Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/406ee1-5c11-45d3-845e-81b14ab39a50/1/755vFq7xHLR8Ajo-kkUUOnkW-gc.mft
File:                     755vFq7xHLR8Ajo-kkUUOnkW-gc.mft (raw, json)
Hash identifier:          2rWwWgP/hQOUBaDCjgyh7dwd3m+EvOlhRYsEa5Yybrg=
Subject key identifier:   3F:22:88:68:D5:7F:97:C2:93:1B:43:9A:9B:7C:47:AE:AF:7A:1A:5A
Authority key identifier: EF:9E:6F:16:AE:F1:1C:B4:7C:02:3A:3E:92:45:14:3A:79:16:FA:07
Certificate issuer:       /CN=ef9e6f16aef11cb47c023a3e9245143a7916fa07
Certificate serial:       0A00562C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/755vFq7xHLR8Ajo-kkUUOnkW-gc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/406ee1-5c11-45d3-845e-81b14ab39a50/1/755vFq7xHLR8Ajo-kkUUOnkW-gc.mft
Manifest number:          08DD
Signing time:             Wed 06 Apr 2022 00:59:47 +0000
Manifest this update:     Wed 06 Apr 2022 00:59:47 +0000
Manifest next update:     Thu 07 Apr 2022 00:59:47 +0000
Files and hashes:         1: 755vFq7xHLR8Ajo-kkUUOnkW-gc.crl (hash: jlGQi7nPPyoyJd7WO0jmJbhWEWLbDz45ubaVrRchfPo=)
                          2: satz61gDoKCay4yQlmEgCo1e2cY.roa (hash: pH5/r2FS7DRpZIvSbVpB3ag9tjbjM7ZarjpyOJXkTPg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 167794220 (0xa00562c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef9e6f16aef11cb47c023a3e9245143a7916fa07
        Validity
            Not Before: Apr  6 00:59:47 2022 GMT
            Not After : Apr  7 00:59:47 2022 GMT
        Subject: CN=3f228868d57f97c2931b439a9b7c47aeaf7a1a5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:32:51:3b:f7:e7:48:07:dc:8f:3a:04:e5:85:
                    5d:ba:20:78:67:06:45:d8:f4:76:f4:27:28:45:5f:
                    07:f0:60:e0:19:4a:aa:b8:a2:e0:6b:92:2b:36:fd:
                    4b:66:13:75:e2:ee:a9:3b:75:31:9f:73:56:be:5e:
                    88:46:25:e0:81:d1:d5:c5:d7:33:2d:19:00:59:eb:
                    b3:32:5e:82:72:ac:eb:b2:73:a4:fe:48:c2:9a:92:
                    e5:df:9b:f4:96:99:91:2e:47:2a:ed:62:8d:ae:5f:
                    33:81:11:42:3c:2f:d9:3d:af:31:1a:8a:8d:a5:34:
                    6d:39:90:7e:22:3d:f2:43:4d:f8:f7:f9:ef:34:7f:
                    41:ba:57:68:0f:44:17:85:68:d7:47:db:33:76:44:
                    2c:33:ba:e4:a9:07:94:7b:a1:49:5b:58:73:bc:d4:
                    e8:c8:22:8b:76:15:d9:8d:d0:ba:81:91:5e:44:81:
                    42:1a:f5:3a:09:73:48:b7:cf:53:6b:8f:78:e1:fa:
                    50:b3:02:80:ce:35:ad:23:ef:d4:99:c7:b1:36:14:
                    d0:c3:9e:b8:9b:8e:2e:dc:f2:d6:a7:31:da:1a:58:
                    c3:27:e4:ba:7e:31:e2:03:b8:c7:06:b7:fa:60:4d:
                    b3:4a:36:e1:7f:da:3e:ed:90:85:e8:f6:49:68:ea:
                    d5:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:22:88:68:D5:7F:97:C2:93:1B:43:9A:9B:7C:47:AE:AF:7A:1A:5A
            X509v3 Authority Key Identifier:
                keyid:EF:9E:6F:16:AE:F1:1C:B4:7C:02:3A:3E:92:45:14:3A:79:16:FA:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/755vFq7xHLR8Ajo-kkUUOnkW-gc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/406ee1-5c11-45d3-845e-81b14ab39a50/1/755vFq7xHLR8Ajo-kkUUOnkW-gc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/406ee1-5c11-45d3-845e-81b14ab39a50/1/755vFq7xHLR8Ajo-kkUUOnkW-gc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:f8:4b:d7:6b:b1:c9:10:a0:59:8a:0a:f2:6b:42:a5:6e:74:
         3e:c5:c2:ea:95:87:9a:fb:c8:d1:5e:ab:bf:1a:59:bb:78:b6:
         29:46:9a:27:ed:c5:b9:5c:22:6d:21:26:13:3d:22:c2:c3:e2:
         9f:d3:f8:2f:9d:ce:89:83:41:d3:83:83:b3:ac:c1:e5:eb:68:
         e2:56:96:f6:57:21:25:cd:41:3a:eb:c9:60:47:fc:04:df:53:
         be:87:89:a8:5e:a4:6d:1f:f4:55:c3:56:06:55:f7:43:8b:f3:
         9d:9f:1f:4a:00:61:ab:b5:9f:60:83:bf:80:f6:ec:d4:3c:e9:
         5b:44:14:e8:4b:09:e9:4e:c4:b5:7e:49:26:ad:26:b4:c4:d2:
         53:7f:f5:f3:12:72:30:68:38:17:53:8e:82:0a:ec:45:38:bb:
         d7:64:2b:88:ac:a0:65:45:c2:7a:1f:ed:de:7e:b7:7b:40:2a:
         5e:ed:51:9c:a0:e8:62:96:13:af:e7:b2:9e:84:79:2d:0c:62:
         d3:dc:4e:ea:13:5c:02:08:eb:b2:2f:1b:94:5d:9d:85:0c:79:
         04:71:50:a1:8c:4f:52:10:be:f1:a3:62:f4:5c:aa:86:32:ef:
         7d:a9:fa:69:5a:ac:ab:33:64:af:94:81:5b:5b:54:d8:dc:3f:
         31:7c:93:90
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgIECgBWLDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
ZjllNmYxNmFlZjExY2I0N2MwMjNhM2U5MjQ1MTQzYTc5MTZmYTA3MB4XDTIyMDQw
NjAwNTk0N1oXDTIyMDQwNzAwNTk0N1owMzExMC8GA1UEAxMoM2YyMjg4NjhkNTdm
OTdjMjkzMWI0MzlhOWI3YzQ3YWVhZjdhMWE1YTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANAyUTv350gH3I86BOWFXbogeGcGRdj0dvQnKEVfB/Bg4BlK
qrii4GuSKzb9S2YTdeLuqTt1MZ9zVr5eiEYl4IHR1cXXMy0ZAFnrszJegnKs67Jz
pP5IwpqS5d+b9JaZkS5HKu1ija5fM4ERQjwv2T2vMRqKjaU0bTmQfiI98kNN+Pf5
7zR/QbpXaA9EF4Vo10fbM3ZELDO65KkHlHuhSVtYc7zU6Mgii3YV2Y3QuoGRXkSB
Qhr1OglzSLfPU2uPeOH6ULMCgM41rSPv1JnHsTYU0MOeuJuOLtzy1qcx2hpYwyfk
un4x4gO4xwa3+mBNs0o24X/aPu2Qhej2SWjq1VECAwEAAaOCAiIwggIeMB0GA1Ud
DgQWBBQ/Ioho1X+XwpMbQ5qbfEeur3oaWjAfBgNVHSMEGDAWgBTvnm8WrvEctHwC
Oj6SRRQ6eRb6BzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
Lzc1NXZGcTd4SExSOEFqby1ra1VVT25rVy1nYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTYvNDA2ZWUxLTVjMTEtNDVkMy04NDVlLTgxYjE0YWIzOWE1MC8x
Lzc1NXZGcTd4SExSOEFqby1ra1VVT25rVy1nYy5tZnQwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTYv
NDA2ZWUxLTVjMTEtNDVkMy04NDVlLTgxYjE0YWIzOWE1MC8xLzc1NXZGcTd4SExS
OEFqby1ra1VVT25rVy1nYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/
BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAIH4S9drsckQoFmKCvJrQqVudD7F
wuqVh5r7yNFeq78aWbt4tilGmiftxblcIm0hJhM9IsLD4p/T+C+dzomDQdODg7Os
weXraOJWlvZXISXNQTrryWBH/ATfU76HiahepG0f9FXDVgZV90OL852fH0oAYau1
n2CDv4D27NQ86VtEFOhLCelOxLV+SSatJrTE0lN/9fMScjBoOBdTjoIK7EU4u9dk
K4isoGVFwnof7d5+t3tAKl7tUZyg6GKWE6/nsp6EeS0MYtPcTuoTXAII67IvG5Rd
nYUMeQRxUKGMT1IQvvGjYvRcqoYy732p+mlarKszZK+UgVtbVNjcPzF8k5A=
-----END CERTIFICATE-----