Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/72d226-c3b0-41f3-b4db-83fd7382ff13/1/ULkKXhWLoJCP3IPMQkP-QMbatCM.mft
File:                     ULkKXhWLoJCP3IPMQkP-QMbatCM.mft (raw, json)
Hash identifier:          5pniwfU53/pCqkjhn9qAId1lzAEbYruYzPR+Mb1QU1Q=
Subject key identifier:   31:B2:60:59:D1:F5:EB:39:80:14:B5:3F:CC:C8:78:F4:D5:25:A6:1D
Authority key identifier: 50:B9:0A:5E:15:8B:A0:90:8F:DC:83:CC:42:43:FE:40:C6:DA:B4:23
Certificate issuer:       /CN=50b90a5e158ba0908fdc83cc4243fe40c6dab423
Certificate serial:       018557154733E23DD481D74A4015A1EB35C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ULkKXhWLoJCP3IPMQkP-QMbatCM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/72d226-c3b0-41f3-b4db-83fd7382ff13/1/ULkKXhWLoJCP3IPMQkP-QMbatCM.mft
Manifest number:          0C1B
Signing time:             Wed 28 Dec 2022 04:54:50 +0000
Manifest this update:     Wed 28 Dec 2022 04:54:50 +0000
Manifest next update:     Thu 29 Dec 2022 04:54:50 +0000
Files and hashes:         1: 4BvQ7Hx6GinJS_Fpk-o_oVZRspE.roa (hash: 7Yszcssuv+XT6Vls+/RcFVBhEyT2qhvZ2ltSaMYlpsc=)
                          2: 9tV2xM4DkvtJrDh_c50j4qCy5sU.roa (hash: bPrrZwZ4DcMMM+ITD7dMPLzRQgXWOB8nvqg2ziwFh1Q=)
                          3: ATwCQL75QAs5BFAqAbVhregOciY.roa (hash: OnDI+RjIXKI27zj/Q/QqLQ87gQYG2XWJL5ryeyoiQXg=)
                          4: HP48JK7iXHGKfYMH4QxxwrogT8k.roa (hash: y89ow+0zwNc2uBME9vdJusJnJ91XYviEy4pq7UNyV+4=)
                          5: P7P8DRIS5L8Q6WuYieSSCLJoVcs.roa (hash: l7CXbGKeCMHxPMtL3NT+5YtLN0aQvx3MDNkCBhXkY3U=)
                          6: SBHzrdui31lO-QNCcdTXAKGB2Kc.roa (hash: aHEdjrA/9buKBeWF1p2/O+N+DHAm4++ou4aIKgk7zSc=)
                          7: ULkKXhWLoJCP3IPMQkP-QMbatCM.crl (hash: W501qkMDjuFvkfZT/QrflOk2+VI/yABrekT1EM7sDhc=)
                          8: agf1rHEXuaw6PqYvlJKc_ttMDNI.roa (hash: Mlkch72AUplJsFlGfXRx28F95loZZhlYA74o/vTCBb0=)
                          9: antKLAtMZFwhXE5esfwDlKvF1_0.roa (hash: wSHBJCxX9EMMtWrXsDYiUDZBmRknJIW5tSbTEHhpMXU=)
                          10: k1HKJay6xA66KJGNxQq3FD_2iRE.roa (hash: fgOI7Aq0Zk8ZYr1it310GhZPpydgZfhZt1IxMrpnOtY=)
                          11: kYNLFly_U7IAi4q4wYhEssI3H9g.roa (hash: Tt4yS7xUhhgtgQWtGQoGUOoNjw4tbZmaMAuv6hHzN74=)
                          12: l1ptNtFtXX9Htc1I8LPpn91Q630.roa (hash: fi30l6unmDlK+QzccAH3Gs0Yw2tubUsdUa6aaZkl1SU=)
                          13: x_s1VytXk31IV84iXIAb5yTE1lE.roa (hash: bPIYvxA7nhsO8XTtcdz9PDaPdz7ifph22k4iG3nHdOA=)
                          14: ytdjfPsdhh7NgWUO2orz4R0usJA.roa (hash: ol4WYKgSXF1oXMJRYGiEbX+zKfSWPElKELWxAU+NSAA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:57:15:47:33:e2:3d:d4:81:d7:4a:40:15:a1:eb:35:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50b90a5e158ba0908fdc83cc4243fe40c6dab423
        Validity
            Not Before: Dec 28 04:54:50 2022 GMT
            Not After : Dec 29 04:54:50 2022 GMT
        Subject: CN=31b26059d1f5eb398014b53fccc878f4d525a61d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:57:35:38:56:96:a5:a9:0c:b6:23:1e:06:06:
                    be:6b:ba:17:c2:b3:d9:27:eb:ef:a1:1c:8b:9c:e0:
                    b1:1d:ce:93:e6:4e:77:90:ec:58:0c:0e:16:5a:89:
                    d3:96:a3:7d:99:70:fe:e6:3c:15:24:f5:32:19:9e:
                    43:86:4c:f3:85:f7:71:e2:b3:3e:6c:06:a2:55:79:
                    0b:6c:af:5b:12:2f:a7:ab:c4:47:cc:69:c4:dd:48:
                    60:4a:e8:ea:d7:32:ad:5f:79:57:02:ee:f2:88:60:
                    aa:cd:59:06:45:54:fc:f5:e4:34:1b:ac:05:73:72:
                    de:36:91:b4:62:46:d5:96:dd:fe:08:8a:fa:7f:57:
                    9b:9c:8b:ab:f2:03:db:9a:f0:74:3a:b0:f3:de:be:
                    60:68:87:aa:7e:43:04:80:7b:3d:26:f2:6a:a5:18:
                    88:fb:85:59:01:f9:89:82:ac:f8:92:cb:14:cf:56:
                    a3:bf:89:66:c7:57:3c:80:ad:6c:a5:c8:93:78:8e:
                    3b:72:88:44:a6:6a:61:48:cc:db:ca:93:e5:38:29:
                    10:fa:a4:d3:53:c8:49:6e:b6:33:3b:c3:12:cb:79:
                    39:4a:1b:91:2a:db:f1:af:47:84:94:3b:4b:0e:2c:
                    cb:ec:83:49:ef:6c:2f:af:a4:9e:47:32:3f:74:5a:
                    cb:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:B2:60:59:D1:F5:EB:39:80:14:B5:3F:CC:C8:78:F4:D5:25:A6:1D
            X509v3 Authority Key Identifier:
                keyid:50:B9:0A:5E:15:8B:A0:90:8F:DC:83:CC:42:43:FE:40:C6:DA:B4:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULkKXhWLoJCP3IPMQkP-QMbatCM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/72d226-c3b0-41f3-b4db-83fd7382ff13/1/ULkKXhWLoJCP3IPMQkP-QMbatCM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/72d226-c3b0-41f3-b4db-83fd7382ff13/1/ULkKXhWLoJCP3IPMQkP-QMbatCM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:7f:8f:22:bb:a0:9a:6d:05:8b:92:cd:54:21:a2:52:4e:69:
         95:db:d5:d7:4b:88:bd:e2:3a:5a:3f:9a:4e:37:2c:67:1e:6b:
         50:43:ad:da:04:b1:4e:39:70:30:7f:0d:2d:53:61:b7:fa:3f:
         ef:01:68:2f:78:23:1d:2e:6b:76:ef:5e:b3:02:74:0c:dd:07:
         3d:ce:41:0f:99:ee:95:ef:fa:e8:f0:3e:22:63:0c:81:23:8a:
         f8:da:ed:b0:59:27:f2:ee:cd:c1:33:4c:d3:66:e0:e7:19:0d:
         bf:67:0c:34:db:65:d8:6c:ee:78:37:b7:e8:bb:17:0e:ef:40:
         c3:af:5b:cf:f2:f3:10:4b:c6:9b:32:29:4b:ee:b3:91:bc:76:
         eb:c8:33:79:70:b9:9e:bf:2b:d7:3e:73:43:2c:a2:61:a3:f9:
         fd:92:f5:33:72:65:6b:f7:34:b7:e5:d0:57:5a:2f:c9:8e:ec:
         89:01:de:52:60:b3:d5:d0:93:e5:bb:38:47:f6:5f:44:8d:2a:
         1b:ec:2a:e6:ed:b6:02:cb:9b:51:22:e7:d9:3f:ef:ff:24:7a:
         1a:82:12:6f:56:d9:bb:4d:1e:d2:22:af:38:ec:13:d2:fa:98:
         a5:41:69:5d:23:87:50:c5:d5:7c:bc:49:6f:b7:f3:a0:5b:62:
         c6:51:38:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYVXFUcz4j3UgddKQBWh6zXEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwYjkwYTVlMTU4YmEwOTA4ZmRjODNjYzQyNDNmZTQwYzZk
YWI0MjMwHhcNMjIxMjI4MDQ1NDUwWhcNMjIxMjI5MDQ1NDUwWjAzMTEwLwYDVQQD
EygzMWIyNjA1OWQxZjVlYjM5ODAxNGI1M2ZjY2M4NzhmNGQ1MjVhNjFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1c1OFaWpakMtiMeBga+a7oXwrPZ
J+vvoRyLnOCxHc6T5k53kOxYDA4WWonTlqN9mXD+5jwVJPUyGZ5Dhkzzhfdx4rM+
bAaiVXkLbK9bEi+nq8RHzGnE3UhgSujq1zKtX3lXAu7yiGCqzVkGRVT89eQ0G6wF
c3LeNpG0YkbVlt3+CIr6f1ebnIur8gPbmvB0OrDz3r5gaIeqfkMEgHs9JvJqpRiI
+4VZAfmJgqz4kssUz1ajv4lmx1c8gK1spciTeI47cohEpmphSMzbypPlOCkQ+qTT
U8hJbrYzO8MSy3k5ShuRKtvxr0eElDtLDizL7INJ72wvr6SeRzI/dFrLWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDGyYFnR9es5gBS1P8zIePTVJaYdMB8GA1UdIwQY
MBaAFFC5Cl4Vi6CQj9yDzEJD/kDG2rQjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUxrS1hoV0xvSkNQM0lQTVFrUC1RTWJhdENNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi83MmQyMjYtYzNiMC00MWYzLWI0ZGIt
ODNmZDczODJmZjEzLzEvVUxrS1hoV0xvSkNQM0lQTVFrUC1RTWJhdENNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi83MmQyMjYtYzNiMC00MWYzLWI0ZGItODNmZDczODJmZjEz
LzEvVUxrS1hoV0xvSkNQM0lQTVFrUC1RTWJhdENNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN3+PIrug
mm0Fi5LNVCGiUk5pldvV10uIveI6Wj+aTjcsZx5rUEOt2gSxTjlwMH8NLVNht/o/
7wFoL3gjHS5rdu9eswJ0DN0HPc5BD5nule/66PA+ImMMgSOK+NrtsFkn8u7NwTNM
02bg5xkNv2cMNNtl2GzueDe36LsXDu9Aw69bz/LzEEvGmzIpS+6zkbx268gzeXC5
nr8r1z5zQyyiYaP5/ZL1M3Jla/c0t+XQV1ovyY7siQHeUmCz1dCT5bs4R/ZfRI0q
G+wq5u22AsubUSLn2T/v/yR6GoISb1bZu00e0iKvOOwT0vqYpUFpXSOHUMXVfLxJ
b7fzoFtixlE4XA==
-----END CERTIFICATE-----