Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/d054e0-a5a9-4950-b07f-f6b5e9bb078c/1/4q1ZuqyTurjkk8HeRx-LNvf4Jsw.mft
File:                     4q1ZuqyTurjkk8HeRx-LNvf4Jsw.mft (raw, json)
Hash identifier:          IXC88BYeAAYXv47AQWB5xK6XPuMkZUEy0cz+BfxCQ48=
Subject key identifier:   C6:63:C1:CA:C5:18:3B:DB:70:85:B4:3C:A5:2D:E7:CD:CC:E6:1A:D9
Authority key identifier: E2:AD:59:BA:AC:93:BA:B8:E4:93:C1:DE:47:1F:8B:36:F7:F8:26:CC
Certificate issuer:       /CN=e2ad59baac93bab8e493c1de471f8b36f7f826cc
Certificate serial:       0189AE0BCBAB0D49E164DE75D9E95D0AE1A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4q1ZuqyTurjkk8HeRx-LNvf4Jsw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/d054e0-a5a9-4950-b07f-f6b5e9bb078c/1/4q1ZuqyTurjkk8HeRx-LNvf4Jsw.mft
Manifest number:          089E
Signing time:             Mon 31 Jul 2023 22:22:35 +0000
Manifest this update:     Mon 31 Jul 2023 22:22:35 +0000
Manifest next update:     Tue 01 Aug 2023 22:22:35 +0000
Files and hashes:         1: 4q1ZuqyTurjkk8HeRx-LNvf4Jsw.crl (hash: Eh8BJK+q7CurlHuWTTw5D9yDzMPU37La/vCgeb20/+g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:ae:0b:cb:ab:0d:49:e1:64:de:75:d9:e9:5d:0a:e1:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2ad59baac93bab8e493c1de471f8b36f7f826cc
        Validity
            Not Before: Jul 31 22:22:35 2023 GMT
            Not After : Aug  1 22:22:35 2023 GMT
        Subject: CN=c663c1cac5183bdb7085b43ca52de7cdcce61ad9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:26:e1:c7:ad:02:41:5b:50:34:b1:52:31:a7:
                    94:34:a2:d9:57:2b:60:97:02:91:3b:d6:b0:6e:8e:
                    57:b0:5d:b9:35:3e:f2:a6:a0:60:76:c3:44:cc:fe:
                    84:ae:e1:7a:40:d4:62:66:20:74:c5:ad:b8:b8:57:
                    75:e7:67:f9:2c:07:40:77:4e:6a:aa:14:44:1e:fc:
                    63:64:0f:df:47:7c:84:28:c1:b8:20:2b:fd:da:79:
                    05:41:9c:45:35:1b:28:1d:9b:ad:3c:93:8c:57:a7:
                    32:83:5a:cb:de:d4:cf:34:33:b3:8c:33:80:d6:d3:
                    91:e2:6c:89:fc:2c:f9:69:93:4d:01:eb:69:82:6f:
                    ac:e6:cf:2d:6d:cc:2a:24:10:4d:82:1b:60:57:9a:
                    7c:b1:1e:e3:01:16:10:aa:81:a6:21:1f:07:14:3c:
                    1a:6e:d7:e8:b3:2b:0a:01:70:02:f7:3b:cd:b9:c4:
                    40:0c:82:34:31:55:68:fc:0f:25:9b:4c:55:5b:42:
                    9a:94:21:06:2d:c3:17:fe:95:58:b8:d3:3e:cb:cc:
                    02:f6:a5:f8:d8:a4:b0:77:0c:3e:bd:2f:7b:bd:87:
                    59:9d:f5:c7:df:41:66:9a:d1:0a:d8:ce:96:cb:db:
                    0a:fd:d9:43:7b:0d:e4:39:42:de:84:21:38:57:e8:
                    4d:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:63:C1:CA:C5:18:3B:DB:70:85:B4:3C:A5:2D:E7:CD:CC:E6:1A:D9
            X509v3 Authority Key Identifier:
                keyid:E2:AD:59:BA:AC:93:BA:B8:E4:93:C1:DE:47:1F:8B:36:F7:F8:26:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4q1ZuqyTurjkk8HeRx-LNvf4Jsw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/d054e0-a5a9-4950-b07f-f6b5e9bb078c/1/4q1ZuqyTurjkk8HeRx-LNvf4Jsw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/d054e0-a5a9-4950-b07f-f6b5e9bb078c/1/4q1ZuqyTurjkk8HeRx-LNvf4Jsw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:11:7f:7c:c4:b6:f0:b2:7a:3f:e1:87:6d:9d:7d:f5:56:10:
         9c:e4:7f:ec:c7:25:73:e6:f5:35:97:96:55:4a:47:f3:0c:41:
         21:69:79:32:52:dc:1b:1b:eb:1c:79:a4:49:d2:65:62:f1:ee:
         3f:a3:9e:19:76:b5:ad:dc:8f:17:ac:b6:6b:9b:75:e4:22:88:
         7a:3f:9e:91:3a:55:47:54:74:e6:e3:c9:fc:94:c1:66:12:9f:
         2f:de:6c:02:d4:a6:f7:ca:20:40:35:6c:96:42:98:f3:63:1f:
         51:32:d5:44:d5:40:ac:81:3c:b2:ec:e9:89:c4:e8:33:2c:e9:
         7e:44:bf:fe:fa:28:88:e7:0f:72:9b:1c:25:5f:34:04:83:55:
         82:1c:52:0b:f2:b6:2a:0a:c7:d0:8e:62:46:2b:41:7e:b5:f4:
         6b:9d:eb:11:ae:05:e0:47:81:95:95:f0:7c:e8:d9:7e:2f:e1:
         75:fc:72:30:12:f7:67:17:66:2d:70:2c:e2:72:82:f9:c8:72:
         30:f3:70:ba:90:23:06:81:8e:b5:36:58:da:ba:0f:69:38:6f:
         e0:06:a3:80:3a:4d:68:71:2f:f0:7a:16:75:5e:9e:55:af:38:
         4c:05:56:95:99:7a:f0:f0:f4:35:a8:06:bb:35:9a:33:93:7f:
         c6:a5:e3:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYmuC8urDUnhZN512eldCuGgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyYWQ1OWJhYWM5M2JhYjhlNDkzYzFkZTQ3MWY4YjM2Zjdm
ODI2Y2MwHhcNMjMwNzMxMjIyMjM1WhcNMjMwODAxMjIyMjM1WjAzMTEwLwYDVQQD
EyhjNjYzYzFjYWM1MTgzYmRiNzA4NWI0M2NhNTJkZTdjZGNjZTYxYWQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSbhx60CQVtQNLFSMaeUNKLZVytg
lwKRO9awbo5XsF25NT7ypqBgdsNEzP6EruF6QNRiZiB0xa24uFd152f5LAdAd05q
qhREHvxjZA/fR3yEKMG4ICv92nkFQZxFNRsoHZutPJOMV6cyg1rL3tTPNDOzjDOA
1tOR4myJ/Cz5aZNNAetpgm+s5s8tbcwqJBBNghtgV5p8sR7jARYQqoGmIR8HFDwa
btfosysKAXAC9zvNucRADII0MVVo/A8lm0xVW0KalCEGLcMX/pVYuNM+y8wC9qX4
2KSwdww+vS97vYdZnfXH30FmmtEK2M6Wy9sK/dlDew3kOULehCE4V+hNCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMZjwcrFGDvbcIW0PKUt583M5hrZMB8GA1UdIwQY
MBaAFOKtWbqsk7q45JPB3kcfizb3+CbMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHExWnVxeVR1cmprazhIZVJ4LUxOdmY0SnN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9kMDU0ZTAtYTVhOS00OTUwLWIwN2Yt
ZjZiNWU5YmIwNzhjLzEvNHExWnVxeVR1cmprazhIZVJ4LUxOdmY0SnN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS9kMDU0ZTAtYTVhOS00OTUwLWIwN2YtZjZiNWU5YmIwNzhj
LzEvNHExWnVxeVR1cmprazhIZVJ4LUxOdmY0SnN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAghF/fMS2
8LJ6P+GHbZ199VYQnOR/7Mclc+b1NZeWVUpH8wxBIWl5MlLcGxvrHHmkSdJlYvHu
P6OeGXa1rdyPF6y2a5t15CKIej+ekTpVR1R05uPJ/JTBZhKfL95sAtSm98ogQDVs
lkKY82MfUTLVRNVArIE8suzpicToMyzpfkS//vooiOcPcpscJV80BINVghxSC/K2
KgrH0I5iRitBfrX0a53rEa4F4EeBlZXwfOjZfi/hdfxyMBL3ZxdmLXAs4nKC+chy
MPNwupAjBoGOtTZY2roPaThv4AajgDpNaHEv8HoWdV6eVa84TAVWlZl68PD0NagG
uzWaM5N/xqXjQg==
-----END CERTIFICATE-----