Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/4ba0cd-5b41-4110-9d14-7056306094f3/1/GAJhextak0Rkw7apKPwjGgfEE_I.mft
File:                     GAJhextak0Rkw7apKPwjGgfEE_I.mft (raw, json)
Hash identifier:          4dI9JFnWZBODy+t3Byy4j0yO8LdLkrTfGFmw6y0YEPc=
Subject key identifier:   AE:17:CD:38:C7:D6:D7:BD:D7:D3:95:C6:9E:5F:82:1F:56:5D:36:4B
Authority key identifier: 18:02:61:7B:1B:5A:93:44:64:C3:B6:A9:28:FC:23:1A:07:C4:13:F2
Certificate issuer:       /CN=1802617b1b5a934464c3b6a928fc231a07c413f2
Certificate serial:       01840D4389AB7957B5B1B06CDACC8DDD4C57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GAJhextak0Rkw7apKPwjGgfEE_I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/4ba0cd-5b41-4110-9d14-7056306094f3/1/GAJhextak0Rkw7apKPwjGgfEE_I.mft
Manifest number:          064B
Signing time:             Tue 25 Oct 2022 03:50:40 +0000
Manifest this update:     Tue 25 Oct 2022 03:50:40 +0000
Manifest next update:     Wed 26 Oct 2022 03:50:40 +0000
Files and hashes:         1: GAJhextak0Rkw7apKPwjGgfEE_I.crl (hash: EeVKmZKO+PknFdNTweWlTRxwWEyJVfpVKAgpvLh72Uc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:0d:43:89:ab:79:57:b5:b1:b0:6c:da:cc:8d:dd:4c:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1802617b1b5a934464c3b6a928fc231a07c413f2
        Validity
            Not Before: Oct 25 03:50:40 2022 GMT
            Not After : Oct 26 03:50:40 2022 GMT
        Subject: CN=ae17cd38c7d6d7bdd7d395c69e5f821f565d364b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:e1:19:a6:ec:7a:22:dd:90:59:9f:c3:70:03:
                    f9:6f:48:d1:68:0f:29:41:44:fd:49:bb:74:b0:14:
                    bb:41:f4:d1:06:08:27:d8:d0:7b:ad:fd:ba:5b:8c:
                    df:7c:aa:83:67:64:80:74:09:77:8d:25:46:77:69:
                    06:47:fe:58:ab:47:34:e8:b5:25:2b:1e:41:2d:58:
                    69:8c:63:dd:9d:67:ec:59:a3:75:3d:68:c3:c0:0a:
                    7f:a7:39:1d:c4:f0:71:e9:d7:8d:39:a4:0d:da:3e:
                    98:ed:f9:61:dc:c5:2f:d9:10:64:97:ab:20:d5:70:
                    52:cd:71:8e:25:07:74:14:21:8b:f9:87:f4:61:16:
                    ea:cb:8f:af:a0:43:c3:db:9a:97:63:4c:e3:38:a1:
                    82:c4:1d:ca:b2:9f:d3:47:ea:56:a4:db:76:d1:cb:
                    71:23:67:c3:5f:4b:cb:91:52:48:3f:e2:9a:47:33:
                    c7:c8:d7:0f:c3:fa:e7:b2:b0:03:b3:44:cc:e0:39:
                    f0:7b:4d:10:57:1c:5f:0b:9e:10:32:7c:a9:bb:1d:
                    86:a2:20:2e:9a:fa:d5:6a:af:33:d7:5b:74:79:6d:
                    55:36:a1:6d:a2:fa:cf:d1:6e:15:bf:24:e3:36:6f:
                    b5:7d:1d:71:c5:42:a9:0c:e0:45:11:b7:bb:8f:f1:
                    22:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:17:CD:38:C7:D6:D7:BD:D7:D3:95:C6:9E:5F:82:1F:56:5D:36:4B
            X509v3 Authority Key Identifier:
                keyid:18:02:61:7B:1B:5A:93:44:64:C3:B6:A9:28:FC:23:1A:07:C4:13:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GAJhextak0Rkw7apKPwjGgfEE_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4ba0cd-5b41-4110-9d14-7056306094f3/1/GAJhextak0Rkw7apKPwjGgfEE_I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4ba0cd-5b41-4110-9d14-7056306094f3/1/GAJhextak0Rkw7apKPwjGgfEE_I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:5c:0c:4d:40:10:cf:96:20:24:89:63:4e:69:16:24:9e:5d:
         0b:3b:69:67:1b:2c:12:de:0c:fb:39:64:e0:8d:41:24:68:fb:
         c8:61:21:d6:76:98:d9:28:a2:77:70:27:7f:6f:d2:bb:e5:0a:
         6e:19:ef:88:4b:be:ed:f3:d5:72:15:02:4b:44:5d:63:0b:f9:
         8c:40:02:1b:2c:e9:9a:fe:23:9c:46:47:b3:d0:7e:b6:3a:18:
         25:5f:f3:ab:47:9a:db:a1:8c:70:18:71:16:41:ba:ad:f6:af:
         44:27:7e:87:2c:4e:52:cb:3e:be:9a:f1:b5:d1:41:23:a4:32:
         d1:9e:a2:82:21:03:0f:e5:ab:09:31:52:a5:88:92:31:51:0b:
         4a:7b:78:1d:c9:2f:06:3b:16:96:8c:10:4e:18:39:18:11:07:
         30:ec:a8:c7:d6:44:e9:39:72:a5:4d:5e:a5:62:5e:0b:d5:77:
         98:c1:fc:5f:6f:43:20:5f:88:8e:48:49:66:eb:e3:b2:a8:81:
         2a:32:f4:50:99:88:ab:2c:63:83:74:e9:12:ed:c4:91:f8:74:
         9e:8f:5a:28:ae:6d:4e:5e:97:a3:e0:21:1d:91:89:e9:79:fc:
         ab:8d:b4:cd:cb:47:fe:48:5d:98:50:36:93:52:3d:69:23:6d:
         c7:67:46:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYQNQ4mreVe1sbBs2syN3UxXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4MDI2MTdiMWI1YTkzNDQ2NGMzYjZhOTI4ZmMyMzFhMDdj
NDEzZjIwHhcNMjIxMDI1MDM1MDQwWhcNMjIxMDI2MDM1MDQwWjAzMTEwLwYDVQQD
EyhhZTE3Y2QzOGM3ZDZkN2JkZDdkMzk1YzY5ZTVmODIxZjU2NWQzNjRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+EZpux6It2QWZ/DcAP5b0jRaA8p
QUT9Sbt0sBS7QfTRBggn2NB7rf26W4zffKqDZ2SAdAl3jSVGd2kGR/5Yq0c06LUl
Kx5BLVhpjGPdnWfsWaN1PWjDwAp/pzkdxPBx6deNOaQN2j6Y7flh3MUv2RBkl6sg
1XBSzXGOJQd0FCGL+Yf0YRbqy4+voEPD25qXY0zjOKGCxB3Ksp/TR+pWpNt20ctx
I2fDX0vLkVJIP+KaRzPHyNcPw/rnsrADs0TM4Dnwe00QVxxfC54QMnypux2GoiAu
mvrVaq8z11t0eW1VNqFtovrP0W4VvyTjNm+1fR1xxUKpDOBFEbe7j/EiwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK4XzTjH1te919OVxp5fgh9WXTZLMB8GA1UdIwQY
MBaAFBgCYXsbWpNEZMO2qSj8IxoHxBPyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0FKaGV4dGFrMFJrdzdhcEtQd2pHZ2ZFRV9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS80YmEwY2QtNWI0MS00MTEwLTlkMTQt
NzA1NjMwNjA5NGYzLzEvR0FKaGV4dGFrMFJrdzdhcEtQd2pHZ2ZFRV9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS80YmEwY2QtNWI0MS00MTEwLTlkMTQtNzA1NjMwNjA5NGYz
LzEvR0FKaGV4dGFrMFJrdzdhcEtQd2pHZ2ZFRV9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiVwMTUAQ
z5YgJIljTmkWJJ5dCztpZxssEt4M+zlk4I1BJGj7yGEh1naY2Siid3Anf2/Su+UK
bhnviEu+7fPVchUCS0RdYwv5jEACGyzpmv4jnEZHs9B+tjoYJV/zq0ea26GMcBhx
FkG6rfavRCd+hyxOUss+vprxtdFBI6Qy0Z6igiEDD+WrCTFSpYiSMVELSnt4Hckv
BjsWlowQThg5GBEHMOyox9ZE6TlypU1epWJeC9V3mMH8X29DIF+IjkhJZuvjsqiB
KjL0UJmIqyxjg3TpEu3Ekfh0no9aKK5tTl6Xo+AhHZGJ6Xn8q420zctH/khdmFA2
k1I9aSNtx2dGrQ==
-----END CERTIFICATE-----