Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/3e5ba0-3a7b-4a71-8960-aafe3730a4fe/1/HH3fXhOu7OtJm_9K_-3QIee7LYs.mft
File:                     HH3fXhOu7OtJm_9K_-3QIee7LYs.mft (raw, json)
Hash identifier:          g7Ay5MCKkdShdIGBOSJqKA4QbR0/CnDfsXBSLutIBW4=
Subject key identifier:   8E:56:60:AD:28:B3:D0:82:30:65:40:03:88:BA:35:89:AC:4E:10:1B
Authority key identifier: 1C:7D:DF:5E:13:AE:EC:EB:49:9B:FF:4A:FF:ED:D0:21:E7:BB:2D:8B
Certificate issuer:       /CN=1c7ddf5e13aeeceb499bff4affedd021e7bb2d8b
Certificate serial:       07CE721D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HH3fXhOu7OtJm_9K_-3QIee7LYs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/3e5ba0-3a7b-4a71-8960-aafe3730a4fe/1/HH3fXhOu7OtJm_9K_-3QIee7LYs.mft
Manifest number:          08B3
Signing time:             Wed 23 Mar 2022 02:20:18 +0000
Manifest this update:     Wed 23 Mar 2022 02:20:18 +0000
Manifest next update:     Thu 24 Mar 2022 02:20:18 +0000
Files and hashes:         1: HH3fXhOu7OtJm_9K_-3QIee7LYs.crl (hash: i1Ni5YnJmtlki2E/MokyZ8MtphMkJa/oSXCAqbM8dNo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 130970141 (0x7ce721d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c7ddf5e13aeeceb499bff4affedd021e7bb2d8b
        Validity
            Not Before: Mar 23 02:20:18 2022 GMT
            Not After : Mar 24 02:20:18 2022 GMT
        Subject: CN=8e5660ad28b3d0823065400388ba3589ac4e101b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:31:f1:50:63:bd:04:2b:bb:c6:e3:79:b6:7e:
                    00:a5:eb:dc:1d:c4:7e:1a:81:8c:c0:6b:e2:8f:36:
                    5c:ed:d4:ce:c8:27:6b:c3:81:bc:41:ee:9d:50:41:
                    bb:4e:97:88:34:f4:1b:48:8d:31:3a:b7:d8:b5:f8:
                    04:13:f5:e1:06:70:91:ab:21:57:c1:d9:93:51:44:
                    0c:d2:7b:e6:0d:8f:44:d6:35:75:2d:e4:b4:6d:14:
                    fb:c4:a4:c7:06:2e:30:be:92:12:e0:cf:5e:15:57:
                    53:f3:67:86:43:6f:59:53:63:b9:b7:10:23:8a:a5:
                    bd:f3:77:50:88:a6:de:b0:81:66:cd:f4:7e:de:b3:
                    90:cd:2e:cc:0e:95:7d:c1:9d:7a:3d:79:5b:21:11:
                    0a:9e:d9:43:bf:25:0a:06:41:8b:e0:9e:67:df:06:
                    ec:31:6a:a1:cf:a2:26:24:89:2b:df:a4:45:f8:34:
                    30:2f:1f:be:94:aa:f7:45:e0:f7:06:d5:10:a6:ea:
                    8d:8f:73:fa:5d:95:de:e5:64:c6:14:68:27:59:7f:
                    e9:11:4b:73:99:8f:87:a3:f8:73:00:d8:b8:83:ba:
                    64:2b:b4:79:de:6b:51:68:48:5c:55:bf:70:cb:d4:
                    26:d9:d6:f6:9d:02:0b:e5:8c:08:3d:0b:88:90:c7:
                    67:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:56:60:AD:28:B3:D0:82:30:65:40:03:88:BA:35:89:AC:4E:10:1B
            X509v3 Authority Key Identifier:
                keyid:1C:7D:DF:5E:13:AE:EC:EB:49:9B:FF:4A:FF:ED:D0:21:E7:BB:2D:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HH3fXhOu7OtJm_9K_-3QIee7LYs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/3e5ba0-3a7b-4a71-8960-aafe3730a4fe/1/HH3fXhOu7OtJm_9K_-3QIee7LYs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/3e5ba0-3a7b-4a71-8960-aafe3730a4fe/1/HH3fXhOu7OtJm_9K_-3QIee7LYs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:0a:ae:48:da:99:0e:7d:a9:d8:3d:0e:59:18:f2:4e:8b:d2:
         44:71:ce:65:60:00:b4:f6:a0:2b:3e:5f:f1:ae:6a:d5:c7:04:
         19:cd:93:3a:c0:bd:e7:34:6a:bf:68:c3:43:fd:bb:5f:74:d0:
         23:bf:80:1e:d5:30:3c:84:b7:16:b9:28:20:28:96:09:15:fd:
         53:c1:7a:0a:9a:ec:8b:dc:49:af:42:3a:6d:38:98:19:44:2f:
         07:21:7d:10:23:69:9d:3c:40:e4:e0:a5:7b:18:c2:35:72:49:
         ad:61:51:a6:69:b4:9a:30:64:07:3e:ba:b0:d9:d3:f1:cc:a7:
         ca:21:c5:38:eb:02:43:05:1d:a9:c5:cf:a1:f4:b7:51:0f:0d:
         06:fa:f8:a5:05:93:4d:7d:b2:3d:7e:ca:d4:3e:69:25:83:85:
         90:2f:8b:3d:90:70:19:70:bd:64:20:80:26:3b:70:c0:01:0b:
         d0:cb:8c:b9:22:a0:ca:51:87:de:a7:d5:52:94:f1:e6:9d:52:
         37:c1:5e:e8:06:73:88:2e:5f:bc:d8:df:41:db:e2:db:cc:3b:
         17:3a:e7:43:dc:5a:57:5c:53:98:35:ee:cd:ae:f3:73:10:4e:
         5f:6a:0a:60:23:ec:7f:ca:91:23:07:55:83:f6:6f:6c:d4:21:
         43:09:bb:1b
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgIEB85yHTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
YzdkZGY1ZTEzYWVlY2ViNDk5YmZmNGFmZmVkZDAyMWU3YmIyZDhiMB4XDTIyMDMy
MzAyMjAxOFoXDTIyMDMyNDAyMjAxOFowMzExMC8GA1UEAxMoOGU1NjYwYWQyOGIz
ZDA4MjMwNjU0MDAzODhiYTM1ODlhYzRlMTAxYjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJYx8VBjvQQru8bjebZ+AKXr3B3EfhqBjMBr4o82XO3Uzsgn
a8OBvEHunVBBu06XiDT0G0iNMTq32LX4BBP14QZwkashV8HZk1FEDNJ75g2PRNY1
dS3ktG0U+8SkxwYuML6SEuDPXhVXU/NnhkNvWVNjubcQI4qlvfN3UIim3rCBZs30
ft6zkM0uzA6VfcGdej15WyERCp7ZQ78lCgZBi+CeZ98G7DFqoc+iJiSJK9+kRfg0
MC8fvpSq90Xg9wbVEKbqjY9z+l2V3uVkxhRoJ1l/6RFLc5mPh6P4cwDYuIO6ZCu0
ed5rUWhIXFW/cMvUJtnW9p0CC+WMCD0LiJDHZ38CAwEAAaOCAiIwggIeMB0GA1Ud
DgQWBBSOVmCtKLPQgjBlQAOIujWJrE4QGzAfBgNVHSMEGDAWgBQcfd9eE67s60mb
/0r/7dAh57stizAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0hIM2ZYaE91N090Sm1fOUtfLTNRSWVlN0xZcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMmYvM2U1YmEwLTNhN2ItNGE3MS04OTYwLWFhZmUzNzMwYTRmZS8x
L0hIM2ZYaE91N090Sm1fOUtfLTNRSWVlN0xZcy5tZnQwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmYv
M2U1YmEwLTNhN2ItNGE3MS04OTYwLWFhZmUzNzMwYTRmZS8xL0hIM2ZYaE91N090
Sm1fOUtfLTNRSWVlN0xZcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/
BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAFAKrkjamQ59qdg9DlkY8k6L0kRx
zmVgALT2oCs+X/GuatXHBBnNkzrAvec0ar9ow0P9u1900CO/gB7VMDyEtxa5KCAo
lgkV/VPBegqa7IvcSa9COm04mBlELwchfRAjaZ08QOTgpXsYwjVySa1hUaZptJow
ZAc+urDZ0/HMp8ohxTjrAkMFHanFz6H0t1EPDQb6+KUFk019sj1+ytQ+aSWDhZAv
iz2QcBlwvWQggCY7cMABC9DLjLkioMpRh96n1VKU8eadUjfBXugGc4guX7zY30Hb
4tvMOxc650PcWldcU5g17s2u83MQTl9qCmAj7H/KkSMHVYP2b2zUIUMJuxs=
-----END CERTIFICATE-----