Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/8271ff-230a-46dc-a00a-bfb90ff5669b/1/QjHzDrMOcCIV1-2DnmksXR9frcw.mft
File:                     QjHzDrMOcCIV1-2DnmksXR9frcw.mft (raw, json)
Hash identifier:          ljao2XA+KIZjhzYOxzspYuYqXHoXzZ4Vuj8qGH1T7ws=
Subject key identifier:   4E:FE:6E:A6:D1:44:0C:83:9B:41:E1:35:75:6A:EF:40:A2:FD:41:B5
Authority key identifier: 42:31:F3:0E:B3:0E:70:22:15:D7:ED:83:9E:69:2C:5D:1F:5F:AD:CC
Certificate issuer:       /CN=4231f30eb30e702215d7ed839e692c5d1f5fadcc
Certificate serial:       018533B89AA7DEDA8D07F61EC8045ED6EE8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QjHzDrMOcCIV1-2DnmksXR9frcw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/8271ff-230a-46dc-a00a-bfb90ff5669b/1/QjHzDrMOcCIV1-2DnmksXR9frcw.mft
Manifest number:          042E
Signing time:             Wed 21 Dec 2022 08:06:54 +0000
Manifest this update:     Wed 21 Dec 2022 08:06:54 +0000
Manifest next update:     Thu 22 Dec 2022 08:06:54 +0000
Files and hashes:         1: 1-CKi7Hom0ADrIjrWo48jyD2bytM.roa (hash: 4gYlg3U13LVoWz70oLfQJU4uomgQNrHiIZRGON90m08=)
                          2: QjHzDrMOcCIV1-2DnmksXR9frcw.crl (hash: Kj/vQ/hQNHKo3IYoSVsVh9q8nJ9HV+reaLyRB3X/n6s=)
                          3: q0nLP2XhfrozbhDGvws8HQnR8nU.roa (hash: 25o5oMm6GESiEaN/T1UcsMUQCZI9ZiIXMQMYavdxbws=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:33:b8:9a:a7:de:da:8d:07:f6:1e:c8:04:5e:d6:ee:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4231f30eb30e702215d7ed839e692c5d1f5fadcc
        Validity
            Not Before: Dec 21 08:06:54 2022 GMT
            Not After : Dec 22 08:06:54 2022 GMT
        Subject: CN=4efe6ea6d1440c839b41e135756aef40a2fd41b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:70:85:86:3f:79:64:cf:eb:fb:29:07:26:4a:
                    be:30:09:5c:b5:49:10:10:76:82:b4:bf:72:38:5c:
                    1d:dc:a7:91:90:c2:03:03:fc:f6:11:28:2e:d4:e4:
                    af:87:17:38:4b:bd:3c:18:bd:e7:47:a2:47:c1:89:
                    36:cd:b0:99:9a:0e:8e:69:ca:7d:49:05:c4:c5:f4:
                    4c:7f:e7:e2:13:b5:e8:50:64:78:23:88:0e:fb:ca:
                    25:f8:b8:07:13:16:af:41:99:3c:fe:04:99:19:c4:
                    bd:62:41:f3:70:6a:a2:a7:f6:6b:de:d9:06:93:11:
                    3e:af:04:ca:1c:2b:9a:1b:30:8e:23:18:ef:78:3a:
                    9d:2d:c2:bf:2b:72:21:e6:50:96:a9:53:48:43:6e:
                    cc:71:06:45:59:30:2a:0d:90:b2:ac:75:96:54:12:
                    31:ed:cd:f3:d6:6a:99:d1:e3:3d:15:29:70:dc:3d:
                    9a:eb:09:3a:44:c4:59:55:be:85:67:96:37:f5:14:
                    fb:cc:b2:73:16:0f:28:d0:69:4d:f1:8a:2c:6d:f4:
                    d1:0e:85:c8:b9:73:83:bd:f4:ec:d2:f4:79:cb:86:
                    d1:75:da:99:91:3c:43:10:0b:e1:b0:39:b0:58:a2:
                    bc:0a:fb:25:37:d7:8b:5d:00:16:a2:17:b0:57:c8:
                    f0:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:FE:6E:A6:D1:44:0C:83:9B:41:E1:35:75:6A:EF:40:A2:FD:41:B5
            X509v3 Authority Key Identifier:
                keyid:42:31:F3:0E:B3:0E:70:22:15:D7:ED:83:9E:69:2C:5D:1F:5F:AD:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QjHzDrMOcCIV1-2DnmksXR9frcw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/8271ff-230a-46dc-a00a-bfb90ff5669b/1/QjHzDrMOcCIV1-2DnmksXR9frcw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/8271ff-230a-46dc-a00a-bfb90ff5669b/1/QjHzDrMOcCIV1-2DnmksXR9frcw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:a9:6d:c2:f3:fe:df:56:d8:1f:59:33:c8:85:05:c3:ab:12:
         9c:de:10:ef:51:14:1e:d1:c0:3c:95:6e:64:30:e3:73:73:41:
         35:0d:b0:21:29:2f:e2:f2:6f:64:7b:c9:03:ff:77:21:6c:a6:
         ca:66:79:47:d6:e2:7a:58:57:d1:d8:11:4b:0a:bf:6c:70:c4:
         09:39:d8:c0:fe:d2:56:27:56:a0:38:00:dd:df:b6:7f:b6:3e:
         9f:5a:df:5b:a1:86:b4:5e:01:cd:9e:99:ad:e5:3b:5a:9c:6a:
         33:f6:73:73:60:d2:48:61:51:58:86:fb:a0:9a:e9:69:51:a4:
         ae:23:34:87:63:5a:76:d5:bc:81:e1:2c:f6:83:3f:34:78:0b:
         2f:be:4f:36:b5:9a:44:a9:9d:51:81:f8:8f:04:b5:da:3d:bc:
         3a:a0:90:8a:5e:27:f4:9a:e9:46:a6:1e:b0:74:e9:3b:79:94:
         55:69:2b:42:e7:ed:4d:10:aa:de:59:b7:ab:a0:89:57:ce:c6:
         f2:99:ae:a4:83:90:a5:f7:5c:2c:ac:2e:95:4d:a6:41:51:87:
         7c:c9:f1:5c:9a:a5:d3:1f:63:77:62:6b:4d:ae:f7:f8:e5:d1:
         a5:7c:d2:69:1f:28:83:02:de:4c:5a:4f:a7:7a:15:07:3e:5f:
         f8:cc:0b:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYUzuJqn3tqNB/YeyARe1u6MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyMzFmMzBlYjMwZTcwMjIxNWQ3ZWQ4MzllNjkyYzVkMWY1
ZmFkY2MwHhcNMjIxMjIxMDgwNjU0WhcNMjIxMjIyMDgwNjU0WjAzMTEwLwYDVQQD
Eyg0ZWZlNmVhNmQxNDQwYzgzOWI0MWUxMzU3NTZhZWY0MGEyZmQ0MWI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHCFhj95ZM/r+ykHJkq+MAlctUkQ
EHaCtL9yOFwd3KeRkMIDA/z2ESgu1OSvhxc4S708GL3nR6JHwYk2zbCZmg6Oacp9
SQXExfRMf+fiE7XoUGR4I4gO+8ol+LgHExavQZk8/gSZGcS9YkHzcGqip/Zr3tkG
kxE+rwTKHCuaGzCOIxjveDqdLcK/K3Ih5lCWqVNIQ27McQZFWTAqDZCyrHWWVBIx
7c3z1mqZ0eM9FSlw3D2a6wk6RMRZVb6FZ5Y39RT7zLJzFg8o0GlN8YosbfTRDoXI
uXODvfTs0vR5y4bRddqZkTxDEAvhsDmwWKK8CvslN9eLXQAWohewV8jwTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE7+bqbRRAyDm0HhNXVq70Ci/UG1MB8GA1UdIwQY
MBaAFEIx8w6zDnAiFdftg55pLF0fX63MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWpIekRyTU9jQ0lWMS0yRG5ta3NYUjlmcmN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS84MjcxZmYtMjMwYS00NmRjLWEwMGEt
YmZiOTBmZjU2NjliLzEvUWpIekRyTU9jQ0lWMS0yRG5ta3NYUjlmcmN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS84MjcxZmYtMjMwYS00NmRjLWEwMGEtYmZiOTBmZjU2Njli
LzEvUWpIekRyTU9jQ0lWMS0yRG5ta3NYUjlmcmN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASKltwvP+
31bYH1kzyIUFw6sSnN4Q71EUHtHAPJVuZDDjc3NBNQ2wISkv4vJvZHvJA/93IWym
ymZ5R9bielhX0dgRSwq/bHDECTnYwP7SVidWoDgA3d+2f7Y+n1rfW6GGtF4BzZ6Z
reU7WpxqM/Zzc2DSSGFRWIb7oJrpaVGkriM0h2NadtW8geEs9oM/NHgLL75PNrWa
RKmdUYH4jwS12j28OqCQil4n9JrpRqYesHTpO3mUVWkrQuftTRCq3lm3q6CJV87G
8pmupIOQpfdcLKwulU2mQVGHfMnxXJql0x9jd2JrTa73+OXRpXzSaR8ogwLeTFpP
p3oVBz5f+MwLTw==
-----END CERTIFICATE-----