Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/37e22e-e0d3-44ff-9237-37ba6cc4e43b/1/lOK642IEBXdJFjF8Z5I3fuxOGWw.mft
File:                     lOK642IEBXdJFjF8Z5I3fuxOGWw.mft (raw, json)
Hash identifier:          atDTH0QNunHDqY9IIhcVu8rHbGIk5LwCqFLvN1tWsrY=
Subject key identifier:   E6:21:B2:31:83:7B:47:CB:FC:02:A5:DC:22:6D:10:93:E4:B3:8D:AA
Authority key identifier: 94:E2:BA:E3:62:04:05:77:49:16:31:7C:67:92:37:7E:EC:4E:19:6C
Certificate issuer:       /CN=94e2bae3620405774916317c6792377eec4e196c
Certificate serial:       046880D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lOK642IEBXdJFjF8Z5I3fuxOGWw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/37e22e-e0d3-44ff-9237-37ba6cc4e43b/1/lOK642IEBXdJFjF8Z5I3fuxOGWw.mft
Manifest number:          05BD
Signing time:             Wed 08 Jun 2022 07:29:21 +0000
Manifest this update:     Wed 08 Jun 2022 07:29:21 +0000
Manifest next update:     Thu 09 Jun 2022 07:29:21 +0000
Files and hashes:         1: lOK642IEBXdJFjF8Z5I3fuxOGWw.crl (hash: b0ahqMITbyMN9Ylg5baUAbkHLEgxrNp+cdfRrABjUIw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 73957589 (0x46880d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94e2bae3620405774916317c6792377eec4e196c
        Validity
            Not Before: Jun  8 07:29:21 2022 GMT
            Not After : Jun  9 07:29:21 2022 GMT
        Subject: CN=e621b231837b47cbfc02a5dc226d1093e4b38daa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:65:0b:66:77:3f:57:a8:ec:51:92:42:49:67:
                    d9:1b:cf:6e:8f:d6:ee:b8:05:49:76:23:2d:ff:20:
                    ec:6b:60:eb:ab:8e:6a:2d:1b:51:3c:3a:f4:59:f3:
                    2a:c2:3e:eb:45:01:69:74:cd:a3:e8:f0:39:6c:7e:
                    86:38:95:e7:7f:ff:c6:aa:8d:ae:5d:e2:0c:39:53:
                    41:36:65:40:d9:f6:3c:bb:6a:37:80:fe:71:98:15:
                    8d:44:45:99:58:bc:f7:fe:80:27:e7:af:56:9d:70:
                    de:ac:64:84:0c:b6:b5:7d:17:cd:66:90:55:1b:d2:
                    c0:a3:c4:fa:aa:33:9e:e8:56:37:b4:fb:e5:21:41:
                    9b:d0:af:ac:a9:fc:8e:2e:74:3c:b8:8e:98:6e:cb:
                    ac:df:13:3f:75:68:04:94:ca:b9:31:23:27:be:b1:
                    6f:9f:f4:4c:2b:03:7d:b8:e4:d5:85:fb:2d:9f:22:
                    72:30:e1:3d:ab:c4:08:eb:c8:17:03:b3:4c:bb:da:
                    9f:7f:21:e1:a0:43:c4:cc:b3:0b:90:42:a6:66:a3:
                    bb:25:5d:70:39:2c:4a:a3:4f:5b:1b:d7:8b:1b:94:
                    7b:9b:5c:c0:a3:3d:4c:1f:44:b4:43:de:2a:8b:79:
                    f4:c6:fd:9a:7a:c7:4b:25:cf:11:78:dc:8c:dc:a7:
                    aa:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:21:B2:31:83:7B:47:CB:FC:02:A5:DC:22:6D:10:93:E4:B3:8D:AA
            X509v3 Authority Key Identifier:
                keyid:94:E2:BA:E3:62:04:05:77:49:16:31:7C:67:92:37:7E:EC:4E:19:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOK642IEBXdJFjF8Z5I3fuxOGWw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/37e22e-e0d3-44ff-9237-37ba6cc4e43b/1/lOK642IEBXdJFjF8Z5I3fuxOGWw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/37e22e-e0d3-44ff-9237-37ba6cc4e43b/1/lOK642IEBXdJFjF8Z5I3fuxOGWw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:ef:b2:e4:dd:53:72:b6:b4:47:3a:40:1b:c5:9e:1a:1a:c1:
         5b:24:ca:19:79:dc:87:48:1d:66:eb:f5:87:50:87:6e:20:22:
         73:de:4d:59:c7:4d:fb:ca:07:ec:ff:16:17:7c:b7:28:53:f3:
         42:b4:09:be:bc:b1:10:16:71:a5:59:66:7d:13:75:01:05:54:
         7c:16:4b:b6:18:ea:67:e1:58:e0:37:e7:10:5d:2e:8f:ef:1a:
         20:6d:f6:e5:10:d3:f7:33:63:1a:2b:d1:83:21:a2:69:fe:e1:
         fa:d8:a7:dc:ee:d0:52:45:df:c4:5d:84:79:fc:62:a6:ee:24:
         7b:e6:e6:28:b5:c8:ff:e4:eb:0c:2a:4f:a0:81:d2:f3:c9:ba:
         a4:c9:c2:5e:39:a8:f1:a8:ad:35:63:36:80:0d:8a:da:aa:aa:
         4e:1a:92:65:50:52:b8:77:0a:b7:1a:d2:1c:58:9a:df:79:59:
         88:06:24:64:b8:a6:7f:8a:5d:66:3f:9e:12:ff:fd:6a:1d:5f:
         0b:da:23:38:64:0f:9a:8c:a5:98:22:bd:07:41:5f:c6:3d:89:
         b7:94:6b:23:ea:6a:fe:b6:d6:81:39:5d:4a:4d:84:ce:7c:66:
         0a:87:fc:6d:39:36:bc:f7:fd:ab:4a:fb:22:b0:76:88:c8:56:
         46:26:af:ce
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgIEBGiA1TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
NGUyYmFlMzYyMDQwNTc3NDkxNjMxN2M2NzkyMzc3ZWVjNGUxOTZjMB4XDTIyMDYw
ODA3MjkyMVoXDTIyMDYwOTA3MjkyMVowMzExMC8GA1UEAxMoZTYyMWIyMzE4Mzdi
NDdjYmZjMDJhNWRjMjI2ZDEwOTNlNGIzOGRhYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAI9lC2Z3P1eo7FGSQkln2RvPbo/W7rgFSXYjLf8g7Gtg66uO
ai0bUTw69FnzKsI+60UBaXTNo+jwOWx+hjiV53//xqqNrl3iDDlTQTZlQNn2PLtq
N4D+cZgVjURFmVi89/6AJ+evVp1w3qxkhAy2tX0XzWaQVRvSwKPE+qoznuhWN7T7
5SFBm9CvrKn8ji50PLiOmG7LrN8TP3VoBJTKuTEjJ76xb5/0TCsDfbjk1YX7LZ8i
cjDhPavECOvIFwOzTLvan38h4aBDxMyzC5BCpmajuyVdcDksSqNPWxvXixuUe5tc
wKM9TB9EtEPeKot59Mb9mnrHSyXPEXjcjNynqnkCAwEAAaOCAiIwggIeMB0GA1Ud
DgQWBBTmIbIxg3tHy/wCpdwibRCT5LONqjAfBgNVHSMEGDAWgBSU4rrjYgQFd0kW
MXxnkjd+7E4ZbDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2xPSzY0MklFQlhkSkZqRjhaNUkzZnV4T0dXdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGMvMzdlMjJlLWUwZDMtNDRmZi05MjM3LTM3YmE2Y2M0ZTQzYi8x
L2xPSzY0MklFQlhkSkZqRjhaNUkzZnV4T0dXdy5tZnQwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGMv
MzdlMjJlLWUwZDMtNDRmZi05MjM3LTM3YmE2Y2M0ZTQzYi8xL2xPSzY0MklFQlhk
SkZqRjhaNUkzZnV4T0dXdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/
BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAF/vsuTdU3K2tEc6QBvFnhoawVsk
yhl53IdIHWbr9YdQh24gInPeTVnHTfvKB+z/Fhd8tyhT80K0Cb68sRAWcaVZZn0T
dQEFVHwWS7YY6mfhWOA35xBdLo/vGiBt9uUQ0/czYxor0YMhomn+4frYp9zu0FJF
38RdhHn8YqbuJHvm5ii1yP/k6wwqT6CB0vPJuqTJwl45qPGorTVjNoANitqqqk4a
kmVQUrh3Crca0hxYmt95WYgGJGS4pn+KXWY/nhL//WodXwvaIzhkD5qMpZgivQdB
X8Y9ibeUayPqav621oE5XUpNhM58ZgqH/G05Nrz3/atK+yKwdojIVkYmr84=
-----END CERTIFICATE-----