Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/2636a5-eee0-4a07-bcf3-535b697e1c62/1/1uWY1JymNy7Fg-2HeVAW8Tv9Ffk.mft
File:                     1uWY1JymNy7Fg-2HeVAW8Tv9Ffk.mft (raw, json)
Hash identifier:          0q/lEiHKE1LjCUsoRMuP+N6BMBHzOfmE7QFN2R3Ga1A=
Subject key identifier:   08:72:9F:45:4C:C7:80:BA:13:5F:54:7C:0B:1A:29:CB:F2:57:39:D6
Authority key identifier: D6:E5:98:D4:9C:A6:37:2E:C5:83:ED:87:79:50:16:F1:3B:FD:15:F9
Certificate issuer:       /CN=d6e598d49ca6372ec583ed87795016f13bfd15f9
Certificate serial:       018797B63D58149A9E60C197F992BA9644BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1uWY1JymNy7Fg-2HeVAW8Tv9Ffk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/2636a5-eee0-4a07-bcf3-535b697e1c62/1/1uWY1JymNy7Fg-2HeVAW8Tv9Ffk.mft
Manifest number:          09CA
Signing time:             Wed 19 Apr 2023 04:11:55 +0000
Manifest this update:     Wed 19 Apr 2023 04:11:55 +0000
Manifest next update:     Thu 20 Apr 2023 04:11:55 +0000
Files and hashes:         1: 1uWY1JymNy7Fg-2HeVAW8Tv9Ffk.crl (hash: QG+fFWM4vQvYKybs1WC8bQOzOs+C5azJjzfGS5iN3CU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:97:b6:3d:58:14:9a:9e:60:c1:97:f9:92:ba:96:44:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6e598d49ca6372ec583ed87795016f13bfd15f9
        Validity
            Not Before: Apr 19 04:11:55 2023 GMT
            Not After : Apr 20 04:11:55 2023 GMT
        Subject: CN=08729f454cc780ba135f547c0b1a29cbf25739d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:e9:d0:57:c6:b9:1e:4c:3b:cf:9e:d1:04:10:
                    e8:2c:0a:3b:3e:2b:1d:bf:38:7f:f7:b0:ee:9c:28:
                    91:d3:20:2d:d1:04:7d:c5:8b:69:eb:50:73:e7:57:
                    45:b1:f5:26:7a:4b:f4:7a:7d:79:94:5b:a4:8c:4e:
                    5e:37:5c:37:de:91:53:63:a8:84:62:ba:f6:a2:ef:
                    62:83:22:1e:76:aa:bd:51:44:02:86:6f:90:6d:77:
                    8b:d3:b1:42:43:86:f4:be:02:aa:88:90:93:0a:b4:
                    b0:98:72:2e:20:c5:da:24:a2:a1:24:2e:b2:e9:80:
                    6a:b5:2b:d5:3d:2a:1e:cb:ce:d8:44:56:75:15:2d:
                    ac:0a:30:76:47:c7:91:15:5b:e9:43:2a:c4:df:6e:
                    81:76:8c:a6:d5:a7:b0:b5:f5:f5:7e:44:e6:46:14:
                    e8:24:45:d8:7f:22:0e:37:38:e3:fc:c2:16:2b:e6:
                    41:ef:3f:0d:0d:e9:86:84:37:5d:4c:bf:eb:6e:4f:
                    ec:73:08:fe:c1:dd:2c:cb:fc:dc:af:d8:72:eb:7c:
                    3a:50:de:dc:43:22:4d:be:c8:fb:43:01:7f:3b:0d:
                    2b:4d:6d:2c:a5:eb:b1:e5:7a:d3:53:ae:04:3c:2b:
                    d8:37:8a:9f:69:de:11:8d:61:fa:bb:36:59:fb:8f:
                    93:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:72:9F:45:4C:C7:80:BA:13:5F:54:7C:0B:1A:29:CB:F2:57:39:D6
            X509v3 Authority Key Identifier:
                keyid:D6:E5:98:D4:9C:A6:37:2E:C5:83:ED:87:79:50:16:F1:3B:FD:15:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1uWY1JymNy7Fg-2HeVAW8Tv9Ffk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/2636a5-eee0-4a07-bcf3-535b697e1c62/1/1uWY1JymNy7Fg-2HeVAW8Tv9Ffk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/2636a5-eee0-4a07-bcf3-535b697e1c62/1/1uWY1JymNy7Fg-2HeVAW8Tv9Ffk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:ed:b6:0e:bd:46:24:f9:83:36:60:d8:85:29:b0:20:ce:9e:
         e8:a9:7e:ec:0f:7a:8f:83:eb:dc:c5:fc:8a:ce:ea:2c:da:01:
         1c:1a:d9:5e:a4:c3:06:13:f8:a8:f1:c9:e0:26:88:d0:18:d5:
         85:d1:f8:57:73:4b:99:32:ed:ca:1d:b0:fd:30:25:4b:35:c3:
         52:dd:f1:2b:ba:6e:cb:38:93:91:9c:91:20:b0:0a:9d:36:62:
         92:1f:1e:90:b1:28:40:04:02:ef:ee:8f:66:97:8e:a2:6a:f3:
         dc:f7:77:2a:3d:d8:d1:6a:90:29:ee:5b:ad:2e:99:61:84:2d:
         03:e1:c2:74:1a:33:ea:89:ec:4f:27:8e:d5:73:e6:12:88:6a:
         3b:39:7f:aa:ec:26:3a:7f:dc:16:47:fa:ae:52:b4:c5:94:b5:
         c9:d6:96:b5:a3:a5:1a:bc:46:22:0d:74:e3:7e:5d:62:21:45:
         63:53:f1:bf:60:c5:8e:36:e0:85:80:c1:e8:30:b2:7a:1e:df:
         b8:b4:7b:f3:ca:60:60:54:47:d9:71:79:9e:b8:9e:e9:de:a5:
         6a:3d:c0:8e:f2:04:15:66:a3:e9:fe:43:5c:d5:98:f0:38:8d:
         6c:80:36:00:49:17:cc:30:aa:c0:dc:1f:f9:31:03:07:cd:8a:
         3d:60:50:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYeXtj1YFJqeYMGX+ZK6lkS+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2ZTU5OGQ0OWNhNjM3MmVjNTgzZWQ4Nzc5NTAxNmYxM2Jm
ZDE1ZjkwHhcNMjMwNDE5MDQxMTU1WhcNMjMwNDIwMDQxMTU1WjAzMTEwLwYDVQQD
EygwODcyOWY0NTRjYzc4MGJhMTM1ZjU0N2MwYjFhMjljYmYyNTczOWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgunQV8a5Hkw7z57RBBDoLAo7Pisd
vzh/97DunCiR0yAt0QR9xYtp61Bz51dFsfUmekv0en15lFukjE5eN1w33pFTY6iE
Yrr2ou9igyIedqq9UUQChm+QbXeL07FCQ4b0vgKqiJCTCrSwmHIuIMXaJKKhJC6y
6YBqtSvVPSoey87YRFZ1FS2sCjB2R8eRFVvpQyrE326Bdoym1aewtfX1fkTmRhTo
JEXYfyIONzjj/MIWK+ZB7z8NDemGhDddTL/rbk/scwj+wd0sy/zcr9hy63w6UN7c
QyJNvsj7QwF/Ow0rTW0speux5XrTU64EPCvYN4qfad4RjWH6uzZZ+4+TXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAhyn0VMx4C6E19UfAsaKcvyVznWMB8GA1UdIwQY
MBaAFNblmNScpjcuxYPth3lQFvE7/RX5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXVXWTFKeW1OeTdGZy0ySGVWQVc4VHY5RmZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8yNjM2YTUtZWVlMC00YTA3LWJjZjMt
NTM1YjY5N2UxYzYyLzEvMXVXWTFKeW1OeTdGZy0ySGVWQVc4VHY5RmZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS8yNjM2YTUtZWVlMC00YTA3LWJjZjMtNTM1YjY5N2UxYzYy
LzEvMXVXWTFKeW1OeTdGZy0ySGVWQVc4VHY5RmZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEe22Dr1G
JPmDNmDYhSmwIM6e6Kl+7A96j4Pr3MX8is7qLNoBHBrZXqTDBhP4qPHJ4CaI0BjV
hdH4V3NLmTLtyh2w/TAlSzXDUt3xK7puyziTkZyRILAKnTZikh8ekLEoQAQC7+6P
ZpeOomrz3Pd3Kj3Y0WqQKe5brS6ZYYQtA+HCdBoz6onsTyeO1XPmEohqOzl/quwm
On/cFkf6rlK0xZS1ydaWtaOlGrxGIg10435dYiFFY1Pxv2DFjjbghYDB6DCyeh7f
uLR788pgYFRH2XF5nrie6d6laj3AjvIEFWaj6f5DXNWY8DiNbIA2AEkXzDCqwNwf
+TEDB82KPWBQ/Q==
-----END CERTIFICATE-----