Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/ecb45d-15f3-4c4a-b396-2bef7edfa5cd/1/YBP3uJUlJQO3m5vYOuP0XbYkmJM.mft
File:                     YBP3uJUlJQO3m5vYOuP0XbYkmJM.mft (raw, json)
Hash identifier:          jSlSVxPCQ/nKZcVSyP/3ZFGWH29BthkGDqs0Zchb78I=
Subject key identifier:   EF:52:33:CD:9C:2D:9E:45:2D:9D:64:B8:3F:B1:57:95:62:E5:24:C2
Authority key identifier: 60:13:F7:B8:95:25:25:03:B7:9B:9B:D8:3A:E3:F4:5D:B6:24:98:93
Certificate issuer:       /CN=6013f7b895252503b79b9bd83ae3f45db6249893
Certificate serial:       01840D8088D254620E2A9E4173A6B018DB14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YBP3uJUlJQO3m5vYOuP0XbYkmJM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/ecb45d-15f3-4c4a-b396-2bef7edfa5cd/1/YBP3uJUlJQO3m5vYOuP0XbYkmJM.mft
Manifest number:          0B2F
Signing time:             Tue 25 Oct 2022 04:57:17 +0000
Manifest this update:     Tue 25 Oct 2022 04:57:17 +0000
Manifest next update:     Wed 26 Oct 2022 04:57:17 +0000
Files and hashes:         1: YBP3uJUlJQO3m5vYOuP0XbYkmJM.crl (hash: 4S0uoOWExFfVDvNHPVdVwwunJ++WlE8kjaXlMv1t/QM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:0d:80:88:d2:54:62:0e:2a:9e:41:73:a6:b0:18:db:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6013f7b895252503b79b9bd83ae3f45db6249893
        Validity
            Not Before: Oct 25 04:57:17 2022 GMT
            Not After : Oct 26 04:57:17 2022 GMT
        Subject: CN=ef5233cd9c2d9e452d9d64b83fb1579562e524c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:07:2a:8d:13:ec:74:3b:6c:d3:03:22:f9:b6:
                    75:0a:31:77:bb:1a:a8:2d:49:b0:8e:4e:b8:d3:65:
                    2a:c5:27:aa:0e:71:21:45:f8:34:7d:39:98:9f:3e:
                    59:6e:08:82:2a:fc:36:e6:11:69:ac:57:70:c2:f9:
                    d6:fa:e1:42:2d:bd:8e:6b:2b:43:68:6d:6f:37:cf:
                    9a:28:d5:ea:cb:cc:77:dd:8a:65:c0:f7:b5:a8:3f:
                    60:6a:81:c2:b3:85:9d:d4:0b:8a:61:49:99:12:2d:
                    be:36:99:05:88:28:53:25:2f:75:8e:43:36:ef:80:
                    7e:ab:cc:b5:e9:97:bb:fe:a2:85:b3:7b:dd:e1:b0:
                    89:d9:05:e4:69:a8:db:80:50:fe:ec:ee:41:d5:db:
                    b2:21:83:16:de:99:bd:75:7a:48:97:4e:c9:2e:d4:
                    a7:15:a6:eb:31:7e:f5:38:32:10:26:f5:6e:e2:0a:
                    3a:b6:52:14:30:ff:82:81:8f:81:21:b7:29:8f:7b:
                    c1:24:0d:9f:7f:1b:5d:45:72:53:07:30:76:59:07:
                    68:34:6a:09:91:ed:aa:03:c1:a0:15:85:b9:71:49:
                    07:64:dc:05:5a:7d:c8:3e:87:4f:4d:39:23:83:73:
                    e6:62:04:56:d0:67:dc:6e:db:92:c0:a5:53:94:9c:
                    02:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:52:33:CD:9C:2D:9E:45:2D:9D:64:B8:3F:B1:57:95:62:E5:24:C2
            X509v3 Authority Key Identifier:
                keyid:60:13:F7:B8:95:25:25:03:B7:9B:9B:D8:3A:E3:F4:5D:B6:24:98:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YBP3uJUlJQO3m5vYOuP0XbYkmJM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/ecb45d-15f3-4c4a-b396-2bef7edfa5cd/1/YBP3uJUlJQO3m5vYOuP0XbYkmJM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/ecb45d-15f3-4c4a-b396-2bef7edfa5cd/1/YBP3uJUlJQO3m5vYOuP0XbYkmJM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d5:f1:df:e1:cb:7a:a8:d2:d0:2e:8d:46:03:1f:fa:21:b4:1a:
         9e:ad:83:c7:7a:0e:08:66:4f:39:d6:8f:87:cf:fc:67:7b:0b:
         92:8b:8b:ae:a2:66:0b:e3:23:bf:69:f0:59:56:6b:09:5f:22:
         72:91:0c:06:ba:ab:e5:71:29:15:ad:99:bf:37:89:e6:db:cd:
         6d:90:bd:6d:93:19:53:69:71:3d:9f:82:cf:1c:ed:d4:97:07:
         17:2c:f4:4d:80:72:cc:3e:cd:9f:73:14:8d:12:08:3e:bb:c2:
         e0:65:1d:82:e9:29:51:65:3e:29:c0:e2:07:46:40:f6:83:9d:
         b5:fd:30:f6:f6:73:84:c5:ea:55:b8:20:c0:da:9b:a3:24:a4:
         2d:21:dc:6b:2c:e4:ad:c9:2c:d2:23:5d:03:61:01:8f:db:0b:
         3e:4b:75:88:07:f0:f6:be:c0:e8:14:ab:57:77:db:05:c5:ea:
         74:23:1c:26:0a:75:ec:20:11:d5:dd:ea:9d:d3:b8:c5:df:cf:
         8f:13:d7:48:1e:68:e2:1b:9d:98:d6:0b:e1:9d:d5:63:d2:eb:
         db:93:6a:7f:49:69:aa:02:e6:40:67:34:28:56:ba:22:2a:9c:
         6c:bc:28:77:36:d2:56:e4:fb:fa:9b:d6:ed:c8:39:23:6a:d3:
         9d:32:95:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYQNgIjSVGIOKp5Bc6awGNsUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwMTNmN2I4OTUyNTI1MDNiNzliOWJkODNhZTNmNDVkYjYy
NDk4OTMwHhcNMjIxMDI1MDQ1NzE3WhcNMjIxMDI2MDQ1NzE3WjAzMTEwLwYDVQQD
EyhlZjUyMzNjZDljMmQ5ZTQ1MmQ5ZDY0YjgzZmIxNTc5NTYyZTUyNGMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwcqjRPsdDts0wMi+bZ1CjF3uxqo
LUmwjk6402UqxSeqDnEhRfg0fTmYnz5ZbgiCKvw25hFprFdwwvnW+uFCLb2OaytD
aG1vN8+aKNXqy8x33YplwPe1qD9gaoHCs4Wd1AuKYUmZEi2+NpkFiChTJS91jkM2
74B+q8y16Ze7/qKFs3vd4bCJ2QXkaajbgFD+7O5B1duyIYMW3pm9dXpIl07JLtSn
FabrMX71ODIQJvVu4go6tlIUMP+CgY+BIbcpj3vBJA2ffxtdRXJTBzB2WQdoNGoJ
ke2qA8GgFYW5cUkHZNwFWn3IPodPTTkjg3PmYgRW0GfcbtuSwKVTlJwCSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO9SM82cLZ5FLZ1kuD+xV5Vi5STCMB8GA1UdIwQY
MBaAFGAT97iVJSUDt5ub2Drj9F22JJiTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUJQM3VKVWxKUU8zbTV2WU91UDBYYllrbUpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9lY2I0NWQtMTVmMy00YzRhLWIzOTYt
MmJlZjdlZGZhNWNkLzEvWUJQM3VKVWxKUU8zbTV2WU91UDBYYllrbUpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi9lY2I0NWQtMTVmMy00YzRhLWIzOTYtMmJlZjdlZGZhNWNk
LzEvWUJQM3VKVWxKUU8zbTV2WU91UDBYYllrbUpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1fHf4ct6
qNLQLo1GAx/6IbQanq2Dx3oOCGZPOdaPh8/8Z3sLkouLrqJmC+Mjv2nwWVZrCV8i
cpEMBrqr5XEpFa2ZvzeJ5tvNbZC9bZMZU2lxPZ+Czxzt1JcHFyz0TYByzD7Nn3MU
jRIIPrvC4GUdgukpUWU+KcDiB0ZA9oOdtf0w9vZzhMXqVbggwNqboySkLSHcayzk
rcks0iNdA2EBj9sLPkt1iAfw9r7A6BSrV3fbBcXqdCMcJgp17CAR1d3qndO4xd/P
jxPXSB5o4hudmNYL4Z3VY9Lr25Nqf0lpqgLmQGc0KFa6IiqcbLwodzbSVuT7+pvW
7cg5I2rTnTKVsw==
-----END CERTIFICATE-----