Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/0d98b2-cc04-46d9-8017-78909573a98b/1/lC3ZL0IKKDNF6pPE0x3qqr-w-ks.mft
File:                     lC3ZL0IKKDNF6pPE0x3qqr-w-ks.mft (raw, json)
Hash identifier:          joDWpFrIet3uS47uCzT1bh0fXcrR1Nv+i4JFVstZGCs=
Subject key identifier:   07:4C:B6:B4:91:EE:41:F5:17:73:E7:A9:6E:DA:40:17:08:ED:E2:9A
Authority key identifier: 94:2D:D9:2F:42:0A:28:33:45:EA:93:C4:D3:1D:EA:AA:BF:B0:FA:4B
Certificate issuer:       /CN=942dd92f420a283345ea93c4d31deaaabfb0fa4b
Certificate serial:       0187127C001594D0128099C126260D20B4C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lC3ZL0IKKDNF6pPE0x3qqr-w-ks.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/0d98b2-cc04-46d9-8017-78909573a98b/1/lC3ZL0IKKDNF6pPE0x3qqr-w-ks.mft
Manifest number:          0D04
Signing time:             Fri 24 Mar 2023 07:18:48 +0000
Manifest this update:     Fri 24 Mar 2023 07:18:48 +0000
Manifest next update:     Sat 25 Mar 2023 07:18:48 +0000
Files and hashes:         1: DxR_E7-c_QoiTA1czUfes7bGHuI.roa (hash: QnBsXp6gyPAoi066pkMXKixIIDLwXxp5gifyB5hD8R8=)
                          2: PQMjEX4FV4nQMnM5KjmOyYaZsHQ.roa (hash: BczZ8hMARcctYPWNR9f3Fryz+CA9EWfyVQqKs0JydDg=)
                          3: lC3ZL0IKKDNF6pPE0x3qqr-w-ks.crl (hash: MYx+C+6i1SMrvqIdDdGdaXJJXZOJdl2Z3s+tFqqcFao=)
                          4: m9C8XoFJweb1PUnonyNYSn2bZ9s.roa (hash: Z1VddP8gTCGFLSocKyzqlT7GjZMRXLT9jiEk57/Nm/g=)
                          5: pzlAT_32U2lwLgI7KJ84fhM9V10.roa (hash: Vw71TmBGpDJZIdKo9PHDT3nk6PwNFMRinzzN5NRnvrE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:12:7c:00:15:94:d0:12:80:99:c1:26:26:0d:20:b4:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=942dd92f420a283345ea93c4d31deaaabfb0fa4b
        Validity
            Not Before: Mar 24 07:18:48 2023 GMT
            Not After : Mar 25 07:18:48 2023 GMT
        Subject: CN=074cb6b491ee41f51773e7a96eda401708ede29a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:21:33:4e:8b:27:a8:39:a7:fb:e2:de:cb:d1:
                    7e:0a:10:b8:15:03:38:9a:46:2c:9b:23:7c:dc:ef:
                    b0:5d:20:b4:7c:e4:4e:51:a9:2b:96:03:77:8d:c1:
                    7b:34:99:79:7d:b4:b4:64:bf:3d:48:0e:3d:4a:72:
                    44:f8:0c:d9:40:98:7b:5b:ba:05:da:bf:bb:f3:1e:
                    df:85:d6:2f:1f:8d:85:9a:a7:0c:f3:13:b1:b6:c4:
                    84:a9:3d:71:b5:9b:a7:a1:55:e6:6a:20:c5:a3:95:
                    c3:5d:5a:c2:f1:ca:cd:2c:16:29:0e:43:1c:2f:77:
                    b1:db:2f:60:ce:7f:92:9d:7d:c6:d2:f8:a1:4c:2f:
                    f6:1a:d6:4f:22:f2:6f:ae:b0:38:16:52:4f:59:29:
                    2f:8a:76:5f:c7:ba:1b:1a:3c:68:d4:6a:70:e1:f1:
                    a9:2b:f2:91:83:8f:30:3d:61:57:12:29:07:af:a4:
                    e6:e1:a0:df:a9:fb:08:ce:6f:3b:db:c8:57:3e:c4:
                    7c:a3:46:9b:7a:f1:e8:61:9e:e3:e8:98:2f:2f:a6:
                    a4:37:28:27:37:f5:96:98:74:85:9e:b1:91:c9:7c:
                    c8:3c:c2:41:80:78:9b:0d:aa:4f:cf:19:ed:4c:fe:
                    d3:47:87:d6:7a:e0:64:45:62:68:9d:f0:71:4b:85:
                    32:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:4C:B6:B4:91:EE:41:F5:17:73:E7:A9:6E:DA:40:17:08:ED:E2:9A
            X509v3 Authority Key Identifier:
                keyid:94:2D:D9:2F:42:0A:28:33:45:EA:93:C4:D3:1D:EA:AA:BF:B0:FA:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lC3ZL0IKKDNF6pPE0x3qqr-w-ks.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0d98b2-cc04-46d9-8017-78909573a98b/1/lC3ZL0IKKDNF6pPE0x3qqr-w-ks.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0d98b2-cc04-46d9-8017-78909573a98b/1/lC3ZL0IKKDNF6pPE0x3qqr-w-ks.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:b5:6b:11:b0:37:2d:00:b6:2d:92:1f:7f:a0:9a:bf:a8:70:
         e0:ce:35:90:4e:48:a5:16:db:e4:ca:44:6c:58:6b:d6:5a:fc:
         a9:89:2f:e8:3b:c5:83:59:3e:71:bc:db:13:51:35:91:67:b0:
         38:36:3c:8c:f8:24:23:58:f6:6a:7e:f9:4b:35:8d:5a:87:63:
         a7:a7:53:cb:6f:f9:e1:db:06:e3:b2:2d:92:b0:0f:e1:ea:c0:
         31:e8:2f:b3:44:40:42:10:67:ba:02:b3:43:78:14:64:ff:ec:
         79:91:7a:aa:ad:d8:b9:3e:ab:49:39:b9:ea:83:a0:8a:07:74:
         4d:5d:d7:9b:71:2f:9b:42:eb:27:b4:21:d1:fb:e4:f8:40:c3:
         d3:8b:31:af:4e:01:5d:d4:74:b4:95:82:02:0d:5f:67:09:ae:
         2f:39:4f:68:72:40:fc:e9:5a:2c:06:6b:6f:65:c1:29:74:08:
         2d:ef:f3:c0:51:b9:2c:96:96:2f:43:0a:00:a0:d2:4c:cc:f1:
         66:5d:41:42:6e:a9:76:4e:90:4e:71:47:19:fd:f5:de:9c:63:
         db:0b:6b:7b:e1:4c:e6:1f:2f:a6:33:d0:aa:81:ea:c5:ce:c3:
         69:66:47:a5:12:8d:59:aa:42:06:98:66:74:e0:a4:60:a5:b3:
         ab:3f:ee:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYcSfAAVlNASgJnBJiYNILTBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0MmRkOTJmNDIwYTI4MzM0NWVhOTNjNGQzMWRlYWFhYmZi
MGZhNGIwHhcNMjMwMzI0MDcxODQ4WhcNMjMwMzI1MDcxODQ4WjAzMTEwLwYDVQQD
EygwNzRjYjZiNDkxZWU0MWY1MTc3M2U3YTk2ZWRhNDAxNzA4ZWRlMjlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSEzTosnqDmn++Ley9F+ChC4FQM4
mkYsmyN83O+wXSC0fOROUakrlgN3jcF7NJl5fbS0ZL89SA49SnJE+AzZQJh7W7oF
2r+78x7fhdYvH42FmqcM8xOxtsSEqT1xtZunoVXmaiDFo5XDXVrC8crNLBYpDkMc
L3ex2y9gzn+SnX3G0vihTC/2GtZPIvJvrrA4FlJPWSkvinZfx7obGjxo1Gpw4fGp
K/KRg48wPWFXEikHr6Tm4aDfqfsIzm8728hXPsR8o0abevHoYZ7j6JgvL6akNygn
N/WWmHSFnrGRyXzIPMJBgHibDapPzxntTP7TR4fWeuBkRWJonfBxS4UylwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAdMtrSR7kH1F3PnqW7aQBcI7eKaMB8GA1UdIwQY
MBaAFJQt2S9CCigzReqTxNMd6qq/sPpLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEMzWkwwSUtLRE5GNnBQRTB4M3Fxci13LWtzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8wZDk4YjItY2MwNC00NmQ5LTgwMTct
Nzg5MDk1NzNhOThiLzEvbEMzWkwwSUtLRE5GNnBQRTB4M3Fxci13LWtzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8wZDk4YjItY2MwNC00NmQ5LTgwMTctNzg5MDk1NzNhOThi
LzEvbEMzWkwwSUtLRE5GNnBQRTB4M3Fxci13LWtzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATLVrEbA3
LQC2LZIff6Cav6hw4M41kE5IpRbb5MpEbFhr1lr8qYkv6DvFg1k+cbzbE1E1kWew
ODY8jPgkI1j2an75SzWNWodjp6dTy2/54dsG47ItkrAP4erAMegvs0RAQhBnugKz
Q3gUZP/seZF6qq3YuT6rSTm56oOgigd0TV3Xm3Evm0LrJ7Qh0fvk+EDD04sxr04B
XdR0tJWCAg1fZwmuLzlPaHJA/OlaLAZrb2XBKXQILe/zwFG5LJaWL0MKAKDSTMzx
Zl1BQm6pdk6QTnFHGf313pxj2wtre+FM5h8vpjPQqoHqxc7DaWZHpRKNWapCBphm
dOCkYKWzqz/uQw==
-----END CERTIFICATE-----