Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/bd1772-b6ca-4829-bb65-cd4cbe2fc96c/1/qMFM29279DJJvtbBuyqcFL4njwk.mft
File:                     qMFM29279DJJvtbBuyqcFL4njwk.mft (raw, json)
Hash identifier:          E4Ewm7KDYV8oyUi9JvFctjzJtQ0vv+jV+2QPiOs3CVA=
Subject key identifier:   E9:24:6D:A1:91:37:90:43:34:FD:F1:F8:B7:FD:02:76:05:1D:49:99
Authority key identifier: A8:C1:4C:DB:DD:BB:F4:32:49:BE:D6:C1:BB:2A:9C:14:BE:27:8F:09
Certificate issuer:       /CN=a8c14cdbddbbf43249bed6c1bb2a9c14be278f09
Certificate serial:       0384937C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qMFM29279DJJvtbBuyqcFL4njwk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/bd1772-b6ca-4829-bb65-cd4cbe2fc96c/1/qMFM29279DJJvtbBuyqcFL4njwk.mft
Manifest number:          0490
Signing time:             Sun 01 May 2022 21:51:02 +0000
Manifest this update:     Sun 01 May 2022 21:51:02 +0000
Manifest next update:     Mon 02 May 2022 21:51:02 +0000
Files and hashes:         1: qMFM29279DJJvtbBuyqcFL4njwk.crl (hash: yiF4NDMG3eH4Wfp6YE8d+eoezzdiNr2aEiIUw+tlPQY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59020156 (0x384937c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8c14cdbddbbf43249bed6c1bb2a9c14be278f09
        Validity
            Not Before: May  1 21:51:02 2022 GMT
            Not After : May  2 21:51:02 2022 GMT
        Subject: CN=e9246da19137904334fdf1f8b7fd0276051d4999
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:9a:d3:2a:13:26:34:6d:4f:5a:c6:a4:3b:a6:
                    9e:1c:9d:f7:10:53:1d:f7:48:2e:2b:6e:6b:12:c4:
                    eb:da:31:fb:a5:aa:51:4e:81:21:6a:c3:7b:3c:17:
                    c2:cd:b6:57:53:77:3d:32:59:06:35:24:87:11:13:
                    c7:28:c5:71:82:af:4a:54:c8:3a:6f:62:74:96:fd:
                    25:76:d5:04:71:2c:90:ec:a7:80:19:26:2d:0c:bc:
                    f2:af:6c:b4:90:8f:a4:13:2d:25:bd:b4:56:a6:ea:
                    e1:68:d3:5a:00:e8:73:50:a3:65:39:89:d3:16:98:
                    bb:b6:93:6c:f2:24:e8:15:6b:8b:4a:03:d7:c1:d3:
                    20:cd:8a:cd:d8:d7:84:2c:dd:2e:8b:a0:75:71:85:
                    3f:c2:fa:b5:36:24:12:be:88:ab:31:08:f5:8e:c4:
                    07:6d:e9:99:2f:87:a3:87:8d:7e:8f:59:5b:1b:57:
                    ef:a3:85:80:7d:57:54:01:fc:4b:9f:5a:70:4c:28:
                    7e:11:45:6d:f8:1c:33:63:de:14:ff:03:fa:dc:eb:
                    20:e2:2f:92:90:16:80:ed:2b:4a:d4:9f:42:0f:aa:
                    ea:fc:c6:db:06:b9:66:81:f0:4e:88:c1:a4:8e:6e:
                    87:78:2a:66:aa:60:61:83:4b:ae:35:97:5e:49:ad:
                    1e:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:24:6D:A1:91:37:90:43:34:FD:F1:F8:B7:FD:02:76:05:1D:49:99
            X509v3 Authority Key Identifier:
                keyid:A8:C1:4C:DB:DD:BB:F4:32:49:BE:D6:C1:BB:2A:9C:14:BE:27:8F:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qMFM29279DJJvtbBuyqcFL4njwk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/bd1772-b6ca-4829-bb65-cd4cbe2fc96c/1/qMFM29279DJJvtbBuyqcFL4njwk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/bd1772-b6ca-4829-bb65-cd4cbe2fc96c/1/qMFM29279DJJvtbBuyqcFL4njwk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:e4:5b:2c:5e:6c:99:b4:0d:00:ab:ca:47:e4:7b:f0:e0:14:
         fd:dc:17:6d:7d:0b:93:0c:5e:00:7c:41:23:38:38:de:19:9a:
         47:5d:65:0e:dd:be:52:b3:79:db:79:50:f4:96:f0:ef:e8:2c:
         20:6e:bb:87:94:14:19:85:af:1a:af:0e:c3:a0:c2:6d:3e:8c:
         4a:6c:d4:f0:19:34:15:b5:bf:28:a2:9f:1e:27:0a:3b:52:56:
         0a:ce:da:f0:fc:55:ee:69:33:97:3d:2e:b2:54:d1:ba:5b:22:
         e0:4e:02:f2:b2:9e:fa:78:be:a1:cb:a6:85:67:b8:d5:de:e2:
         2f:d5:bc:f4:59:9d:7e:c7:af:c9:27:b8:e0:8c:bb:64:d5:fc:
         a3:0f:51:f1:4c:43:63:8b:4e:52:2b:c4:e1:da:ea:2b:9b:a6:
         ec:b5:3b:fc:a0:f9:4b:db:84:cd:fd:f8:71:9f:c9:b7:1c:37:
         ed:1e:ff:6e:d0:d2:92:6b:27:1b:ce:8d:84:3c:62:07:dc:73:
         5a:25:56:63:9d:b8:55:25:82:ae:17:8e:09:d2:d5:0e:7a:b9:
         5b:c1:c3:b6:d0:04:4e:79:c4:4c:41:23:4a:a0:53:5a:13:37:
         17:58:a8:49:f2:eb:b7:26:37:d6:d0:0a:79:6f:ae:9a:b2:e8:
         da:41:03:f1
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgIEA4STfDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
OGMxNGNkYmRkYmJmNDMyNDliZWQ2YzFiYjJhOWMxNGJlMjc4ZjA5MB4XDTIyMDUw
MTIxNTEwMloXDTIyMDUwMjIxNTEwMlowMzExMC8GA1UEAxMoZTkyNDZkYTE5MTM3
OTA0MzM0ZmRmMWY4YjdmZDAyNzYwNTFkNDk5OTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIea0yoTJjRtT1rGpDumnhyd9xBTHfdILituaxLE69ox+6Wq
UU6BIWrDezwXws22V1N3PTJZBjUkhxETxyjFcYKvSlTIOm9idJb9JXbVBHEskOyn
gBkmLQy88q9stJCPpBMtJb20Vqbq4WjTWgDoc1CjZTmJ0xaYu7aTbPIk6BVri0oD
18HTIM2KzdjXhCzdLougdXGFP8L6tTYkEr6IqzEI9Y7EB23pmS+Ho4eNfo9ZWxtX
76OFgH1XVAH8S59acEwofhFFbfgcM2PeFP8D+tzrIOIvkpAWgO0rStSfQg+q6vzG
2wa5ZoHwTojBpI5uh3gqZqpgYYNLrjWXXkmtHhcCAwEAAaOCAiIwggIeMB0GA1Ud
DgQWBBTpJG2hkTeQQzT98fi3/QJ2BR1JmTAfBgNVHSMEGDAWgBSowUzb3bv0Mkm+
1sG7KpwUviePCTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3FNRk0yOTI3OURKSnZ0YkJ1eXFjRkw0bmp3ay5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMGEvYmQxNzcyLWI2Y2EtNDgyOS1iYjY1LWNkNGNiZTJmYzk2Yy8x
L3FNRk0yOTI3OURKSnZ0YkJ1eXFjRkw0bmp3ay5tZnQwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGEv
YmQxNzcyLWI2Y2EtNDgyOS1iYjY1LWNkNGNiZTJmYzk2Yy8xL3FNRk0yOTI3OURK
SnZ0YkJ1eXFjRkw0bmp3ay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/
BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAFTkWyxebJm0DQCrykfke/DgFP3c
F219C5MMXgB8QSM4ON4ZmkddZQ7dvlKzedt5UPSW8O/oLCBuu4eUFBmFrxqvDsOg
wm0+jEps1PAZNBW1vyiinx4nCjtSVgrO2vD8Ve5pM5c9LrJU0bpbIuBOAvKynvp4
vqHLpoVnuNXe4i/VvPRZnX7Hr8knuOCMu2TV/KMPUfFMQ2OLTlIrxOHa6iubpuy1
O/yg+UvbhM39+HGfybccN+0e/27Q0pJrJxvOjYQ8Ygfcc1olVmOduFUlgq4XjgnS
1Q56uVvBw7bQBE55xExBI0qgU1oTNxdYqEny67cmN9bQCnlvrpqy6NpBA/E=
-----END CERTIFICATE-----