Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/8546e4-72cb-4883-802b-09f08f087440/1/z63MTmn-4ZbZV4D245A4WIJlSHs.mft
File:                     z63MTmn-4ZbZV4D245A4WIJlSHs.mft (raw, json)
Hash identifier:          wLrKWdxVEBneFHGumWTNwoIUL38U+ZTIK6HNsSsA69w=
Subject key identifier:   62:EE:B5:7E:54:CD:7D:17:77:07:AF:9B:DB:1B:49:B3:7D:2D:46:D2
Authority key identifier: CF:AD:CC:4E:69:FE:E1:96:D9:57:80:F6:E3:90:38:58:82:65:48:7B
Certificate issuer:       /CN=cfadcc4e69fee196d95780f6e39038588265487b
Certificate serial:       01850FC0F261C737716FF0FC06B8351471DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z63MTmn-4ZbZV4D245A4WIJlSHs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/8546e4-72cb-4883-802b-09f08f087440/1/z63MTmn-4ZbZV4D245A4WIJlSHs.mft
Manifest number:          0F
Signing time:             Wed 14 Dec 2022 08:29:41 +0000
Manifest this update:     Wed 14 Dec 2022 08:29:41 +0000
Manifest next update:     Thu 15 Dec 2022 08:29:41 +0000
Files and hashes:         1: z63MTmn-4ZbZV4D245A4WIJlSHs.crl (hash: zTCiPGBsPABnoSuQvttfu1icz+FHE18iG+fR2rh0SWE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:0f:c0:f2:61:c7:37:71:6f:f0:fc:06:b8:35:14:71:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfadcc4e69fee196d95780f6e39038588265487b
        Validity
            Not Before: Dec 14 08:29:41 2022 GMT
            Not After : Dec 15 08:29:41 2022 GMT
        Subject: CN=62eeb57e54cd7d177707af9bdb1b49b37d2d46d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:54:34:de:e1:e4:fb:76:70:ba:45:74:a2:f0:
                    64:0c:9f:61:d0:60:80:50:ce:8d:46:67:3d:19:e1:
                    bd:30:ed:4d:e7:4a:4f:44:51:48:32:bb:13:31:ae:
                    1a:e2:8b:95:67:97:55:49:ac:a5:f4:3a:57:f5:88:
                    8a:6c:f3:55:7c:0d:4b:32:32:c0:c5:12:f8:d7:02:
                    cc:ec:dc:1c:79:96:71:79:7a:ac:2e:8b:cd:7e:62:
                    9b:17:bd:91:04:98:bc:40:3d:ae:82:d8:39:6a:97:
                    ee:9c:c7:ec:ee:c8:f2:c0:c5:db:d0:d5:24:56:32:
                    b9:36:3d:aa:34:bc:cc:7d:72:c0:89:a7:d8:b1:d6:
                    b9:0e:d2:36:60:47:95:9b:84:d8:a5:ca:0c:11:fd:
                    5a:fa:ec:81:f9:84:37:f6:48:6c:f8:45:bf:8a:9b:
                    bc:8f:18:1e:04:64:5d:51:85:23:de:1e:f7:bf:dc:
                    1f:30:7b:7b:f7:d9:f9:61:1e:95:da:73:f9:e4:64:
                    c7:e9:a9:7c:d3:f2:bc:5e:24:1a:a3:dc:be:b2:7d:
                    c2:5d:a8:d4:a4:26:fd:c1:dd:ff:94:c7:fd:dd:74:
                    3b:c3:0a:a6:1e:fd:20:d9:68:9b:f9:1f:d6:7c:3b:
                    93:20:3c:06:6f:8f:0b:d0:6d:36:b0:03:18:84:d7:
                    d8:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:EE:B5:7E:54:CD:7D:17:77:07:AF:9B:DB:1B:49:B3:7D:2D:46:D2
            X509v3 Authority Key Identifier:
                keyid:CF:AD:CC:4E:69:FE:E1:96:D9:57:80:F6:E3:90:38:58:82:65:48:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z63MTmn-4ZbZV4D245A4WIJlSHs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8546e4-72cb-4883-802b-09f08f087440/1/z63MTmn-4ZbZV4D245A4WIJlSHs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8546e4-72cb-4883-802b-09f08f087440/1/z63MTmn-4ZbZV4D245A4WIJlSHs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:f6:ea:0b:8f:2b:19:7f:46:d7:01:88:dc:60:96:6d:eb:f6:
         7e:c2:65:eb:a2:71:07:4d:66:69:66:e2:f8:35:b2:d9:49:82:
         1f:60:05:e9:12:78:eb:8f:92:17:7e:b0:38:a4:ed:c1:91:73:
         2e:7c:fe:6a:d1:2d:25:fa:ae:1d:cb:91:e3:07:a1:5c:04:d6:
         cd:a5:e7:8a:96:f7:b1:a0:fe:5a:92:7c:36:44:b8:69:d3:3e:
         45:15:de:32:8e:ab:26:cb:b0:92:ad:02:c5:bd:94:d8:f9:1e:
         f0:9a:26:78:a9:1d:8a:50:1c:4f:2d:22:da:a1:bf:ac:58:be:
         59:f8:a8:b8:41:42:a3:5e:f6:ba:f1:84:d5:2c:ad:cf:61:df:
         c7:ee:8e:dd:99:38:d7:51:5c:78:23:05:c0:1a:31:4f:39:76:
         e1:65:10:ba:39:7f:80:a3:03:10:7b:43:19:e9:f4:46:3a:4e:
         6f:60:3e:8e:e9:dd:7d:4a:42:a3:40:77:70:1a:cc:74:4a:bd:
         6b:63:05:b4:ed:dc:cc:e5:0c:65:67:73:c0:89:f0:91:fc:6e:
         ce:f3:f0:37:d2:d6:99:a1:94:e2:93:42:96:ed:35:d8:a5:68:
         b7:9d:75:1f:03:d1:de:a7:9d:97:e4:25:60:c6:81:b0:3b:3f:
         67:44:81:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYUPwPJhxzdxb/D8Brg1FHHaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmYWRjYzRlNjlmZWUxOTZkOTU3ODBmNmUzOTAzODU4ODI2
NTQ4N2IwHhcNMjIxMjE0MDgyOTQxWhcNMjIxMjE1MDgyOTQxWjAzMTEwLwYDVQQD
Eyg2MmVlYjU3ZTU0Y2Q3ZDE3NzcwN2FmOWJkYjFiNDliMzdkMmQ0NmQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllQ03uHk+3ZwukV0ovBkDJ9h0GCA
UM6NRmc9GeG9MO1N50pPRFFIMrsTMa4a4ouVZ5dVSayl9DpX9YiKbPNVfA1LMjLA
xRL41wLM7NwceZZxeXqsLovNfmKbF72RBJi8QD2ugtg5apfunMfs7sjywMXb0NUk
VjK5Nj2qNLzMfXLAiafYsda5DtI2YEeVm4TYpcoMEf1a+uyB+YQ39khs+EW/ipu8
jxgeBGRdUYUj3h73v9wfMHt799n5YR6V2nP55GTH6al80/K8XiQao9y+sn3CXajU
pCb9wd3/lMf93XQ7wwqmHv0g2Wib+R/WfDuTIDwGb48L0G02sAMYhNfYkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGLutX5UzX0Xdwevm9sbSbN9LUbSMB8GA1UdIwQY
MBaAFM+tzE5p/uGW2VeA9uOQOFiCZUh7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejYzTVRtbi00WmJaVjREMjQ1QTRXSUpsU0hzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi84NTQ2ZTQtNzJjYi00ODgzLTgwMmIt
MDlmMDhmMDg3NDQwLzEvejYzTVRtbi00WmJaVjREMjQ1QTRXSUpsU0hzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi84NTQ2ZTQtNzJjYi00ODgzLTgwMmItMDlmMDhmMDg3NDQw
LzEvejYzTVRtbi00WmJaVjREMjQ1QTRXSUpsU0hzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV/bqC48r
GX9G1wGI3GCWbev2fsJl66JxB01maWbi+DWy2UmCH2AF6RJ464+SF36wOKTtwZFz
Lnz+atEtJfquHcuR4wehXATWzaXnipb3saD+WpJ8NkS4adM+RRXeMo6rJsuwkq0C
xb2U2Pke8JomeKkdilAcTy0i2qG/rFi+WfiouEFCo172uvGE1Sytz2Hfx+6O3Zk4
11FceCMFwBoxTzl24WUQujl/gKMDEHtDGen0RjpOb2A+jundfUpCo0B3cBrMdEq9
a2MFtO3czOUMZWdzwInwkfxuzvPwN9LWmaGU4pNClu012KVot511HwPR3qedl+Ql
YMaBsDs/Z0SB9A==
-----END CERTIFICATE-----