Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/e98e96-9b2e-45df-939c-7eb8bf28e652/1/05WnXumET5GJ1gFkOjnIeicsG2w.mft
File:                     05WnXumET5GJ1gFkOjnIeicsG2w.mft (raw, json)
Hash identifier:          dFIwqCDXCdiJrRQ0eB28WIaY/yL1dyCNFukldDjvCpI=
Subject key identifier:   89:66:93:E8:9F:7F:6E:83:55:F3:04:E3:AD:30:30:57:D2:4C:CC:C9
Authority key identifier: D3:95:A7:5E:E9:84:4F:91:89:D6:01:64:3A:39:C8:7A:27:2C:1B:6C
Certificate issuer:       /CN=d395a75ee9844f9189d601643a39c87a272c1b6c
Certificate serial:       07CEFD30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/05WnXumET5GJ1gFkOjnIeicsG2w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/e98e96-9b2e-45df-939c-7eb8bf28e652/1/05WnXumET5GJ1gFkOjnIeicsG2w.mft
Manifest number:          0920
Signing time:             Thu 28 Apr 2022 02:43:49 +0000
Manifest this update:     Thu 28 Apr 2022 02:43:49 +0000
Manifest next update:     Fri 29 Apr 2022 02:43:49 +0000
Files and hashes:         1: 05WnXumET5GJ1gFkOjnIeicsG2w.crl (hash: JjToooWhOxGjtttbvcdAKftNV5b1tshF3D7Mr2XX0rs=)
                          2: GiYfi3TjWRv4I5zXp0I8cT-WUNI.roa (hash: 2GZ7m6bVTsCZGnvWSWXiH+VWRCGooGYIr7qSkF55PeQ=)
                          3: TxXGj-woZ4rYaRXICI_XRV96kJ8.roa (hash: L9nmbicW7uSjksgivPZY0rLW+OPUlEhBt/zC4uchgKM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 131005744 (0x7cefd30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d395a75ee9844f9189d601643a39c87a272c1b6c
        Validity
            Not Before: Apr 28 02:43:49 2022 GMT
            Not After : Apr 29 02:43:49 2022 GMT
        Subject: CN=896693e89f7f6e8355f304e3ad303057d24cccc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e1:8e:4d:30:1c:50:da:82:df:f2:cf:b5:85:
                    49:91:3b:f3:03:15:4e:f5:be:50:30:20:c3:1d:87:
                    91:6f:d0:35:eb:57:62:30:78:c9:4f:00:4d:0a:f7:
                    dc:8e:53:12:b4:33:78:0b:95:f5:fc:46:9b:c0:1c:
                    9c:8c:33:b9:ce:5d:d1:79:72:09:d5:89:08:73:da:
                    28:6c:bc:8b:16:50:b4:41:5c:46:33:d4:14:33:72:
                    c9:83:d1:5a:61:9d:56:c8:6f:b3:cf:d5:ab:cd:a3:
                    ad:cf:6d:fb:27:49:3a:a9:fe:a4:d4:27:36:52:85:
                    c3:85:3d:1e:87:a4:28:70:93:7c:b2:af:72:24:4c:
                    37:5d:ab:1f:d1:07:a4:42:50:7c:ae:1e:0b:7f:46:
                    3d:ad:4b:e7:65:ce:12:ee:34:53:42:98:4d:87:fb:
                    b0:46:be:d6:70:6b:2d:94:83:e3:95:e0:92:6a:d6:
                    f3:7c:7e:5f:30:47:d5:21:1d:af:65:16:5e:8b:fb:
                    84:6b:f9:72:ce:20:8e:d3:39:62:72:36:ea:bd:d9:
                    ab:57:40:7e:12:cb:29:f6:69:72:b1:cb:19:93:60:
                    89:c8:47:d1:cb:80:8f:af:40:08:c3:e7:cb:31:02:
                    e7:d3:69:37:f6:5f:b2:ba:b6:d9:3a:c9:dd:db:1f:
                    41:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:66:93:E8:9F:7F:6E:83:55:F3:04:E3:AD:30:30:57:D2:4C:CC:C9
            X509v3 Authority Key Identifier:
                keyid:D3:95:A7:5E:E9:84:4F:91:89:D6:01:64:3A:39:C8:7A:27:2C:1B:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/05WnXumET5GJ1gFkOjnIeicsG2w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e98e96-9b2e-45df-939c-7eb8bf28e652/1/05WnXumET5GJ1gFkOjnIeicsG2w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e98e96-9b2e-45df-939c-7eb8bf28e652/1/05WnXumET5GJ1gFkOjnIeicsG2w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:fa:8f:ff:7c:01:d9:e3:f5:5a:7d:0a:ed:c8:d2:97:b4:2d:
         b8:03:48:fb:53:8a:d7:5c:4d:83:98:73:8e:15:96:12:28:03:
         f8:6a:9c:a0:01:da:99:19:eb:9d:74:9e:b5:7b:6a:f2:2e:17:
         91:cb:d6:21:a6:72:ae:62:87:4a:8f:e5:0e:ef:2e:17:2a:31:
         07:ba:07:bf:dc:f2:8c:e6:c1:02:c9:11:ae:d9:67:cb:24:14:
         8c:16:57:77:0a:62:3f:63:67:f3:ec:83:1f:72:12:af:1c:6f:
         4b:75:76:2a:76:14:3e:db:41:a8:7f:0c:46:4c:34:db:72:68:
         96:95:21:5d:40:b0:0b:3c:62:95:c3:82:52:df:a1:0f:73:e7:
         c7:c9:c7:cb:1d:6e:03:bd:77:64:51:14:4d:40:02:b4:e2:d8:
         31:d5:57:59:2d:b6:09:b6:16:27:67:7c:e4:58:fb:16:49:21:
         29:24:6a:8c:83:f4:de:47:e5:a4:d5:00:f3:db:cf:a6:0e:f6:
         d7:6f:9e:8a:d3:06:16:29:d3:b8:f4:38:a2:7b:21:93:b5:79:
         ee:13:bc:c3:f4:e1:ac:ea:f4:43:77:33:33:48:25:55:6e:ad:
         1c:58:f3:f9:9c:d6:bb:ae:4c:fb:df:ff:41:b9:5b:8b:f7:5a:
         9b:71:2c:3c
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgIEB879MDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
Mzk1YTc1ZWU5ODQ0ZjkxODlkNjAxNjQzYTM5Yzg3YTI3MmMxYjZjMB4XDTIyMDQy
ODAyNDM0OVoXDTIyMDQyOTAyNDM0OVowMzExMC8GA1UEAxMoODk2NjkzZTg5Zjdm
NmU4MzU1ZjMwNGUzYWQzMDMwNTdkMjRjY2NjOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJXhjk0wHFDagt/yz7WFSZE78wMVTvW+UDAgwx2HkW/QNetX
YjB4yU8ATQr33I5TErQzeAuV9fxGm8AcnIwzuc5d0XlyCdWJCHPaKGy8ixZQtEFc
RjPUFDNyyYPRWmGdVshvs8/Vq82jrc9t+ydJOqn+pNQnNlKFw4U9HoekKHCTfLKv
ciRMN12rH9EHpEJQfK4eC39GPa1L52XOEu40U0KYTYf7sEa+1nBrLZSD45XgkmrW
83x+XzBH1SEdr2UWXov7hGv5cs4gjtM5YnI26r3Zq1dAfhLLKfZpcrHLGZNgichH
0cuAj69ACMPnyzEC59NpN/Zfsrq22TrJ3dsfQeUCAwEAAaOCAiIwggIeMB0GA1Ud
DgQWBBSJZpPon39ug1XzBOOtMDBX0kzMyTAfBgNVHSMEGDAWgBTTlade6YRPkYnW
AWQ6Och6JywbbDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzA1V25YdW1FVDVHSjFnRmtPam5JZWljc0cydy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzcvZTk4ZTk2LTliMmUtNDVkZi05MzljLTdlYjhiZjI4ZTY1Mi8x
LzA1V25YdW1FVDVHSjFnRmtPam5JZWljc0cydy5tZnQwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzcv
ZTk4ZTk2LTliMmUtNDVkZi05MzljLTdlYjhiZjI4ZTY1Mi8xLzA1V25YdW1FVDVH
SjFnRmtPam5JZWljc0cydy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/
BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAAT6j/98Adnj9Vp9Cu3I0pe0LbgD
SPtTitdcTYOYc44VlhIoA/hqnKAB2pkZ6510nrV7avIuF5HL1iGmcq5ih0qP5Q7v
LhcqMQe6B7/c8ozmwQLJEa7ZZ8skFIwWV3cKYj9jZ/Psgx9yEq8cb0t1dip2FD7b
Qah/DEZMNNtyaJaVIV1AsAs8YpXDglLfoQ9z58fJx8sdbgO9d2RRFE1AArTi2DHV
V1kttgm2FidnfORY+xZJISkkaoyD9N5H5aTVAPPbz6YO9tdvnorTBhYp07j0OKJ7
IZO1ee4TvMP04azq9EN3MzNIJVVurRxY8/mc1ruuTPvf/0G5W4v3WptxLDw=
-----END CERTIFICATE-----