Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/60d738-db58-4ecd-972b-e6cc0c4b6098/1/SHCdmlmlDJg7ZZFtO8bNFxbPEoQ.mft
File:                     SHCdmlmlDJg7ZZFtO8bNFxbPEoQ.mft (raw, json)
Hash identifier:          zX4YxFlpwp27pa3fzAVbpxSdkHmW7EBLcq+bCiWsV6Y=
Subject key identifier:   11:12:85:F5:1A:EC:75:A2:30:5E:DC:29:0B:18:8C:EB:EE:C1:DF:75
Authority key identifier: 48:70:9D:9A:59:A5:0C:98:3B:65:91:6D:3B:C6:CD:17:16:CF:12:84
Certificate issuer:       /CN=48709d9a59a50c983b65916d3bc6cd1716cf1284
Certificate serial:       0185392E09C13C77B6B13152B6728760B2F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SHCdmlmlDJg7ZZFtO8bNFxbPEoQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/60d738-db58-4ecd-972b-e6cc0c4b6098/1/SHCdmlmlDJg7ZZFtO8bNFxbPEoQ.mft
Manifest number:          0BDC
Signing time:             Thu 22 Dec 2022 09:33:16 +0000
Manifest this update:     Thu 22 Dec 2022 09:33:16 +0000
Manifest next update:     Fri 23 Dec 2022 09:33:16 +0000
Files and hashes:         1: SHCdmlmlDJg7ZZFtO8bNFxbPEoQ.crl (hash: Accb3g2SqU6TIwRuEk9oSAzrhVXvH9pgQRoMqY9vKUY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:39:2e:09:c1:3c:77:b6:b1:31:52:b6:72:87:60:b2:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48709d9a59a50c983b65916d3bc6cd1716cf1284
        Validity
            Not Before: Dec 22 09:33:16 2022 GMT
            Not After : Dec 23 09:33:16 2022 GMT
        Subject: CN=111285f51aec75a2305edc290b188cebeec1df75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:91:34:ef:3c:07:16:fd:13:b1:20:17:bf:1e:
                    9c:92:af:cf:12:d9:78:bb:c5:7f:c6:a8:10:d1:55:
                    1f:13:85:87:2e:4c:41:f7:70:f9:ba:d3:4b:99:7c:
                    58:84:6c:4c:c6:e5:56:54:fd:b0:50:9e:7f:88:f1:
                    8b:2b:51:b3:6a:c0:84:91:2e:1d:94:b3:ec:58:b6:
                    13:ce:78:fd:ab:8f:0e:dd:50:ed:ad:09:b6:46:b7:
                    fa:a0:48:f2:7b:89:a8:47:a0:0a:c9:c4:ab:6e:29:
                    67:cf:c0:56:d2:43:32:0a:8b:0a:a1:a4:82:43:8a:
                    8c:98:84:bf:c1:12:d1:60:12:7a:b4:98:2a:35:1e:
                    ce:8d:99:b2:cd:aa:cf:47:f6:78:6f:2d:f5:bd:f4:
                    5a:d5:de:90:8c:0f:1e:08:7a:44:44:cb:d1:dc:4f:
                    ff:50:d5:65:0f:19:5f:ea:5f:d5:75:da:03:26:46:
                    9d:84:23:7b:70:42:c6:b3:3c:44:f7:c0:42:3f:05:
                    24:28:53:ad:1b:67:57:ac:78:ef:36:e2:3a:05:05:
                    ac:ca:2c:26:2f:4a:a3:5a:4b:3d:d6:62:e5:4e:16:
                    07:9a:9e:5b:83:85:aa:f1:dc:91:f6:ca:15:df:07:
                    cf:bf:67:4f:44:5c:96:79:d2:e6:ae:cf:65:4d:5c:
                    a9:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:12:85:F5:1A:EC:75:A2:30:5E:DC:29:0B:18:8C:EB:EE:C1:DF:75
            X509v3 Authority Key Identifier:
                keyid:48:70:9D:9A:59:A5:0C:98:3B:65:91:6D:3B:C6:CD:17:16:CF:12:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SHCdmlmlDJg7ZZFtO8bNFxbPEoQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/60d738-db58-4ecd-972b-e6cc0c4b6098/1/SHCdmlmlDJg7ZZFtO8bNFxbPEoQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/60d738-db58-4ecd-972b-e6cc0c4b6098/1/SHCdmlmlDJg7ZZFtO8bNFxbPEoQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:7d:0c:90:f6:9a:0e:2b:71:02:58:c8:bd:2b:dd:c8:46:b1:
         dc:2b:04:a8:24:26:1d:2c:20:64:96:12:11:be:ab:a3:16:68:
         94:75:28:65:39:dc:fb:f4:1d:a2:d9:fc:ee:21:f3:83:c4:97:
         b7:8d:2d:4e:47:10:c5:42:c1:0c:c3:26:78:d6:fb:7a:df:60:
         80:cf:0d:69:f1:2a:d4:37:38:98:03:a6:8b:8f:dc:3d:18:44:
         16:20:63:e0:44:8d:21:f9:d8:ca:90:90:bf:12:a7:f1:42:50:
         6d:4d:99:b0:a7:40:39:62:31:3a:e9:a3:05:6c:75:ae:17:fb:
         4b:d2:20:cf:b1:cb:82:5a:27:35:36:2e:0c:27:0a:76:89:a2:
         30:83:58:47:ee:ad:51:08:cd:99:e7:a2:c7:ed:95:9a:ba:2f:
         54:43:d1:9f:8f:bc:8c:46:e9:be:3e:97:29:73:11:7f:20:a1:
         61:43:0f:c1:34:c0:0f:3c:96:5d:d6:d1:eb:9d:5a:3c:3e:56:
         43:c0:e9:d5:c5:03:8a:52:dc:05:d9:fc:03:1d:7d:b8:9e:b8:
         8b:b8:49:1b:e8:87:6e:82:c5:bc:34:54:fe:03:ea:75:01:d5:
         23:b7:69:d8:25:75:f8:a6:60:39:c9:de:c5:38:42:b3:bd:7a:
         d1:b7:35:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYU5LgnBPHe2sTFStnKHYLL4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4NzA5ZDlhNTlhNTBjOTgzYjY1OTE2ZDNiYzZjZDE3MTZj
ZjEyODQwHhcNMjIxMjIyMDkzMzE2WhcNMjIxMjIzMDkzMzE2WjAzMTEwLwYDVQQD
EygxMTEyODVmNTFhZWM3NWEyMzA1ZWRjMjkwYjE4OGNlYmVlYzFkZjc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA05E07zwHFv0TsSAXvx6ckq/PEtl4
u8V/xqgQ0VUfE4WHLkxB93D5utNLmXxYhGxMxuVWVP2wUJ5/iPGLK1GzasCEkS4d
lLPsWLYTznj9q48O3VDtrQm2Rrf6oEjye4moR6AKycSrbilnz8BW0kMyCosKoaSC
Q4qMmIS/wRLRYBJ6tJgqNR7OjZmyzarPR/Z4by31vfRa1d6QjA8eCHpERMvR3E//
UNVlDxlf6l/VddoDJkadhCN7cELGszxE98BCPwUkKFOtG2dXrHjvNuI6BQWsyiwm
L0qjWks91mLlThYHmp5bg4Wq8dyR9soV3wfPv2dPRFyWedLmrs9lTVypgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBEShfUa7HWiMF7cKQsYjOvuwd91MB8GA1UdIwQY
MBaAFEhwnZpZpQyYO2WRbTvGzRcWzxKEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0hDZG1sbWxESmc3WlpGdE84Yk5GeGJQRW9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi82MGQ3MzgtZGI1OC00ZWNkLTk3MmIt
ZTZjYzBjNGI2MDk4LzEvU0hDZG1sbWxESmc3WlpGdE84Yk5GeGJQRW9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi82MGQ3MzgtZGI1OC00ZWNkLTk3MmItZTZjYzBjNGI2MDk4
LzEvU0hDZG1sbWxESmc3WlpGdE84Yk5GeGJQRW9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAz30MkPaa
DitxAljIvSvdyEax3CsEqCQmHSwgZJYSEb6roxZolHUoZTnc+/Qdotn87iHzg8SX
t40tTkcQxULBDMMmeNb7et9ggM8NafEq1Dc4mAOmi4/cPRhEFiBj4ESNIfnYypCQ
vxKn8UJQbU2ZsKdAOWIxOumjBWx1rhf7S9Igz7HLglonNTYuDCcKdomiMINYR+6t
UQjNmeeix+2VmrovVEPRn4+8jEbpvj6XKXMRfyChYUMPwTTADzyWXdbR651aPD5W
Q8Dp1cUDilLcBdn8Ax19uJ64i7hJG+iHboLFvDRU/gPqdQHVI7dp2CV1+KZgOcne
xThCs7160bc1KQ==
-----END CERTIFICATE-----