Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/29d49b-74c8-4cbe-94a9-d0fce0e7635e/1/2qJKiUony65hwK-NTzH3Xoqu_-w.mft
File:                     2qJKiUony65hwK-NTzH3Xoqu_-w.mft (raw, json)
Hash identifier:          pjEDRaqGMUq/1znaReeJY7TZE3bUi8s9ACKwKPhmn5g=
Subject key identifier:   D9:56:10:D9:80:13:1C:3F:2A:E5:95:09:D3:6D:7C:05:4B:60:E7:5F
Authority key identifier: DA:A2:4A:89:4A:27:CB:AE:61:C0:AF:8D:4F:31:F7:5E:8A:AE:FF:EC
Certificate issuer:       /CN=daa24a894a27cbae61c0af8d4f31f75e8aaeffec
Certificate serial:       740C25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2qJKiUony65hwK-NTzH3Xoqu_-w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/29d49b-74c8-4cbe-94a9-d0fce0e7635e/1/2qJKiUony65hwK-NTzH3Xoqu_-w.mft
Manifest number:          9A
Signing time:             Tue 05 Apr 2022 02:39:40 +0000
Manifest this update:     Tue 05 Apr 2022 02:39:40 +0000
Manifest next update:     Wed 06 Apr 2022 02:39:40 +0000
Files and hashes:         1: 0Q_oa8XUuJTGpTwEMG76qWEJ58M.roa (hash: RntT0DDlJ4SCjmPAK4CzXCHfgivfqYCApCLpxxoqBUg=)
                          2: 2qJKiUony65hwK-NTzH3Xoqu_-w.crl (hash: 6aiFrN3KhH/oDRJjliAZbaaEeZcKposaORJnGu78Wtg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7605285 (0x740c25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=daa24a894a27cbae61c0af8d4f31f75e8aaeffec
        Validity
            Not Before: Apr  5 02:39:40 2022 GMT
            Not After : Apr  6 02:39:40 2022 GMT
        Subject: CN=d95610d980131c3f2ae59509d36d7c054b60e75f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:83:a1:3d:2c:e1:66:45:90:f9:c7:82:f3:a4:
                    a0:57:9b:1e:a9:ba:a1:f8:09:33:22:4a:c0:aa:b7:
                    52:55:95:fd:15:7a:32:84:3f:24:34:d6:9c:f0:44:
                    f6:ad:ef:e0:d7:0e:b8:33:35:fc:4e:fd:25:af:00:
                    09:92:c0:93:01:68:f5:b5:ab:c9:14:ba:0b:31:7a:
                    fc:1b:7d:65:82:da:bb:1c:2c:2d:4e:83:5b:96:0b:
                    b3:a5:da:4c:4a:ab:4a:96:38:db:f5:d6:33:23:3e:
                    db:3f:22:8a:ca:56:79:cb:c0:2d:87:5a:31:b5:b8:
                    8e:c6:d4:3e:00:d6:8d:b8:23:a9:5c:10:32:d9:78:
                    10:24:a3:5b:8b:ac:90:6c:21:bd:ce:47:64:b6:6b:
                    d6:a3:1b:12:45:bd:df:18:81:43:52:73:7b:c5:7e:
                    e3:44:ad:30:ef:33:47:b5:ef:bc:dd:d7:56:a7:3b:
                    67:77:2d:f4:41:da:5e:dd:11:3f:c6:53:0b:ab:19:
                    90:f8:74:fc:63:f1:49:99:69:9a:17:3a:4e:23:54:
                    71:71:0d:21:e5:57:0b:1b:4f:de:0a:1a:e6:17:91:
                    26:0f:44:01:69:e6:d4:9a:79:45:69:94:2f:a7:6d:
                    9f:70:6c:b5:5b:48:49:1a:f2:7f:a1:d9:ec:dc:85:
                    4b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:56:10:D9:80:13:1C:3F:2A:E5:95:09:D3:6D:7C:05:4B:60:E7:5F
            X509v3 Authority Key Identifier:
                keyid:DA:A2:4A:89:4A:27:CB:AE:61:C0:AF:8D:4F:31:F7:5E:8A:AE:FF:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qJKiUony65hwK-NTzH3Xoqu_-w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/29d49b-74c8-4cbe-94a9-d0fce0e7635e/1/2qJKiUony65hwK-NTzH3Xoqu_-w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/29d49b-74c8-4cbe-94a9-d0fce0e7635e/1/2qJKiUony65hwK-NTzH3Xoqu_-w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:8d:e2:c9:11:9f:6d:3e:ac:02:ba:47:ba:8b:3b:cc:81:b7:
         40:2d:c6:d4:8f:d4:92:36:c6:15:59:92:b0:54:b8:41:87:94:
         80:d6:0d:fc:6b:1e:23:77:37:4b:37:76:ea:a2:3e:34:61:8c:
         92:fb:cd:7b:da:fd:ad:f0:3c:1c:a5:94:eb:90:4c:9f:bf:6a:
         be:b9:eb:04:5b:5b:ec:b9:c7:7d:0a:26:83:92:2f:cb:a3:2d:
         00:b1:6b:a4:ad:95:11:0e:0c:53:d2:e6:bc:77:2e:9d:f6:51:
         1e:f1:e6:3a:05:d9:2b:5e:74:75:81:49:7e:2b:fc:39:fb:dc:
         ff:b3:50:98:fc:8c:e0:a9:5f:82:f0:1e:ea:42:d1:75:6d:d5:
         cc:4d:d5:e2:c8:46:73:10:cb:ae:74:fb:40:d9:1f:81:82:78:
         f7:81:18:f2:f0:36:df:0e:cc:f8:00:95:c3:bb:49:3a:83:d5:
         7c:a5:f0:5c:95:61:77:54:7b:d1:57:a3:f3:80:e4:f7:2a:51:
         15:6b:02:f6:af:d7:21:cf:5d:d9:b7:db:3c:eb:e6:66:47:cc:
         2e:5f:a8:2f:dd:b5:be:f1:a7:1a:aa:9c:9f:85:26:07:be:4c:
         aa:8f:db:fe:41:35:89:69:a9:ee:f8:56:4e:89:65:d6:ad:be:
         c3:7f:74:f6
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIDdAwlMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGRh
YTI0YTg5NGEyN2NiYWU2MWMwYWY4ZDRmMzFmNzVlOGFhZWZmZWMwHhcNMjIwNDA1
MDIzOTQwWhcNMjIwNDA2MDIzOTQwWjAzMTEwLwYDVQQDEyhkOTU2MTBkOTgwMTMx
YzNmMmFlNTk1MDlkMzZkN2MwNTRiNjBlNzVmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAioOhPSzhZkWQ+ceC86SgV5seqbqh+AkzIkrAqrdSVZX9FXoy
hD8kNNac8ET2re/g1w64MzX8Tv0lrwAJksCTAWj1tavJFLoLMXr8G31lgtq7HCwt
ToNblguzpdpMSqtKljjb9dYzIz7bPyKKylZ5y8Ath1oxtbiOxtQ+ANaNuCOpXBAy
2XgQJKNbi6yQbCG9zkdktmvWoxsSRb3fGIFDUnN7xX7jRK0w7zNHte+83ddWpztn
dy30Qdpe3RE/xlMLqxmQ+HT8Y/FJmWmaFzpOI1RxcQ0h5VcLG0/eChrmF5EmD0QB
aebUmnlFaZQvp22fcGy1W0hJGvJ/odns3IVLEQIDAQABo4ICIjCCAh4wHQYDVR0O
BBYEFNlWENmAExw/KuWVCdNtfAVLYOdfMB8GA1UdIwQYMBaAFNqiSolKJ8uuYcCv
jU8x916Krv/sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
MnFKS2lVb255NjVod0stTlR6SDNYb3F1Xy13LmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9kMy8yOWQ0OWItNzRjOC00Y2JlLTk0YTktZDBmY2UwZTc2MzVlLzEv
MnFKS2lVb255NjVod0stTlR6SDNYb3F1Xy13Lm1mdDCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8y
OWQ0OWItNzRjOC00Y2JlLTk0YTktZDBmY2UwZTc2MzVlLzEvMnFKS2lVb255NjVo
d0stTlR6SDNYb3F1Xy13LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8E
BjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVY3iyRGfbT6sArpHuos7zIG3QC3G
1I/UkjbGFVmSsFS4QYeUgNYN/GseI3c3Szd26qI+NGGMkvvNe9r9rfA8HKWU65BM
n79qvrnrBFtb7LnHfQomg5Ivy6MtALFrpK2VEQ4MU9LmvHcunfZRHvHmOgXZK150
dYFJfiv8Ofvc/7NQmPyM4KlfgvAe6kLRdW3VzE3V4shGcxDLrnT7QNkfgYJ494EY
8vA23w7M+ACVw7tJOoPVfKXwXJVhd1R70Vej84Dk9ypRFWsC9q/XIc9d2bfbPOvm
ZkfMLl+oL921vvGnGqqcn4UmB75Mqo/b/kE1iWmp7vhWToll1q2+w3909g==
-----END CERTIFICATE-----