Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c6e175-75b9-4e89-83e3-79c78e0ed6e7/1/HPckV9YKXOUL81DcDL9fwHyxy0U.mft
File:                     HPckV9YKXOUL81DcDL9fwHyxy0U.mft (raw, json)
Hash identifier:          hAXqUO0ychcO9gKxUVZTwPCpZzE030fbJv4yTfb0UYA=
Subject key identifier:   FD:40:08:33:88:60:15:63:29:C2:82:A6:BD:A1:F6:20:6F:FB:41:21
Authority key identifier: 1C:F7:24:57:D6:0A:5C:E5:0B:F3:50:DC:0C:BF:5F:C0:7C:B1:CB:45
Certificate issuer:       /CN=1cf72457d60a5ce50bf350dc0cbf5fc07cb1cb45
Certificate serial:       0181FDA4AC5CB55C12A19D1D3C55EDBB36FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HPckV9YKXOUL81DcDL9fwHyxy0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/c6e175-75b9-4e89-83e3-79c78e0ed6e7/1/HPckV9YKXOUL81DcDL9fwHyxy0U.mft
Manifest number:          0A06
Signing time:             Thu 14 Jul 2022 16:57:16 +0000
Manifest this update:     Thu 14 Jul 2022 16:57:16 +0000
Manifest next update:     Fri 15 Jul 2022 16:57:16 +0000
Files and hashes:         1: DMT23ba-5iEWN0TxiflGKhDxI_M.roa (hash: CuFPmLri5kT1uJ/AsYyqQntcoBqoeLSWR68UWIuZjiY=)
                          2: HPckV9YKXOUL81DcDL9fwHyxy0U.crl (hash: /cmfhHZClkoaPrD1vAJSliFpFY6h3iylaCF5ImjUsAA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:81:fd:a4:ac:5c:b5:5c:12:a1:9d:1d:3c:55:ed:bb:36:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1cf72457d60a5ce50bf350dc0cbf5fc07cb1cb45
        Validity
            Not Before: Jul 14 16:57:16 2022 GMT
            Not After : Jul 15 16:57:16 2022 GMT
        Subject: CN=fd4008338860156329c282a6bda1f6206ffb4121
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b3:d3:11:7e:a2:95:b1:78:79:1a:d5:9a:ba:
                    90:6a:b3:20:44:9f:74:c8:ac:ae:f4:42:84:5b:29:
                    ed:5f:4d:8d:a2:96:38:84:bf:e8:26:ad:e1:5c:ae:
                    cf:37:71:0b:b0:59:4a:f4:77:68:44:73:02:79:80:
                    c8:e5:11:d7:c3:ee:29:9a:29:38:61:45:3b:f3:cf:
                    cd:a4:82:4d:c2:b3:07:db:ab:13:e1:26:50:55:a9:
                    f6:1b:68:18:df:5b:86:73:1d:b5:cb:cd:24:de:a7:
                    19:fa:b8:18:db:74:c7:41:b9:48:07:53:c1:67:c1:
                    f5:d0:f7:fd:f4:86:20:34:1b:02:61:67:2d:c2:f6:
                    8e:49:68:11:12:42:77:1b:3e:2d:96:04:27:c8:fd:
                    88:4f:27:08:30:7f:35:11:eb:4c:70:a8:b2:4e:ab:
                    3e:fe:bd:6b:56:cb:db:c6:01:fe:2e:9a:0e:de:26:
                    78:e4:6d:ef:b6:3c:28:79:dd:02:0c:00:1e:11:f6:
                    a4:54:6e:90:88:a5:d2:1c:e7:16:73:e6:7e:af:7b:
                    7a:e5:0a:c2:c5:7a:93:e5:1c:72:a4:7b:1c:9a:24:
                    6a:55:72:43:9f:59:4c:1e:2d:a7:92:d2:2d:27:d9:
                    aa:9b:3c:19:e1:ec:03:0c:91:c7:f4:1e:db:03:7a:
                    72:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:40:08:33:88:60:15:63:29:C2:82:A6:BD:A1:F6:20:6F:FB:41:21
            X509v3 Authority Key Identifier:
                keyid:1C:F7:24:57:D6:0A:5C:E5:0B:F3:50:DC:0C:BF:5F:C0:7C:B1:CB:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HPckV9YKXOUL81DcDL9fwHyxy0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c6e175-75b9-4e89-83e3-79c78e0ed6e7/1/HPckV9YKXOUL81DcDL9fwHyxy0U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c6e175-75b9-4e89-83e3-79c78e0ed6e7/1/HPckV9YKXOUL81DcDL9fwHyxy0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:3a:95:bf:e4:01:3d:c3:9d:f6:44:51:20:a0:a6:bc:86:64:
         52:d9:4e:4b:03:74:37:d6:ae:a3:df:1a:f2:4f:1a:c8:31:07:
         3a:b6:5e:96:57:01:7e:6e:f9:14:3f:f1:d3:01:f9:8e:ba:29:
         1e:ab:a3:56:88:71:ab:eb:b0:f2:ce:b2:04:b1:26:2a:b0:9f:
         4e:b8:c4:43:df:25:e0:aa:fa:49:ce:b6:19:f2:89:2e:b4:a0:
         43:e5:a9:fa:9c:25:b3:92:a7:9d:95:a4:ce:d2:dd:a3:96:b5:
         96:cb:f7:0b:c3:58:1c:81:83:08:75:72:8f:a3:62:20:1e:c8:
         56:e3:63:7f:12:83:ae:b0:f1:01:08:03:98:90:cf:46:79:34:
         e8:2f:d3:d1:bf:f9:ff:a7:17:97:59:42:bb:ed:58:db:3c:07:
         7e:af:48:17:1f:86:55:60:83:3c:60:67:cb:d2:a3:ff:64:84:
         89:0e:5f:e7:b3:06:cf:c3:b5:25:59:3d:b3:85:c6:fe:64:9d:
         01:07:14:f0:02:da:6d:03:18:6b:be:83:2e:f3:d0:fb:41:a7:
         db:26:f6:93:22:fd:7f:59:6f:a1:6e:3e:55:5f:86:73:44:b1:
         49:c3:db:2f:9c:22:36:85:6b:74:50:d5:46:75:5a:c0:a1:45:
         2a:df:2d:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYH9pKxctVwSoZ0dPFXtuzb6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjZjcyNDU3ZDYwYTVjZTUwYmYzNTBkYzBjYmY1ZmMwN2Ni
MWNiNDUwHhcNMjIwNzE0MTY1NzE2WhcNMjIwNzE1MTY1NzE2WjAzMTEwLwYDVQQD
EyhmZDQwMDgzMzg4NjAxNTYzMjljMjgyYTZiZGExZjYyMDZmZmI0MTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7PTEX6ilbF4eRrVmrqQarMgRJ90
yKyu9EKEWyntX02NopY4hL/oJq3hXK7PN3ELsFlK9HdoRHMCeYDI5RHXw+4pmik4
YUU788/NpIJNwrMH26sT4SZQVan2G2gY31uGcx21y80k3qcZ+rgY23THQblIB1PB
Z8H10Pf99IYgNBsCYWctwvaOSWgREkJ3Gz4tlgQnyP2ITycIMH81EetMcKiyTqs+
/r1rVsvbxgH+LpoO3iZ45G3vtjwoed0CDAAeEfakVG6QiKXSHOcWc+Z+r3t65QrC
xXqT5RxypHscmiRqVXJDn1lMHi2nktItJ9mqmzwZ4ewDDJHH9B7bA3pyPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP1ACDOIYBVjKcKCpr2h9iBv+0EhMB8GA1UdIwQY
MBaAFBz3JFfWClzlC/NQ3Ay/X8B8sctFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFBja1Y5WUtYT1VMODFEY0RMOWZ3SHl4eTBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9jNmUxNzUtNzViOS00ZTg5LTgzZTMt
NzljNzhlMGVkNmU3LzEvSFBja1Y5WUtYT1VMODFEY0RMOWZ3SHl4eTBVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS9jNmUxNzUtNzViOS00ZTg5LTgzZTMtNzljNzhlMGVkNmU3
LzEvSFBja1Y5WUtYT1VMODFEY0RMOWZ3SHl4eTBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADTqVv+QB
PcOd9kRRIKCmvIZkUtlOSwN0N9auo98a8k8ayDEHOrZellcBfm75FD/x0wH5jrop
HqujVohxq+uw8s6yBLEmKrCfTrjEQ98l4Kr6Sc62GfKJLrSgQ+Wp+pwls5KnnZWk
ztLdo5a1lsv3C8NYHIGDCHVyj6NiIB7IVuNjfxKDrrDxAQgDmJDPRnk06C/T0b/5
/6cXl1lCu+1Y2zwHfq9IFx+GVWCDPGBny9Kj/2SEiQ5f57MGz8O1JVk9s4XG/mSd
AQcU8ALabQMYa76DLvPQ+0Gn2yb2kyL9f1lvoW4+VV+Gc0SxScPbL5wiNoVrdFDV
RnVawKFFKt8tKA==
-----END CERTIFICATE-----