZ1cZE0m-QqoL3CtKhwMg.mft
Manifest number:          05BD
Signing time:             Tue 21 Mar 2023 16:38:30 +0000
Manifest this update:     Tue 21 Mar 2023 16:38:30 +0000
Manifest next update:     Wed 22 Mar 2023 16:38:30 +0000
Files and hashes:         1: 29j5cnojQza-n-Zx9_jbhvi6qck.roa (hash: Jhk98DmfTfr+H8e2WRuR5bGSmbMxJLtjQh9JtxT3430=)
                          2: KItWCXX6sqwGanx3hWNbmzL26Ts.roa (hash: Ru9j1X04Lc3LcU986hrL/fnUD/Itv/HxfAwnhbbqgR8=)
                          3: VYH7HjtZ1cZE0m-QqoL3CtKhwMg.crl (hash: Yk91iKc9EiFtLzqaHQUSnHZ32BxUZiZ6TjY6B6B7R+A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:05:09:57:93:8e:e7:83:ab:f0:c1:7e:66:48:65:ff:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5581fb1e3b59d5c644d26f90aa82f70ad2a1c0c8
        Validity
            Not Before: Mar 21 16:38:30 2023 GMT
            Not After : Mar 22 16:38:30 2023 GMT
        Subject: CN=ef78af55af4945b119d4eac90d10bd40c92fcd38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:6f:49:dc:6c:20:72:7c:f1:a6:f6:aa:6f:9e:
                    bf:a5:6a:25:a3:f9:8c:ac:c7:1b:cb:0f:25:37:9f:
                    0e:9c:b1:f1:ce:b6:07:2f:1a:b2:bf:d8:d4:70:ee:
                    29:ae:d5:4f:26:e3:c8:72:ea:8f:44:c6:e7:fc:bc:
                    38:3b:65:7b:b4:fd:2c:44:f5:1a:fe:95:9b:ba:93:
                    cd:cf:a9:37:7b:a4:df:7f:fb:f9:cd:4c:08:17:b7:
                    bb:fc:3c:46:44:6c:47:27:bd:ef:06:af:70:da:e9:
                    fa:4e:d4:45:5b:d1:66:8d:ec:fd:62:99:2c:28:a4:
                    e6:52:72:49:23:8e:f4:77:78:a0:69:b3:af:c2:c4:
                    bc:56:14:2e:dc:15:2e:32:47:f5:ca:3a:93:39:ee:
                    91:db:a6:ba:e0:6b:0b:82:7f:6e:0e:f5:96:70:05:
                    93:93:51:80:dc:5a:7e:90:aa:5f:2e:b3:b3:3b:1d:
                    0c:cf:f2:29:b5:81:22:5c:70:bf:e1:b2:e4:68:42:
                    5c:8d:4b:1f:17:d5:0f:23:50:d1:a4:2e:00:34:f2:
                    fc:60:90:30:aa:f4:98:79:63:c5:e8:55:01:d5:2e:
                    72:d6:b0:5f:f3:0f:34:e2:8d:70:e9:c9:ec:5a:f3:
                    0b:2e:ab:44:8d:41:40:0a:fa:ad:48:75:d1:e2:27:
                    b3:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:78:AF:55:AF:49:45:B1:19:D4:EA:C9:0D:10:BD:40:C9:2F:CD:38
            X509v3 Authority Key Identifier:
                keyid:55:81:FB:1E:3B:59:D5:C6:44:D2:6F:90:AA:82:F7:0A:D2:A1:C0:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYH7HjtZ1cZE0m-QqoL3CtKhwMg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/86722e-4c08-47b6-8405-7612f857085d/1/VYH7HjtZ1cZE0m-QqoL3CtKhwMg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/86722e-4c08-47b6-8405-7612f857085d/1/VYH7HjtZ1cZE0m-QqoL3CtKhwMg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:2a:4d:3d:1c:f6:3b:5e:d5:14:80:4f:b7:43:99:2d:aa:e6:
         00:f8:24:e8:0f:34:ac:34:b0:db:85:e2:c4:aa:39:f4:05:ef:
         9b:8e:c0:2e:86:30:b8:89:02:42:1f:a2:39:48:30:ab:1e:c9:
         a1:9e:98:02:4d:f5:89:49:86:5b:74:7e:b5:f0:80:8b:75:db:
         61:8a:4d:ba:aa:1a:78:32:cc:15:37:fd:68:78:19:2b:58:56:
         2f:cb:97:ce:c9:4e:3e:c1:bc:71:38:04:99:d0:aa:d0:c3:d8:
         6c:8a:cf:b4:46:96:af:3c:05:4c:f3:c3:1f:7c:5a:52:15:a5:
         5d:9a:f5:df:a1:7d:f5:c4:ba:d1:72:59:9c:77:ec:81:31:c8:
         33:a9:d3:3f:46:ad:cb:18:e4:a5:5b:c4:c7:56:75:35:eb:82:
         c2:5d:b2:ef:44:8e:eb:96:79:99:46:63:f5:0e:53:d1:3b:eb:
         12:4b:32:04:f1:dd:fe:95:e9:96:09:83:45:26:7d:c3:05:09:
         c0:09:f3:0f:12:5a:29:6d:b0:83:9b:04:8b:01:e2:2e:d6:2f:
         5c:b8:e8:64:d4:65:52:44:ba:41:52:e1:61:61:4e:88:57:9f:
         7c:d6:23:f3:e1:08:23:88:98:10:ad:97:bd:b6:5e:66:44:ef:
         a0:bd:9b:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYcFCVeTjueDq/DBfmZIZf9oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1ODFmYjFlM2I1OWQ1YzY0NGQyNmY5MGFhODJmNzBhZDJh
MWMwYzgwHhcNMjMwMzIxMTYzODMwWhcNMjMwMzIyMTYzODMwWjAzMTEwLwYDVQQD
EyhlZjc4YWY1NWFmNDk0NWIxMTlkNGVhYzkwZDEwYmQ0MGM5MmZjZDM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo29J3Gwgcnzxpvaqb56/pWolo/mM
rMcbyw8lN58OnLHxzrYHLxqyv9jUcO4prtVPJuPIcuqPRMbn/Lw4O2V7tP0sRPUa
/pWbupPNz6k3e6Tff/v5zUwIF7e7/DxGRGxHJ73vBq9w2un6TtRFW9Fmjez9Ypks
KKTmUnJJI470d3igabOvwsS8VhQu3BUuMkf1yjqTOe6R26a64GsLgn9uDvWWcAWT
k1GA3Fp+kKpfLrOzOx0Mz/IptYEiXHC/4bLkaEJcjUsfF9UPI1DRpC4ANPL8YJAw
qvSYeWPF6FUB1S5y1rBf8w804o1w6cnsWvMLLqtEjUFACvqtSHXR4iezUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO94r1WvSUWxGdTqyQ0QvUDJL804MB8GA1UdIwQY
MBaAFFWB+x47WdXGRNJvkKqC9wrSocDIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVllIN0hqdFoxY1pFMG0tUXFvTDNDdEtod01nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC84NjcyMmUtNGMwOC00N2I2LTg0MDUt
NzYxMmY4NTcwODVkLzEvVllIN0hqdFoxY1pFMG0tUXFvTDNDdEtod01nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC84NjcyMmUtNGMwOC00N2I2LTg0MDUtNzYxMmY4NTcwODVk
LzEvVllIN0hqdFoxY1pFMG0tUXFvTDNDdEtod01nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFipNPRz2
O17VFIBPt0OZLarmAPgk6A80rDSw24XixKo59AXvm47ALoYwuIkCQh+iOUgwqx7J
oZ6YAk31iUmGW3R+tfCAi3XbYYpNuqoaeDLMFTf9aHgZK1hWL8uXzslOPsG8cTgE
mdCq0MPYbIrPtEaWrzwFTPPDH3xaUhWlXZr136F99cS60XJZnHfsgTHIM6nTP0at
yxjkpVvEx1Z1NeuCwl2y70SO65Z5mUZj9Q5T0TvrEksyBPHd/pXplgmDRSZ9wwUJ
wAnzDxJaKW2wg5sEiwHiLtYvXLjoZNRlUkS6QVLhYWFOiFeffNYj8+EII4iYEK2X
vbZeZkTvoL2bew==
-----END CERTIFICATE-----