Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/a1ec2e-919e-4657-8d31-a5a507e0ecfa/1/X3ILxvnMMHYCspItQfCM8ddYQCk.mft
File:                     X3ILxvnMMHYCspItQfCM8ddYQCk.mft (raw, json)
Hash identifier:          q2euWvyobPJvWgphDeyvQFS2ZYY6lyI/cPEXssvt9zA=
Subject key identifier:   9A:18:D9:26:EE:7C:9F:A2:18:4E:F4:AD:E3:70:47:61:37:13:FF:16
Authority key identifier: 5F:72:0B:C6:F9:CC:30:76:02:B2:92:2D:41:F0:8C:F1:D7:58:40:29
Certificate issuer:       /CN=5f720bc6f9cc307602b2922d41f08cf1d7584029
Certificate serial:       018ABAD5B2B0B1B15CE15FFFDA18C5EB4F8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X3ILxvnMMHYCspItQfCM8ddYQCk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/a1ec2e-919e-4657-8d31-a5a507e0ecfa/1/X3ILxvnMMHYCspItQfCM8ddYQCk.mft
Manifest number:          0478
Signing time:             Fri 22 Sep 2023 03:01:21 +0000
Manifest this update:     Fri 22 Sep 2023 03:01:21 +0000
Manifest next update:     Sat 23 Sep 2023 03:01:21 +0000
Files and hashes:         1: X3ILxvnMMHYCspItQfCM8ddYQCk.crl (hash: cRNri9GFua5ec26qVIqTF/Ha8ohiLKJIeTRfvHcjGjo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:ba:d5:b2:b0:b1:b1:5c:e1:5f:ff:da:18:c5:eb:4f:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f720bc6f9cc307602b2922d41f08cf1d7584029
        Validity
            Not Before: Sep 22 03:01:21 2023 GMT
            Not After : Sep 23 03:01:21 2023 GMT
        Subject: CN=9a18d926ee7c9fa2184ef4ade37047613713ff16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:58:6d:ea:c8:af:e5:8d:a0:9f:57:b3:a3:e4:
                    3e:4e:58:4e:45:07:88:c4:9c:06:4f:37:05:9b:67:
                    3a:7e:f3:cf:75:94:4f:9c:fc:96:d1:41:64:29:4d:
                    b7:d8:3c:fe:04:f4:0c:03:7a:95:c7:d7:e1:ab:86:
                    b6:17:4e:32:b4:5f:a1:9d:ec:f8:db:04:5b:78:54:
                    71:df:b8:69:c0:3a:b8:3b:59:e5:28:0d:22:d9:3c:
                    e0:50:79:4f:f9:46:a7:60:d5:53:6a:48:cd:a2:e1:
                    3e:f1:c2:f1:29:2e:d5:fe:9c:94:9e:c7:a3:c3:23:
                    0d:49:70:7b:7a:e6:d1:67:af:a9:fa:cd:3f:37:62:
                    36:f9:15:07:fd:20:07:ca:9e:2d:87:73:a5:02:12:
                    25:19:61:37:b9:e0:03:d9:f3:bd:7f:cd:9a:f7:77:
                    15:d8:8a:70:74:a1:ee:b5:52:25:8a:ec:bb:62:9d:
                    2b:a0:23:fa:42:94:f5:f4:be:ff:97:1c:86:7a:23:
                    24:68:ad:a8:cf:fa:a4:b5:b4:51:ac:b2:e9:b5:1c:
                    45:47:d2:83:7f:b2:9f:bb:83:2e:5c:30:eb:54:b2:
                    21:99:d2:6a:15:03:0f:75:92:35:ec:36:66:f8:1e:
                    78:a1:8d:4d:fc:3f:d4:08:18:a2:a9:cf:71:b7:5f:
                    30:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:18:D9:26:EE:7C:9F:A2:18:4E:F4:AD:E3:70:47:61:37:13:FF:16
            X509v3 Authority Key Identifier:
                keyid:5F:72:0B:C6:F9:CC:30:76:02:B2:92:2D:41:F0:8C:F1:D7:58:40:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X3ILxvnMMHYCspItQfCM8ddYQCk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/a1ec2e-919e-4657-8d31-a5a507e0ecfa/1/X3ILxvnMMHYCspItQfCM8ddYQCk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/a1ec2e-919e-4657-8d31-a5a507e0ecfa/1/X3ILxvnMMHYCspItQfCM8ddYQCk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:b4:44:68:3c:3a:e2:ff:f0:96:62:44:7d:a2:a4:a7:6f:ba:
         ec:2f:d1:1b:2a:89:5c:f2:31:92:27:8f:a1:33:8b:66:86:64:
         3a:b1:62:00:ab:9b:1b:f7:40:7a:2c:a7:c5:eb:24:a9:01:60:
         6d:20:55:f0:fa:7b:8a:70:d0:18:6e:19:55:9a:f0:0a:0d:cc:
         32:10:b0:bd:d3:c0:5e:ef:d2:a8:2c:6c:9e:ed:37:bf:d0:66:
         ab:84:ce:1f:88:da:46:47:e4:b2:3e:79:47:c8:76:98:ad:6b:
         6e:ca:89:ae:07:73:ef:c4:15:11:a9:f2:ad:48:89:91:0d:c8:
         d6:fc:f6:18:81:62:2b:70:b5:66:f7:31:1e:04:24:56:12:0b:
         2c:b6:96:b5:96:c6:84:be:4c:6c:f5:ea:da:10:f7:ab:a5:93:
         fb:7f:86:5e:4d:18:32:d0:95:20:c0:8c:4b:c5:33:cf:28:f9:
         b1:23:47:6c:dc:d3:52:73:01:d6:98:8a:1a:a4:c9:04:d4:0e:
         f1:84:2c:80:9e:b1:a7:e7:cb:09:6f:19:8c:a8:8d:b9:6c:77:
         10:4e:95:7f:28:ce:de:53:4a:8c:1c:37:e3:76:d3:0c:ca:fd:
         97:de:fb:b8:55:3e:26:96:dc:c4:3f:77:18:b9:35:10:08:c6:
         a6:e0:ec:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYq61bKwsbFc4V//2hjF60+NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmNzIwYmM2ZjljYzMwNzYwMmIyOTIyZDQxZjA4Y2YxZDc1
ODQwMjkwHhcNMjMwOTIyMDMwMTIxWhcNMjMwOTIzMDMwMTIxWjAzMTEwLwYDVQQD
Eyg5YTE4ZDkyNmVlN2M5ZmEyMTg0ZWY0YWRlMzcwNDc2MTM3MTNmZjE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1ht6siv5Y2gn1ezo+Q+TlhORQeI
xJwGTzcFm2c6fvPPdZRPnPyW0UFkKU232Dz+BPQMA3qVx9fhq4a2F04ytF+hnez4
2wRbeFRx37hpwDq4O1nlKA0i2TzgUHlP+UanYNVTakjNouE+8cLxKS7V/pyUnsej
wyMNSXB7eubRZ6+p+s0/N2I2+RUH/SAHyp4th3OlAhIlGWE3ueAD2fO9f82a93cV
2IpwdKHutVIliuy7Yp0roCP6QpT19L7/lxyGeiMkaK2oz/qktbRRrLLptRxFR9KD
f7Kfu4MuXDDrVLIhmdJqFQMPdZI17DZm+B54oY1N/D/UCBiiqc9xt18wPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJoY2SbufJ+iGE70reNwR2E3E/8WMB8GA1UdIwQY
MBaAFF9yC8b5zDB2ArKSLUHwjPHXWEApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDNJTHh2bk1NSFlDc3BJdFFmQ004ZGRZUUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9hMWVjMmUtOTE5ZS00NjU3LThkMzEt
YTVhNTA3ZTBlY2ZhLzEvWDNJTHh2bk1NSFlDc3BJdFFmQ004ZGRZUUNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi9hMWVjMmUtOTE5ZS00NjU3LThkMzEtYTVhNTA3ZTBlY2Zh
LzEvWDNJTHh2bk1NSFlDc3BJdFFmQ004ZGRZUUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC7REaDw6
4v/wlmJEfaKkp2+67C/RGyqJXPIxkiePoTOLZoZkOrFiAKubG/dAeiynxeskqQFg
bSBV8Pp7inDQGG4ZVZrwCg3MMhCwvdPAXu/SqCxsnu03v9Bmq4TOH4jaRkfksj55
R8h2mK1rbsqJrgdz78QVEanyrUiJkQ3I1vz2GIFiK3C1ZvcxHgQkVhILLLaWtZbG
hL5MbPXq2hD3q6WT+3+GXk0YMtCVIMCMS8Uzzyj5sSNHbNzTUnMB1piKGqTJBNQO
8YQsgJ6xp+fLCW8ZjKiNuWx3EE6VfyjO3lNKjBw343bTDMr9l977uFU+JpbcxD93
GLk1EAjGpuDs1w==
-----END CERTIFICATE-----